$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.mft File: yIjZVr3_KvKzDy02QXZk3ADZXOk.mft (raw, json) Hash identifier: NMV1qMVYX+kbEIgCAEgctOfD4lN1pHOldc6v8tlEdEs= Subject key identifier: 84:7C:52:52:33:73:9A:86:8F:F8:4C:F4:97:6A:16:F2:2E:27:43:5E Authority key identifier: C8:88:D9:56:BD:FF:2A:F2:B3:0F:2D:36:41:76:64:DC:00:D9:5C:E9 Certificate issuer: /CN=C888D956BDFF2AF2B30F2D36417664DC00D95CE9 Certificate serial: 38 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yIjZVr3_KvKzDy02QXZk3ADZXOk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.mft Manifest number: 38 Signing time: Mon 08 Sep 2025 04:05:26 +0000 Manifest this update: Mon 08 Sep 2025 04:05:26 +0000 Manifest next update: Mon 08 Sep 2025 10:05:26 +0000 Files and hashes: 1: yIjZVr3_KvKzDy02QXZk3ADZXOk.crl (hash: Um8u+r1SY/qlCRkBfDRGZ1YRsl8djt2koGKUBMS4O6k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yIjZVr3_KvKzDy02QXZk3ADZXOk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C888D956BDFF2AF2B30F2D36417664DC00D95CE9 Validity Not Before: Sep 8 04:05:26 2025 GMT Not After : Aug 28 02:51:57 2026 GMT Subject: CN=847C525233739A868FF84CF4976A16F22E27435E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b3:11:91:c3:0c:15:13:17:ae:3e:ae:1d:7a: 73:10:9c:ad:b0:cc:69:0b:b3:1d:9e:cb:b3:b2:96: 08:11:d5:ab:75:27:13:3d:83:78:76:3e:c6:2e:de: c3:6a:93:83:8e:fd:24:bf:03:86:ce:e2:ad:37:19: ec:87:87:72:a1:ae:b3:39:22:d0:3e:b0:54:67:39: 40:75:25:74:63:83:fc:8f:45:8e:56:f0:9f:3d:60: 9d:49:04:23:45:3b:ba:b2:0c:02:4e:7f:f5:45:c9: 99:41:89:0e:93:4e:5b:ea:6e:99:26:7a:f3:a8:ce: c3:0d:56:dc:d5:3d:ce:15:78:a4:4e:91:2f:ae:b0: c4:48:56:8e:99:ad:46:c8:9c:17:40:87:7f:59:68: 19:84:c5:c4:c7:15:b7:2c:7b:a6:d8:e4:ba:dd:6b: 77:8d:0e:d9:f1:11:0f:c2:93:c6:4b:05:93:65:a5: 88:fc:ef:72:35:f9:d8:ef:24:39:9d:0b:56:e6:2b: e8:26:15:71:ff:2c:f7:6f:7f:f8:49:20:fa:c3:2b: 1a:b8:c6:d4:55:ae:8f:9d:9e:4f:1e:a0:6b:8b:57: 17:a6:78:bf:bc:1c:89:5e:64:7a:1e:bd:80:fe:4c: 94:c4:a8:6c:e1:ad:4a:0d:e0:39:f4:02:9a:41:7a: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7C:52:52:33:73:9A:86:8F:F8:4C:F4:97:6A:16:F2:2E:27:43:5E X509v3 Authority Key Identifier: keyid:C8:88:D9:56:BD:FF:2A:F2:B3:0F:2D:36:41:76:64:DC:00:D9:5C:E9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yIjZVr3_KvKzDy02QXZk3ADZXOk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2970/yIjZVr3_KvKzDy02QXZk3ADZXOk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:e7:e6:e4:2d:c8:42:03:93:c6:9b:61:00:26:e5:7c:8c:06: 