$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft File: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft (raw, json) Hash identifier: RNP92ZuFkYjbLloDqRaVMlbxQuLtgh6ybTmNosK/v+0= Subject key identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 Authority key identifier: 1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA Certificate issuer: /CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Certificate serial: 0662 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft Manifest number: 0662 Signing time: Mon 08 Sep 2025 04:06:49 +0000 Manifest this update: Mon 08 Sep 2025 04:06:49 +0000 Manifest next update: Mon 08 Sep 2025 10:06:49 +0000 Files and hashes: 1: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl (hash: wJ98dk5dwhPQYJ0RDM+C00BJ7LeixVFvgAaSAhUtVFU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Validity Not Before: Sep 8 04:06:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BF7821F78FFC418D66ABC2C904523A53F50E1AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:f6:2f:ee:1a:47:a8:a0:29:f3:cf:46:70: 8f:f3:f1:6a:c8:f5:d0:a5:56:7d:e1:dc:f9:f8:60: 61:a1:07:60:57:c0:44:0b:ec:63:1e:9b:05:27:4e: 9f:de:07:ae:49:55:1d:20:94:37:27:c2:dc:e0:80: 30:b2:af:71:d5:69:62:b3:e0:1d:d8:e0:5d:86:ef: 5c:aa:fe:bb:7c:7a:d5:63:33:89:d9:49:28:7a:4f: c5:fb:91:b2:48:6d:7b:09:e0:dd:a1:23:d1:92:f6: 21:e7:6e:d6:92:5e:71:e6:0b:e2:35:80:dc:c8:a3: 51:ad:06:4f:0d:51:00:d9:6f:eb:04:82:ec:a4:07: e5:af:06:44:95:6d:12:68:20:5d:f6:1f:00:83:11: 65:25:e0:01:ce:0d:ad:cc:28:7e:d2:8d:da:62:61: 89:ba:7f:b3:e6:09:6e:03:f0:49:67:b6:5c:68:01: c7:54:40:58:58:b1:4d:28:64:27:38:56:f8:f4:f9: c9:d3:ea:64:e9:2d:f1:ac:4c:27:84:b4:e1:40:0a: df:39:65:80:3a:1f:ca:84:bc:46:55:fd:89:2e:97: 27:a5:4a:ff:3d:99:8e:b7:0a:e5:78:0f:2c:d9:12: 3f:c1:a8:c5:14:cd:24:f1:a3:60:50:08:e0:09:19: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 X509v3 Authority Key Identifier: keyid:1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:11:ab:82:14:78:c4:ca:f3:2f:ff:cd:f8:bd:7b:9b:35:75: 58:3e:73:c7:19:13:a5:c8:61:93:20:82:ea:6e:03:d6:d7:09: 29:d7:5f:3a:15:9b:df:f9:c1:52:52:56:c9:47:7f:b6:b8:d2: 7b:d4:9e:cf:4f:20:4b:c0:4a:7e:7f:f4:55:e2:e6:1c:44:39: 84:fb:c0:f2:ed:f6:96:44:d2:d7:d6:ab:5a:75:a5:94:d8:31: 89:a6:2b:59:a7:74:3f:2a:b7:5b:7e:64:d2:71:3f:4e:fb:da: df:c0:27:30:0f:6b:f6:0c:1f:70:e1:da:88:ab:8f:f9:b9:0f: 9c:b3:b8:e4:fe:f7:b0:4f:f4:33:c7:8f:a6:07:6f:f2:28:ab: 12:3d:d9:20:55:12:ad:eb:d0:a7:ce:89:85:f1:c8:2f:cf:69: 44:67:ea:0e:e4:02:13:18:98:da:63:bc:d0:ab:cd:41:96:ca: 91:b4:83:89:5f:3a:7b:b6:65:a4:aa:90:36:2d:f7:d5:4d:ff: 61:7c:c2:8e:97:52:9f:b9:72:7a:4e:09:6d:6d:3a:4c:86:22: 88:39:e1:0e:96:a3:5c:e5:58:42:ca:d0:22:d1:bb:16:41:cc: 41:9a:7b:c7:fe:4f:05:15:aa:ef:41:da:70:67:49:ce:d6:47: fa:6c:da:b2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFD REMyNkM0RTBGNjcwREZFMEJBNjNDMkYyMzRERTQ2RjYyMkJBQTAeFw0yNTA5MDgw NDA2NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEJGNzgyMUY3OEZGQzQx OEQ2NkFCQzJDOTA0NTIzQTUzRjUwRTFBQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpjvYv7hpHqKAp889GcI/z8WrI9dClVn3h3Pn4YGGhB2BXwEQL 7GMemwUnTp/eB65JVR0glDcnwtzggDCyr3HVaWKz4B3Y4F2G71yq/rt8etVjM4nZ SSh6T8X7kbJIbXsJ4N2hI9GS9iHnbtaSXnHmC+I1gNzIo1GtBk8NUQDZb+sEguyk B+WvBkSVbRJoIF32HwCDEWUl4AHODa3MKH7SjdpiYYm6f7PmCW4D8ElntlxoAcdU QFhYsU0oZCc4Vvj0+cnT6mTpLfGsTCeEtOFACt85ZYA6H8qEvEZV/YkulyelSv89 mY63CuV4DyzZEj/BqMUUzSTxo2BQCOAJGf1BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUv3gh94/8QY1mq8LJBFI6U/UOGrcwHwYDVR0jBBgwFoAUGs3CbE4PZw3+C6Y8 LyNN5G9iK6owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Mi9HczNDYkU0UFp3My1DNlk4THlOTjVHOWlLNm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dzM0NiRTRQWnczLUM2WThMeU5ONUc5aUs2by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjIvR3MzQ2JFNFBadzMt QzZZOEx5Tk41RzlpSzZvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF0Rq4IUeMTK8y//zfi9e5s1dVg+c8cZE6XIYZMggupuA9bXCSnXXzoVm9/5 wVJSVslHf7a40nvUns9PIEvASn5/9FXi5hxEOYT7wPLt9pZE0tfWq1p1pZTYMYmm K1mndD8qt1t+ZNJxP0772t/AJzAPa/YMH3Dh2oirj/m5D5yzuOT+97BP9DPHj6YH b/IoqxI92SBVEq3r0KfOiYXxyC/PaURn6g7kAhMYmNpjvNCrzUGWypG0g4lfOnu2 ZaSqkDYt99VN/2F8wo6XUp+5cnpOCW1tOkyGIog54Q6Wo1zlWELK0CLRuxZBzEGa e8f+TwUVqu9B2nBnSc7WR/ps2rI= -----END CERTIFICATE-----Generated at Mon Sep 8 06:14:32 2025 by rpki-client