$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft File: SMusqvPRm5kth3kQdAxjiyXwtyw.mft (raw, json) Hash identifier: vcdyBMtpbl76/wq8TZdi8/K+47p7uE6Nahd/V1v26bA= Subject key identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 Authority key identifier: 48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C Certificate issuer: /CN=48CBACAAF3D19B992D877910740C638B25F0B72C Certificate serial: 02A5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft Manifest number: 02A5 Signing time: Mon 08 Sep 2025 06:03:48 +0000 Manifest this update: Mon 08 Sep 2025 06:03:48 +0000 Manifest next update: Mon 08 Sep 2025 12:03:48 +0000 Files and hashes: 1: SMusqvPRm5kth3kQdAxjiyXwtyw.crl (hash: bPgSyEr8c/mWMNqlO5NENrJEC3vnjFot2GAlkl53t48=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CBACAAF3D19B992D877910740C638B25F0B72C Validity Not Before: Sep 8 06:03:48 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E4CE9F3991E9A36B20DB985D8F15321B45E0BE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:86:c0:0b:d3:c3:80:68:3b:d0:99:9b:16: b7:ca:89:af:ca:9f:f0:3f:80:b5:91:b9:ff:73:3b: a7:db:5c:a7:9b:2e:e0:4f:7c:73:25:fa:9a:f7:f9: 31:06:f7:2d:0e:3b:2e:ef:ed:58:36:16:fc:bf:2b: 21:3b:58:6c:0b:25:5d:fd:91:98:c8:18:6d:fa:be: 6e:45:6e:8c:e8:17:17:e8:2f:08:e3:1c:54:87:2a: db:7c:7a:1b:84:10:9b:50:1d:b6:5c:25:98:e0:84: ec:89:f6:a3:82:c4:fc:59:44:a4:4c:5d:6d:a4:43: 5c:09:1a:65:01:f6:f0:c8:ea:46:04:fb:a1:92:fe: 75:a1:f4:c9:b6:67:f7:aa:09:ff:c3:ab:19:f5:d0: aa:48:c7:df:26:6a:f6:49:f3:d9:3d:f0:16:f1:b4: 53:6f:b0:6b:72:61:30:63:f2:61:7f:fb:53:06:cf: e4:6f:c7:f6:56:cc:c2:ec:04:30:3b:b5:bb:8b:89: fc:3c:c0:a7:54:ae:d5:78:24:c5:14:8b:60:a4:6a: 6b:76:b6:ef:3d:e1:1c:74:84:74:bf:e1:6d:20:4b: 94:a7:be:69:2e:0b:aa:e0:75:b1:68:1d:fd:0e:a8: 27:d9:11:49:5e:15:67:48:cf:5c:c4:93:3d:33:35: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 X509v3 Authority Key Identifier: keyid:48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:84:9f:29:8f:32:30:8d:66:6d:9f:23:28:8d:2d:07:bb:7b: 5c:68:f7:ef:de:b5:81:a8:1b:2c:90:ec:4c:6a:a9:d0:e4:2a: aa:ae:ee:a7:78:f7:5f:9a:7c:e9:49:dc:22:ef:50:11:dc:73: 58:7b:99:7f:45:17:1f:f5:8f:d8:18:98:05:40:a9:64:40:d7: 59:67:4d:c5:ac:97:f5:26:19:39:6e:fd:e2:28:ad:c1:68:ab: 12:f8:90:3e:64:59:d5:00:71:db:ff:ae:02:e5:e8:bf:0b:4a: 1a:2f:f9:dc:91:70:5c:a6:9c:5d:33:bd:e7:ac:3d:b0:4e:79: 7a:46:06:59:9c:2f:52:da:a8:ae:b6:f3:99:62:06:20:7b:f0: 7c:f0:53:50:b1:c5:ec:07:84:31:e7:0e:40:50:17:c2:5d:0c: cb:b5:5d:ba:c5:01:a0:99:6a:1a:82:67:24:30:c5:9e:26:cd: ec:4f:7a:e1:3b:84:79:58:e4:b1:69:36:d7:8e:4b:43:ee:8b: 3c:ec:62:f6:a8:21:05:58:98:63:22:c2:19:ac:13:cb:c8:ee: 00:9e:a7:e4:2e:ee:69:95:8a:8e:37:fa:61:9b:e0:48:f1:2e: de:75:61:a8:5c:30:04:c7:5a:55:57:c6:9c:65:02:03:75:6d: b0:35:fb:ca -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDhD QkFDQUFGM0QxOUI5OTJEODc3OTEwNzQwQzYzOEIyNUYwQjcyQzAeFw0yNTA5MDgw NjAzNDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU0Q0U5RjM5OTFFOUEz NkIyMERCOTg1RDhGMTUzMjFCNDVFMEJFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2MIbAC9PDgGg70JmbFrfKia/Kn/A/gLWRuf9zO6fbXKebLuBP fHMl+pr3+TEG9y0OOy7v7Vg2Fvy/KyE7WGwLJV39kZjIGG36vm5FbozoFxfoLwjj HFSHKtt8ehuEEJtQHbZcJZjghOyJ9qOCxPxZRKRMXW2kQ1wJGmUB9vDI6kYE+6GS /nWh9Mm2Z/eqCf/Dqxn10KpIx98mavZJ89k98BbxtFNvsGtyYTBj8mF/+1MGz+Rv x/ZWzMLsBDA7tbuLifw8wKdUrtV4JMUUi2Ckamt2tu894Rx0hHS/4W0gS5Snvmku C6rgdbFoHf0OqCfZEUleFWdIz1zEkz0zNa7NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU5M6fOZHpo2sg25hdjxUyG0XgvmgwHwYDVR0jBBgwFoAUSMusqvPRm5kth3kQ dAxjiyXwtywwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 NS9TTXVzcXZQUm01a3RoM2tRZEF4aml5WHd0eXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NNdXNxdlBSbTVrdGgza1FkQXhqaXlYd3R5dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjUvU011c3F2UFJtNWt0 aDNrUWRBeGppeVh3dHl3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAN+EnymPMjCNZm2fIyiNLQe7e1xo9+/etYGoGyyQ7ExqqdDkKqqu7qd491+a fOlJ3CLvUBHcc1h7mX9FFx/1j9gYmAVAqWRA11lnTcWsl/UmGTlu/eIorcFoqxL4 kD5kWdUAcdv/rgLl6L8LShov+dyRcFymnF0zveesPbBOeXpGBlmcL1LaqK6285li BiB78HzwU1CxxewHhDHnDkBQF8JdDMu1XbrFAaCZahqCZyQwxZ4mzexPeuE7hHlY 5LFpNteOS0PuizzsYvaoIQVYmGMiwhmsE8vI7gCep+Qu7mmVio43+mGb4EjxLt51 YahcMATHWlVXxpxlAgN1bbA1+8o= -----END CERTIFICATE-----Generated at Mon Sep 8 09:01:03 2025 by rpki-client