4d:97:a2:c8:8a:57:2d:82:16:d5:4f:4d:92:f9:b6:55:2a:89: fe:a2:e9:26:ed:52:51:d5:aa:96:c5:b8:3c:1b:2a:da:c4:e4: a5:e7:1b:1a:d9:4e:66:0b:6b:fa:15:ab:cd:81:2e:a3:be:61: df:0b:e9:17:da:b8:4e:3a:9d:d2:5c:3a:a2:ff:07:4c:5e:4b: 87:ce:27:df:9d:7b:61:32:d6:c8:fe:de:94:13:bf:5d:ce:07: e0:ee:94:da:c3:b5:96:04:68:47:4d:a1:9a:8f:80:69:01:d0: 8f:71:8d:a1:b7:9e:ed:59:d5:61:00:ce:ff:77:13:9b:f5:ab: 55:4e:4c:7d:24:f3:3a:68:19:84:0f:c1:fc:e0:75:80:76:2e: 9c:7b:3c:f6:07:47:f9:06:18:41:d6:8d:a9:3d:60:b2:bc:99: 86:fd:6b:e3:d2:1e:c5:21:06:da:e6:13:d7:ac:5e:57:e5:90: 8c:11:4b:53:de:53:df:e0:a4:59:38:cd:6f:2f:ef:38:71:cc: 22:57:94:24:7a:6f:f8:b9:51:58:52:7b:56:3e:bd:aa:68:05: f7:16:ce:1b:bf:16:1e:80:fc:21:6f:7c:af:af:14:d6:87:90: 5b:bb:3e:7c -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODg4 RDk1NkJERkYyQUYyQjMwRjJEMzY0MTc2NjREQzAwRDk1Q0U5MB4XDTI1MDkwODA0 MDUyNloXDTI2MDgyODAyNTE1N1owMzExMC8GA1UEAxMoODQ3QzUyNTIzMzczOUE4 NjhGRjg0Q0Y0OTc2QTE2RjIyRTI3NDM1RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOSzEZHDDBUTF64+rh16cxCcrbDMaQuzHZ7Ls7KWCBHVq3UnEz2D eHY+xi7ew2qTg479JL8Dhs7irTcZ7IeHcqGuszki0D6wVGc5QHUldGOD/I9Fjlbw nz1gnUkEI0U7urIMAk5/9UXJmUGJDpNOW+pumSZ686jOww1W3NU9zhV4pE6RL66w xEhWjpmtRsicF0CHf1loGYTFxMcVtyx7ptjkut1rd40O2fERD8KTxksFk2WliPzv cjX52O8kOZ0LVuYr6CYVcf8s929/+Ekg+sMrGrjG1FWuj52eTx6ga4tXF6Z4v7wc iV5keh69gP5MlMSobOGtSg3gOfQCmkF6Iv0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSEfFJSM3Oaho/4TPSXahbyLidDXjAfBgNVHSMEGDAWgBTIiNlWvf8q8rMPLTZB dmTcANlc6TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yOTcw L3lJalpWcjNfS3ZLekR5MDJRWFprM0FEWlhPay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveUlqWlZyM19Ldkt6RHkwMlFYWmszQURaWE9rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk3MC95SWpaVnIzX0t2S3pE eTAyUVhaazNBRFpYT2subWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU+fm5C3IQgOTxpthACblfIwGTZeiyIpXLYIW1U9Nkvm2VSqJ/qLpJu1SUdWq lsW4PBsq2sTkpecbGtlOZgtr+hWrzYEuo75h3wvpF9q4Tjqd0lw6ov8HTF5Lh84n 3517YTLWyP7elBO/Xc4H4O6U2sO1lgRoR02hmo+AaQHQj3GNobee7VnVYQDO/3cT m/WrVU5MfSTzOmgZhA/B/OB1gHYunHs89gdH+QYYQdaNqT1gsryZhv1r49IexSEG 2uYT16xeV+WQjBFLU95T3+CkWTjNby/vOHHMIleUJHpv+LlRWFJ7Vj69qmgF9xbO G78WHoD8IW98r68U1oeQW7s+fA== -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:15 2025 by rpki-client