$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft File: RJgA4NOab6QpLdGwZto9qI0i-rw.mft (raw, json) Hash identifier: nM57AWSe+pR9cL0rBUwxdVQoHO57mSTuV/ZvkM+rr+Y= Subject key identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 Authority key identifier: 44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC Certificate issuer: /CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Certificate serial: 05B7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft Manifest number: 05B7 Signing time: Sun 07 Sep 2025 18:03:55 +0000 Manifest this update: Sun 07 Sep 2025 18:03:55 +0000 Manifest next update: Mon 08 Sep 2025 00:03:55 +0000 Files and hashes: 1: RJgA4NOab6QpLdGwZto9qI0i-rw.crl (hash: HUqQSLDy3tz4X3hnLGHViXl6uir1amyg0QxZO3CPJhs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Validity Not Before: Sep 7 18:03:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A21902D82F6C08116AC14E15D910AA41902FB009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b6:d6:e9:4a:69:59:89:35:9b:c3:c0:9d:01: 96:9b:84:97:1a:d0:7a:63:ed:5a:a8:10:c7:1c:cb: 52:e9:ab:01:5c:2d:b2:b6:a0:66:50:e2:c5:3f:43: c0:ff:11:cd:5b:c6:f5:0e:f3:fe:b5:78:08:26:66: bb:3f:e1:36:82:ee:7f:c3:60:10:76:04:8e:26:10: 13:a8:0f:30:3f:0e:16:87:45:a6:1b:33:21:eb:02: 12:58:2a:b3:5c:96:64:90:8d:c8:1a:a0:5e:8a:f2: ac:95:c5:fa:e0:ab:d7:1a:89:98:45:4d:ab:20:3f: 18:43:2d:02:2b:56:95:b9:73:05:a2:9a:ec:d5:20: dd:1b:0e:78:ce:a6:66:eb:ba:47:af:4d:35:29:d4: fe:d0:c3:0a:07:3f:1d:b4:0c:f2:48:2d:c9:fd:81: a5:3b:3f:29:a6:3f:42:3f:00:a6:f4:e0:ee:4a:ab: 84:4b:56:8b:db:24:d2:54:4b:ca:4e:e3:ab:4d:72: 08:34:47:1b:e2:f7:be:66:d5:ad:89:ba:d4:52:ca: 6d:d4:6a:30:48:e0:bc:13:54:82:4d:4f:3b:60:18: ba:15:4e:56:c0:8b:27:21:26:11:4c:0f:71:3b:24: cf:f4:57:fe:93:e8:e6:69:25:09:0b:db:d3:80:67: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 X509v3 Authority Key Identifier: keyid:44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:be:ab:bd:c1:77:3e:61:05:19:66:3b:9e:78:39:0a:85:b5: 53:26:45:e8:0b:17:ce:16:b3:b8:e8:40:98:34:c1:42:9c:ee: 57:b8:a4:11:a2:90:bb:35:38:b9:c8:be:ff:22:a5:05:1f:89: 43:96:ed:df:7a:ca:71:dc:0e:76:b0:0c:4e:5b:dd:fd:10:22: c9:b0:ec:8d:71:89:94:ba:5a:82:dd:67:16:66:a5:e8:7b:7c: 27:e1:54:5c:ec:20:79:bc:40:48:2f:6e:41:a5:f6:6f:df:c6: 2b:90:ba:4a:d3:4f:1a:0b:48:c3:64:37:7a:bd:9b:41:28:9d: 9a:0a:67:bd:76:a6:4b:87:db:c4:81:6d:6b:f9:22:00:d3:9b: 83:ee:6a:89:f8:b0:66:bc:cf:d7:cc:8c:bb:53:c7:94:5c:54: b0:09:80:62:52:3e:ca:91:a7:52:f7:5e:ec:f3:b5:1b:2d:ff: c3:90:26:13:41:51:5e:88:44:bb:88:a3:c8:cd:b6:f9:0e:fe: 25:eb:d0:4f:96:39:39:ad:00:01:03:0f:8e:8e:78:f0:07:18: ae:b8:94:23:8d:a3:2e:6d:c2:91:ab:bf:6d:5a:0d:b6:95:34: ac:af:4d:5f:6b:e1:41:14:70:3e:77:e1:68:35:61:2a:bd:4d: 71:79:38:73 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ5 ODAwRTBEMzlBNkZBNDI5MkREMUIwNjZEQTNEQTg4RDIyRkFCQzAeFw0yNTA5MDcx ODAzNTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEEyMTkwMkQ4MkY2QzA4 MTE2QUMxNEUxNUQ5MTBBQTQxOTAyRkIwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwttbpSmlZiTWbw8CdAZabhJca0Hpj7VqoEMccy1LpqwFcLbK2 oGZQ4sU/Q8D/Ec1bxvUO8/61eAgmZrs/4TaC7n/DYBB2BI4mEBOoDzA/DhaHRaYb MyHrAhJYKrNclmSQjcgaoF6K8qyVxfrgq9caiZhFTasgPxhDLQIrVpW5cwWimuzV IN0bDnjOpmbrukevTTUp1P7QwwoHPx20DPJILcn9gaU7PymmP0I/AKb04O5Kq4RL VovbJNJUS8pO46tNcgg0Rxvi975m1a2JutRSym3UajBI4LwTVIJNTztgGLoVTlbA iychJhFMD3E7JM/0V/6T6OZpJQkL29OAZ/FLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUohkC2C9sCBFqwU4V2RCqQZAvsAkwHwYDVR0jBBgwFoAURJgA4NOab6QpLdGw Zto9qI0i+rwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy NC9SSmdBNE5PYWI2UXBMZEd3WnRvOXFJMGktcncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JKZ0E0Tk9hYjZRcExkR3dadG85cUkwaS1ydy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjQvUkpnQTROT2FiNlFw TGRHd1p0bzlxSTBpLXJ3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGm+q73Bdz5hBRlmO554OQqFtVMmRegLF84Ws7joQJg0wUKc7le4pBGikLs1 OLnIvv8ipQUfiUOW7d96ynHcDnawDE5b3f0QIsmw7I1xiZS6WoLdZxZmpeh7fCfh VFzsIHm8QEgvbkGl9m/fxiuQukrTTxoLSMNkN3q9m0EonZoKZ712pkuH28SBbWv5 IgDTm4Puaon4sGa8z9fMjLtTx5RcVLAJgGJSPsqRp1L3XuzztRst/8OQJhNBUV6I RLuIo8jNtvkO/iXr0E+WOTmtAAEDD46OePAHGK64lCONoy5twpGrv21aDbaVNKyv TV9r4UEUcD534Wg1YSq9TXF5OHM= -----END CERTIFICATE-----Generated at Sun Sep 7 20:05:49 2025 by rpki-client