$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft File: w9r9_4KPO0NdEnBkqVb13VOivD0.mft (raw, json) Hash identifier: Ukd1khSP2gG1kZCpgwAxOAEMGNbPuOnCfsQfUr0NZAM= Subject key identifier: 8E:E5:CB:2E:27:FF:AB:48:4C:FE:D0:A5:64:8D:26:9B:37:D2:0E:E5 Authority key identifier: C3:DA:FD:FF:82:8F:3B:43:5D:12:70:64:A9:56:F5:DD:53:A2:BC:3D Certificate issuer: /CN=C3DAFDFF828F3B435D127064A956F5DD53A2BC3D Certificate serial: 3B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w9r9_4KPO0NdEnBkqVb13VOivD0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft Manifest number: 39 Signing time: Mon 08 Sep 2025 04:05:31 +0000 Manifest this update: Mon 08 Sep 2025 04:05:31 +0000 Manifest next update: Mon 08 Sep 2025 10:05:31 +0000 Files and hashes: 1: 8voVhgIMSHYOly56t_xyMcphEAk.roa (hash: Zve3JGBpr96I7P2FGoZun6H4kwIc0NADRMp0+IZbH2M=) 2: B4VakvjmikOE0cZukdRqw0KrCTI.roa (hash: L9vozjtlPeTyphy2by0sIiAgYomNTYPFBsvoKjJcz0g=) 3: w9r9_4KPO0NdEnBkqVb13VOivD0.crl (hash: cL8w00R9XvtBwbSWgoWSey4AmNCHQsX7WCI2aJshB/s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w9r9_4KPO0NdEnBkqVb13VOivD0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DAFDFF828F3B435D127064A956F5DD53A2BC3D Validity Not Before: Sep 8 04:05:31 2025 GMT Not After : Aug 28 02:37:23 2026 GMT Subject: CN=8EE5CB2E27FFAB484CFED0A5648D269B37D20EE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:22:97:b6:c6:2b:4c:24:f8:65:35:f0:e4:bf: 30:4d:00:3c:3e:de:58:b5:62:13:ee:18:4a:ca:d7: b4:4c:b8:93:4d:e3:c2:84:bb:f6:fa:bf:1b:5c:d2: 97:a0:4f:1c:8b:82:69:5c:ab:02:78:63:b0:d5:2e: 1d:42:eb:cc:bd:51:23:67:43:32:7f:e4:c9:24:64: 35:24:cf:dd:ae:d2:a9:60:07:4b:01:9d:3d:d8:da: 4e:ca:ca:c3:32:96:8d:c9:6a:9d:de:f8:0d:f4:87: f4:46:94:6f:b1:d6:fc:5e:a6:f5:d8:88:b6:6a:67: 28:f0:78:83:c3:f4:f3:6b:df:c9:6e:53:c5:0b:25: cc:bd:55:d0:35:b7:b8:2a:86:4e:38:c6:04:61:ca: a8:e6:e5:e4:02:95:2d:4b:57:f9:d8:db:1f:b8:bd: 40:20:38:9d:90:fd:e8:ac:8b:c1:0d:33:2a:98:db: ae:ca:91:30:1d:55:3a:4b:4d:4d:6e:23:be:0b:9a: df:0f:8c:13:63:03:14:9b:89:06:41:5a:f9:3b:b8: a5:6d:0c:4e:3b:dd:c2:8f:c0:11:17:cb:66:fe:46: d3:0d:72:29:64:d8:ca:b9:7d:c2:cc:b2:ad:0b:1a: e8:79:f0:4e:5b:34:bf:20:63:7f:53:0e:65:86:a2: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E5:CB:2E:27:FF:AB:48:4C:FE:D0:A5:64:8D:26:9B:37:D2:0E:E5 X509v3 Authority Key Identifier: