$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.mft File: GsVXw8ipMYXVPm0z0FMhVB6qK_Y.mft (raw, json) Hash identifier: SuN4PM99DI8qqYh0jznoMYD9scln87sc9htq7HdT6AI= Subject key identifier: E5:EE:16:F4:40:CD:5F:F0:D1:9C:EF:A4:E8:7D:CE:07:14:31:03:BB Authority key identifier: 1A:C5:57:C3:C8:A9:31:85:D5:3E:6D:33:D0:53:21:54:1E:AA:2B:F6 Certificate issuer: /CN=1AC557C3C8A93185D53E6D33D05321541EAA2BF6 Certificate serial: 16 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.mft Manifest number: 16 Signing time: Mon 08 Sep 2025 04:05:42 +0000 Manifest this update: Mon 08 Sep 2025 04:05:42 +0000 Manifest next update: Mon 08 Sep 2025 10:05:42 +0000 Files and hashes: 1: GsVXw8ipMYXVPm0z0FMhVB6qK_Y.crl (hash: hnjoRtmnlYkHMhw3xhBeE9YzxUulQ6JhjCuKvO0HSyI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC557C3C8A93185D53E6D33D05321541EAA2BF6 Validity Not Before: Sep 8 04:05:42 2025 GMT Not After : Sep 4 01:35:48 2026 GMT Subject: CN=E5EE16F440CD5FF0D19CEFA4E87DCE07143103BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:fb:ad:61:72:52:a5:0f:f4:13:c5:f4:4c: de:d5:03:36:d0:09:5e:af:2b:7b:f0:04:14:9f:64: 67:e7:62:f1:82:14:1f:ac:78:be:b7:97:62:1f:1b: a6:de:92:71:d9:3b:3e:ce:65:f5:ff:0a:90:70:03: 07:58:c7:b2:65:39:f8:b2:f2:97:ca:95:29:6a:34: ad:75:06:03:0c:af:c8:5b:82:57:6e:6f:8d:eb:d5: 44:04:75:6a:42:6c:b0:d3:a1:ad:79:a9:3c:e8:77: 98:a8:3e:2c:e2:7a:62:8c:c9:18:66:a0:92:0f:b4: 5c:9a:3b:bd:c9:c9:15:69:76:22:d6:0f:4a:54:c1: c9:2c:17:88:ae:1a:27:50:d9:16:58:5c:d1:bd:2a: 14:8f:3e:63:ca:81:ef:cd:df:d1:4a:32:74:91:77: a4:e4:c3:e4:36:a2:e4:6c:28:28:2b:44:0a:c3:2d: b4:1e:7e:34:c1:96:bb:f5:a6:e9:09:24:a3:b1:e2: 19:58:81:56:b4:fd:55:2c:d4:07:81:f7:6e:d1:c9: 96:f9:d7:c0:ff:62:ba:c5:0e:a0:50:96:67:4c:ac: ff:86:65:1d:47:3d:ce:7c:a5:df:70:02:27:a6:b5: 77:cb:32:00:8c:f8:52:bd:a5:29:32:11:6e:b2:4a: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EE:16:F4:40:CD:5F:F0:D1:9C:EF:A4:E8:7D:CE:07:14:31:03:BB X509v3 Authority Key Identifier: keyid:1A:C5:57:C3:C8:A9:31:85:D5:3E:6D:33:D0:53:21:54:1E:AA:2B:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3392/GsVXw8ipMYXVPm0z0FMhVB6qK_Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:73:47:05:57:75:59:0e:f4:69:98:5c:64:91:08:98:ef:79: 