$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft File: q8wu6vrqrw1E480gBAmZ7T6LblY.mft (raw, json) Hash identifier: 4z4PMofAf3/4WIA+Q4r/62MBWM3WFdbfSkE14i/Ba98= Subject key identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D Authority key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Certificate issuer: /CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Certificate serial: 0204 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft Manifest number: 0202 Signing time: Mon 08 Sep 2025 04:04:13 +0000 Manifest this update: Mon 08 Sep 2025 04:04:13 +0000 Manifest next update: Mon 08 Sep 2025 10:04:13 +0000 Files and hashes: 1: k2fsIbftQRjCuaw8vM9IdWoUcpg.roa (hash: QUuqwryAn7tNC/7s8b5C6mc0fqcFuWn03lmSuHGpGJ8=) 2: q8wu6vrqrw1E480gBAmZ7T6LblY.crl (hash: qyBVtedHYoUi+flPO54mVgxz5gjMxkWpu5abhACl5FU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Validity Not Before: Sep 8 04:04:13 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=37625CC0E618E351120BD6539F60DC6CF0F3184D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:21:2a:f1:4f:0b:88:c5:c9:4f:f8:1f:dc: 8d:38:b9:6c:c0:8f:70:99:ab:ca:13:f6:42:5e:68: fa:88:53:a7:89:b6:0f:97:c4:5d:ee:f2:18:74:b1: fd:95:8f:d9:97:fd:ea:cb:91:04:c0:ad:8c:dd:8d: 85:f7:3f:c9:02:11:c2:69:5b:a4:58:7d:bd:b6:a7: 81:8a:27:43:70:c6:9e:ec:6c:e2:1b:a7:91:10:83: 4c:ee:19:3c:f2:4c:a6:35:dd:a3:0a:af:88:92:20: 0f:a5:d6:bb:1a:5a:ad:ac:0a:a8:48:f8:fd:99:5b: d8:d4:3c:8d:ec:b6:a7:d7:06:f5:67:f9:d4:c4:a2: df:91:6e:58:6b:e2:ef:b0:43:66:a6:1a:1f:97:ea: eb:f7:06:6f:f6:34:79:f9:b4:29:d7:20:0b:5e:d3: bc:74:28:0c:ef:74:d6:9e:20:66:1c:6b:57:4c:d4: 24:2c:aa:2d:f4:22:9c:15:af:1b:08:2f:4f:fb:44: cc:b6:0e:3a:0b:8b:2f:80:f5:75:95:86:39:ad:29: fd:0f:57:10:50:86:ba:17:82:66:84:60:b5:8b:3d: f8:35:9d:67:04:15:ed:ac:91:72:6e:79:b7:eb:af: 0f:56:6a:ec:90:39:f0:66:8e:7c:ab:5c:35:76:b5: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D X509v3 Authority Key Identifier: keyid:AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:38:d9:3f:12:f8:db:73:95:ea:0d:5c:c2:31:fb:2f:18:00: f8:e8:53:f2:22:04:14:1c:22:b5:cf:24:53:4c:96:bc:f0:4f: 1f:95:07:33:3d:8b:11:8b:1d:df:30:d6:ba:47:31:7f:04:07: ab:fa:33:9f:5a:5e:3c:4f:39:1e:88:18:70:f4:0c:ef:05:1b: ba:2e:0a:6a:73:3e:d4:e8:19:42:05:cf:7f:b2:de:e1:d1:c4: fb:28:6e:f9:6e:a6:46:fc:f9:38:07:b8:1a:da:c4:c2:ac:83: d8:7f:ce:d3:5d:f8:80:c3:c9:b4:b7:ec:9a:79:33:24:d5:ae: ce:8a:cc:e8:1d:71:b1:b4:41:a3:5a:af:b4:27:8f:b7:fe:cb: 85:4e:d0:d9:07:66:ce:e4:9f:30:0b:d3:ac:b4:4b:e8:4a:09: 37:53:9f:e0:01:8f:2f:4f:a7:0c:2c:de:54:37:ca:ba:c5:27: 90:00:2f:6b:83:cd:0c:2e:72:08:61:72:58:e4:90:8e:fa:37: 79:3f:2a:0c:75:3a:10:ee:18:43:fa:3b:dd:19:0b:43:2b:28: 31:ac:f5:2c:bb:02:9a:3d:9e:1a:47:e2:af:5f:02:42:53:aa: a8:f7:a8:3b:c4:07:94:3e:a6:9d:b8:08:b3:09:b4:e0:07:64: 34:b9:c3:62 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD QzJFRUFGQUVBQUYwRDQ0RTNDRDIwMDQwOTk5RUQzRThCNkU1NjAeFw0yNTA5MDgw NDA0MTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM3NjI1Q0MwRTYxOEUz NTExMjBCRDY1MzlGNjBEQzZDRjBGMzE4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdXSEq8U8LiMXJT/gf3I04uWzAj3CZq8oT9kJeaPqIU6eJtg+X xF3u8hh0sf2Vj9mX/erLkQTArYzdjYX3P8kCEcJpW6RYfb22p4GKJ0Nwxp7sbOIb p5EQg0zuGTzyTKY13aMKr4iSIA+l1rsaWq2sCqhI+P2ZW9jUPI3stqfXBvVn+dTE ot+Rblhr4u+wQ2amGh+X6uv3Bm/2NHn5tCnXIAte07x0KAzvdNaeIGYca1dM1CQs qi30IpwVrxsIL0/7RMy2DjoLiy+A9XWVhjmtKf0PVxBQhroXgmaEYLWLPfg1nWcE Fe2skXJuebfrrw9WauyQOfBmjnyrXDV2tTafAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUN2JcwOYY41ESC9ZTn2DcbPDzGE0wHwYDVR0jBBgwFoAUq8wu6vrqrw1E480g BAmZ7T6LblYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Ny9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3E4d3U2dnJxcncxRTQ4MGdCQW1aN1Q2TGJsWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTcvcTh3dTZ2cnFydzFF NDgwZ0JBbVo3VDZMYmxZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHI42T8S+NtzleoNXMIx+y8YAPjoU/IiBBQcIrXPJFNMlrzwTx+VBzM9ixGL Hd8w1rpHMX8EB6v6M59aXjxPOR6IGHD0DO8FG7ouCmpzPtToGUIFz3+y3uHRxPso bvlupkb8+TgHuBraxMKsg9h/ztNd+IDDybS37Jp5MyTVrs6KzOgdcbG0QaNar7Qn j7f+y4VO0NkHZs7knzAL06y0S+hKCTdTn+ABjy9Ppwws3lQ3yrrFJ5AAL2uDzQwu cghhcljkkI76N3k/Kgx1OhDuGEP6O90ZC0MrKDGs9Sy7Apo9nhpH4q9fAkJTqqj3 qDvEB5Q+pp24CLMJtOAHZDS5w2I= -----END CERTIFICATE-----Generated at Mon Sep 8 05:59:31 2025 by rpki-client