$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft File: gZQTSW-NG4qcKpMSrCzZAljzOwY.mft (raw, json) Hash identifier: a6UMlTsX8XPyxIxJ25uSGzq0HX9lrrBvfF9OBKtPAoI= Subject key identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 Authority key identifier: 81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 Certificate issuer: /CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Certificate serial: 09F8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft Manifest number: 09F8 Signing time: Sun 07 Sep 2025 15:02:44 +0000 Manifest this update: Sun 07 Sep 2025 15:02:44 +0000 Manifest next update: Sun 07 Sep 2025 21:02:44 +0000 Files and hashes: 1: gZQTSW-NG4qcKpMSrCzZAljzOwY.crl (hash: pzz0Ab4AHi0FsBGeQDelVWT5ot0fwZgVeG44LiBcY9s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 21:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2552 (0x9f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Validity Not Before: Sep 7 15:02:44 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F2C73B6A70D55B1DCC1B9C1A49EC30072DE52F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:33:cf:4b:fb:56:6e:ed:e3:50:6f:3b:53: 3c:bb:0b:40:dc:1c:90:08:49:23:e6:ce:50:45:7f: ff:23:c6:2b:58:ae:5a:0d:3f:47:dc:5b:8c:4d:93: 7f:6c:19:c2:d5:1d:d8:79:2f:45:20:67:86:c3:cd: 9b:f5:0a:27:d9:8d:82:23:4a:de:4e:47:39:e1:80: 00:72:05:d9:18:64:98:cc:e7:39:03:f7:38:e4:b6: 0f:6d:6a:f5:25:bb:2a:ac:d6:c1:4c:dc:fa:14:ee: 12:68:09:3b:35:e1:99:1d:35:c7:92:c8:ab:6a:f0: c1:2d:c0:74:9e:3e:15:69:5a:6a:f5:4c:82:49:70: 62:73:b4:80:d7:d7:1d:62:b5:e6:cc:a0:fb:fb:60: 9f:de:64:cf:d0:57:c7:c2:a9:ee:1f:1e:0c:16:23: d3:91:cc:14:eb:63:79:5c:ef:a5:bf:96:dc:2d:e4: 0a:2c:fa:06:44:e2:95:9b:2e:f2:8e:c0:7e:54:88: 49:ce:58:b5:b5:35:72:e6:a2:a7:7c:e4:ae:2f:4b: 9e:ff:e4:44:0e:d7:1f:8d:77:f2:f1:b8:87:a1:f4: 8e:b9:ae:07:8f:e5:cc:b5:d3:ed:e0:dd:0d:21:1f: 20:c3:2b:cc:10:4e:d6:78:68:65:14:62:a3:d0:c5: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 X509v3 Authority Key Identifier: keyid:81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f7:e6:c6:24:af:ab:d4:9f:23:a8:8f:ab:c7:63:af:9e:82: 16:3d:49:ff:0c:3c:b7:64:3d:60:e4:aa:dc:5b:68:8c:f8:14: 43:58:12:dc:8d:b5:3d:06:7c:8a:a1:fa:5c:9e:41:5c:69:8f: b8:42:b1:f3:80:43:a6:91:87:b9:ab:80:31:66:24:7e:7c:ea: 6e:d7:b7:1b:14:98:a7:bb:5c:4c:0c:2b:c0:7a:f3:21:d9:5b: 95:19:3c:70:9a:43:c4:2d:09:ca:3f:3d:e1:b5:4f:52:54:4c: 44:ba:d5:e5:b9:3d:07:6c:97:14:10:03:88:a6:4d:68:f7:76: d0:8a:a6:a0:00:ca:2c:23:47:49:08:3e:66:50:ef:cb:3c:76: 62:8d:b4:3f:f8:b4:75:a1:90:b9:59:77:50:6b:f7:af:66:1a: 42:da:81:8a:89:94:d8:8e:e5:7d:a5:ac:25:0c:8c:ce:f7:ce: 67:7f:41:6a:1f:c2:4f:1c:51:49:0c:98:0b:e1:56:77:75:c3: ad:d8:d4:71:d9:af:d4:b3:24:fe:33:6b:31:f6:ae:e3:25:06: 65:4e:e2:a1:55:3b:ac:12:30:20:b8:86:85:35:34:aa:ad:de: 4d:aa:4d:0f:98:2c:c8:ba:e8:69:24:79:71:4d:07:19:61:58: 95:16:25:b5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODE5 NDEzNDk2RjhEMUI4QTlDMkE5MzEyQUMyQ0Q5MDI1OEYzM0IwNjAeFw0yNTA5MDcx NTAyNDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEYyQzczQjZBNzBENTVC MURDQzFCOUMxQTQ5RUMzMDA3MkRFNTJGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNFzPPS/tWbu3jUG87Uzy7C0DcHJAISSPmzlBFf/8jxitYrloN P0fcW4xNk39sGcLVHdh5L0UgZ4bDzZv1CifZjYIjSt5ORznhgAByBdkYZJjM5zkD 9zjktg9tavUluyqs1sFM3PoU7hJoCTs14ZkdNceSyKtq8MEtwHSePhVpWmr1TIJJ cGJztIDX1x1itebMoPv7YJ/eZM/QV8fCqe4fHgwWI9ORzBTrY3lc76W/ltwt5Aos +gZE4pWbLvKOwH5UiEnOWLW1NXLmoqd85K4vS57/5EQO1x+Nd/LxuIeh9I65rgeP 5cy10+3g3Q0hHyDDK8wQTtZ4aGUUYqPQxebtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8sc7anDVWx3MG5waSewwBy3lL1EwHwYDVR0jBBgwFoAUgZQTSW+NG4qcKpMS rCzZAljzOwYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 NC9nWlFUU1ctTkc0cWNLcE1TckN6WkFsanpPd1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2daUVRTVy1ORzRxY0twTVNyQ3paQWxqek93WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzQvZ1pRVFNXLU5HNHFj S3BNU3JDelpBbGp6T3dZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGP35sYkr6vUnyOoj6vHY6+eghY9Sf8MPLdkPWDkqtxbaIz4FENYEtyNtT0G fIqh+lyeQVxpj7hCsfOAQ6aRh7mrgDFmJH586m7XtxsUmKe7XEwMK8B68yHZW5UZ PHCaQ8QtCco/PeG1T1JUTES61eW5PQdslxQQA4imTWj3dtCKpqAAyiwjR0kIPmZQ 78s8dmKNtD/4tHWhkLlZd1Br969mGkLagYqJlNiO5X2lrCUMjM73zmd/QWofwk8c UUkMmAvhVnd1w63Y1HHZr9SzJP4zazH2ruMlBmVO4qFVO6wSMCC4hoU1NKqt3k2q TQ+YLMi66GkkeXFNBxlhWJUWJbU= -----END CERTIFICATE-----Generated at Sun Sep 7 20:13:19 2025 by rpki-client