$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft File: fgidRjtgd0CTGkB3zrNM010DlrM.mft (raw, json) Hash identifier: rtDRueZjdSia3aAGHB0qGwuBFmEeiAGGjRHEuadUpDo= Subject key identifier: 50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F Authority key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 Certificate issuer: /CN=7E089D463B607740931A4077CEB34CD35D0396B3 Certificate serial: 0DDC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft Manifest number: 0DDC Signing time: Mon 08 Sep 2025 04:05:14 +0000 Manifest this update: Mon 08 Sep 2025 04:05:14 +0000 Manifest next update: Mon 08 Sep 2025 10:05:14 +0000 Files and hashes: 1: fgidRjtgd0CTGkB3zrNM010DlrM.crl (hash: UvGNhEwkC/7P0DAX3npqCC1bQC6nfYk35TCUaBj5n1Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3548 (0xddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E089D463B607740931A4077CEB34CD35D0396B3 Validity Not Before: Sep 8 04:05:14 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=50F1DA14A665FE1C3CC8BAACD0214091F103AD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:c8:10:b8:ec:dd:e4:36:70:05:db:57:3b: 75:7e:dc:45:05:cd:85:5f:f1:e0:d8:e5:02:88:4a: 39:a8:41:50:1f:0e:4a:f7:dc:4a:c2:2a:13:77:76: 9f:84:37:bc:45:be:bd:90:1d:54:dc:6a:5a:a0:b3: c0:91:a7:9d:e5:0b:25:19:98:19:fb:4e:79:f1:3a: c4:98:c8:37:07:ce:04:02:5e:63:ef:fe:5f:64:2c: 5b:f1:20:26:56:65:7a:e6:99:0e:b9:98:8d:55:d0: 97:18:bc:14:2e:0b:53:2d:4b:96:39:3e:63:14:00: b5:7b:4c:b5:8e:41:17:d3:62:fb:cd:16:bd:3c:18: d8:14:3e:36:36:a6:23:bf:09:cf:b6:94:30:41:7e: 6a:ad:91:31:b3:2f:3d:29:7a:5d:ce:6a:c2:84:37: 7f:a4:40:3c:6d:ad:52:a1:0e:ca:ec:11:d1:9e:30: f1:09:30:c7:c2:31:75:b7:b1:bc:9e:e1:06:12:0b: 0b:e0:99:fc:8e:b6:04:fd:26:17:b0:d8:da:15:a8: 76:f7:26:3d:5d:50:82:c6:4c:a0:4a:e5:49:39:90: db:33:76:9c:1d:ec:06:77:d6:f4:3e:13:4d:58:21: 83:74:2f:6c:58:cc:e1:59:a8:af:ca:34:b9:f0:b4: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F1:DA:14:A6:65:FE:1C:3C:C8:BA:AC:D0:21:40:91:F1:03:AD:2F X509v3 Authority Key Identifier: keyid:7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e2:35:5e:10:9b:85:f7:54:0c:2d:e2:ba:69:42:93:e6:f7: ab:8d:23:e1:5b:68:09:0a:9e:dd:48:b8:16:3e:65:d2:12:2d: d2:58:33:8e:17:d0:16:ec:64:83:40:b8:88:e0:81:35:42:29: 57:4a:35:ef:f4:7a:4d:e1:02:4d:40:eb:6a:b8:ec:9f:2a:30: ce:0f:1f:c8:94:01:2f:a7:6f:19:2b:be:6f:b0:f2:e1:25:32: 1f:54:77:30:4b:ba:e0:95:c1:35:6e:e2:02:f8:05:91:36:d1: 0a:a3:60:31:89:66:f3:f0:93:c9:08:95:a4:e6:06:ff:80:2b: cc:de:ce:82:dd:c8:cd:24:81:94:ae:31:25:69:08:e8:d1:b5: 30:c1:71:58:15:9e:da:35:95:ec:4e:05:04:a9:80:19:db:ee: 03:4b:66:7e:24:f4:95:da:3a:8c:dd:8f:f5:3d:4a:ee:84:54: 6f:1e:e6:8b:a0:e5:a1:eb:bb:d6:a1:af:a1:fb:f5:df:83:a0: 48:04:45:68:aa:cf:19:2e:4a:38:90:47:3e:96:ca:0c:59:52: c8:f2:c1:f0:4d:8f:a8:94:18:50:a7:45:54:da:06:a4:81:dc: 74:d8:9d:df:cc:23:64:90:d9:8b:27:e2:f6:f2:da:49:57:6b: 8e:e3:33:f1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Uw ODlENDYzQjYwNzc0MDkzMUE0MDc3Q0VCMzRDRDM1RDAzOTZCMzAeFw0yNTA5MDgw NDA1MTRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDUwRjFEQTE0QTY2NUZF MUMzQ0M4QkFBQ0QwMjE0MDkxRjEwM0FEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRosgQuOzd5DZwBdtXO3V+3EUFzYVf8eDY5QKISjmoQVAfDkr3 3ErCKhN3dp+EN7xFvr2QHVTcalqgs8CRp53lCyUZmBn7TnnxOsSYyDcHzgQCXmPv /l9kLFvxICZWZXrmmQ65mI1V0JcYvBQuC1MtS5Y5PmMUALV7TLWOQRfTYvvNFr08 GNgUPjY2piO/Cc+2lDBBfmqtkTGzLz0pel3OasKEN3+kQDxtrVKhDsrsEdGeMPEJ MMfCMXW3sbye4QYSCwvgmfyOtgT9Jhew2NoVqHb3Jj1dUILGTKBK5Uk5kNszdpwd 7AZ31vQ+E01YIYN0L2xYzOFZqK/KNLnwtPvTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUPHaFKZl/hw8yLqs0CFAkfEDrS8wHwYDVR0jBBgwFoAUfgidRjtgd0CTGkB3 zrNM010DlrMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Mi9mZ2lkUmp0Z2QwQ1RHa0IzenJOTTAxMERsck0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZnaWRSanRnZDBDVEdrQjN6ck5NMDEwRGxyTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDIvZmdpZFJqdGdkMENU R2tCM3pyTk0wMTBEbHJNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEjiNV4Qm4X3VAwt4rppQpPm96uNI+FbaAkKnt1IuBY+ZdISLdJYM44X0Bbs ZINAuIjggTVCKVdKNe/0ek3hAk1A62q47J8qMM4PH8iUAS+nbxkrvm+w8uElMh9U dzBLuuCVwTVu4gL4BZE20QqjYDGJZvPwk8kIlaTmBv+AK8zezoLdyM0kgZSuMSVp COjRtTDBcVgVnto1lexOBQSpgBnb7gNLZn4k9JXaOozdj/U9Su6EVG8e5oug5aHr u9ahr6H79d+DoEgERWiqzxkuSjiQRz6WygxZUsjywfBNj6iUGFCnRVTaBqSB3HTY nd/MI2SQ2Ysn4vby2klXa47jM/E= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:13 2025 by rpki-client