$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft File: kEgXQ3MJLmD9IX-_HSOR79WjObw.mft (raw, json) Hash identifier: 9uA2Z7p0HjNPf3H+rbxgDFdZJilCiJaeulZ+V6W3Zd8= Subject key identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F Authority key identifier: 90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC Certificate issuer: /CN=9048174373092E60FD217FBF1D2391EFD5A339BC Certificate serial: 066A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft Manifest number: 066A Signing time: Mon 08 Sep 2025 04:07:11 +0000 Manifest this update: Mon 08 Sep 2025 04:07:11 +0000 Manifest next update: Mon 08 Sep 2025 10:07:11 +0000 Files and hashes: 1: kEgXQ3MJLmD9IX-_HSOR79WjObw.crl (hash: 6bkoWI8HjYVuqZ3jnYWOnp1BDw070WBgH7lYkjrMsmk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9048174373092E60FD217FBF1D2391EFD5A339BC Validity Not Before: Sep 8 04:07:11 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=30337587DFE9C72743A1F630DB98C1A2C739259F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:ba:ed:85:29:cf:39:2a:e0:6f:d7:56:94: bb:25:1a:e8:39:74:40:39:fb:bd:da:af:13:2d:47: 33:f5:50:8d:d9:25:74:61:57:c8:7c:b5:ee:77:75: 26:19:fd:e8:c5:50:0f:30:90:42:9c:a0:85:78:91: 78:2c:e5:db:df:3f:7f:a2:1b:7d:eb:71:8b:82:65: 21:4d:df:57:ca:76:30:ba:09:8f:52:2e:d9:70:db: e1:e2:52:6d:08:c4:16:f9:d1:ce:40:da:8c:e2:cd: ee:58:d3:68:a5:ba:4b:c3:92:3c:72:03:94:92:b4: 6f:ac:4b:ad:6b:05:88:ad:f4:a3:8a:42:62:5e:fb: 8a:c6:3c:51:aa:e4:d4:cd:a0:c0:48:62:ea:8d:0d: 22:a2:86:63:e3:1a:a0:83:f8:67:df:e1:1d:f6:99: b7:48:e6:07:d0:b2:58:a8:29:64:45:16:c4:ff:6b: 9e:3a:e2:25:f4:b4:8e:99:2f:fd:00:cc:05:a7:cd: 8c:a5:53:8a:ab:99:bc:93:65:99:bf:c7:2d:32:a2: 29:b4:12:82:3a:64:d8:8a:1a:4f:a2:37:90:cc:9c: 24:88:59:14:a3:b7:de:d3:4e:f5:0b:a2:e2:6b:ca: 93:65:10:e2:86:a5:71:56:fa:77:78:7b:19:cc:a1: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F X509v3 Authority Key Identifier: keyid:90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:2f:14:e7:10:6c:fc:3a:f4:01:27:08:8f:a8:fd:1d:33:60: e6:ad:02:62:23:10:9d:a1:0a:2b:5c:e5:92:db:e0:da:2e:a0: 72:84:05:fc:0a:57:c2:55:a2:57:d3:83:8e:54:30:cc:4a:3b: f6:2e:be:5e:69:e5:34:99:6e:1e:ef:d1:13:db:62:b6:84:03: d1:a9:bc:3a:46:9e:0b:1c:c3:21:43:0d:eb:8a:bf:16:6b:97: 96:c7:a9:84:b6:05:0a:3a:ac:1b:de:6f:6b:1b:56:02:ca:ca: 33:5c:fd:41:20:12:0c:ce:f4:42:31:ec:f9:fa:d6:74:7b:79: 9b:43:7c:f4:dd:9d:c5:55:cd:f0:39:28:a2:2f:4b:74:4d:b9: b5:62:18:18:58:fb:d3:fa:7c:06:e9:56:1a:92:be:d1:87:36: 9b:0d:7a:dd:27:37:33:f4:b4:0f:7f:3e:0f:e0:48:ba:db:ee: 61:6b:3c:02:bd:f6:4b:b0:52:ae:29:76:7f:ea:84:ca:d8:2d: 8b:de:15:10:aa:93:6b:5e:5c:7e:2c:24:52:99:f4:b3:4c:a6: 08:af:a4:38:10:46:a3:be:86:83:30:d2:e9:48:94:84:69:83: 3c:71:a5:46:dd:a6:38:b6:39:b9:63:bf:51:8e:b5:ec:4f:33: 8b:b5:4d:98 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTA0 ODE3NDM3MzA5MkU2MEZEMjE3RkJGMUQyMzkxRUZENUEzMzlCQzAeFw0yNTA5MDgw NDA3MTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDMwMzM3NTg3REZFOUM3 Mjc0M0ExRjYzMERCOThDMUEyQzczOTI1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMUrrthSnPOSrgb9dWlLslGug5dEA5+73arxMtRzP1UI3ZJXRh V8h8te53dSYZ/ejFUA8wkEKcoIV4kXgs5dvfP3+iG33rcYuCZSFN31fKdjC6CY9S Ltlw2+HiUm0IxBb50c5A2ozize5Y02ilukvDkjxyA5SStG+sS61rBYit9KOKQmJe +4rGPFGq5NTNoMBIYuqNDSKihmPjGqCD+Gff4R32mbdI5gfQslioKWRFFsT/a546 4iX0tI6ZL/0AzAWnzYylU4qrmbyTZZm/xy0yoim0EoI6ZNiKGk+iN5DMnCSIWRSj t97TTvULouJrypNlEOKGpXFW+nd4exnMoZF1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMDN1h9/pxydDofYw25jBosc5JZ8wHwYDVR0jBBgwFoAUkEgXQ3MJLmD9IX+/ HSOR79WjObwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy MC9rRWdYUTNNSkxtRDlJWC1fSFNPUjc5V2pPYncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tFZ1hRM01KTG1EOUlYLV9IU09SNzlXak9idy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjAva0VnWFEzTUpMbUQ5 SVgtX0hTT1I3OVdqT2J3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGYvFOcQbPw69AEnCI+o/R0zYOatAmIjEJ2hCitc5ZLb4NouoHKEBfwKV8JV olfTg45UMMxKO/Yuvl5p5TSZbh7v0RPbYraEA9GpvDpGngscwyFDDeuKvxZrl5bH qYS2BQo6rBveb2sbVgLKyjNc/UEgEgzO9EIx7Pn61nR7eZtDfPTdncVVzfA5KKIv S3RNubViGBhY+9P6fAbpVhqSvtGHNpsNet0nNzP0tA9/Pg/gSLrb7mFrPAK99kuw Uq4pdn/qhMrYLYveFRCqk2teXH4sJFKZ9LNMpgivpDgQRqO+hoMw0ulIlIRpgzxx pUbdpji2Obljv1GOtexPM4u1TZg= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:20 2025 by rpki-client