$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft File: c_jFHpB2aR787kYX7QQw9Xy8gB0.mft (raw, json) Hash identifier: syyT0VFSQ9XEBa2x/ED0nwlLfgXhZAvDMolfEEhYsOM= Subject key identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 Authority key identifier: 73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D Certificate issuer: /CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Certificate serial: 0972 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft Manifest number: 0972 Signing time: Mon 08 Sep 2025 03:02:53 +0000 Manifest this update: Mon 08 Sep 2025 03:02:53 +0000 Manifest next update: Mon 08 Sep 2025 09:02:53 +0000 Files and hashes: 1: c_jFHpB2aR787kYX7QQw9Xy8gB0.crl (hash: NmdILNVGwKEcxxrPZqeOZRQRo458EpeIb96lAdf4nAg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Validity Not Before: Sep 8 03:02:53 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1A96673E80786404FE296B91E5825FA196604F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:78:3d:60:00:57:d1:46:10:20:61:9e:95: b0:49:1e:0d:5c:52:0b:c8:7a:1c:81:d0:ed:72:56: ee:19:51:41:e0:24:b0:4d:06:1a:5d:3b:2c:8c:fb: 3d:11:d0:0c:29:ef:27:77:69:b8:2b:11:aa:83:4a: a1:2b:ad:60:3b:f0:c1:4b:77:9c:38:cb:c6:39:9d: 80:df:69:73:ae:95:5e:ba:25:2d:b2:5d:27:67:74: 3a:d9:ec:52:fe:af:0b:9c:5f:9b:dd:00:ca:95:5d: dc:5f:ad:55:3a:07:58:79:a2:39:2e:61:35:3b:80: 69:6c:60:58:d7:6a:11:2a:5e:86:a3:c5:1d:e6:08: 09:f7:5e:cb:6c:37:a0:c7:db:43:07:8e:40:b0:f5: af:5d:89:94:f4:99:d8:ad:a3:4f:e6:94:9a:6d:36: 71:00:29:8e:2e:a4:3b:3e:04:a7:9f:57:16:e8:0b: 4a:6d:56:61:3f:85:74:d0:1a:4d:75:87:34:24:81: 3d:82:dc:41:54:70:cb:fa:58:69:2d:c9:fd:b4:94: 06:71:fe:be:99:8e:74:40:10:ab:98:00:cb:83:d9: 23:24:b9:23:b9:51:d8:51:6c:fd:14:59:7b:a4:37: 2a:54:8d:96:54:08:95:f7:8b:75:9e:40:9f:eb:5a: 8b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 X509v3 Authority Key Identifier: keyid:73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c1:0b:1f:b1:0c:27:fd:67:24:53:2e:09:01:ad:b3:ac:2b: 55:b2:8f:ac:11:81:3f:46:9f:97:81:7b:5b:de:95:2c:b7:84: 24:a6:75:51:8e:8a:e9:23:94:e1:57:e6:cd:5b:34:44:3d:54: d8:d5:c2:86:8a:55:c3:9d:33:ed:3e:3b:fc:46:b1:63:c5:8c: cb:36:a4:e5:05:6a:dd:23:2e:1c:c1:af:b3:2d:33:70:df:7f: d7:e6:bf:0c:d5:df:b1:7a:b9:a1:c6:9a:06:8e:0b:5d:4e:c8: 14:90:2d:78:a1:09:99:84:4a:79:7b:ac:ae:ba:f9:e5:a3:59: 19:27:0c:ee:96:2f:a7:19:17:49:61:92:58:c1:e7:97:3e:29: c2:59:33:90:ad:b3:45:15:12:38:53:54:56:bd:a0:11:57:51: f8:5a:46:a0:a4:89:cd:b6:1b:e1:09:37:b0:c3:cc:25:66:c9: 55:81:20:dc:9f:d1:6b:a9:69:52:90:67:46:80:68:70:64:43: 45:9e:bc:df:2e:34:01:4c:1c:34:97:85:fa:5f:89:4e:40:a2: 0c:25:e3:97:49:38:21:73:17:25:5d:e4:22:3d:89:58:93:2b: 8f:97:d5:88:f4:f3:f6:73:6a:34:1d:ba:04:2f:7f:ad:da:07: c6:6b:d8:5c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNG OEM1MUU5MDc2NjkxRUZDRUU0NjE3RUQwNDMwRjU3Q0JDODAxRDAeFw0yNTA5MDgw MzAyNTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFBOTY2NzNFODA3ODY0 MDRGRTI5NkI5MUU1ODI1RkExOTY2MDRGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIGng9YABX0UYQIGGelbBJHg1cUgvIehyB0O1yVu4ZUUHgJLBN BhpdOyyM+z0R0Awp7yd3abgrEaqDSqErrWA78MFLd5w4y8Y5nYDfaXOulV66JS2y XSdndDrZ7FL+rwucX5vdAMqVXdxfrVU6B1h5ojkuYTU7gGlsYFjXahEqXoajxR3m CAn3XstsN6DH20MHjkCw9a9diZT0mdito0/mlJptNnEAKY4upDs+BKefVxboC0pt VmE/hXTQGk11hzQkgT2C3EFUcMv6WGktyf20lAZx/r6ZjnRAEKuYAMuD2SMkuSO5 UdhRbP0UWXukNypUjZZUCJX3i3WeQJ/rWourAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGpZnPoB4ZAT+KWuR5YJfoZZgTxcwHwYDVR0jBBgwFoAUc/jFHpB2aR787kYX 7QQw9Xy8gB0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 MS9jX2pGSHBCMmFSNzg3a1lYN1FRdzlYeThnQjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NfakZIcEIyYVI3ODdrWVg3UVF3OVh5OGdCMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODEvY19qRkhwQjJhUjc4 N2tZWDdRUXc5WHk4Z0IwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACrBCx+xDCf9ZyRTLgkBrbOsK1Wyj6wRgT9Gn5eBe1velSy3hCSmdVGOiukj lOFX5s1bNEQ9VNjVwoaKVcOdM+0+O/xGsWPFjMs2pOUFat0jLhzBr7MtM3Dff9fm vwzV37F6uaHGmgaOC11OyBSQLXihCZmESnl7rK66+eWjWRknDO6WL6cZF0lhkljB 55c+KcJZM5Cts0UVEjhTVFa9oBFXUfhaRqCkic22G+EJN7DDzCVmyVWBINyf0Wup aVKQZ0aAaHBkQ0WevN8uNAFMHDSXhfpfiU5Aogwl45dJOCFzFyVd5CI9iViTK4+X 1Yj08/ZzajQdugQvf63aB8Zr2Fw= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:22 2025 by rpki-client