$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft File: iUp18p1qbq-EUdP-mXPCDuMBfko.mft (raw, json) Hash identifier: D0EM2e8LIP/qLIRIrdUfgvvratUbK4M3yjLfN90A7DY= Subject key identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E Authority key identifier: 89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A Certificate issuer: /CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Certificate serial: 183A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft Manifest number: 183A Signing time: Mon 08 Sep 2025 04:04:35 +0000 Manifest this update: Mon 08 Sep 2025 04:04:35 +0000 Manifest next update: Mon 08 Sep 2025 10:04:35 +0000 Files and hashes: 1: iUp18p1qbq-EUdP-mXPCDuMBfko.crl (hash: erIL4vCZeTxcXtVSmC7nfo+vHGrI9j0CnfeKoylU24s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6202 (0x183a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Validity Not Before: Sep 8 04:04:35 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=351FA044BC46D490B9A0AAF205332735092DFF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:32:78:01:e5:64:b2:d9:44:36:8d:90:ca: 46:14:c7:09:8f:10:d0:61:6b:ef:5d:b6:54:b6:5f: f8:12:bb:3d:58:1e:59:d3:b5:59:a6:2f:76:e8:17: 50:2b:76:d6:ca:4e:d7:bc:93:ba:01:34:0e:56:e0: 9e:37:af:eb:6d:6c:ab:41:83:30:81:02:63:78:6d: da:21:73:4b:84:da:89:bb:59:ea:50:4d:58:08:5f: 82:d3:ef:72:0c:90:94:70:4e:b0:53:5a:2c:bd:8d: b4:aa:e9:36:1e:cf:13:5d:fc:4f:05:3a:92:b4:ae: fb:ec:5e:4e:d2:0e:f1:a9:08:69:13:22:e7:e3:11: a5:1e:a9:fa:74:5e:fa:08:e2:e9:d0:df:9f:0e:3c: fc:80:a2:34:94:23:f2:e6:1a:81:1c:6f:42:5a:4d: 85:fd:e6:cf:df:dd:d7:78:4b:97:f2:6d:3e:db:61: 56:55:a6:f5:c3:be:10:ab:a8:f7:77:a5:b2:9b:7b: bb:b3:f1:0e:d0:b4:d6:13:d9:08:c9:3f:b3:c7:19: a1:b4:b7:67:eb:67:64:9f:68:b8:56:1e:03:ca:d1: 77:39:2e:10:a7:80:b7:db:09:37:b5:e5:63:51:ef: 02:8f:b6:37:07:0e:59:e1:d3:16:37:d6:f3:36:12: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E X509v3 Authority Key Identifier: keyid:89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:e0:80:f0:80:2a:8f:44:fc:45:bb:77:9f:e2:0f:45:ba:bd: f0:da:44:f7:d9:ed:9d:8d:d8:4a:69:e7:31:44:61:34:3e:c5: 89:84:a2:fb:95:bd:cc:45:ae:4b:c6:07:41:6b:f5:1c:63:21: 94:10:5f:3a:cd:b0:4d:8b:36:65:1e:8f:fe:40:6a:f9:01:3e: ac:db:db:1d:91:d9:2b:7a:6a:a4:5c:c6:60:70:4c:c8:69:a1: 08:82:ac:42:16:ef:37:3c:c8:3d:7a:45:2c:43:cd:d1:9b:12: ef:71:76:66:94:ae:a7:4e:6e:2f:19:6b:09:67:c2:b6:4a:31: 46:1d:38:e2:99:ed:09:50:24:ed:bd:2a:09:ed:1d:c4:31:9c: ad:eb:de:14:32:22:3e:41:49:27:ae:0e:bd:aa:49:c2:cb:50: 54:35:86:72:c6:7b:dd:75:d8:6a:d3:d9:6b:69:fd:62:b0:d2: 9c:4a:f9:19:5b:62:59:1c:ae:b7:06:2b:b3:b1:25:48:3c:e1: f4:b4:66:af:91:7e:e4:8a:64:73:0e:62:a6:8c:bd:20:a1:49: bb:32:8a:55:01:e0:55:f2:99:e3:f5:80:c8:fc:aa:8c:ac:98: b0:ab:3e:3d:72:7d:b3:97:4e:d2:f4:46:23:17:bb:0c:4c:54: c9:55:89:38 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk0 QTc1RjI5RDZBNkVBRjg0NTFEM0ZFOTk3M0MyMEVFMzAxN0U0QTAeFw0yNTA5MDgw NDA0MzVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM1MUZBMDQ0QkM0NkQ0 OTBCOUEwQUFGMjA1MzMyNzM1MDkyREZGN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEuDJ4AeVkstlENo2QykYUxwmPENBha+9dtlS2X/gSuz1YHlnT tVmmL3boF1ArdtbKTte8k7oBNA5W4J43r+ttbKtBgzCBAmN4bdohc0uE2om7WepQ TVgIX4LT73IMkJRwTrBTWiy9jbSq6TYezxNd/E8FOpK0rvvsXk7SDvGpCGkTIufj EaUeqfp0XvoI4unQ358OPPyAojSUI/LmGoEcb0JaTYX95s/f3dd4S5fybT7bYVZV pvXDvhCrqPd3pbKbe7uz8Q7QtNYT2QjJP7PHGaG0t2frZ2SfaLhWHgPK0Xc5LhCn gLfbCTe15WNR7wKPtjcHDlnh0xY31vM2ElBZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNR+gRLxG1JC5oKryBTMnNQkt/34wHwYDVR0jBBgwFoAUiUp18p1qbq+EUdP+ mXPCDuMBfkowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 My9pVXAxOHAxcWJxLUVVZFAtbVhQQ0R1TUJma28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lVcDE4cDFxYnEtRVVkUC1tWFBDRHVNQmZrby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDMvaVVwMThwMXFicS1F VWRQLW1YUENEdU1CZmtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHLggPCAKo9E/EW7d5/iD0W6vfDaRPfZ7Z2N2Epp5zFEYTQ+xYmEovuVvcxF rkvGB0Fr9RxjIZQQXzrNsE2LNmUej/5AavkBPqzb2x2R2St6aqRcxmBwTMhpoQiC rEIW7zc8yD16RSxDzdGbEu9xdmaUrqdObi8ZawlnwrZKMUYdOOKZ7QlQJO29Kgnt HcQxnK3r3hQyIj5BSSeuDr2qScLLUFQ1hnLGe9112GrT2Wtp/WKw0pxK+RlbYlkc rrcGK7OxJUg84fS0Zq+RfuSKZHMOYqaMvSChSbsyilUB4FXymeP1gMj8qoysmLCr Pj1yfbOXTtL0RiMXuwxMVMlViTg= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:18 2025 by rpki-client