$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft File: Nd6o5bEoW5KyERchGKNBqy3bdrU.mft (raw, json) Hash identifier: JVMgJb3ojFA0Tbu3lQY+2J6TNXYAYz5UDFIsmH/UvuE= Subject key identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 Authority key identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 Certificate issuer: /CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Certificate serial: 0EFD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft Manifest number: 0EFD Signing time: Mon 08 Sep 2025 04:07:03 +0000 Manifest this update: Mon 08 Sep 2025 04:07:03 +0000 Manifest next update: Mon 08 Sep 2025 10:07:03 +0000 Files and hashes: 1: Nd6o5bEoW5KyERchGKNBqy3bdrU.crl (hash: rSSaJWdL2lYTKvl2t8PinsQWfEwSn2aR0oZwvHYkgKA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3837 (0xefd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Validity Not Before: Sep 8 04:07:03 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5BF91187435E01A842776355A2D3F3D0C6B75447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:4a:2e:e3:69:8c:36:a2:0f:c6:e1:ab:fa: a2:b8:c7:c6:f4:4f:0b:69:37:bd:7d:e9:b1:d2:d7: a3:24:85:7c:76:27:64:4d:ed:80:85:14:bb:3e:13: 65:f5:c8:27:33:60:41:5b:7d:61:d2:af:4a:c4:5d: f4:20:d5:b9:95:1d:43:95:d1:fd:ba:e7:ac:b9:6d: c7:8a:31:7c:c2:5a:43:2a:f4:7f:da:3a:06:61:59: 60:45:5f:ca:e3:dd:ac:ce:be:b3:ed:35:c9:6f:89: 0c:e8:2a:a0:99:f3:54:27:86:81:eb:1b:88:e5:55: 6e:b7:ef:a2:91:aa:4e:87:b5:be:43:4e:36:dc:d8: aa:30:14:03:f4:1e:2b:ae:1c:1a:26:0c:5d:39:e6: 68:eb:10:a7:ea:b1:6f:b0:b3:e9:f9:89:a2:8e:68: 0a:20:19:9a:91:27:df:a5:27:05:f8:79:1a:16:80: a1:0d:16:dc:2b:9c:ac:0f:8a:6b:cc:b3:3f:8d:00: 8e:5e:3f:3e:f5:77:80:e4:fc:9e:57:18:23:25:bf: 4b:c0:f7:23:72:90:43:d5:75:78:21:d0:87:e4:b2: b2:fb:d8:27:55:99:82:8e:68:53:18:f8:1a:88:95: 97:73:d4:5c:33:89:56:99:70:1a:bf:13:72:db:07: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 X509v3 Authority Key Identifier: keyid:35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:98:10:94:18:31:53:ef:2d:b6:9d:66:b6:2a:12:39:13:ce: 45:11:05:1c:c0:ef:a1:da:4d:7b:5d:f9:a8:f4:98:cb:2e:75: b4:e9:6d:c2:ef:2b:3e:bb:5a:55:ba:bf:f9:cb:71:ec:4b:9d: bd:05:4a:22:d7:54:2f:00:65:3f:33:55:79:d9:52:db:a9:ff: 43:71:de:4b:5f:22:fa:0a:24:32:41:b9:61:02:91:84:ee:e7: 6f:0a:30:0e:e0:5c:62:03:a8:3c:94:3e:14:f6:dc:5c:b6:bb: 03:74:0d:68:10:ee:d2:8a:fa:1f:74:f2:40:49:d4:25:5a:fc: 1a:5e:c9:45:22:fa:1d:bf:09:43:6c:8d:df:8a:ae:a2:b4:c9: fc:91:56:0b:04:5f:7a:09:7d:55:43:98:2a:d6:65:da:df:4f: d0:f0:7a:ce:02:fc:13:af:66:d4:46:86:89:6f:bf:e6:6e:31: 47:57:9b:0e:7a:c2:97:8e:53:60:f0:cf:db:35:68:32:a1:cb: c0:27:5a:f5:74:6d:71:2d:28:cd:bb:9f:07:1a:6c:fe:5e:3a: f1:89:23:c7:54:a6:bb:c2:c6:ee:58:c6:b2:7b:8a:03:0b:1e: 57:63:5e:6b:28:0c:3b:47:f4:92:53:b8:c8:0f:57:c6:f4:eb: 0e:60:c3:78 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVE RUE4RTVCMTI4NUI5MkIyMTExNzIxMThBMzQxQUIyRERCNzZCNTAeFw0yNTA5MDgw NDA3MDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVCRjkxMTg3NDM1RTAx QTg0Mjc3NjM1NUEyRDNGM0QwQzZCNzU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL1kou42mMNqIPxuGr+qK4x8b0TwtpN7196bHS16MkhXx2J2RN 7YCFFLs+E2X1yCczYEFbfWHSr0rEXfQg1bmVHUOV0f2656y5bceKMXzCWkMq9H/a OgZhWWBFX8rj3azOvrPtNclviQzoKqCZ81QnhoHrG4jlVW6376KRqk6Htb5DTjbc 2KowFAP0HiuuHBomDF055mjrEKfqsW+ws+n5iaKOaAogGZqRJ9+lJwX4eRoWgKEN FtwrnKwPimvMsz+NAI5ePz71d4Dk/J5XGCMlv0vA9yNykEPVdXgh0IfksrL72CdV mYKOaFMY+BqIlZdz1FwziVaZcBq/E3LbBxk/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUW/kRh0NeAahCd2NVotPz0Ma3VEcwHwYDVR0jBBgwFoAUNd6o5bEoW5KyERch GKNBqy3bdrUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Mi9OZDZvNWJFb1c1S3lFUmNoR0tOQnF5M2JkclUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05kNm81YkVvVzVLeUVSY2hHS05CcXkzYmRyVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzIvTmQ2bzViRW9XNUt5 RVJjaEdLTkJxeTNiZHJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHWYEJQYMVPvLbadZrYqEjkTzkURBRzA76HaTXtd+aj0mMsudbTpbcLvKz67 WlW6v/nLcexLnb0FSiLXVC8AZT8zVXnZUtup/0Nx3ktfIvoKJDJBuWECkYTu528K MA7gXGIDqDyUPhT23Fy2uwN0DWgQ7tKK+h908kBJ1CVa/BpeyUUi+h2/CUNsjd+K rqK0yfyRVgsEX3oJfVVDmCrWZdrfT9Dwes4C/BOvZtRGholvv+ZuMUdXmw56wpeO U2Dwz9s1aDKhy8AnWvV0bXEtKM27nwcabP5eOvGJI8dUprvCxu5YxrJ7igMLHldj XmsoDDtH9JJTuMgPV8b06w5gw3g= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:31 2025 by rpki-client