$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft File: xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft (raw, json) Hash identifier: vgYPmipzxZZ6ddmVXfr2ibknPlcT5AmxGnZRslqol0I= Subject key identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF Authority key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 Certificate issuer: /CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Certificate serial: 04FC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft Manifest number: 04FC Signing time: Sun 07 Sep 2025 18:05:48 +0000 Manifest this update: Sun 07 Sep 2025 18:05:48 +0000 Manifest next update: Mon 08 Sep 2025 00:05:48 +0000 Files and hashes: 1: xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl (hash: hxI7YwUNdvuy6w70CE0Mwz2ruDxqiwnJYGUpDKbiPNk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Validity Not Before: Sep 7 18:05:48 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C8C318B9C83E4804C50DAC66D69EC0CF7B53E4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f9:65:02:d1:b2:6d:23:c0:76:39:83:3f:83: 20:cc:91:bf:45:aa:34:65:56:39:d5:f4:e4:42:d4: 66:59:3d:fc:17:45:43:b0:8b:97:34:e8:99:1c:71: 86:d5:e3:5e:39:92:60:63:d0:1a:37:46:a9:64:59: a9:d3:b9:f2:fb:31:42:5c:c5:e2:87:e5:1f:e3:81: 43:50:07:35:36:30:88:57:d6:31:d6:dc:7d:c3:f0: d9:57:e0:23:be:22:7d:1d:9f:e6:87:2c:a8:f8:50: 78:f6:e1:95:5c:82:65:1a:10:65:a8:29:49:a3:d1: 2b:a2:1a:38:0d:cb:36:18:3d:a9:9e:83:16:d5:45: d6:7c:de:9d:e7:d8:8b:a2:76:10:4f:c5:cd:38:68: 4a:b0:82:46:f7:5b:7e:d7:7b:ea:f1:69:5d:82:9f: c3:72:19:2f:93:c3:e7:c8:72:08:db:0b:2a:7e:07: 60:11:e2:d8:c7:02:10:91:e8:94:3f:f5:06:d9:4d: cb:fc:e9:9d:44:0a:05:c8:da:cd:ba:68:87:10:88: 31:41:3c:24:72:4a:00:18:bd:5a:55:94:79:ce:f3: ea:c5:f3:04:39:f2:53:ff:65:36:c6:5e:b2:68:b2: fd:02:f6:4a:d4:6d:41:23:88:15:5a:58:c3:1e:f8: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF X509v3 Authority Key Identifier: keyid:C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:5c:f1:28:e0:b4:8e:d5:53:51:ec:a1:f2:3c:55:4a:b2:e0: d6:0e:87:b8:60:f1:6d:85:1b:ca:6b:06:7e:8d:23:03:92:b3: 71:c3:6e:28:b6:e4:48:2e:fe:4e:92:a7:6c:46:a3:32:9c:b4: c0:7a:c9:88:27:69:16:3b:fa:f9:ec:09:c4:01:c5:e7:1a:bb: d2:37:3b:61:b2:08:44:d9:a1:70:92:f8:36:bf:8f:cc:76:20: 6c:d0:9d:1c:d7:a0:c4:ed:eb:21:c8:3f:59:3c:b5:5a:e1:ed: d9:49:24:3d:78:cb:0c:bb:62:ac:0b:21:a0:eb:dd:07:c6:1e: 11:e9:1e:69:e4:43:da:16:61:b7:f8:6e:d2:50:70:b3:37:c9: e3:cb:bf:9f:b1:f1:48:b3:ca:58:b0:7e:e9:15:df:ca:02:9f: 82:89:1e:98:9c:16:8f:06:2e:b1:31:b5:41:47:f9:44:26:77: 9e:7a:fa:46:15:95:ad:25:1a:a1:3a:6b:dd:8b:30:e2:70:61: b3:c4:8a:4e:e5:e6:4a:0d:16:58:a3:db:2e:13:28:82:65:ce: 32:d7:98:cb:49:d7:5d:36:a8:9e:96:92:82:f6:14:59:26:28: 63:2c:a7:99:19:d3:fa:70:5d:94:f3:54:44:be:57:a1:b9:24: 15:7e:7e:c0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzUz QUY0MDQzRkM0RDJCMDA4NTg4MjIyOUFCMjc1MDRCNkE4MjIzODAeFw0yNTA5MDcx ODA1NDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM4QzMxOEI5QzgzRTQ4 MDRDNTBEQUM2NkQ2OUVDMENGN0I1M0U0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp+WUC0bJtI8B2OYM/gyDMkb9FqjRlVjnV9ORC1GZZPfwXRUOw i5c06JkccYbV4145kmBj0Bo3RqlkWanTufL7MUJcxeKH5R/jgUNQBzU2MIhX1jHW 3H3D8NlX4CO+In0dn+aHLKj4UHj24ZVcgmUaEGWoKUmj0SuiGjgNyzYYPamegxbV RdZ83p3n2IuidhBPxc04aEqwgkb3W37Xe+rxaV2Cn8NyGS+Tw+fIcgjbCyp+B2AR 4tjHAhCR6JQ/9QbZTcv86Z1ECgXI2s26aIcQiDFBPCRySgAYvVpVlHnO8+rF8wQ5 8lP/ZTbGXrJosv0C9krUbUEjiBVaWMMe+PKpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyMMYucg+SATFDaxm1p7Az3tT5K8wHwYDVR0jBBgwFoAUxTr0BD/E0rAIWIIi mrJ1BLaoIjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 MS94VHIwQkRfRTByQUlXSUlpbXJKMUJMYW9JamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hUcjBCRF9FMHJBSVdJSWltckoxQkxhb0lqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDEveFRyMEJEX0UwckFJ V0lJaW1ySjFCTGFvSWpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALZc8SjgtI7VU1HsofI8VUqy4NYOh7hg8W2FG8prBn6NIwOSs3HDbii25Egu /k6Sp2xGozKctMB6yYgnaRY7+vnsCcQBxecau9I3O2GyCETZoXCS+Da/j8x2IGzQ nRzXoMTt6yHIP1k8tVrh7dlJJD14ywy7YqwLIaDr3QfGHhHpHmnkQ9oWYbf4btJQ cLM3yePLv5+x8UizyliwfukV38oCn4KJHpicFo8GLrExtUFH+UQmd556+kYVla0l GqE6a92LMOJwYbPEik7l5koNFlij2y4TKIJlzjLXmMtJ1102qJ6WkoL2FFkmKGMs p5kZ0/pwXZTzVES+V6G5JBV+fsA= -----END CERTIFICATE-----Generated at Sun Sep 7 20:10:58 2025 by rpki-client