$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.mft File: ni8vda_kKErFzlfH85k9wXJauLw.mft (raw, json) Hash identifier: RjvSjhd1K5CcbZ7Zr6Q8mNTgOpTrxMBIRYcAA9Y+9IY= Subject key identifier: 9A:B8:2D:5E:8C:E7:EF:8D:D0:B2:B0:05:79:F7:80:12:6C:F7:A1:69 Authority key identifier: 9E:2F:2F:75:AF:E4:28:4A:C5:CE:57:C7:F3:99:3D:C1:72:5A:B8:BC Certificate issuer: /CN=9E2F2F75AFE4284AC5CE57C7F3993DC1725AB8BC Certificate serial: 54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ni8vda_kKErFzlfH85k9wXJauLw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.mft Manifest number: 54 Signing time: Sun 20 Jul 2025 16:09:31 +0000 Manifest this update: Sun 20 Jul 2025 16:09:31 +0000 Manifest next update: Sun 20 Jul 2025 22:09:31 +0000 Files and hashes: 1: ni8vda_kKErFzlfH85k9wXJauLw.crl (hash: DvVg+PtPi8h291wZNAqMU/mbKR4pBL9vsX+PNGNNetA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ni8vda_kKErFzlfH85k9wXJauLw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 22:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2F2F75AFE4284AC5CE57C7F3993DC1725AB8BC Validity Not Before: Jul 20 16:09:31 2025 GMT Not After : Jul 4 06:36:56 2026 GMT Subject: CN=9AB82D5E8CE7EF8DD0B2B00579F780126CF7A169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:1f:c6:01:08:83:a6:0d:9b:c5:10:57:ca: bf:bc:7d:cf:3d:93:15:ce:05:fe:57:ef:08:1c:d0: f8:f9:a0:91:77:2e:fa:b1:d4:52:f2:35:2a:67:50: 46:5f:e1:dc:1b:e2:02:33:6f:f0:96:86:ff:84:4d: 9f:03:3d:ea:28:27:0e:1b:df:8e:71:c9:f1:e2:6b: ea:11:52:e8:0d:f8:97:9d:2b:91:be:40:d2:c3:b3: 6b:39:76:27:f4:6b:16:48:94:ab:33:95:17:11:70: 2e:d5:cb:f8:90:2e:a3:1b:c1:c8:4c:84:64:be:6e: 4a:9c:14:ee:38:8c:6f:f3:0a:82:de:7a:df:1f:77: 3a:3e:84:dc:c1:7b:f6:fc:32:aa:2b:7d:fd:4e:50: 3a:86:8e:4b:ee:95:70:55:fb:88:99:2f:35:8b:b0: ee:47:94:53:31:d1:f9:6b:bf:d7:17:0a:b4:6d:26: 6a:e0:28:3f:da:4a:cc:40:57:31:14:29:d8:b7:59: da:1c:43:96:ef:ac:14:82:0e:15:6d:3c:ba:5f:22: 6a:b2:b3:db:37:87:a0:bc:5e:20:75:04:12:5c:70: bb:9c:28:56:f1:4b:c5:e5:49:c1:9e:e5:f6:f6:0b: 26:e4:88:ac:42:8a:be:9e:e3:1a:95:f8:f4:40:30: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B8:2D:5E:8C:E7:EF:8D:D0:B2:B0:05:79:F7:80:12:6C:F7:A1:69 X509v3 Authority Key Identifier: keyid:9E:2F:2F:75:AF:E4:28:4A:C5:CE:57:C7:F3:99:3D:C1:72:5A:B8:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ni8vda_kKErFzlfH85k9wXJauLw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ni8vda_kKErFzlfH85k9wXJauLw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a3:b9:eb:de:94:ed:d4:78:64:ad:f1:9d:ca:59:0a:b1:2f: 