28:31:b5:39:0e:b3:84:65:fe:ec:4f:25:3e:a3:b9:7d:06:ea: 3b:26:83:b0:a8:42:f2:5e:b1:3a:66:41:2f:37:e0:0b:14:ba: 2e:20:97:3e:b4:58:97:7e:94:5d:88:44:4a:a5:fc:59:6c:f1: 26:d1:a3:8c:d5:02:77:3f:24:27:ed:30:e2:e6:3a:1e:68:94: 2b:73:be:3c:a4:a6:42:b3:f7:6b:44:d6:7c:b1:b5:86:5b:13: 76:a7:dc:9e:92:c3:c7:e3:f9:47:19:32:30:f6:af:cb:c7:be: 96:ab:ef:b4:17:2b:38:b6:3c:70:f2:b7:80:30:bf:73:33:fc: 93:30:9a:64:c5:08:dd:91:ba:1f:33:bf:d7:ba:c1:12:39:dc: 73:ab:eb:f8:d1:02:d7:44:4e:df:b1:d5:b2:72:1a:5c:70:e2: 64:62:c9:b8:f9:6b:92:2c:3c:0c:34:25:f3:bb:a3:b5:de:ac: 5e:4e:4e:be:46:60:26:99:43:e4:6d:21:20:87:c6:52:65:e5: 12:8d:a3:81:b3:40:c5:85:4d:6c:81:cf:6d:d4:13:cf:68:35: 0a:f8:69:d5:4a:94:79:0a:5c:f4:90:87:0a:3d:06:a4:c1:e8: 7a:da:60:0f -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQUM1 NTdDM0M4QTkzMTg1RDUzRTZEMzNEMDUzMjE1NDFFQUEyQkY2MB4XDTI1MDkwODA0 MDU0MloXDTI2MDkwNDAxMzU0OFowMzExMC8GA1UEAxMoRTVFRTE2RjQ0MENENUZG MEQxOUNFRkE0RTg3RENFMDcxNDMxMDNCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUx+61hclKlD/QTxfRM3tUDNtAJXq8re/AEFJ9kZ+di8YIUH6x4 vreXYh8bpt6Scdk7Ps5l9f8KkHADB1jHsmU5+LLyl8qVKWo0rXUGAwyvyFuCV25v jevVRAR1akJssNOhrXmpPOh3mKg+LOJ6YozJGGagkg+0XJo7vcnJFWl2ItYPSlTB ySwXiK4aJ1DZFlhc0b0qFI8+Y8qB783f0UoydJF3pOTD5Dai5GwoKCtECsMttB5+ NMGWu/Wm6Qkko7HiGViBVrT9VSzUB4H3btHJlvnXwP9iusUOoFCWZ0ys/4ZlHUc9 znyl33ACJ6a1d8syAIz4Ur2lKTIRbrJKzcMCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTl7hb0QM1f8NGc76Tofc4HFDEDuzAfBgNVHSMEGDAWgBQaxVfDyKkxhdU+bTPQ UyFUHqor9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzky L0dzVlh3OGlwTVlYVlBtMHowRk1oVkI2cUtfWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvR3NWWHc4aXBNWVhWUG0wejBGTWhWQjZxS19ZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5Mi9Hc1ZYdzhpcE1ZWFZQ bTB6MEZNaFZCNnFLX1kubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3NHBVd1WQ70aZhcZJEImO95KDG1OQ6zhGX+7E8lPqO5fQbqOyaDsKhC8l6x OmZBLzfgCxS6LiCXPrRYl36UXYhESqX8WWzxJtGjjNUCdz8kJ+0w4uY6HmiUK3O+ PKSmQrP3a0TWfLG1hlsTdqfcnpLDx+P5RxkyMPavy8e+lqvvtBcrOLY8cPK3gDC/ czP8kzCaZMUI3ZG6HzO/17rBEjncc6vr+NEC10RO37HVsnIaXHDiZGLJuPlrkiw8 DDQl87ujtd6sXk5OvkZgJplD5G0hIIfGUmXlEo2jgbNAxYVNbIHPbdQTz2g1Cvhp 1UqUeQpc9JCHCj0GpMHoetpgDw== -----END CERTIFICATE-----Generated at Mon Sep 8 05:55:00 2025 by rpki-client