$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft File: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft (raw, json) Hash identifier: oJ6w5tZHqETFOvA/6oVxOvN1gXZTlxUEhDWrqUBfuSU= Subject key identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 Authority key identifier: 6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB Certificate issuer: /CN=6FE13AA555489412B2892267A49DAEC44693A6AB Certificate serial: 0B41 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft Manifest number: 0B41 Signing time: Sun 07 Sep 2025 18:03:35 +0000 Manifest this update: Sun 07 Sep 2025 18:03:35 +0000 Manifest next update: Mon 08 Sep 2025 00:03:35 +0000 Files and hashes: 1: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl (hash: f8x1Q6j4kLtbO5BONW1UoFGfY1XE0G5b+g0lVXne4oc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FE13AA555489412B2892267A49DAEC44693A6AB Validity Not Before: Sep 7 18:03:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=62AED79DED1AD2E1327501BE06B5E7C5A4F1CFD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:e8:18:68:cb:77:75:de:fd:11:52:33:a7: 9f:bb:ca:56:d9:e1:7e:e1:c3:f3:97:1d:8b:73:fc: 24:6b:ef:6e:8a:6a:05:0a:ca:70:b2:2c:3f:11:a7: e0:ac:8f:4d:5c:35:6e:43:ad:b1:96:82:1d:ba:d2: f5:bf:03:36:d4:13:60:6a:a0:87:09:71:95:f6:77: bc:6c:18:00:80:72:7c:31:ef:9c:03:50:2e:32:d5: 95:b0:a7:67:9e:b1:a5:01:b7:7d:c7:e9:bd:1c:0b: f9:0c:b5:7f:e1:e7:b7:a7:a6:75:04:5c:1b:ea:eb: 14:9d:f6:88:22:d1:a8:d9:5e:56:82:a5:a3:29:12: 80:7d:8a:ea:26:7f:e4:76:dc:52:06:84:d8:87:6e: f6:70:92:e9:cb:23:95:a1:4c:36:1c:b7:70:96:85: 1f:78:08:87:dc:d4:cf:87:09:a1:a7:5e:b7:ba:c6: 6c:93:77:3f:50:76:fe:f0:5c:b5:27:75:1a:bb:52: 77:63:9c:70:ed:47:b5:a5:d3:cb:f2:6c:69:9a:2d: 5f:b2:62:4c:5e:e7:5b:4a:a3:44:7b:f8:e3:b4:3a: 23:f3:46:6e:c5:92:91:43:1a:0f:f0:39:00:d5:72: 40:e0:9c:0a:3f:9b:1b:a7:ee:28:f8:34:45:f7:31: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 X509v3 Authority Key Identifier: keyid:6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:02:82:64:f5:4f:96:b0:ff:ff:a2:bf:20:22:81:59:ee:7b: bc:ea:6a:8f:14:8e:e9:5d:9c:a5:9c:96:83:51:a2:25:3e:29: 76:f5:2c:45:80:5c:8a:a2:36:b2:6e:6d:68:fa:0e:a2:8f:91: ae:f3:70:cf:47:c6:9e:fe:cf:6d:db:22:83:2c:35:0c:e1:cd: 0c:e7:12:e4:55:e7:8c:ad:66:14:7c:11:90:fa:e0:b1:a6:2d: 12:18:a1:98:34:5d:5b:38:d2:f3:3c:96:1d:f3:47:0b:42:39: ce:42:b9:0f:4a:d0:77:bd:e1:13:76:88:81:1b:9e:e4:16:49: 0d:4f:d0:94:50:f3:4e:b1:70:d8:d0:9d:e9:dd:d5:42:27:7c: 1d:14:4b:63:d8:e6:6f:a4:e0:1c:65:7b:74:1f:05:70:d3:ba: 2f:32:ef:3a:51:7f:94:e6:3f:87:1f:93:d9:02:8c:d0:1d:fa: 39:0f:be:d9:0f:88:05:32:8f:77:06:0d:c6:1e:e3:83:e5:a5: 33:36:1e:7f:16:8f:70:b9:50:bb:86:0a:74:d4:41:9e:52:9c: da:96:79:4d:64:fb:86:b5:1c:95:b1:0e:f7:aa:31:40:51:1c: 7d:63:7a:1d:46:cb:55:4f:e9:24:c7:cd:da:8e:98:59:84:f7: a0:52:89:16 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZF MTNBQTU1NTQ4OTQxMkIyODkyMjY3QTQ5REFFQzQ0NjkzQTZBQjAeFw0yNTA5MDcx ODAzMzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYyQUVENzlERUQxQUQy RTEzMjc1MDFCRTA2QjVFN0M1QTRGMUNGRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS7+gYaMt3dd79EVIzp5+7ylbZ4X7hw/OXHYtz/CRr726KagUK ynCyLD8Rp+Csj01cNW5DrbGWgh260vW/AzbUE2BqoIcJcZX2d7xsGACAcnwx75wD UC4y1ZWwp2eesaUBt33H6b0cC/kMtX/h57enpnUEXBvq6xSd9ogi0ajZXlaCpaMp EoB9iuomf+R23FIGhNiHbvZwkunLI5WhTDYct3CWhR94CIfc1M+HCaGnXre6xmyT dz9Qdv7wXLUndRq7UndjnHDtR7Wl08vybGmaLV+yYkxe51tKo0R7+OO0OiPzRm7F kpFDGg/wOQDVckDgnAo/mxun7ij4NEX3MRT/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUYq7Xne0a0uEydQG+BrXnxaTxz9kwHwYDVR0jBBgwFoAUb+E6pVVIlBKyiSJn pJ2uxEaTpqswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni9iLUU2cFZWSWxCS3lpU0pucEoydXhFYVRwcXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ItRTZwVlZJbEJLeWlTSm5wSjJ1eEVhVHBxcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvYi1FNnBWVklsQkt5 aVNKbnBKMnV4RWFUcHFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFMCgmT1T5aw//+ivyAigVnue7zqao8UjuldnKWcloNRoiU+KXb1LEWAXIqi NrJubWj6DqKPka7zcM9Hxp7+z23bIoMsNQzhzQznEuRV54ytZhR8EZD64LGmLRIY oZg0XVs40vM8lh3zRwtCOc5CuQ9K0He94RN2iIEbnuQWSQ1P0JRQ806xcNjQnend 1UInfB0US2PY5m+k4Bxle3QfBXDTui8y7zpRf5TmP4cfk9kCjNAd+jkPvtkPiAUy j3cGDcYe44PlpTM2Hn8Wj3C5ULuGCnTUQZ5SnNqWeU1k+4a1HJWxDveqMUBRHH1j eh1Gy1VP6STHzdqOmFmE96BSiRY= -----END CERTIFICATE-----Generated at Sun Sep 7 20:09:45 2025 by rpki-client