$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft File: -7JZNquvAsZtbrsyhSU9KZuXQFk.mft (raw, json) Hash identifier: j+QIIiI15NNu03ShZIQgvKwfBaCXTu7qVF/+Wq60H+o= Subject key identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD Authority key identifier: FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 Certificate issuer: /CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Certificate serial: 4C9D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft Manifest number: 4C9D Signing time: Mon 08 Sep 2025 04:06:50 +0000 Manifest this update: Mon 08 Sep 2025 04:06:50 +0000 Manifest next update: Mon 08 Sep 2025 10:06:50 +0000 Files and hashes: 1: -7JZNquvAsZtbrsyhSU9KZuXQFk.crl (hash: n0GW7CflRf5GPxlDm7NfLRttp5OycYDkVBVedK8elgc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19613 (0x4c9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Validity Not Before: Sep 8 04:06:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B468794992F37BADE13F31D88901F83D053D70FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:3e:c7:56:4d:10:09:46:e5:3d:42:bb:6e: 0c:b6:4c:30:39:58:09:b5:98:14:4b:c0:cb:f4:f7: 19:b1:d9:ac:34:d9:20:61:68:2b:d4:67:bd:ca:56: 00:6a:57:c0:76:7b:7b:62:ea:17:fa:8d:c8:79:25: a4:94:58:fc:cd:a4:91:c2:f3:fd:f5:19:43:cc:fb: 01:80:84:46:64:75:1d:ce:ff:c7:f6:d6:4a:0a:fa: 52:02:52:14:b7:b1:bb:52:08:93:5a:52:11:ef:fc: 43:42:62:07:e4:83:fd:35:a5:36:6f:5b:7b:32:24: 5b:72:2e:20:3b:a6:88:b6:3e:5f:b1:2c:5b:ae:35: 27:cc:b7:d3:64:74:9f:ca:08:7f:41:e4:40:d4:4e: be:83:02:b7:96:7a:b4:fc:35:14:a0:da:bc:41:ec: 6a:d9:59:34:81:f8:fc:b0:1a:e3:b7:28:de:9f:65: fa:1e:96:16:19:1f:e6:2b:b7:73:68:e2:ae:a7:19: ba:32:32:57:ec:a5:4e:bc:8d:ea:d1:1a:13:b0:fd: d0:06:04:70:4d:50:75:3c:6f:be:81:d4:ed:6e:90: 50:93:4d:9c:7b:ae:55:d2:4b:fc:2b:2c:c7:f9:ac: 8c:b7:14:4b:be:0f:91:79:4d:c8:24:f5:42:c0:e1: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD X509v3 Authority Key Identifier: keyid:FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9a:15:2e:51:b8:25:31:5f:ac:f8:89:e6:17:09:e3:62:ff: 9d:f8:f0:ae:19:aa:e1:05:4d:3d:a1:34:c7:8c:c4:35:ce:fa: 16:8e:ba:05:1b:47:e2:51:b4:d1:7c:41:1e:d5:7c:c0:0b:01: db:3d:0d:10:7b:03:5f:fa:1c:db:3c:79:34:1c:c7:93:97:6a: 39:9b:f4:87:61:19:32:31:e2:11:4e:70:b2:47:28:66:8d:62: 61:cc:9b:05:c9:57:91:9e:10:a0:80:95:80:cb:70:12:74:df: 86:ef:72:e5:50:a0:81:0a:11:fc:24:bb:68:9b:6d:d9:a0:31: 26:d1:f5:9f:08:58:ab:cf:e2:ef:1e:89:3f:1c:9c:02:c3:f2: 26:4e:84:5e:dc:3c:59:27:4c:69:95:35:66:c2:86:27:cd:c3: f4:07:41:55:1d:a6:e7:f6:e4:43:d9:41:f4:7c:1c:1d:7f:3e: 81:ff:8b:6a:36:c9:a8:84:11:54:71:97:65:0b:a2:32:5e:f9: 09:75:f1:e0:1b:53:36:4b:81:cd:6f:e4:bf:56:2f:37:ab:db: 60:b5:c9:ca:dc:29:07:b2:c7:39:11:d9:e4:5c:75:e7:7a:3f: e0:f2:fe:c6:ae:c8:44:7d:63:42:77:94:97:bc:1b:cd:43:10: 86:58:92:bc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICTJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJC MjU5MzZBQkFGMDJDNjZENkVCQjMyODUyNTNEMjk5Qjk3NDA1OTAeFw0yNTA5MDgw NDA2NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEI0Njg3OTQ5OTJGMzdC QURFMTNGMzFEODg5MDFGODNEMDUzRDcwRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCBD7HVk0QCUblPUK7bgy2TDA5WAm1mBRLwMv09xmx2aw02SBh aCvUZ73KVgBqV8B2e3ti6hf6jch5JaSUWPzNpJHC8/31GUPM+wGAhEZkdR3O/8f2 1koK+lICUhS3sbtSCJNaUhHv/ENCYgfkg/01pTZvW3syJFtyLiA7poi2Pl+xLFuu NSfMt9NkdJ/KCH9B5EDUTr6DAreWerT8NRSg2rxB7GrZWTSB+PywGuO3KN6fZfoe lhYZH+Yrt3No4q6nGboyMlfspU68jerRGhOw/dAGBHBNUHU8b76B1O1ukFCTTZx7 rlXSS/wrLMf5rIy3FEu+D5F5Tcgk9ULA4XtvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUtGh5SZLze63hPzHYiQH4PQU9cP0wHwYDVR0jBBgwFoAU+7JZNquvAsZtbrsy hSU9KZuXQFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx MC8tN0paTnF1dkFzWnRicnN5aFNVOUtadVhRRmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy03SlpOcXV2QXNadGJyc3loU1U5S1p1WFFGay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTAvLTdKWk5xdXZBc1p0 YnJzeWhTVTlLWnVYUUZrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALSaFS5RuCUxX6z4ieYXCeNi/5348K4ZquEFTT2hNMeMxDXO+haOugUbR+JR tNF8QR7VfMALAds9DRB7A1/6HNs8eTQcx5OXajmb9IdhGTIx4hFOcLJHKGaNYmHM mwXJV5GeEKCAlYDLcBJ034bvcuVQoIEKEfwku2ibbdmgMSbR9Z8IWKvP4u8eiT8c nALD8iZOhF7cPFknTGmVNWbChifNw/QHQVUdpuf25EPZQfR8HB1/PoH/i2o2yaiE EVRxl2ULojJe+Ql18eAbUzZLgc1v5L9WLzer22C1ycrcKQeyxzkR2eRcded6P+Dy /sauyER9Y0J3lJe8G81DEIZYkrw= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:14 2025 by rpki-client