$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft File: TKBmowwWxZe0k6YQetAWDYvQCSY.mft (raw, json) Hash identifier: UnvcQhnhBGKgstalnsA+dEKaJ/06YfQEBMjcrgxv2fs= Subject key identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 Authority key identifier: 4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 Certificate issuer: /CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Certificate serial: 24 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft Manifest number: 24 Signing time: Mon 08 Sep 2025 04:03:16 +0000 Manifest this update: Mon 08 Sep 2025 04:03:16 +0000 Manifest next update: Mon 08 Sep 2025 10:03:16 +0000 Files and hashes: 1: TKBmowwWxZe0k6YQetAWDYvQCSY.crl (hash: pYBXlbocZLrKv3Wis4flr8sQVczVgFe2KGLT6PDp8Ak=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Validity Not Before: Sep 8 04:03:16 2025 GMT Not After : Sep 1 03:37:07 2026 GMT Subject: CN=327CFBC75AEE907367E3332E3278BEC1F7916319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:50:b9:3f:fc:f4:ee:33:bc:2c:32:96:19: 9f:c2:06:bc:7b:41:7b:91:94:f3:63:ec:ca:90:f7: ee:15:85:99:33:89:f5:43:24:de:15:8e:ae:1b:45: 64:4e:2c:e3:e8:a6:1f:fb:87:1d:b7:b6:b2:bc:aa: c3:7f:37:80:b0:f2:24:36:d9:43:75:1e:74:e9:3a: bf:a6:c3:a1:ec:85:93:81:36:3b:85:0c:b3:3e:87: 96:4f:fb:55:ed:bf:14:af:34:2a:92:46:2b:97:67: e5:98:3f:e2:1d:08:67:da:57:aa:b3:20:7e:3b:c0: 4b:e9:86:c8:d8:64:db:4b:0e:2c:b4:c9:13:c1:d0: 47:29:8f:dc:a4:2e:fd:df:cb:9b:fc:88:70:51:af: 0b:0b:03:57:a8:fe:c7:73:f0:a3:c3:c8:bd:42:1e: 59:c0:1a:b7:87:3b:2a:ee:e1:83:b7:00:32:c2:bd: 2b:de:f4:42:e9:f4:54:37:cf:19:86:79:40:7c:93: 75:8c:b8:c1:65:26:e2:1c:c5:b0:64:61:ea:91:72: 93:a3:f2:53:e3:1d:d1:a2:3d:8e:86:ee:d8:3c:3a: fd:72:a8:5d:0a:53:82:b3:95:06:64:cd:45:b5:3d: ed:af:0d:d3:05:c3:8e:11:fc:90:f6:ac:ff:b2:87: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 X509v3 Authority Key Identifier: keyid:4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:44:bd:a5:9e:4f:2a:a6:21:5a:f7:fb:e4:9e:e1:08:d6:97: 35:37:99:a5:75:6b:2b:2f:c8:b6:3d:cd:9b:63:61:27:38:86: 94:eb:38:27:9b:10:e5:c5:c2:84:9a:dd:b3:ee:2c:f2:ca:30: 06:15:61:d4:cf:1c:fe:e7:fe:32:bf:c2:88:bb:1a:f9:50:10: 5f:f2:46:1c:e9:09:9b:ae:cf:21:36:c2:e9:21:c3:2f:71:95: 45:8f:67:f1:9a:81:ee:10:34:be:cf:24:b2:6c:3a:81:92:4b: 4e:dc:f5:0c:19:cf:aa:0f:10:24:24:d1:db:02:4b:77:69:40: bb:24:cc:89:6d:37:6f:14:49:07:e4:38:7e:5b:b6:c3:00:90: 2f:8a:1b:17:c1:07:5a:a8:50:f5:18:78:c2:8c:13:6a:c5:44: 35:d1:b7:a0:49:d9:64:e4:5d:d8:03:07:5e:a2:45:c3:8c:95: f2:ad:a3:3b:7e:6d:a2:65:a2:0f:8e:c0:7e:01:ee:8f:2d:e1: aa:61:8d:47:b4:b4:c5:d7:20:03:7b:49:be:57:c9:3c:eb:0e: 2b:63:f8:2c:b5:bd:71:fc:af:01:73:b8:f2:d2:d8:6b:06:ca: 64:8e:d8:55:5f:b9:4d:3e:52:c1:9a:af:95:e7:bc:3d:ad:07: a5:70:4e:ac -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Q0Ew NjZBMzBDMTZDNTk3QjQ5M0E2MTA3QUQwMTYwRDhCRDAwOTI2MB4XDTI1MDkwODA0 MDMxNloXDTI2MDkwMTAzMzcwN1owMzExMC8GA1UEAxMoMzI3Q0ZCQzc1QUVFOTA3 MzY3RTMzMzJFMzI3OEJFQzFGNzkxNjMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANaPULk//PTuM7wsMpYZn8IGvHtBe5GU82PsypD37hWFmTOJ9UMk 3hWOrhtFZE4s4+imH/uHHbe2sryqw383gLDyJDbZQ3UedOk6v6bDoeyFk4E2O4UM sz6Hlk/7Ve2/FK80KpJGK5dn5Zg/4h0IZ9pXqrMgfjvAS+mGyNhk20sOLLTJE8HQ RymP3KQu/d/Lm/yIcFGvCwsDV6j+x3Pwo8PIvUIeWcAat4c7Ku7hg7cAMsK9K970 Qun0VDfPGYZ5QHyTdYy4wWUm4hzFsGRh6pFyk6PyU+Md0aI9jobu2Dw6/XKoXQpT grOVBmTNRbU97a8N0wXDjhH8kPas/7KH3z8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQyfPvHWu6Qc2fjMy4yeL7B95FjGTAfBgNVHSMEGDAWgBRMoGajDBbFl7STphB6 0BYNi9AJJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzg5 L1RLQm1vd3dXeFplMGs2WVFldEFXRFl2UUNTWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVEtCbW93d1d4WmUwazZZUWV0QVdEWXZRQ1NZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4OS9US0Jtb3d3V3haZTBr NllRZXRBV0RZdlFDU1kubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ0S9pZ5PKqYhWvf75J7hCNaXNTeZpXVrKy/Itj3Nm2NhJziGlOs4J5sQ5cXC hJrds+4s8sowBhVh1M8c/uf+Mr/CiLsa+VAQX/JGHOkJm67PITbC6SHDL3GVRY9n 8ZqB7hA0vs8ksmw6gZJLTtz1DBnPqg8QJCTR2wJLd2lAuyTMiW03bxRJB+Q4flu2 wwCQL4obF8EHWqhQ9Rh4wowTasVENdG3oEnZZORd2AMHXqJFw4yV8q2jO35tomWi D47AfgHujy3hqmGNR7S0xdcgA3tJvlfJPOsOK2P4LLW9cfyvAXO48tLYawbKZI7Y VV+5TT5SwZqvlee8Pa0HpXBOrA== -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:21 2025 by rpki-client