$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft File: qZvZ5t79lpSrRdfzLK3QHlKz348.mft (raw, json) Hash identifier: AGZ2a/m1bOeHZBe4AH7vnCHxnt2J67HlgC5W4p77L0Q= Subject key identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E Authority key identifier: A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F Certificate issuer: /CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Certificate serial: 171D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft Manifest number: 171D Signing time: Mon 08 Sep 2025 04:04:22 +0000 Manifest this update: Mon 08 Sep 2025 04:04:22 +0000 Manifest next update: Mon 08 Sep 2025 10:04:22 +0000 Files and hashes: 1: qZvZ5t79lpSrRdfzLK3QHlKz348.crl (hash: rlCwlWMclZJcaHQth1c63TPDBb3FYcWaXS91dY3TXK4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5917 (0x171d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Validity Not Before: Sep 8 04:04:22 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DFD9F4D304399082BFD1C594FA44EA136887D66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:03:4e:2f:18:7b:b5:99:63:b9:d6:7b:b9: 0f:ed:ca:84:fc:26:50:4d:44:00:df:38:d0:64:3c: 3c:6e:ed:ee:d2:98:c1:32:c7:1b:0b:ed:ff:33:c3: db:86:a9:fd:8f:3e:bc:e5:fb:40:06:e5:e0:15:fa: a7:b9:21:f5:86:4c:be:84:09:88:b5:11:61:1f:cd: 3f:b5:e2:8c:22:7b:25:e7:dc:ce:80:96:df:69:c1: 84:88:7d:c6:67:a2:09:51:7a:a2:0d:6b:62:02:fa: 0a:b7:aa:63:47:d9:01:c3:02:b5:d4:9d:de:d0:77: 18:d4:36:5f:3d:4a:12:38:11:27:13:37:03:31:8c: d5:05:c5:1e:33:64:65:4e:df:4a:9b:71:47:4a:27: 76:a7:fa:b5:75:60:16:6e:8f:ef:af:05:8f:34:37: d1:80:7b:71:63:23:48:d3:87:05:50:3e:da:de:07: 60:d8:02:2c:66:38:81:aa:be:c6:10:b5:7d:65:4b: 66:9a:3b:5a:99:0c:02:d4:31:46:03:1c:78:c2:22: ca:ab:27:49:cf:91:26:90:78:b4:e9:55:e7:3e:97: 44:03:44:9e:69:05:1d:a7:06:27:b3:6d:0f:db:e0: 33:db:28:78:69:60:0b:60:9e:49:af:ee:a7:9e:af: bc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E X509v3 Authority Key Identifier: keyid:A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0e:36:51:c0:7e:8a:41:4f:11:fe:dc:99:f0:71:b1:0d:bb: b7:16:26:13:b1:0c:9b:ce:b6:f3:91:bc:25:eb:cf:ba:8e:af: 90:5f:b0:d4:34:5a:53:fb:11:4a:7a:04:fa:cd:a4:a2:e4:8e: 27:87:cc:90:9e:5d:43:95:62:65:e3:b2:94:79:ea:83:a9:3f: d1:cb:6d:f2:53:fd:6f:e4:21:00:f8:5e:6e:cd:03:4a:e0:a3: 1c:c3:b4:40:49:3e:e2:52:2c:57:a1:44:0f:16:5e:cb:30:c5: 3b:49:59:92:a8:2c:2d:be:cd:6c:9c:62:b7:26:4e:2e:ad:89: 77:46:ef:70:ab:b7:16:52:87:c1:95:c1:ff:11:2e:39:c5:a1: d8:aa:0b:a0:c2:06:93:3b:75:42:ab:af:90:1d:05:66:51:c5: 4d:b1:7d:da:f5:da:16:88:0f:cf:84:ff:92:96:a7:c8:ce:f1: a4:7e:72:0c:d5:1c:e5:e8:6b:f4:89:24:99:76:94:02:8d:53: 62:19:63:47:6f:fc:f8:29:73:7d:04:23:45:cd:86:b2:36:0e: 3b:bb:ff:cb:ad:05:57:af:db:62:dd:05:65:60:ca:57:d1:4d: 30:33:82:28:c0:bc:38:d1:27:7c:cf:87:ad:f2:8b:1a:19:f9: 58:63:6d:7a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTk5 QkQ5RTZERUZEOTY5NEFCNDVEN0YzMkNBREQwMUU1MkIzREY4RjAeFw0yNTA5MDgw NDA0MjJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERGRDlGNEQzMDQzOTkw ODJCRkQxQzU5NEZBNDRFQTEzNjg4N0Q2NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDalANOLxh7tZljudZ7uQ/tyoT8JlBNRADfONBkPDxu7e7SmMEy xxsL7f8zw9uGqf2PPrzl+0AG5eAV+qe5IfWGTL6ECYi1EWEfzT+14owieyXn3M6A lt9pwYSIfcZnoglReqINa2IC+gq3qmNH2QHDArXUnd7QdxjUNl89ShI4EScTNwMx jNUFxR4zZGVO30qbcUdKJ3an+rV1YBZuj++vBY80N9GAe3FjI0jThwVQPtreB2DY AixmOIGqvsYQtX1lS2aaO1qZDALUMUYDHHjCIsqrJ0nPkSaQeLTpVec+l0QDRJ5p BR2nBiezbQ/b4DPbKHhpYAtgnkmv7qeer7xpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU39n00wQ5kIK/0cWU+kTqE2iH1m4wHwYDVR0jBBgwFoAUqZvZ5t79lpSrRdfz LK3QHlKz348wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM2 My9xWnZaNXQ3OWxwU3JSZGZ6TEszUUhsS3ozNDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Fadlo1dDc5bHBTclJkZnpMSzNRSGxLejM0OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzNjMvcVp2WjV0NzlscFNy UmRmekxLM1FIbEt6MzQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFEONlHAfopBTxH+3JnwcbENu7cWJhOxDJvOtvORvCXrz7qOr5BfsNQ0WlP7 EUp6BPrNpKLkjieHzJCeXUOVYmXjspR56oOpP9HLbfJT/W/kIQD4Xm7NA0rgoxzD tEBJPuJSLFehRA8WXsswxTtJWZKoLC2+zWycYrcmTi6tiXdG73CrtxZSh8GVwf8R LjnFodiqC6DCBpM7dUKrr5AdBWZRxU2xfdr12haID8+E/5KWp8jO8aR+cgzVHOXo a/SJJJl2lAKNU2IZY0dv/Pgpc30EI0XNhrI2Dju7/8utBVev22LdBWVgylfRTTAz gijAvDjRJ3zPh63yixoZ+VhjbXo= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:16 2025 by rpki-client