$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft File: R2fj9DSSQBFPCs03VtVATczdRXg.mft (raw, json) Hash identifier: qBVR8rXmKkFaudw5N/UuKBBSv//DwVTxL2XJz2XQjrY= Subject key identifier: E8:9D:CF:53:FF:1B:FB:2D:40:A3:CC:25:7C:63:BD:59:CA:E3:8B:2A Authority key identifier: 47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78 Certificate issuer: /CN=4767E3F4349240114F0ACD3756D5404DCCDD4578 Certificate serial: 1E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft Manifest number: 1E Signing time: Mon 08 Sep 2025 01:03:55 +0000 Manifest this update: Mon 08 Sep 2025 01:03:55 +0000 Manifest next update: Mon 08 Sep 2025 07:03:55 +0000 Files and hashes: 1: R2fj9DSSQBFPCs03VtVATczdRXg.crl (hash: NCAh27IbVxbd+0o/JjLOwyCcMxldWTtM4NSWAiQRKSI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4767E3F4349240114F0ACD3756D5404DCCDD4578 Validity Not Before: Sep 8 01:03:55 2025 GMT Not After : Sep 2 11:00:59 2026 GMT Subject: CN=E89DCF53FF1BFB2D40A3CC257C63BD59CAE38B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:e1:c7:d6:8b:17:9e:26:1b:f9:aa:5c:fe: 0b:3d:ad:7d:89:4d:51:22:3f:5b:3e:11:55:67:28: 42:1c:08:17:68:c9:78:26:ec:be:03:06:40:33:f4: ef:18:78:2d:30:e4:b0:da:53:4c:1e:86:ca:eb:1a: 61:17:4e:85:05:a3:8d:94:ef:6a:f3:c1:d0:cf:df: 65:91:e5:f2:e2:10:5e:18:32:07:79:67:b5:32:5d: 0b:8f:de:d8:13:c3:15:35:4c:bf:31:ac:17:7d:05: 70:0a:bc:30:c6:6f:64:90:3c:f1:3d:e3:fa:fc:76: 01:85:61:91:a7:e2:e5:14:c9:02:36:a3:b1:e7:1e: 4e:74:ab:75:20:7c:e4:34:98:49:21:f7:0c:42:fa: c7:98:ec:c4:68:e8:a8:5f:1c:ad:8a:ab:93:d8:f4: ba:f8:fd:41:68:f4:1d:ce:79:f3:91:50:ac:bb:e4: de:37:1e:61:48:4f:94:ca:2d:db:63:c7:e0:65:45: e4:2c:7a:54:dd:cf:61:3a:85:2f:65:9f:dc:ba:d6: 7d:2e:1c:d1:b7:41:b4:de:6d:f5:88:19:82:a6:d1: 60:9b:35:e9:82:5e:49:c1:16:c1:3a:89:36:f6:25: 58:09:70:4f:bc:ff:cf:f8:e4:7d:e5:23:7c:b3:4d: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9D:CF:53:FF:1B:FB:2D:40:A3:CC:25:7C:63:BD:59:CA:E3:8B:2A X509v3 Authority Key Identifier: keyid:47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:96:5e:23:29:63:8d:11:b4:2c:da:23:c9:e3:f1:37:9f:ee: fb:cc:d0:72:7c:b1:d6:d7:eb:69:a1:6a:d1:05:86:3e:b3:8d: fb:fa:78:d4:33:bf:5c:09:99:8c:25:5a:81:f8:d4:2c:9d:7e: d1:55:c1:3e:0d:c4:8f:79:ea:58:72:19:fe:04:f3:6f:fc:a5: 03:5f:af:f5:3f:ea:bb:b8:ee:33:43:df:d6:b6:1f:bd:93:68: 5d:94:83:fe:c1:91:bf:c4:21:d7:cf:91:15:11:dc:c5:68:4d: 17:81:f8:96:d0:24:15:b3:dd:0c:5f:26:93:96:ee:1f:1b:14: e7:c6:b1:28:17:80:95:67:f0:6d:84:8f:6f:be:14:6e:c0:7d: 16:65:e5:be:fe:6d:80:d7:35:dc:8a:d6:57:d1:d3:be:d0:9e: 62:78:fb:60:5d:8b:9c:c4:9f:06:d1:2f:fb:b1:c4:18:4b:bb: e5:ae:95:9a:53:d8:28:e6:aa:de:76:76:22:3f:66:0b:8d:c7: 5e:eb:44:c7:40:19:d2:5d:c9:e9:9a:0c:13:67:6a:7d:b5:22: f2:5e:92:3f:8c:90:cc:80:ae:70:25:40:6c:0f:74:67:35:d4: 6f:b6:bc:3b:61:64:f3:5b:17:94:82:d2:0e:4e:df:56:78:3d: ae:ea:94:03 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NzY3 RTNGNDM0OTI0MDExNEYwQUNEMzc1NkQ1NDA0RENDREQ0NTc4MB4XDTI1MDkwODAx MDM1NVoXDTI2MDkwMjExMDA1OVowMzExMC8GA1UEAxMoRTg5RENGNTNGRjFCRkIy RDQwQTNDQzI1N0M2M0JENTlDQUUzOEIyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALgt4cfWixeeJhv5qlz+Cz2tfYlNUSI/Wz4RVWcoQhwIF2jJeCbs vgMGQDP07xh4LTDksNpTTB6GyusaYRdOhQWjjZTvavPB0M/fZZHl8uIQXhgyB3ln tTJdC4/e2BPDFTVMvzGsF30FcAq8MMZvZJA88T3j+vx2AYVhkafi5RTJAjajsece TnSrdSB85DSYSSH3DEL6x5jsxGjoqF8crYqrk9j0uvj9QWj0Hc5585FQrLvk3jce YUhPlMot22PH4GVF5Cx6VN3PYTqFL2Wf3LrWfS4c0bdBtN5t9YgZgqbRYJs16YJe ScEWwTqJNvYlWAlwT7z/z/jkfeUjfLNNRDkCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTonc9T/xv7LUCjzCV8Y71ZyuOLKjAfBgNVHSMEGDAWgBRHZ+P0NJJAEU8KzTdW 1UBNzN1FeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzkx L1IyZmo5RFNTUUJGUENzMDNWdFZBVGN6ZFJYZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUjJmajlEU1NRQkZQQ3MwM1Z0VkFUY3pkUlhnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5MS9SMmZqOURTU1FCRlBD czAzVnRWQVRjemRSWGcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL5ZeIyljjRG0LNojyePxN5/u+8zQcnyx1tfraaFq0QWGPrON+/p41DO/XAmZ jCVagfjULJ1+0VXBPg3Ej3nqWHIZ/gTzb/ylA1+v9T/qu7juM0Pf1rYfvZNoXZSD /sGRv8Qh18+RFRHcxWhNF4H4ltAkFbPdDF8mk5buHxsU58axKBeAlWfwbYSPb74U bsB9FmXlvv5tgNc13IrWV9HTvtCeYnj7YF2LnMSfBtEv+7HEGEu75a6VmlPYKOaq 3nZ2Ij9mC43HXutEx0AZ0l3J6ZoME2dqfbUi8l6SP4yQzICucCVAbA90ZzXUb7a8 O2Fk81sXlILSDk7fVng9ruqUAw== -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:15 2025 by rpki-client