$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft File: JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft (raw, json) Hash identifier: +PHUiCCVisNkyiLdaCW/a2XzVoUBvwX8A4oEF/bbItg= Subject key identifier: C4:3C:B3:90:F5:4C:CC:B6:2C:B3:90:41:3F:A4:36:97:89:41:74:77 Authority key identifier: 24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7 Certificate issuer: /CN=240ED9E7AD0A83829D8F1A990C9FF94D6A106ED7 Certificate serial: 47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft Manifest number: 44 Signing time: Mon 08 Sep 2025 04:05:07 +0000 Manifest this update: Mon 08 Sep 2025 04:05:07 +0000 Manifest next update: Mon 08 Sep 2025 10:05:07 +0000 Files and hashes: 1: JA7Z560Kg4KdjxqZDJ_5TWoQbtc.crl (hash: W2tUOcdOBMw0SLmBkHK3HM20L7wXJzEn7fGB3YFNd9I=) 2: hPehaI9ioj5n5BSZZ9gIXEVWvxw.roa (hash: JMqirG+qi0YHmDsq55XQSzUCtB+BE2gTtVx+nHzV4Sg=) 3: sa3luU9UeUL06Ib0LWq2kOckxFg.roa (hash: 6s7ATAKOtk2+EttjdCrwuFOZjWqvfVZg0zYuufVKk7A=) 4: uVEAKOrOie3LMJDWDVWn4PD-RrY.roa (hash: wq3kbTxQOLfauTr4JujFCoAVcaIROufsrnbX/Io0m6w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240ED9E7AD0A83829D8F1A990C9FF94D6A106ED7 Validity Not Before: Sep 8 04:05:07 2025 GMT Not After : Aug 26 01:18:16 2026 GMT Subject: CN=C43CB390F54CCCB62CB390413FA4369789417477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:f1:92:6a:88:06:85:1b:82:17:80:36:6f: 4d:26:f9:8a:97:a1:1d:be:18:73:31:61:ee:41:e4: ae:e2:b9:fd:85:71:e6:ba:d0:03:79:aa:4c:30:4a: cd:51:ba:4d:e6:83:a7:95:b7:52:85:41:56:d1:a7: e7:a5:c8:fb:ee:cd:2f:16:d9:ba:de:17:34:bc:77: f7:56:14:a3:c4:31:ef:4c:3d:26:ea:73:ad:52:06: f7:5c:dd:23:80:17:7f:d9:54:98:92:97:ee:05:9d: 4a:7a:ca:3e:4f:83:f0:df:cc:e8:d4:89:e8:71:0f: d3:61:63:bb:d5:0b:63:38:71:42:34:ca:f4:eb:96: 5b:a1:67:55:51:31:cc:20:a0:54:47:24:98:c9:13: ae:ef:07:7a:08:56:f8:af:c1:eb:f0:35:02:14:b3: 9d:54:bd:c1:51:e9:e0:ad:9b:fa:43:ba:67:68:ec: f0:a7:0f:63:6a:fc:9a:d0:6c:63:e8:1d:74:aa:88: 25:44:2c:7e:ee:ae:a0:ee:98:1c:63:f5:c5:c0:d9: 42:62:f6:cb:dc:93:74:ee:88:26:ca:4d:27:4b:0a: c1:44:96:b2:52:2c:0a:ba:4c:6e:d7:0d:3e:67:e5: 01:e6:aa:1f:3a:42:e7:43:61:7b:77:bb:d2:f8:b3: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3C:B3:90:F5:4C:CC:B6:2C:B3:90:41:3F:A4:36:97:89:41:74:77 X509v3 Authority Key Identifier: