$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft File: _APy-Wb2K_3GawQVYum6QAMtoJ4.mft (raw, json) Hash identifier: x77cKanBvHyh8n8Aw4QNPpoNTvs4DrsraXhaI8MhfwY= Subject key identifier: 6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99 Authority key identifier: FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E Certificate issuer: /CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E Certificate serial: 21B0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft Manifest number: 21AA Signing time: Mon 08 Sep 2025 01:03:41 +0000 Manifest this update: Mon 08 Sep 2025 01:03:41 +0000 Manifest next update: Mon 08 Sep 2025 07:03:41 +0000 Files and hashes: 1: _APy-Wb2K_3GawQVYum6QAMtoJ4.crl (hash: Ua5ZgS/OHA23iW/baxBOkDmh5pHZ7ecDUc0nmxkQUdE=) 2: uKdWCaEnVONu4fZr7N9srVNLqMU.roa (hash: bLAMgiyp/+z7wYa7NqzIhJJBnnzmKA4F9e4V4dRy4g4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8624 (0x21b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E Validity Not Before: Sep 8 01:03:41 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6BBB7649DCD7DA21A07DB3A61B5E61604AAD1499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:1f:a3:40:9e:ad:bd:4a:db:7b:e9:45:00: 93:7e:81:b8:fe:f0:3b:18:64:0f:5d:24:a9:3e:c5: e4:6f:72:06:04:ed:37:4e:0c:3f:10:7e:d7:6a:9e: c3:c7:89:4e:82:d5:e2:bf:58:b0:12:e4:c9:4e:af: e8:db:b5:fa:af:bc:47:f8:d9:ec:22:38:41:0d:ca: 65:97:c4:af:04:8b:30:54:a8:ce:63:4d:f5:74:cb: 77:7a:1b:ae:b7:11:38:8c:a4:80:70:4c:61:4f:38: b3:07:03:91:9f:97:d9:83:ac:4d:e3:38:7e:99:11: 6c:2e:09:ba:c0:05:a6:43:7c:77:65:a9:78:05:63: a2:83:88:9c:4f:4d:a3:aa:92:e0:5c:64:a4:2a:37: c5:2f:60:cf:58:7a:92:01:ac:c4:18:37:13:4f:ba: 3e:5e:63:8e:aa:1d:2b:dc:83:74:24:df:4b:e6:cf: 60:ae:6b:64:f7:f0:45:b2:9d:b1:10:5c:89:78:a7: f6:6b:f9:78:08:2e:06:e7:fa:8e:17:3c:5c:ac:1e: 99:1b:a4:cf:0b:6a:18:e5:a7:c7:72:0a:32:9c:e5: ef:e6:cd:1b:b1:71:5b:2f:7c:ea:a7:bf:d3:0d:a1: 37:cd:b6:f0:8e:f4:0b:eb:8b:a5:f6:0e:59:34:5a: 30:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99 X509v3 Authority Key Identifier: keyid:FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:9a:ec:70:89:01:ce:0a:33:33:0b:0d:94:c6:ce:8b:58:c2: 77:4b:97:15:4b:08:ae:02:33:ae:23:a7:29:05:b5:d0:e1:f6: 86:54:9a:21:91:a3:b3:b8:e8:58:bb:d9:d1:4e:0c:1e:e5:e7: d9:cd:d1:bc:db:ee:91:10:92:d8:6a:ae:ab:07:df:4c:31:2c: 02:5f:36:7f:34:c6:8c:40:80:e2:3f:90:df:bf:bd:02:a7:f7: bb:6e:c6:35:f2:cb:d0:70:53:87:99:28:fd:f0:b2:0d:55:6a: 46:d1:48:ed:4e:c3:79:52:99:06:45:cb:9a:da:51:de:5c:66: 7c:68:e0:35:dc:5d:c7:6a:0b:d3:13:d8:68:a3:30:8c:4e:60: 4c:43:30:1f:89:59:c8:ac:ae:c8:84:d8:c7:b4:f9:bc:91:26: d5:d6:18:15:57:c5:0c:70:80:3a:d7:2d:32:73:21:e0:20:18: 2c:b9:44:4c:7d:eb:64:5a:27:84:d6:9c:a9:ea:6d:09:ed:b2: 43:15:99:b0:91:34:ae:03:54:58:55:f9:f3:82:c4:86:68:1e: d0:1e:4e:8b:fd:48:d3:f7:b4:f1:9f:bf:05:1b:b5:55:07:73: 2b:34:50:34:a3:81:cb:1a:a3:7e:69:f4:74:f5:93:04:71:47: 3f:3c:d1:5e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkMw M0YyRjk2NkY2MkJGREM2NkIwNDE1NjJFOUJBNDAwMzJEQTA5RTAeFw0yNTA5MDgw MTAzNDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZCQkI3NjQ5RENEN0RB MjFBMDdEQjNBNjFCNUU2MTYwNEFBRDE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2xR+jQJ6tvUrbe+lFAJN+gbj+8DsYZA9dJKk+xeRvcgYE7TdO DD8QftdqnsPHiU6C1eK/WLAS5MlOr+jbtfqvvEf42ewiOEENymWXxK8EizBUqM5j TfV0y3d6G663ETiMpIBwTGFPOLMHA5Gfl9mDrE3jOH6ZEWwuCbrABaZDfHdlqXgF Y6KDiJxPTaOqkuBcZKQqN8UvYM9YepIBrMQYNxNPuj5eY46qHSvcg3Qk30vmz2Cu a2T38EWynbEQXIl4p/Zr+XgILgbn+o4XPFysHpkbpM8Lahjlp8dyCjKc5e/mzRux cVsvfOqnv9MNoTfNtvCO9Avri6X2Dlk0WjAxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUa7t2SdzX2iGgfbOmG15hYEqtFJkwHwYDVR0jBBgwFoAU/APy+Wb2K/3GawQV Yum6QAMtoJ4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA1 MS9fQVB5LVdiMktfM0dhd1FWWXVtNlFBTXRvSjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19BUHktV2IyS18zR2F3UVZZdW02UUFNdG9KNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNTEvX0FQeS1XYjJLXzNH YXdRVll1bTZRQU10b0o0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIOa7HCJAc4KMzMLDZTGzotYwndLlxVLCK4CM64jpykFtdDh9oZUmiGRo7O4 6Fi72dFODB7l59nN0bzb7pEQkthqrqsH30wxLAJfNn80xoxAgOI/kN+/vQKn97tu xjXyy9BwU4eZKP3wsg1VakbRSO1Ow3lSmQZFy5raUd5cZnxo4DXcXcdqC9MT2Gij MIxOYExDMB+JWcisrsiE2Me0+byRJtXWGBVXxQxwgDrXLTJzIeAgGCy5REx962Ra J4TWnKnqbQntskMVmbCRNK4DVFhV+fOCxIZoHtAeTov9SNP3tPGfvwUbtVUHcys0 UDSjgcsao35p9HT1kwRxRz880V4= -----END CERTIFICATE-----Generated at Mon Sep 8 05:55:00 2025 by rpki-client