$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft File: FCweOZsxNmQg7EfS4xcbGllluJM.mft (raw, json) Hash identifier: 9vLAhaC7WFueSXFNjCmZcZMlcLBcAmmbkxien/fOMS0= Subject key identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B Authority key identifier: 14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 Certificate issuer: /CN=142C1E399B31366420EC47D2E3171B1A5965B893 Certificate serial: E9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft Manifest number: E9 Signing time: Sun 07 Sep 2025 15:03:02 +0000 Manifest this update: Sun 07 Sep 2025 15:03:02 +0000 Manifest next update: Sun 07 Sep 2025 21:03:02 +0000 Files and hashes: 1: FCweOZsxNmQg7EfS4xcbGllluJM.crl (hash: sG/paLcEHCvtcagUXUQY77cLL15Wq9nrdXsSu4hU4+0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 21:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142C1E399B31366420EC47D2E3171B1A5965B893 Validity Not Before: Sep 7 15:03:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1C51D217224E6245574DA14CCBA48E0C1C765B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:a4:f0:43:1b:b9:27:9d:81:d0:4f:48:bd: 71:b6:a1:c2:e3:36:9a:84:9c:6a:64:6f:df:e6:5c: c6:7c:71:0d:6d:00:c1:5c:db:4a:ae:04:1e:fb:22: 9d:f7:ea:82:10:e1:a7:70:6d:94:a9:10:ed:32:ae: 03:77:df:6a:65:a1:64:04:dc:d1:94:b7:fa:07:20: a9:cd:17:14:eb:d9:c9:e2:07:dc:ee:81:9d:bc:9f: b1:52:5d:3a:49:af:f7:bc:8f:4f:d6:5f:e6:86:20: 4a:d0:d5:36:e4:b1:72:51:01:18:82:c3:cc:18:3e: 9d:40:b8:fc:8d:93:ad:0f:b8:aa:a3:3a:6a:3e:88: 71:ff:b9:de:ff:e3:54:31:58:1b:e5:42:ed:91:bb: 0f:20:eb:bf:1a:77:61:a3:2f:e5:0c:4c:e7:9e:52: b9:04:b5:b5:26:49:37:97:2e:64:c2:c7:e5:53:d3: 0e:dd:02:27:ea:aa:93:23:8a:4d:80:2f:17:c9:a5: 63:51:89:e1:60:01:49:ca:1d:95:a9:3a:f5:04:bb: 98:6b:b8:b8:25:67:1c:f9:4f:21:a6:17:a1:22:51: 0d:57:66:26:5c:1b:be:1c:a6:35:67:31:83:7c:bc: ed:a7:f8:0c:9e:58:6d:ca:1a:78:74:09:14:5b:7b: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B X509v3 Authority Key Identifier: keyid:14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:89:d6:bc:42:5b:d6:1c:a6:ca:ca:e7:58:0d:89:7f:88:56: e7:7e:20:6b:db:d6:d4:24:0c:5d:c8:ab:d5:77:7e:a8:e6:63: f9:eb:be:25:34:df:4c:57:14:24:ba:fc:9f:89:78:f8:52:32: c3:3d:70:c8:bc:10:99:37:a9:ce:09:04:40:d0:59:b5:e0:c2: 96:15:48:79:6e:d5:fa:bf:ac:78:d4:77:15:4f:5e:3f:1a:8c: 75:86:b7:1c:04:f1:cc:d7:a9:1b:e8:29:26:29:ea:37:e2:5d: e4:71:cf:12:61:7a:e7:13:61:b6:fa:3c:21:10:40:a4:16:61: 56:51:28:a5:df:c6:60:11:7c:09:40:44:92:08:8e:07:e2:34: 72:40:87:83:12:f5:f7:f0:fa:05:97:2d:3a:5a:2e:cf:cc:53: 8e:4a:72:eb:35:f9:10:78:e6:ef:17:f0:ef:15:f2:de:c5:e1: 33:33:d6:5c:b2:e8:68:f8:b8:62:4e:2f:20:fb:1a:6d:61:b8: 56:69:e0:e2:bd:49:5d:9c:56:de:ce:15:ce:a5:cd:ea:1d:22: d6:7d:bf:86:9d:2b:d3:3f:e1:b0:85:fb:55:37:fd:af:de:a3: 12:b3:0c:39:a2:49:cc:a5:1a:d3:c5:91:5b:01:9e:67:2b:49: ca:be:f3:69 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTQy QzFFMzk5QjMxMzY2NDIwRUM0N0QyRTMxNzFCMUE1OTY1Qjg5MzAeFw0yNTA5MDcx NTAzMDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFDNTFEMjE3MjI0RTYy NDU1NzREQTE0Q0NCQTQ4RTBDMUM3NjVCMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw0KTwQxu5J52B0E9IvXG2ocLjNpqEnGpkb9/mXMZ8cQ1tAMFc 20quBB77Ip336oIQ4adwbZSpEO0yrgN332ploWQE3NGUt/oHIKnNFxTr2cniB9zu gZ28n7FSXTpJr/e8j0/WX+aGIErQ1TbksXJRARiCw8wYPp1AuPyNk60PuKqjOmo+ iHH/ud7/41QxWBvlQu2Ruw8g678ad2GjL+UMTOeeUrkEtbUmSTeXLmTCx+VT0w7d AifqqpMjik2ALxfJpWNRieFgAUnKHZWpOvUEu5hruLglZxz5TyGmF6EiUQ1XZiZc G74cpjVnMYN8vO2n+AyeWG3KGnh0CRRbey2HAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUHFHSFyJOYkVXTaFMy6SODBx2WwswHwYDVR0jBBgwFoAUFCweOZsxNmQg7EfS 4xcbGllluJMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 NS9GQ3dlT1pzeE5tUWc3RWZTNHhjYkdsbGx1Sk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZDd2VPWnN4Tm1RZzdFZlM0eGNiR2xsbHVKTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODUvRkN3ZU9ac3hObVFn N0VmUzR4Y2JHbGxsdUpNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIKJ1rxCW9YcpsrK51gNiX+IVud+IGvb1tQkDF3Iq9V3fqjmY/nrviU030xX FCS6/J+JePhSMsM9cMi8EJk3qc4JBEDQWbXgwpYVSHlu1fq/rHjUdxVPXj8ajHWG txwE8czXqRvoKSYp6jfiXeRxzxJheucTYbb6PCEQQKQWYVZRKKXfxmARfAlARJII jgfiNHJAh4MS9ffw+gWXLTpaLs/MU45Kcus1+RB45u8X8O8V8t7F4TMz1lyy6Gj4 uGJOLyD7Gm1huFZp4OK9SV2cVt7OFc6lzeodItZ9v4adK9M/4bCF+1U3/a/eoxKz DDmiScylGtPFkVsBnmcrScq+82k= -----END CERTIFICATE-----Generated at Sun Sep 7 20:07:28 2025 by rpki-client