keyid:C3:DA:FD:FF:82:8F:3B:43:5D:12:70:64:A9:56:F5:DD:53:A2:BC:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/w9r9_4KPO0NdEnBkqVb13VOivD0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:36:e6:c1:04:34:a0:05:0a:69:c6:2f:fe:17:22:ec:56:ec: bb:92:23:c5:7b:43:1a:b6:f9:a9:bb:68:b3:95:13:43:78:06: 66:a4:62:8b:f2:1f:40:26:cb:15:26:80:3a:9f:1b:ee:00:d9: 55:ec:53:73:b7:17:d0:46:b1:e3:2a:fc:bd:a5:08:6a:3b:9c: ab:35:1a:c2:14:3f:f2:bb:ac:fb:5e:25:d5:39:91:64:6b:a9: e1:2a:50:26:a5:84:e7:cc:18:a2:49:2f:6c:bd:f5:c7:dc:37: 36:b5:3e:65:92:5d:3e:da:67:95:34:27:4f:0a:17:e1:1c:80: 99:b3:77:2f:04:75:31:b0:ec:37:de:3a:9f:75:9a:12:75:02: a0:53:6f:ed:90:2f:db:a2:b7:a7:97:57:b7:be:38:1f:01:f5: c8:fd:b8:81:1b:71:71:98:bb:bf:50:62:4d:a5:dc:4e:76:31: 54:cf:90:ea:70:af:73:cb:a0:53:03:ed:6b:2e:dc:fa:8a:e2: c4:4c:75:10:69:23:70:9f:c4:7c:a1:66:4f:fd:24:2c:0c:9f: d5:06:cc:c5:d5:4b:cf:b6:7f:af:7a:a7:92:cb:aa:99:53:6a: 02:86:a3:02:d7:5c:22:04:4b:13:7c:31:88:07:1f:f3:ad:99: 63:f4:2f:fb -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDM0RB RkRGRjgyOEYzQjQzNUQxMjcwNjRBOTU2RjVERDUzQTJCQzNEMB4XDTI1MDkwODA0 MDUzMVoXDTI2MDgyODAyMzcyM1owMzExMC8GA1UEAxMoOEVFNUNCMkUyN0ZGQUI0 ODRDRkVEMEE1NjQ4RDI2OUIzN0QyMEVFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANsil7bGK0wk+GU18OS/ME0APD7eWLViE+4YSsrXtEy4k03jwoS7 9vq/G1zSl6BPHIuCaVyrAnhjsNUuHULrzL1RI2dDMn/kySRkNSTP3a7SqWAHSwGd PdjaTsrKwzKWjclqnd74DfSH9EaUb7HW/F6m9diItmpnKPB4g8P082vfyW5TxQsl zL1V0DW3uCqGTjjGBGHKqObl5AKVLUtX+djbH7i9QCA4nZD96KyLwQ0zKpjbrsqR MB1VOktNTW4jvgua3w+ME2MDFJuJBkFa+Tu4pW0MTjvdwo/AERfLZv5G0w1yKWTY yrl9wsyyrQsa6HnwTls0vyBjf1MOZYaiI+0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSO5csuJ/+rSEz+0KVkjSabN9IO5TAfBgNVHSMEGDAWgBTD2v3/go87Q10ScGSp VvXdU6K8PTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjI1 L3c5cjlfNEtQTzBOZEVuQmtxVmIxM1ZPaXZEMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdzlyOV80S1BPME5kRW5Ca3FWYjEzVk9pdkQwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYyNS93OXI5XzRLUE8wTmRF bkJrcVZiMTNWT2l2RDAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOzbmwQQ0oAUKacYv/hci7Fbsu5IjxXtDGrb5qbtos5UTQ3gGZqRii/IfQCbL FSaAOp8b7gDZVexTc7cX0Eax4yr8vaUIajucqzUawhQ/8rus+14l1TmRZGup4SpQ JqWE58wYokkvbL31x9w3NrU+ZZJdPtpnlTQnTwoX4RyAmbN3LwR1MbDsN946n3Wa EnUCoFNv7ZAv26K3p5dXt744HwH1yP24gRtxcZi7v1BiTaXcTnYxVM+Q6nCvc8ug UwPtay7c+orixEx1EGkjcJ/EfKFmT/0kLAyf1QbMxdVLz7Z/r3qnksuqmVNqAoaj AtdcIgRLE3wxiAcf862ZY/Qv+w== -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:29 2025 by rpki-client