keyid:24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:24:2c:a2:26:07:72:3b:c5:18:99:c6:fc:2b:7c:55:a8:5b: de:db:8f:ee:28:9e:82:90:a5:47:5a:77:78:a7:c7:79:72:29: 18:a4:37:8f:7d:1f:b5:90:38:f9:18:20:82:13:b8:78:f2:6b: 31:d1:06:9c:b5:83:99:34:94:bf:81:74:9c:ab:b7:a3:0d:d1: 1c:32:00:f6:4b:b5:36:b8:fa:99:38:14:17:bd:bd:65:38:f6: ac:05:d6:cc:61:35:7e:28:7e:09:12:d8:ee:e3:91:83:2f:85: 3f:01:47:9d:39:5e:47:a2:00:06:5c:eb:6a:97:be:1a:eb:eb: db:6e:34:c6:2f:02:b2:dd:49:d2:c2:45:d0:12:b0:d7:e5:64: 2c:b2:1a:e2:49:19:2a:a3:98:9b:cb:08:66:1c:78:76:d2:4c: 2c:b0:35:23:83:27:37:fe:3a:01:51:be:d7:77:84:1f:4f:aa: 6b:65:f2:db:ef:7e:48:82:70:0c:ab:ac:6b:46:e4:d9:6a:8d: a1:7d:09:51:7a:a2:c2:ac:a0:e6:39:2e:24:2f:67:4f:5f:2a: 73:c6:f9:07:2d:1d:91:09:42:b9:33:9f:4d:a0:8b:d8:ac:06: 9b:6f:44:4a:5e:a3:b3:cb:2d:fb:f9:5f:68:01:1c:20:b8:35: 06:d6:de:6e -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNDBF RDlFN0FEMEE4MzgyOUQ4RjFBOTkwQzlGRjk0RDZBMTA2RUQ3MB4XDTI1MDkwODA0 MDUwN1oXDTI2MDgyNjAxMTgxNlowMzExMC8GA1UEAxMoQzQzQ0IzOTBGNTRDQ0NC NjJDQjM5MDQxM0ZBNDM2OTc4OTQxNzQ3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANGw8ZJqiAaFG4IXgDZvTSb5ipehHb4YczFh7kHkruK5/YVx5rrQ A3mqTDBKzVG6TeaDp5W3UoVBVtGn56XI++7NLxbZut4XNLx391YUo8Qx70w9Jupz rVIG91zdI4AXf9lUmJKX7gWdSnrKPk+D8N/M6NSJ6HEP02Fju9ULYzhxQjTK9OuW W6FnVVExzCCgVEckmMkTru8HeghW+K/B6/A1AhSznVS9wVHp4K2b+kO6Z2js8KcP Y2r8mtBsY+gddKqIJUQsfu6uoO6YHGP1xcDZQmL2y9yTdO6IJspNJ0sKwUSWslIs CrpMbtcNPmflAeaqHzpC50Nhe3e70vizPwcCAwEAAaOCAgowggIGMB0GA1UdDgQW BBTEPLOQ9UzMtiyzkEE/pDaXiUF0dzAfBgNVHSMEGDAWgBQkDtnnrQqDgp2PGpkM n/lNahBu1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDQv SkE3WjU2MEtnNEtkanhxWkRKXzVUV29RYnRjLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9KQTdaNTYwS2c0S2RqeHFaREpfNVRXb1FidGMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDQvSkE3WjU2MEtnNEtkanhx WkRKXzVUV29RYnRjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AA0kLKImB3I7xRiZxvwrfFWoW97bj+4onoKQpUdad3inx3lyKRikN499H7WQOPkY IIITuHjyazHRBpy1g5k0lL+BdJyrt6MN0RwyAPZLtTa4+pk4FBe9vWU49qwF1sxh NX4ofgkS2O7jkYMvhT8BR505XkeiAAZc62qXvhrr69tuNMYvArLdSdLCRdASsNfl ZCyyGuJJGSqjmJvLCGYceHbSTCywNSODJzf+OgFRvtd3hB9Pqmtl8tvvfkiCcAyr rGtG5NlqjaF9CVF6osKsoOY5LiQvZ09fKnPG+QctHZEJQrkzn02gi9isBptvREpe o7PLLfv5X2gBHCC4NQbW3m4= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:11 2025 by rpki-client