$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.mft File: WTVsFTfDviMW_6Des5EMQHa0fZk.mft (raw, json) Hash identifier: YMS4eZpAbACug/F4njyyQfuRj3xV3Ep5wx9Ud4mYSx4= Subject key identifier: 61:A1:D0:3E:09:25:A7:86:C9:82:D1:B8:D5:3F:F8:B9:6D:B4:3D:37 Authority key identifier: 59:35:6C:15:37:C3:BE:23:16:FF:A0:DE:B3:91:0C:40:76:B4:7D:99 Certificate issuer: /CN=59356C1537C3BE2316FFA0DEB3910C4076B47D99 Certificate serial: 3F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WTVsFTfDviMW_6Des5EMQHa0fZk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.mft Manifest number: 3D Signing time: Tue 09 Sep 2025 00:05:16 +0000 Manifest this update: Tue 09 Sep 2025 00:05:16 +0000 Manifest next update: Tue 09 Sep 2025 06:05:16 +0000 Files and hashes: 1: SM0tmDsGc7QA_5W8TEaPWesXZNE.roa (hash: vU6pEECf98pAUxcWiz4XT+sRjEtGw9Y2jisV3JNBk+c=) 2: WTVsFTfDviMW_6Des5EMQHa0fZk.crl (hash: 0LufgGzP37GwxDyNNfWchlFMmdho771/IxAhuctzdGk=) 3: XvYEMmLJSyx8duUutj0Fn9nJkWg.roa (hash: 9s5HYoZAeLN3UBpj4eBNuwDTW6TszuX6jBCRwnxlvYo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WTVsFTfDviMW_6Des5EMQHa0fZk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59356C1537C3BE2316FFA0DEB3910C4076B47D99 Validity Not Before: Sep 9 00:05:16 2025 GMT Not After : Aug 28 06:22:23 2026 GMT Subject: CN=61A1D03E0925A786C982D1B8D53FF8B96DB43D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:d7:bf:b4:d1:7a:78:2c:c7:98:16:8d:12: 7d:06:e5:8c:2b:42:96:4c:76:73:a2:45:0b:6e:83: 96:8f:1a:4a:11:1d:8b:a4:47:4e:0e:ba:95:3f:d4: f9:8a:4c:cd:cf:ca:22:6d:d0:50:86:0c:04:fd:11: eb:52:3c:09:df:ea:6c:eb:cd:fb:f6:f1:3c:4f:c1: ef:df:8c:4f:87:75:3b:1a:96:c4:21:17:ff:2f:9f: 89:1f:32:e1:0f:96:bc:93:2d:21:aa:b3:59:3e:c8: 25:8b:b5:a0:60:13:f9:96:80:85:53:d9:81:c1:80: 2a:29:15:6c:0b:7a:85:e0:58:5f:ae:c8:69:21:4f: ee:cd:5c:68:35:49:2e:dd:d8:c3:cf:da:81:19:5a: 67:18:6f:9f:fa:30:44:fb:ab:06:6b:5f:ee:50:18: 9f:54:37:c8:34:81:1b:9a:ab:bd:72:60:f1:84:99: 32:ab:b2:92:0e:c8:a7:6a:6c:ce:46:ed:7a:52:13: d5:be:03:e7:d1:71:4c:fc:99:69:50:d5:1a:1c:ea: 90:20:72:49:f4:ec:c7:47:fc:93:24:b3:e4:10:ef: 35:67:0b:c1:e9:71:e8:7e:17:16:ac:f5:f6:77:fc: 7c:b3:95:ec:e2:35:a3:d9:50:7b:43:b9:87:6d:ee: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A1:D0:3E:09:25:A7:86:C9:82:D1:B8:D5:3F:F8:B9:6D:B4:3D:37 X509v3 Authority Key Identifier: