$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft File: lmzVCUReWNdVvBqFJWP5uy_uzbk.mft (raw, json) Hash identifier: 9oN9a//kmuhtiFY7uG5yaX8nhO9peFS3IXR+hIpxfqo= Subject key identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 Authority key identifier: 96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 Certificate issuer: /CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Certificate serial: 02A3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft Manifest number: 02A3 Signing time: Mon 08 Sep 2025 01:03:15 +0000 Manifest this update: Mon 08 Sep 2025 01:03:15 +0000 Manifest next update: Mon 08 Sep 2025 07:03:15 +0000 Files and hashes: 1: lmzVCUReWNdVvBqFJWP5uy_uzbk.crl (hash: tOMyEg2smvpykCLVwdx663w9tQ2kppWX/duasGoQyKw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Validity Not Before: Sep 8 01:03:15 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=652AC6D45D74F000FFFCA5A6AFB02690651A8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:a6:94:b4:d1:5b:79:37:2b:14:1b:ea:76: b7:a1:db:e8:f1:8b:44:bd:c4:0f:3e:b8:d1:a0:54: 23:64:d7:c8:ce:64:6f:20:76:56:ca:01:ae:86:04: 17:29:aa:60:e3:4d:a2:b1:72:3a:b0:b4:39:8e:0d: e6:b2:ea:13:13:2a:5e:c3:ab:93:ea:66:b0:dc:5e: 6b:65:ce:31:61:45:e2:16:30:88:09:a2:57:bd:2e: 36:b0:ef:51:98:df:a8:3d:36:3e:1a:37:47:71:1f: a3:9b:67:6f:d5:4d:f3:87:82:b3:ce:b3:08:d5:a2: 01:4f:fe:46:90:8b:15:df:a6:c7:4b:26:4a:f6:b0: 89:6c:0c:ad:85:11:5b:36:07:61:90:0b:d8:7e:d6: b0:32:04:6a:80:9a:8f:32:c2:df:4c:e8:1b:79:67: 4f:c2:21:b0:62:c3:72:71:f2:c5:4f:c9:a3:0a:03: 1e:5b:fe:b6:f4:df:47:09:8b:d2:21:b2:46:8f:8c: 88:72:cc:a7:2f:ee:e3:52:aa:60:bc:f2:34:a9:8b: f9:59:2f:57:ef:92:66:58:f6:da:a7:d6:b7:c0:23: 42:6b:a1:ba:24:9e:a3:4a:bb:98:f5:ad:96:f6:b3: ea:51:ca:ba:aa:16:8a:5c:29:11:96:8f:14:49:3a: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 X509v3 Authority Key Identifier: keyid:96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:39:e2:52:13:87:8a:b0:66:4d:43:f3:59:f2:16:b0:19:ac: 0f:a6:ab:18:8c:d4:48:80:f3:90:83:8e:a7:fc:89:a9:88:21: a0:95:64:3e:26:5a:a7:67:c7:4f:c9:95:ec:0b:b0:14:ea:ec: e5:9b:9a:aa:bf:6f:e2:bb:ac:ee:f5:78:91:69:25:3c:c2:66: 26:67:fd:49:7e:5b:46:96:0f:ea:f4:ae:2b:e8:6c:04:d5:40: d7:31:7f:d8:ce:98:79:ea:2c:98:2b:d1:bf:dd:3a:90:59:ae: 27:c3:9d:67:fe:09:68:f9:ea:b3:36:b9:0a:74:fb:34:22:d1: f9:1d:3f:27:b0:b7:fd:d0:13:f0:ef:05:8f:e1:4a:ad:0e:bd: 15:87:85:33:1d:33:3e:80:20:cc:8c:98:b9:14:d7:58:ce:bd: 09:91:c4:47:8e:25:f7:00:62:fd:b1:9e:f2:8d:2d:81:41:3f: d2:9d:52:5a:b3:46:06:7f:a8:26:d2:98:ef:e6:bb:50:bf:a6: c6:c2:c6:84:f7:5f:8e:97:5e:2a:2c:22:24:4e:10:a4:a1:d1: 03:96:62:77:c7:bd:00:47:de:42:aa:4f:40:5c:54:77:e7:3b: e6:2f:b1:c7:76:1a:ae:d9:df:58:46:2e:ac:8f:71:2f:d7:96: 59:e9:3c:fe -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTY2 Q0Q1MDk0NDVFNThENzU1QkMxQTg1MjU2M0Y5QkIyRkVFQ0RCOTAeFw0yNTA5MDgw MTAzMTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY1MkFDNkQ0NUQ3NEYw MDBGRkZDQTVBNkFGQjAyNjkwNjUxQTg4MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIfKaUtNFbeTcrFBvqdreh2+jxi0S9xA8+uNGgVCNk18jOZG8g dlbKAa6GBBcpqmDjTaKxcjqwtDmODeay6hMTKl7Dq5PqZrDcXmtlzjFhReIWMIgJ ole9Ljaw71GY36g9Nj4aN0dxH6ObZ2/VTfOHgrPOswjVogFP/kaQixXfpsdLJkr2 sIlsDK2FEVs2B2GQC9h+1rAyBGqAmo8ywt9M6Bt5Z0/CIbBiw3Jx8sVPyaMKAx5b /rb030cJi9IhskaPjIhyzKcv7uNSqmC88jSpi/lZL1fvkmZY9tqn1rfAI0Jrobok nqNKu5j1rZb2s+pRyrqqFopcKRGWjxRJOiIlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZSrG1F108AD//KWmr7AmkGUaiBIwHwYDVR0jBBgwFoAUlmzVCUReWNdVvBqF JWP5uy/uzbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 Ni9sbXpWQ1VSZVdOZFZ2QnFGSldQNXV5X3V6YmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xtelZDVVJlV05kVnZCcUZKV1A1dXlfdXpiay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjYvbG16VkNVUmVXTmRW dkJxRkpXUDV1eV91emJrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMg54lITh4qwZk1D81nyFrAZrA+mqxiM1EiA85CDjqf8iamIIaCVZD4mWqdn x0/JlewLsBTq7OWbmqq/b+K7rO71eJFpJTzCZiZn/Ul+W0aWD+r0rivobATVQNcx f9jOmHnqLJgr0b/dOpBZrifDnWf+CWj56rM2uQp0+zQi0fkdPyewt/3QE/DvBY/h Sq0OvRWHhTMdMz6AIMyMmLkU11jOvQmRxEeOJfcAYv2xnvKNLYFBP9KdUlqzRgZ/ qCbSmO/mu1C/psbCxoT3X46XXiosIiROEKSh0QOWYnfHvQBH3kKqT0BcVHfnO+Yv scd2Gq7Z31hGLqyPcS/XllnpPP4= -----END CERTIFICATE-----Generated at Mon Sep 8 06:04:35 2025 by rpki-client