55:a6:d8:99:95:53:d7:aa:3a:fe:10:a4:0a:49:0b:53:65:67: b8:82:19:71:87:ad:81:87:3e:7b:15:05:97:e5:63:18:b2:07: 9b:8b:e5:69:6d:30:26:c0:2e:15:8b:c3:7e:c9:12:43:51:ce: 8d:e9:38:83:f4:db:63:aa:66:f9:2b:7e:f9:15:49:87:8d:1d: c9:bb:33:a5:1c:03:3d:7d:9c:0f:3f:b3:9a:3b:91:70:c4:e4: 02:d5:43:0e:60:bb:7c:16:37:ab:79:85:45:50:d2:14:77:d5: 0e:7b:66:af:a3:f3:57:35:e6:7e:0c:54:82:c6:ef:e6:49:66: 89:aa:8b:18:ca:0d:ca:af:2c:d0:45:39:98:44:d0:65:2e:a7: db:64:f7:80:f4:08:e7:31:5b:52:70:3a:91:c8:c5:5d:00:02: 48:da:15:65:8c:f8:85:17:ba:45:0f:5a:2a:f3:03:4c:6f:5e: d2:1f:96:72:f1:2b:1d:f0:f3:6b:56:ea:42:4a:34:f9:54:9c: 5a:ed:45:74:bd:06:55:0b:bb:a0:86:a7:71:66:53:67:71:d7: d8:a9:02:92:e6:cd:49:d8:1e:bf:17:8b:2b:b3:fd:77:8f:b1: 21:57:5b:cb -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTJG MkY3NUFGRTQyODRBQzVDRTU3QzdGMzk5M0RDMTcyNUFCOEJDMB4XDTI1MDcyMDE2 MDkzMVoXDTI2MDcwNDA2MzY1NlowMzExMC8GA1UEAxMoOUFCODJENUU4Q0U3RUY4 REQwQjJCMDA1NzlGNzgwMTI2Q0Y3QTE2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKqtH8YBCIOmDZvFEFfKv7x9zz2TFc4F/lfvCBzQ+PmgkXcu+rHU UvI1KmdQRl/h3BviAjNv8JaG/4RNnwM96ignDhvfjnHJ8eJr6hFS6A34l50rkb5A 0sOzazl2J/RrFkiUqzOVFxFwLtXL+JAuoxvByEyEZL5uSpwU7jiMb/MKgt563x93 Oj6E3MF79vwyqit9/U5QOoaOS+6VcFX7iJkvNYuw7keUUzHR+Wu/1xcKtG0mauAo P9pKzEBXMRQp2LdZ2hxDlu+sFIIOFW08ul8iarKz2zeHoLxeIHUEElxwu5woVvFL xeVJwZ7l9vYLJuSIrEKKvp7jGpX49EAwlnUCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSauC1ejOfvjdCysAV594ASbPehaTAfBgNVHSMEGDAWgBSeLy91r+QoSsXOV8fz mT3Bclq4vDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzgw L25pOHZkYV9rS0VyRnpsZkg4NWs5d1hKYXVMdy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbmk4dmRhX2tLRXJGemxmSDg1azl3WEphdUx3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4MC9uaTh2ZGFfa0tFckZ6 bGZIODVrOXdYSmF1THcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOKO5696U7dR4ZK3xncpZCrEvVabYmZVT16o6/hCkCkkLU2VnuIIZcYetgYc+ exUFl+VjGLIHm4vlaW0wJsAuFYvDfskSQ1HOjek4g/TbY6pm+St++RVJh40dybsz pRwDPX2cDz+zmjuRcMTkAtVDDmC7fBY3q3mFRVDSFHfVDntmr6PzVzXmfgxUgsbv 5klmiaqLGMoNyq8s0EU5mETQZS6n22T3gPQI5zFbUnA6kcjFXQACSNoVZYz4hRe6 RQ9aKvMDTG9e0h+WcvErHfDza1bqQko0+VScWu1FdL0GVQu7oIancWZTZ3HX2KkC kubNSdgevxeLK7P9d4+xIVdbyw== -----END CERTIFICATE-----Generated at Sun Jul 20 19:26:12 2025 by rpki-client