keyid:59:35:6C:15:37:C3:BE:23:16:FF:A0:DE:B3:91:0C:40:76:B4:7D:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WTVsFTfDviMW_6Des5EMQHa0fZk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2679/WTVsFTfDviMW_6Des5EMQHa0fZk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:31:06:17:a4:ce:ff:8c:a6:b7:1a:73:c1:4b:54:da:17:83: b9:36:bd:73:7d:06:57:a5:bb:eb:e0:df:ad:4c:f7:a8:bc:1c: 87:c0:bb:cb:81:f2:a4:96:99:f5:9a:66:0f:94:a9:de:72:6e: 68:12:66:51:58:6b:a6:fc:75:fe:42:4e:bc:6d:46:dc:78:06: 43:05:e3:9d:75:0f:26:0d:75:ed:6f:69:de:e5:d9:a8:8d:b3: 74:2c:e6:64:fe:29:67:da:23:08:2e:10:44:f0:cb:64:60:ee: 30:6c:0a:ab:f4:4c:20:95:01:e4:be:c1:92:e3:69:3f:3e:19: 6e:42:1a:87:cf:ae:76:b1:65:bc:45:bf:1f:e6:d7:ce:eb:88: ab:d3:5a:8e:cf:11:f7:8a:6a:59:a1:ea:7c:63:a0:de:56:81: 79:f8:89:ce:d6:de:8c:58:53:42:dd:57:64:bb:70:06:cd:36: d5:14:91:23:63:ef:bb:82:28:e3:e4:a8:0d:ab:d2:56:57:c3: dd:4c:f1:95:56:f7:0b:7b:12:8a:50:6d:41:3e:a2:66:49:8a: 56:29:e8:7b:c4:28:54:b7:2d:c4:c9:4a:1e:15:36:90:93:29: d6:b1:4f:3d:1f:90:4e:4f:a9:33:05:95:4d:d3:b0:ee:4d:99: 6e:84:1a:b6 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTM1 NkMxNTM3QzNCRTIzMTZGRkEwREVCMzkxMEM0MDc2QjQ3RDk5MB4XDTI1MDkwOTAw MDUxNloXDTI2MDgyODA2MjIyM1owMzExMC8GA1UEAxMoNjFBMUQwM0UwOTI1QTc4 NkM5ODJEMUI4RDUzRkY4Qjk2REI0M0QzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL3B17+00Xp4LMeYFo0SfQbljCtClkx2c6JFC26Dlo8aShEdi6RH Tg66lT/U+YpMzc/KIm3QUIYMBP0R61I8Cd/qbOvN+/bxPE/B79+MT4d1OxqWxCEX /y+fiR8y4Q+WvJMtIaqzWT7IJYu1oGAT+ZaAhVPZgcGAKikVbAt6heBYX67IaSFP 7s1caDVJLt3Yw8/agRlaZxhvn/owRPurBmtf7lAYn1Q3yDSBG5qrvXJg8YSZMquy kg7Ip2pszkbtelIT1b4D59FxTPyZaVDVGhzqkCBySfTsx0f8kySz5BDvNWcLwelx 6H4XFqz19nf8fLOV7OI1o9lQe0O5h23u+IkCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRhodA+CSWnhsmC0bjVP/i5bbQ9NzAfBgNVHSMEGDAWgBRZNWwVN8O+Ixb/oN6z kQxAdrR9mTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjc5 L1dUVnNGVGZEdmlNV182RGVzNUVNUUhhMGZaay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1RWc0ZUZkR2aU1XXzZEZXM1RU1RSGEwZlprLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3OS9XVFZzRlRmRHZpTVdf NkRlczVFTVFIYTBmWmsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIzEGF6TO/4ymtxpzwUtU2heDuTa9c30GV6W76+DfrUz3qLwch8C7y4HypJaZ 9ZpmD5Sp3nJuaBJmUVhrpvx1/kJOvG1G3HgGQwXjnXUPJg117W9p3uXZqI2zdCzm ZP4pZ9ojCC4QRPDLZGDuMGwKq/RMIJUB5L7BkuNpPz4ZbkIah8+udrFlvEW/H+bX zuuIq9Najs8R94pqWaHqfGOg3laBefiJztbejFhTQt1XZLtwBs021RSRI2Pvu4Io 4+SoDavSVlfD3UzxlVb3C3sSilBtQT6iZkmKVinoe8QoVLctxMlKHhU2kJMp1rFP PR+QTk+pMwWVTdOw7k2ZboQatg== -----END CERTIFICATE-----Generated at Tue Sep 9 05:51:54 2025 by rpki-client