$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft File: K6tMFwMvC3Tx01c-eeloid-ypu4.mft (raw, json) Hash identifier: H9JbwFLcxedlB4bSx6AMRFPB5lokZajr8hgp0Gy5YiI= Subject key identifier: BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0 Authority key identifier: 2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE Certificate issuer: /CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE Certificate serial: 0535 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft Manifest number: 0535 Signing time: Sun 07 Sep 2025 18:03:46 +0000 Manifest this update: Sun 07 Sep 2025 18:03:46 +0000 Manifest next update: Mon 08 Sep 2025 00:03:46 +0000 Files and hashes: 1: K6tMFwMvC3Tx01c-eeloid-ypu4.crl (hash: h91TZES37j2M26UZr1iI7UKUBF6WMp6Ty22wHS0My04=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE Validity Not Before: Sep 7 18:03:46 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BE671BA73B86480189EF54ED7FEF88040D02D1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:18:79:57:d3:51:87:19:64:d4:2b:23:54: 8a:ac:f2:88:6d:a0:42:74:e0:65:b1:3b:ac:60:e5: 27:5b:40:9c:f9:f1:72:9b:0f:d0:ae:dd:56:b9:d3: e0:f1:02:16:eb:b1:33:50:44:94:2c:d7:09:11:c5: d0:bb:39:c1:09:55:17:68:ec:d0:69:25:42:b0:a8: 65:ec:e8:80:0c:0e:e5:2f:5c:d6:b3:5d:ae:24:9e: 45:97:66:32:17:b2:82:3f:6f:7b:94:54:d2:58:7e: a7:50:23:74:2d:52:24:6e:73:51:95:71:d0:bc:fd: f3:c3:41:d2:84:41:a9:65:82:fb:1d:df:bd:08:a9: 83:29:47:d0:76:fc:a7:f3:04:2f:e2:4f:f7:3e:92: 8d:84:db:0d:eb:71:7e:d6:d8:7e:de:2c:44:d0:53: 3c:36:d6:1f:63:5d:01:bb:53:89:e9:da:d8:e2:0c: 7b:3c:ed:a6:8d:91:9c:55:e7:33:7e:ad:7e:46:9c: 54:c4:c3:b8:f0:8e:68:f9:4e:9d:f6:aa:fc:b9:d0: 9f:a8:be:a4:22:4f:72:15:98:47:c7:fc:38:f4:d3: 3b:56:d5:02:ea:ca:7b:80:63:a5:5a:f7:0d:97:0d: 30:fd:e2:4e:ba:23:23:81:db:dd:28:9c:ee:76:fe: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0 X509v3 Authority Key Identifier: keyid:2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:aa:6e:e2:94:41:02:60:e1:49:01:c2:7d:03:04:25:90:6c: 23:c3:54:2b:52:17:ba:d4:e4:8f:38:20:89:f6:5b:de:c6:af: 53:fb:c6:5d:50:a1:92:37:8f:c7:62:98:0d:f3:40:fe:81:66: 32:10:5e:ee:4d:f1:65:7e:50:a5:f2:c9:ee:3f:8c:9c:1f:90: fa:48:50:e9:33:03:b3:58:0e:e8:39:72:f8:46:41:a7:71:c5: ba:2a:fd:29:ff:a2:9b:a9:5b:ff:ac:4c:51:3d:e4:25:d1:fc: 25:d7:99:96:3c:3f:48:9b:79:60:5d:a8:f5:35:af:d8:ac:47: 1a:45:f9:d5:1d:7f:a8:fe:fb:87:3f:18:28:4c:5c:fd:ac:6f: ec:da:9c:33:b7:cd:7c:4b:7e:c3:20:f4:84:b9:5b:ff:e8:ff: 6c:67:59:60:7a:76:2c:00:85:cc:95:0e:64:02:7e:96:61:c8: e0:6a:87:e6:8c:a5:2b:74:ab:45:8f:ed:8b:f3:8b:32:34:ea: 2e:40:f2:3b:a3:8f:25:fe:a7:55:e3:9e:92:be:a4:fc:ff:7f: a6:ba:1d:66:e6:a1:87:85:b5:ee:de:0f:98:39:16:30:93:16: 2f:1a:f2:dc:87:9a:08:b5:79:14:d7:05:3b:d1:70:5c:da:94: 3c:23:9d:fd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkJB QjRDMTcwMzJGMEI3NEYxRDM1NzNFNzlFOTY4ODlERkIyQTZFRTAeFw0yNTA5MDcx ODAzNDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEJFNjcxQkE3M0I4NjQ4 MDE4OUVGNTRFRDdGRUY4ODA0MEQwMkQxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL2xh5V9NRhxlk1CsjVIqs8ohtoEJ04GWxO6xg5SdbQJz58XKb D9Cu3Va50+DxAhbrsTNQRJQs1wkRxdC7OcEJVRdo7NBpJUKwqGXs6IAMDuUvXNaz Xa4knkWXZjIXsoI/b3uUVNJYfqdQI3QtUiRuc1GVcdC8/fPDQdKEQallgvsd370I qYMpR9B2/KfzBC/iT/c+ko2E2w3rcX7W2H7eLETQUzw21h9jXQG7U4np2tjiDHs8 7aaNkZxV5zN+rX5GnFTEw7jwjmj5Tp32qvy50J+ovqQiT3IVmEfH/Dj00ztW1QLq ynuAY6Va9w2XDTD94k66IyOB290onO52/p/NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUvmcbpzuGSAGJ71Ttf++IBA0C0cAwHwYDVR0jBBgwFoAUK6tMFwMvC3Tx01c+ eeloid+ypu4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OC9LNnRNRndNdkMzVHgwMWMtZWVsb2lkLXlwdTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0s2dE1Gd012QzNUeDAxYy1lZWxvaWQteXB1NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzgvSzZ0TUZ3TXZDM1R4 MDFjLWVlbG9pZC15cHU0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHaqbuKUQQJg4UkBwn0DBCWQbCPDVCtSF7rU5I84IIn2W97Gr1P7xl1QoZI3 j8dimA3zQP6BZjIQXu5N8WV+UKXyye4/jJwfkPpIUOkzA7NYDug5cvhGQadxxboq /Sn/opupW/+sTFE95CXR/CXXmZY8P0ibeWBdqPU1r9isRxpF+dUdf6j++4c/GChM XP2sb+zanDO3zXxLfsMg9IS5W//o/2xnWWB6diwAhcyVDmQCfpZhyOBqh+aMpSt0 q0WP7YvzizI06i5A8jujjyX+p1XjnpK+pPz/f6a6HWbmoYeFte7eD5g5FjCTFi8a 8tyHmgi1eRTXBTvRcFzalDwjnf0= -----END CERTIFICATE-----Generated at Sun Sep 7 20:04:06 2025 by rpki-client