$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1948/ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.mft File: ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.mft (raw, json) Hash identifier: EBUEsDO6QxFb0+TaTAIEiETT2kaQq3uLqjHmolXeNxU= Subject key identifier: 51:AA:C7:7C:B6:FE:17:3A:C8:D9:0B:76:55:C1:37:B5:5F:19:2F:67 Authority key identifier: 66:A4:42:CB:7F:BB:12:00:C2:16:B9:C1:4C:A6:49:AB:76:54:CA:80 Certificate issuer: /CN=66A442CB7FBB1200C216B9C14CA649AB7654CA80 Certificate serial: 45 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1948/ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.mft Manifest number: 45 Signing time: Mon 08 Sep 2025 01:03:13 +0000 Manifest this update: Mon 08 Sep 2025 01:03:13 +0000 Manifest next update: Mon 08 Sep 2025 07:03:13 +0000 Files and hashes: 1: ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.crl (hash: kvfj8JIUZtRoJznL5YNsI/fQaRYkYDOPQUChI2PrTZE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1948/ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1948/ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A442CB7FBB1200C216B9C14CA649AB7654CA80 Validity Not Before: Sep 8 01:03:13 2025 GMT Not After : Aug 25 07:37:59 2026 GMT Subject: CN=51AAC77CB6FE173AC8D90B7655C137B55F192F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:e8:28:fb:0e:94:1d:f6:ad:80:b9:c8:df: 33:60:88:c3:d5:a4:93:33:28:dc:98:52:dc:53:88: be:de:23:8f:fe:3c:8d:87:96:d8:88:59:65:c6:1a: c0:df:64:19:4f:92:31:10:a0:87:82:f9:84:5e:03: 3d:76:e9:d2:17:9b:50:73:24:40:b0:6d:b7:03:11: 80:a5:d8:9a:72:78:f0:d7:42:b6:15:1e:0d:a3:7f: 23:b5:76:a8:51:fa:f8:65:78:9e:7f:f0:ca:4f:20: ac:df:79:f2:75:d6:d0:ef:c8:99:1f:d5:28:79:2d: 73:dd:e7:41:d5:8b:8a:56:a0:bd:e2:70:d4:93:ad: 23:ad:bc:5f:0c:bf:71:92:26:e8:53:f3:ee:6d:0a: b5:c5:2d:38:b7:59:15:ab:6b:b0:36:89:c8:a7:25: 03:86:ee:fc:7f:29:cd:70:44:c6:bb:21:56:06:8b: d0:90:2d:49:44:ea:98:95:78:5d:98:39:87:16:a4: 48:f2:b8:78:ce:bc:fd:65:07:86:e7:06:2f:ec:b9: 88:76:37:f6:e0:7a:fa:c0:e0:08:f1:46:87:46:a3: 70:93:e7:e4:db:41:bb:56:ef:43:5d:41:ae:c7:c8: b7:e4:ef:2c:02:df:da:56:91:92:e2:ef:1d:32:13: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AA:C7:7C:B6:FE:17:3A:C8:D9:0B:76:55:C1:37:B5:5F:19:2F:67 X509v3 Authority Key Identifier: keyid:66:A4:42:CB:7F:BB:12:00:C2:16:B9:C1:4C:A6:49:AB:76:54:CA:80 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1948/ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1948/ZqRCy3-7EgDCFrnBTKZJq3ZUyoA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:ee:5b:f9:40:22:46:bb:5d:c9:3a:a0:6d:c2:fb:a3:b1:83: 3b:68:71:24:4b:d0:09:f4:59:d6:98:94:89:90:92:43:c9:90: 30:01:75:84:1f:85:ff:e7:14:bf:50:31:f1:62:68:65:2c:54: e5:87:a7:53:75:db:46:17:0b:bb:10:39:4b:c4:15:41:48:32: ec:05:26:75:39:26:1d:ab:1a:66:1f:bd:8e:05:9e:93:4e:de: 6f:a8:f5:b4:ef:06:7b:94:85:15:e6:d0:52:19:29:57:0d:33: 51:da:5e:37:11:3f:30:30:e4:49:66:87:1a:9c:6f:fb:90:ec: 0f:dd:8e:9e:59:3b:3e:89:11:e2:3f:52:d9:f4:4f:d7:fa:47: 92:85:87:8e:ae:c3:07:07:bd:18:f4:7d:3b:8a:6b:02:31:14: bb:f4:cb:a3:8e:73:6a:28:3f:0a:dd:a2:46:62:61:c4:dd:eb: 20:74:b1:e1:28:a9:2c:79:cf:3a:c4:62:71:8f:82:18:b7:46: e9:e3:62:dc:26:81:c5:ac:43:05:44:95:af:d9:6b:a7:9c:cb: d5:9d:e8:41:6c:1d:af:22:6e:79:e9:4c:fc:d5:c6:a3:8e:7b: 83:c2:ee:02:05:8d:c2:30:8d:83:17:42:ed:db:1e:a6:b2:bb: ca:61:e1:79 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NkE0 NDJDQjdGQkIxMjAwQzIxNkI5QzE0Q0E2NDlBQjc2NTRDQTgwMB4XDTI1MDkwODAx MDMxM1oXDTI2MDgyNTA3Mzc1OVowMzExMC8GA1UEAxMoNTFBQUM3N0NCNkZFMTcz QUM4RDkwQjc2NTVDMTM3QjU1RjE5MkY2NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMku6Cj7DpQd9q2AucjfM2CIw9WkkzMo3JhS3FOIvt4jj/48jYeW 2IhZZcYawN9kGU+SMRCgh4L5hF4DPXbp0hebUHMkQLBttwMRgKXYmnJ48NdCthUe DaN/I7V2qFH6+GV4nn/wyk8grN958nXW0O/ImR/VKHktc93nQdWLilagveJw1JOt I628Xwy/cZIm6FPz7m0KtcUtOLdZFatrsDaJyKclA4bu/H8pzXBExrshVgaL0JAt SUTqmJV4XZg5hxakSPK4eM68/WUHhucGL+y5iHY39uB6+sDgCPFGh0ajcJPn5NtB u1bvQ11BrsfIt+TvLALf2laRkuLvHTITQWkCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRRqsd8tv4XOsjZC3ZVwTe1XxkvZzAfBgNVHSMEGDAWgBRmpELLf7sSAMIWucFM pkmrdlTKgDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xOTQ4 L1pxUkN5My03RWdEQ0ZybkJUS1pKcTNaVXlvQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWnFSQ3kzLTdFZ0RDRnJuQlRLWkpxM1pVeW9BLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTk0OC9acVJDeTMtN0VnRENG cm5CVEtaSnEzWlV5b0EubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv+5b+UAiRrtdyTqgbcL7o7GDO2hxJEvQCfRZ1piUiZCSQ8mQMAF1hB+F/+cU v1Ax8WJoZSxU5YenU3XbRhcLuxA5S8QVQUgy7AUmdTkmHasaZh+9jgWek07eb6j1 tO8Ge5SFFebQUhkpVw0zUdpeNxE/MDDkSWaHGpxv+5DsD92Onlk7PokR4j9S2fRP 1/pHkoWHjq7DBwe9GPR9O4prAjEUu/TLo45zaig/Ct2iRmJhxN3rIHSx4SipLHnP OsRicY+CGLdG6eNi3CaBxaxDBUSVr9lrp5zL1Z3oQWwdryJueelM/NXGo457g8Lu AgWNwjCNgxdC7dseprK7ymHheQ== -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:24 2025 by rpki-client