$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft File: k3fSYykHgztKOfdV9B9C-yOpSdI.mft (raw, json) Hash identifier: F6uopHFyRUEF61iL35tMISkbhS8tHwOcRJs+fl3IQ9E= Subject key identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 Authority key identifier: 93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 Certificate issuer: /CN=9377D2632907833B4A39F755F41F42FB23A949D2 Certificate serial: 67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft Manifest number: 67 Signing time: Mon 08 Sep 2025 01:03:52 +0000 Manifest this update: Mon 08 Sep 2025 01:03:52 +0000 Manifest next update: Mon 08 Sep 2025 07:03:52 +0000 Files and hashes: 1: k3fSYykHgztKOfdV9B9C-yOpSdI.crl (hash: /IwaEVuZ/CgswIs8PIVheLe2RMHMCo+lbImFRxb1YEY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9377D2632907833B4A39F755F41F42FB23A949D2 Validity Not Before: Sep 8 01:03:52 2025 GMT Not After : Aug 18 08:08:12 2026 GMT Subject: CN=F4853C9CB5E88A02A1505C2C9283A34FC9C12BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:4e:39:6b:2a:a1:1c:72:5c:27:a3:6e:3b: 20:90:90:4c:62:e2:b5:7a:60:66:52:71:04:9f:3a: 0d:70:d7:23:c4:be:48:6b:f8:68:13:e9:ae:c7:2f: c6:11:3e:7f:f7:f0:2d:33:e5:30:f7:91:44:9c:4d: a6:d0:a1:ae:b0:ad:67:f6:51:3e:09:7b:d5:58:da: ff:ac:ee:67:85:78:f1:c6:5d:2a:00:f4:85:6e:1d: b0:d2:98:a9:9c:d4:e7:e3:0a:39:03:45:27:26:e0: 34:01:46:e4:36:3f:26:13:ea:20:10:c8:9d:a6:28: 43:db:cd:e7:d8:e4:50:38:7f:b5:73:25:86:76:01: 08:75:c7:27:56:9f:f6:23:07:ee:09:05:a6:e3:9b: c0:4a:ee:01:f3:b0:48:49:b9:e0:c6:98:d1:a7:c5: 87:b0:dd:45:60:9b:7c:0c:32:7b:b0:27:20:ee:14: a3:79:58:0d:e4:c4:f5:1b:36:b1:aa:65:c6:eb:ec: 9f:9a:42:19:5e:e0:5f:97:29:9d:a4:09:e2:59:5d: 84:ec:ff:47:24:b8:85:c2:00:0e:23:c0:57:8e:e3: b6:e3:a2:42:3a:06:19:1f:2f:ea:df:b7:77:11:7a: 5d:34:8b:16:de:2c:2c:c3:b1:36:5a:34:d6:b8:45: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 X509v3 Authority Key Identifier: keyid:93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:08:27:db:78:2b:0a:3f:75:a7:d5:15:9e:52:54:94:68:55: 47:4c:4f:ce:52:44:b2:0c:ba:cc:68:d0:3d:d6:fd:29:d2:87: e9:c2:64:14:8a:bb:ab:73:cb:03:8b:ae:9a:ce:86:58:4c:ee: e6:55:95:72:47:ca:62:f3:f8:7d:d7:ec:5a:0c:13:fa:15:5f: 64:37:63:1e:95:91:84:0c:66:4f:db:3a:dd:40:87:f3:7f:69: a0:da:b5:ac:7b:e2:8c:f1:bb:e2:54:fe:a5:96:9d:e9:e7:ce: 7f:6f:a8:a6:95:c3:82:f4:11:d2:09:10:a3:d5:b1:b6:22:c1: 7a:28:ec:41:c3:3c:06:18:47:4e:d6:5e:18:10:30:1c:56:ed: f6:a8:80:b6:61:a5:60:d7:cd:cb:a9:9e:2e:1a:dc:75:ed:13: 2c:3d:d4:cf:c6:19:06:d7:9f:e1:d4:4b:b8:5a:f6:a5:57:54: 58:d3:a4:f4:f0:65:89:9d:1e:7a:a8:bb:b9:b4:02:3b:fa:d2: 66:d9:00:6e:75:18:a7:7b:03:52:74:f0:b9:22:31:40:f9:0c: a9:72:9d:a0:d7:16:6d:57:97:15:0d:57:ad:92:22:8c:2b:95: 09:5a:03:d4:37:26:cf:1b:89:87:73:e4:b9:59:02:86:b3:c4: 80:a4:31:20 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Mzc3 RDI2MzI5MDc4MzNCNEEzOUY3NTVGNDFGNDJGQjIzQTk0OUQyMB4XDTI1MDkwODAx MDM1MloXDTI2MDgxODA4MDgxMlowMzExMC8GA1UEAxMoRjQ4NTNDOUNCNUU4OEEw MkExNTA1QzJDOTI4M0EzNEZDOUMxMkJGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMdkTjlrKqEcclwno247IJCQTGLitXpgZlJxBJ86DXDXI8S+SGv4 aBPprscvxhE+f/fwLTPlMPeRRJxNptChrrCtZ/ZRPgl71Vja/6zuZ4V48cZdKgD0 hW4dsNKYqZzU5+MKOQNFJybgNAFG5DY/JhPqIBDInaYoQ9vN59jkUDh/tXMlhnYB CHXHJ1af9iMH7gkFpuObwEruAfOwSEm54MaY0afFh7DdRWCbfAwye7AnIO4Uo3lY DeTE9Rs2saplxuvsn5pCGV7gX5cpnaQJ4lldhOz/RyS4hcIADiPAV47jtuOiQjoG GR8v6t+3dxF6XTSLFt4sLMOxNlo01rhFhMkCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBT0hTycteiKAqFQXCySg6NPycEr8TAfBgNVHSMEGDAWgBSTd9JjKQeDO0o591X0 H0L7I6lJ0jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzg4 L2szZlNZeWtIZ3p0S09mZFY5QjlDLXlPcFNkSS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvazNmU1l5a0hnenRLT2ZkVjlCOUMteU9wU2RJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4OC9rM2ZTWXlrSGd6dEtP ZmRWOUI5Qy15T3BTZEkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVQgn23grCj91p9UVnlJUlGhVR0xPzlJEsgy6zGjQPdb9KdKH6cJkFIq7q3PL A4uums6GWEzu5lWVckfKYvP4fdfsWgwT+hVfZDdjHpWRhAxmT9s63UCH839poNq1 rHvijPG74lT+pZad6efOf2+oppXDgvQR0gkQo9WxtiLBeijsQcM8BhhHTtZeGBAw HFbt9qiAtmGlYNfNy6meLhrcde0TLD3Uz8YZBtef4dRLuFr2pVdUWNOk9PBliZ0e eqi7ubQCO/rSZtkAbnUYp3sDUnTwuSIxQPkMqXKdoNcWbVeXFQ1XrZIijCuVCVoD 1DcmzxuJh3PkuVkChrPEgKQxIA== -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:31 2025 by rpki-client