$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft File: fCewZFm5zh-8LzSJoPxnKF1942A.mft (raw, json) Hash identifier: yRIcceAF7baFBqENvqU+cK7NRF3Un9Exnw3ouX1q9ew= Subject key identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A Authority key identifier: 7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 Certificate issuer: /CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Certificate serial: 0881 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft Manifest number: 0881 Signing time: Sun 07 Sep 2025 16:02:16 +0000 Manifest this update: Sun 07 Sep 2025 16:02:16 +0000 Manifest next update: Sun 07 Sep 2025 22:02:16 +0000 Files and hashes: 1: fCewZFm5zh-8LzSJoPxnKF1942A.crl (hash: Ywjyhtg3sK9jj7lZdv6e7nzTH8/d6ab3G5EXoxpJnCU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 22:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Validity Not Before: Sep 7 16:02:16 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7001E5871E36F731E219A480CB7C61ADFD6CCD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:90:72:05:4e:a9:49:22:a5:80:29:93:b0: a0:68:a4:6f:df:bc:f8:b7:18:cf:00:01:5d:6a:82: 16:ae:f1:d2:95:e9:79:77:92:df:fc:8f:a9:12:04: 91:60:3a:ae:f4:81:f0:ee:0d:7a:d7:48:ae:56:43: 6c:7b:d7:51:d2:cd:c3:33:43:40:31:37:67:18:9a: 17:d2:1b:e1:bc:6d:f4:29:08:8c:be:cc:52:60:96: cc:7f:f4:a8:c0:cf:6a:8a:b6:b4:7d:b2:9f:4a:fe: 0d:53:1c:b8:e8:80:ee:62:62:04:b6:12:bf:89:af: ec:3f:ea:0c:fb:a5:38:bf:af:ca:f3:b7:1a:8b:a3: 0c:67:1d:27:d8:9f:9f:3f:5a:4f:50:cd:db:4a:47: d0:c6:a6:05:b4:95:e1:a9:5b:55:04:d6:a8:da:d5: ab:9e:fd:71:ab:58:ad:8e:ee:29:13:d2:7d:1f:22: 61:78:9d:bf:d7:34:5a:0f:ef:31:8c:df:47:1d:eb: d7:bc:4f:03:d9:18:3d:a4:bd:b4:66:a4:b8:33:f9: da:79:4d:75:f4:d3:40:6e:6d:1a:26:f5:71:fc:8d: 7d:8e:26:ca:a8:bc:39:5a:40:1f:34:da:79:c1:61: 87:0d:8d:1f:f7:d3:f2:06:8b:4b:90:5a:c6:53:75: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A X509v3 Authority Key Identifier: keyid:7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:66:21:41:cf:07:cf:c1:e4:fb:6a:c8:95:1b:6b:4f:84:2c: 3b:ef:3e:fe:10:ac:93:cc:03:cb:5b:9a:d5:24:82:9d:0c:6d: 6b:90:d4:5f:71:8a:2e:12:20:ec:2e:ce:b0:55:2f:e6:ce:02: 83:01:0c:72:e7:9d:72:e3:96:fa:a9:ae:1b:5c:1f:b5:59:9a: 50:5c:9e:da:65:11:db:6e:f7:05:c0:49:ad:e9:44:b2:64:ec: 0b:f2:8b:82:22:4e:cb:71:ae:25:30:5d:4e:a4:db:0c:52:ae: 16:09:d1:7d:d5:2f:3b:09:d3:5c:f0:66:7d:28:1c:b7:11:89: ad:45:f6:ad:12:ff:f0:9f:f0:08:e6:91:94:01:f2:57:9b:c7: aa:cd:03:4e:a6:e2:3e:da:cd:1c:73:3d:4c:8e:76:86:5c:9a: 0b:7e:98:fe:21:f0:98:0a:1f:a7:3c:23:b3:11:a8:e1:0d:43: f2:c6:37:2e:1a:c0:0d:ee:8a:18:99:b4:c2:91:f2:77:fb:3b: bb:a8:5a:b3:40:ba:4d:3b:57:e7:0f:53:ef:e8:cc:66:d8:d3: a2:35:6f:d7:83:8d:73:ef:9c:3e:2d:3a:c3:17:29:c9:3a:58: 6a:0d:e1:04:0d:01:9a:c5:34:88:e3:97:ae:6d:61:b7:75:b7: 55:11:81:2d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0My N0IwNjQ1OUI5Q0UxRkJDMkYzNDg5QTBGQzY3Mjg1RDdERTM2MDAeFw0yNTA5MDcx NjAyMTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDcwMDFFNTg3MUUzNkY3 MzFFMjE5QTQ4MENCN0M2MUFERkQ2Q0NENkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFgJByBU6pSSKlgCmTsKBopG/fvPi3GM8AAV1qghau8dKV6Xl3 kt/8j6kSBJFgOq70gfDuDXrXSK5WQ2x711HSzcMzQ0AxN2cYmhfSG+G8bfQpCIy+ zFJglsx/9KjAz2qKtrR9sp9K/g1THLjogO5iYgS2Er+Jr+w/6gz7pTi/r8rztxqL owxnHSfYn58/Wk9QzdtKR9DGpgW0leGpW1UE1qja1aue/XGrWK2O7ikT0n0fImF4 nb/XNFoP7zGM30cd69e8TwPZGD2kvbRmpLgz+dp5TXX000BubRom9XH8jX2OJsqo vDlaQB802nnBYYcNjR/30/IGi0uQWsZTdRtXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcAHlhx429zHiGaSAy3xhrf1szWowHwYDVR0jBBgwFoAUfCewZFm5zh+8LzSJ oPxnKF1942AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 OC9mQ2V3WkZtNXpoLThMelNKb1B4bktGMTk0MkEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZDZXdaRm01emgtOEx6U0pvUHhuS0YxOTQyQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTgvZkNld1pGbTV6aC04 THpTSm9QeG5LRjE5NDJBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABRmIUHPB8/B5PtqyJUba0+ELDvvPv4QrJPMA8tbmtUkgp0MbWuQ1F9xii4S IOwuzrBVL+bOAoMBDHLnnXLjlvqprhtcH7VZmlBcntplEdtu9wXASa3pRLJk7Avy i4IiTstxriUwXU6k2wxSrhYJ0X3VLzsJ01zwZn0oHLcRia1F9q0S//Cf8AjmkZQB 8lebx6rNA06m4j7azRxzPUyOdoZcmgt+mP4h8JgKH6c8I7MRqOENQ/LGNy4awA3u ihiZtMKR8nf7O7uoWrNAuk07V+cPU+/ozGbY06I1b9eDjXPvnD4tOsMXKck6WGoN 4QQNAZrFNIjjl65tYbd1t1URgS0= -----END CERTIFICATE-----Generated at Sun Sep 7 20:10:59 2025 by rpki-client