$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft File: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft (raw, json) Hash identifier: UwqvzAxmD5D2pfkVGhiY2B45WRJiHPx88+FpCW73R5g= Subject key identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 Authority key identifier: 3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA Certificate issuer: /CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Certificate serial: 0C5F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft Manifest number: 0C5F Signing time: Mon 08 Sep 2025 04:05:08 +0000 Manifest this update: Mon 08 Sep 2025 04:05:08 +0000 Manifest next update: Mon 08 Sep 2025 10:05:08 +0000 Files and hashes: 1: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl (hash: S1N5m9ijhR3akfB319dN4dg4U/PvibkZFy/X+C8gvgw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Validity Not Before: Sep 8 04:05:08 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=074D0AC2BAE811F7784C6BDE285A83A1EF259DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:6e:10:c5:a5:7f:48:a5:30:8d:d9:ff:92: 31:c7:f3:6f:c3:9d:87:43:8f:17:92:1a:0b:87:a4: 43:d8:0e:5b:24:2c:4a:38:51:ec:89:c8:49:67:de: 82:53:ee:cf:e4:25:36:e2:54:0a:be:24:0e:76:ef: 2e:ca:ba:ba:7a:f4:ff:8f:ae:f6:d5:6c:05:ae:4b: 50:2c:e3:0b:19:92:f3:29:c6:c6:91:d2:5f:03:77: e7:45:26:7f:b9:40:6e:ff:99:ab:7e:c1:7f:d0:ce: cd:e8:10:3d:57:31:c8:c9:d5:d6:5f:3f:98:44:b7: 08:d3:40:b9:ae:6c:31:22:77:c9:2d:2d:a3:6a:85: f8:ba:a1:bb:e2:15:e4:a5:a5:1c:fb:d9:09:63:11: 95:e5:43:0e:8f:68:79:ad:a8:0e:4a:2f:c5:be:02: 5d:22:fc:f3:8a:26:9a:24:52:de:83:52:02:a2:89: 58:ae:c3:eb:dd:64:a2:b8:bf:d3:94:98:da:20:8b: 84:4c:6d:7c:bf:6a:e1:62:af:a6:0d:85:69:8a:44: 15:cd:b3:3a:32:ee:df:ac:e9:eb:74:33:a5:2b:91: 25:40:77:44:08:1d:74:2d:1f:d9:5b:1e:51:bb:6f: 40:73:63:fb:88:5c:1f:8e:2d:aa:ab:12:d5:a6:41: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 X509v3 Authority Key Identifier: keyid:3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:66:ed:b3:1c:04:c0:b8:79:b9:ef:f3:16:18:ae:be:88:a5: 50:e9:08:9a:ed:91:1e:d6:73:c1:63:27:20:f4:3e:c4:a9:1c: da:a4:57:de:bb:f3:d6:c4:2f:ca:3a:df:61:cd:71:c2:cc:47: 49:9d:40:ab:b9:c1:5f:06:f7:fc:6e:bc:35:da:b3:68:db:25: 4a:36:8d:7b:5d:1f:2f:72:47:20:a4:dc:b9:29:f6:55:64:77: ff:95:7b:ad:98:8c:74:63:cc:16:2f:e0:ab:d7:dc:27:c1:bc: 64:7c:3c:e4:af:2b:b2:6e:70:dc:23:b5:74:29:e5:5a:f8:60: 4d:ea:5d:aa:73:19:25:94:b3:8e:67:45:fd:5b:d0:9b:e7:1d: 91:09:43:65:63:fb:5f:d4:41:60:08:5b:3e:05:40:dc:46:9a: 90:20:7d:3c:6c:9b:74:c8:d1:6c:14:f8:ac:cf:67:9b:80:79: f4:df:45:47:da:2c:8f:7d:08:04:71:b5:f1:06:04:fe:ff:c1: f4:32:f5:75:2b:dc:09:76:09:f8:77:da:3f:53:1f:7d:53:4c: 7a:19:75:50:d5:65:3a:d9:2b:31:6c:75:e6:8c:c0:86:07:a9: 7d:33:de:46:25:53:60:55:34:a9:59:c1:fe:07:0f:15:5c:e4: 87:0c:91:ec -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Mw OEVGRDU5ODA5QzE5RkExM0FGNDQ2NEYwNzRFRjJEODIzMEZCQTAeFw0yNTA5MDgw NDA1MDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA3NEQwQUMyQkFFODEx Rjc3ODRDNkJERTI4NUE4M0ExRUYyNTlERTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvP24QxaV/SKUwjdn/kjHH82/DnYdDjxeSGguHpEPYDlskLEo4 UeyJyEln3oJT7s/kJTbiVAq+JA527y7Kurp69P+PrvbVbAWuS1As4wsZkvMpxsaR 0l8Dd+dFJn+5QG7/mat+wX/Qzs3oED1XMcjJ1dZfP5hEtwjTQLmubDEid8ktLaNq hfi6obviFeSlpRz72QljEZXlQw6PaHmtqA5KL8W+Al0i/POKJpokUt6DUgKiiViu w+vdZKK4v9OUmNogi4RMbXy/auFir6YNhWmKRBXNszoy7t+s6et0M6UrkSVAd0QI HXQtH9lbHlG7b0BzY/uIXB+OLaqrEtWmQWnJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUB00KwrroEfd4TGveKFqDoe8lneMwHwYDVR0jBBgwFoAUPAjv1ZgJwZ+hOvRG TwdO8tgjD7owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Ny9QQWp2MVpnSndaLWhPdlJHVHdkTzh0Z2pEN28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1BBanYxWmdKd1otaE92UkdUd2RPOHRnakQ3by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDcvUEFqdjFaZ0p3Wi1o T3ZSR1R3ZE84dGdqRDdvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJpm7bMcBMC4ebnv8xYYrr6IpVDpCJrtkR7Wc8FjJyD0PsSpHNqkV96789bE L8o632HNccLMR0mdQKu5wV8G9/xuvDXas2jbJUo2jXtdHy9yRyCk3Lkp9lVkd/+V e62YjHRjzBYv4KvX3CfBvGR8POSvK7JucNwjtXQp5Vr4YE3qXapzGSWUs45nRf1b 0JvnHZEJQ2Vj+1/UQWAIWz4FQNxGmpAgfTxsm3TI0WwU+KzPZ5uAefTfRUfaLI99 CARxtfEGBP7/wfQy9XUr3Al2Cfh32j9TH31TTHoZdVDVZTrZKzFsdeaMwIYHqX0z 3kYlU2BVNKlZwf4HDxVc5IcMkew= -----END CERTIFICATE-----Generated at Mon Sep 8 06:00:21 2025 by rpki-client