$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft File: U8kE5DbkCUsscVNNs_Vzviozvjk.mft (raw, json) Hash identifier: HX7KTsgdE7UsXv1VvyhlmjH74jVPnyYn09XgZb6rMM4= Subject key identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 Authority key identifier: 53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 Certificate issuer: /CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Certificate serial: 08C1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft Manifest number: 08C1 Signing time: Mon 21 Jul 2025 22:41:50 +0000 Manifest this update: Mon 21 Jul 2025 22:41:50 +0000 Manifest next update: Tue 22 Jul 2025 04:41:50 +0000 Files and hashes: 1: U8kE5DbkCUsscVNNs_Vzviozvjk.crl (hash: PE1SehEPrCRq5mxmHAGfPcUvvY1idFmMoBYFIPKm80o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 04:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Validity Not Before: Jul 21 22:41:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CC485786D4ADBCDBFD1672905DD43CF845F24440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:58:66:c3:97:42:5c:cf:b5:79:44:d3:e4: 72:f0:d7:db:1b:f8:1b:67:1c:16:1b:5f:8c:e6:2e: 5f:ba:fc:6a:2a:74:3c:8a:c5:54:cd:c8:6a:08:3d: 16:e0:6d:dd:d0:6c:66:0f:60:b6:dc:f1:47:69:c0: 6e:15:28:f5:76:ee:8c:43:00:fd:97:f9:8b:a1:ce: e6:06:8d:cc:23:7f:f2:4c:33:0a:92:ec:57:52:5f: f0:51:ea:3b:4c:bb:9e:fb:27:0a:47:1e:91:31:df: 9f:e4:6e:a8:58:6b:ef:9c:7d:cb:71:ea:4e:5b:e4: aa:e2:7f:5f:da:d5:f6:64:71:80:44:b5:30:ef:2b: 9e:5b:bd:37:4b:5e:88:a7:91:98:f7:d5:a0:37:ef: 42:da:ca:cd:0d:2c:01:7c:9e:93:3b:e0:ab:27:de: 14:76:f2:bc:67:62:5b:12:a2:c7:d4:d4:26:b6:dc: bf:64:c8:0a:c3:14:07:39:82:fb:45:5b:9b:8b:d6: b3:9a:22:e2:03:d2:3c:19:19:70:1a:3e:7c:4a:12: 56:a1:0e:b9:53:5a:98:6c:eb:43:3a:c3:ef:b0:34: 22:84:aa:47:6f:a4:0b:18:53:15:a7:73:a3:17:57: d3:79:45:b7:28:98:6f:6e:cf:3f:86:bd:e7:39:f0: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 X509v3 Authority Key Identifier: keyid:53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:c5:08:2a:53:1a:6d:e6:8a:b0:5a:42:1c:f1:1d:88:f4:af: 4d:f9:f7:ed:55:be:b8:b6:75:a4:4d:08:62:0b:fa:30:8e:6f: c5:02:c2:18:be:9a:43:e0:80:9b:45:c6:0e:74:8f:45:e1:3a: d1:f6:47:25:db:cf:41:9b:5a:7a:63:a1:b1:9a:2a:59:07:22: 84:3c:d7:1c:f9:62:ca:b4:69:64:55:ed:b2:ce:c6:2a:80:72: 2e:81:76:28:b5:6b:e6:2f:18:9f:c6:7a:b3:ae:d1:c9:07:ef: e2:c3:38:69:e8:c0:04:22:ec:09:20:06:da:c8:b7:e4:da:79: 0d:6f:d9:f9:6c:1c:a6:08:38:32:c5:0e:0c:81:de:e5:5f:f2: 3c:0e:ec:87:68:63:50:bd:44:0e:e3:af:12:a6:42:c3:6d:28: 47:79:0f:9b:2c:44:c5:f0:a1:bd:01:0f:c4:5c:d7:f9:26:22: 58:ce:0e:45:ab:4c:9b:b9:93:fc:80:a0:ad:81:e2:46:63:bb: 7f:00:82:12:9f:ce:f8:9d:f4:2e:ad:46:48:61:39:85:45:fe: 00:58:61:34:32:db:b1:e3:44:99:c9:7f:4a:cc:8d:6b:f9:1d: 67:aa:f8:a3:29:60:0a:20:a4:99:c1:09:65:b5:b0:aa:43:3d: 77:fb:cb:50 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTND OTA0RTQzNkU0MDk0QjJDNzE1MzREQjNGNTczQkUyQTMzQkUzOTAeFw0yNTA3MjEy MjQxNTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENDNDg1Nzg2RDRBREJD REJGRDE2NzI5MDVERDQzQ0Y4NDVGMjQ0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGWlhmw5dCXM+1eUTT5HLw19sb+BtnHBYbX4zmLl+6/GoqdDyK xVTNyGoIPRbgbd3QbGYPYLbc8UdpwG4VKPV27oxDAP2X+YuhzuYGjcwjf/JMMwqS 7FdSX/BR6jtMu577JwpHHpEx35/kbqhYa++cfctx6k5b5Krif1/a1fZkcYBEtTDv K55bvTdLXoinkZj31aA370Lays0NLAF8npM74Ksn3hR28rxnYlsSosfU1Ca23L9k yArDFAc5gvtFW5uL1rOaIuID0jwZGXAaPnxKElahDrlTWphs60M6w++wNCKEqkdv pAsYUxWnc6MXV9N5RbcomG9uzz+Gvec58OZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzEhXhtStvNv9FnKQXdQ8+EXyREAwHwYDVR0jBBgwFoAUU8kE5DbkCUsscVNN s/VzviozvjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OC9VOGtFNURia0NVc3NjVk5Oc19WenZpb3p2amsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1U4a0U1RGJrQ1Vzc2NWTk5zX1Z6dmlvenZqay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzgvVThrRTVEYmtDVXNz Y1ZOTnNfVnp2aW96dmprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALTFCCpTGm3mirBaQhzxHYj0r0359+1Vvri2daRNCGIL+jCOb8UCwhi+mkPg gJtFxg50j0XhOtH2RyXbz0GbWnpjobGaKlkHIoQ81xz5Ysq0aWRV7bLOxiqAci6B dii1a+YvGJ/GerOu0ckH7+LDOGnowAQi7AkgBtrIt+TaeQ1v2flsHKYIODLFDgyB 3uVf8jwO7IdoY1C9RA7jrxKmQsNtKEd5D5ssRMXwob0BD8Rc1/kmIljODkWrTJu5 k/yAoK2B4kZju38AghKfzvid9C6tRkhhOYVF/gBYYTQy27HjRJnJf0rMjWv5HWeq +KMpYAogpJnBCWW1sKpDPXf7y1A= -----END CERTIFICATE-----Generated at Tue Jul 22 02:36:07 2025 by rpki-client