$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft File: jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft (raw, json) Hash identifier: FcyB4H1X0ul5utF5ku9qe0PoPE7vGZWNFhZizp2sNF0= Subject key identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 Authority key identifier: 8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D Certificate issuer: /CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Certificate serial: 0E5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft Manifest number: 0E5A Signing time: Mon 08 Sep 2025 04:04:50 +0000 Manifest this update: Mon 08 Sep 2025 04:04:50 +0000 Manifest next update: Mon 08 Sep 2025 10:04:50 +0000 Files and hashes: 1: jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl (hash: p6xRfUsAXDO+KzEQ3ZtCTcLHVkm4VLgON187jHY95Z4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3674 (0xe5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Validity Not Before: Sep 8 04:04:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=CDE39620232D3493A808C661D8F0441DB9B49F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:c5:81:52:c3:c3:16:cf:5d:20:16:5c:99: ba:5a:3b:ed:cf:8f:ac:8d:c7:ff:66:e4:12:18:ec: 3c:ab:b3:91:ce:a2:b7:d0:2f:6c:aa:94:d1:25:fe: ff:2b:20:8e:52:f3:c0:7c:6b:ca:6e:58:0e:5d:85: d3:ec:77:53:3d:d5:30:b5:b4:f8:30:c2:5b:88:95: 2d:4c:ac:21:8f:9d:bf:39:3a:78:56:33:3c:62:dc: ad:30:f6:a4:9f:2f:9e:f7:5a:11:33:f4:fe:0f:cd: f1:7d:d4:a2:b3:49:95:c2:26:91:79:7f:ec:cb:7f: d2:1d:1f:f9:4a:ff:f1:4d:32:93:ab:3c:a2:a6:92: 00:b6:36:a1:2f:ad:5c:c2:b5:bb:a2:56:be:b2:03: 87:29:36:1b:a1:d1:e4:b4:5d:82:b6:6b:34:ef:b1: 7b:4b:db:b8:a9:8f:e2:c0:7c:91:cb:67:4c:ae:56: e2:42:6a:cd:8d:e3:e2:97:ae:93:81:f9:3c:9d:77: 32:81:6e:16:76:a3:2f:9e:fc:6f:61:e1:2c:ed:cb: 1b:ae:52:d7:9a:e8:ae:cd:d5:50:91:57:98:0b:2b: 28:4a:2e:63:2b:cd:12:ca:2f:0a:88:c6:e8:c5:72: 4f:55:d4:ae:56:f4:8d:7e:40:f5:e0:89:06:34:fa: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 X509v3 Authority Key Identifier: keyid:8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ed:9b:57:ad:fb:2b:64:12:37:57:08:1c:f0:01:34:f3:96: 89:81:23:91:33:c9:a2:52:01:d3:a3:67:0b:4c:27:3b:27:48: b3:fe:1a:f5:43:19:a2:97:38:18:89:50:12:62:28:19:74:4e: ab:91:87:82:2b:de:0e:02:cf:d7:58:ea:0c:cb:48:13:46:8d: b8:3f:80:55:74:a9:de:6d:9f:2b:a5:59:71:6e:f0:27:8b:7a: 93:cb:1a:14:a0:11:f9:f2:db:21:9a:b9:36:1e:f2:5e:c3:e0: 19:ae:a7:96:0f:e6:10:06:99:54:d8:66:6d:26:af:13:d8:63: 2b:0e:68:ac:81:f5:21:f4:d7:e5:ec:09:19:14:59:ee:dc:e8: 86:d9:3e:c7:27:48:a8:a6:09:2e:88:6d:78:f8:66:34:b9:54: 15:b9:89:70:24:6b:c2:75:75:18:5e:20:ff:4c:f4:f9:55:27: c7:10:c8:ab:8a:bd:78:7d:79:aa:10:8d:4b:08:d4:58:d4:fb: 78:89:37:57:a2:40:bf:70:65:68:2b:50:97:a8:34:15:52:28: 1c:88:fd:ff:4c:8b:0e:f9:fb:23:7d:99:9e:c3:6c:d2:93:6b: 2b:16:69:a5:5c:8a:ec:ac:a3:10:e5:d2:82:c6:ca:21:c8:f7: 57:4e:64:1c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU4 REE1OUM4MTBGMTMyRjEyMDZFNEY3MkNFNjg2RkRFMzA1NEU2RDAeFw0yNTA5MDgw NDA0NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKENERTM5NjIwMjMyRDM0 OTNBODA4QzY2MUQ4RjA0NDFEQjlCNDlGNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHNsWBUsPDFs9dIBZcmbpaO+3Pj6yNx/9m5BIY7Dyrs5HOorfQ L2yqlNEl/v8rII5S88B8a8puWA5dhdPsd1M91TC1tPgwwluIlS1MrCGPnb85OnhW Mzxi3K0w9qSfL573WhEz9P4PzfF91KKzSZXCJpF5f+zLf9IdH/lK//FNMpOrPKKm kgC2NqEvrVzCtbuiVr6yA4cpNhuh0eS0XYK2azTvsXtL27ipj+LAfJHLZ0yuVuJC as2N4+KXrpOB+TyddzKBbhZ2oy+e/G9h4SztyxuuUtea6K7N1VCRV5gLKyhKLmMr zRLKLwqIxujFck9V1K5W9I1+QPXgiQY0+sJDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzeOWICMtNJOoCMZh2PBEHbm0n2cwHwYDVR0jBBgwFoAUjo2lnIEPEy8SBuT3 LOaG/eMFTm0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Ny9qbzJsbklFUEV5OFNCdVQzTE9hR19lTUZUbTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pvMmxuSUVQRXk4U0J1VDNMT2FHX2VNRlRtMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzcvam8ybG5JRVBFeThT QnVUM0xPYUdfZU1GVG0wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFjtm1et+ytkEjdXCBzwATTzlomBI5EzyaJSAdOjZwtMJzsnSLP+GvVDGaKX OBiJUBJiKBl0TquRh4Ir3g4Cz9dY6gzLSBNGjbg/gFV0qd5tnyulWXFu8CeLepPL GhSgEfny2yGauTYe8l7D4Bmup5YP5hAGmVTYZm0mrxPYYysOaKyB9SH01+XsCRkU We7c6IbZPscnSKimCS6IbXj4ZjS5VBW5iXAka8J1dRheIP9M9PlVJ8cQyKuKvXh9 eaoQjUsI1FjU+3iJN1eiQL9wZWgrUJeoNBVSKByI/f9Miw75+yN9mZ7DbNKTaysW aaVciuysoxDl0oLGyiHI91dOZBw= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:38 2025 by rpki-client