$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.mft File: m8QEseR7zsOsCVFKs8yq609Bh4s.mft (raw, json) Hash identifier: V/wyvpd5kItEKcQBOcj1bTiBSh7eAEviqFZS/JbaIow= Subject key identifier: C9:BA:CC:7E:B0:C1:CB:53:B2:02:E7:DD:83:2A:C7:D7:25:F6:65:FF Authority key identifier: 9B:C4:04:B1:E4:7B:CE:C3:AC:09:51:4A:B3:CC:AA:EB:4F:41:87:8B Certificate issuer: /CN=9BC404B1E47BCEC3AC09514AB3CCAAEB4F41878B Certificate serial: 3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m8QEseR7zsOsCVFKs8yq609Bh4s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.mft Manifest number: 3D Signing time: Mon 08 Sep 2025 04:03:54 +0000 Manifest this update: Mon 08 Sep 2025 04:03:54 +0000 Manifest next update: Mon 08 Sep 2025 10:03:54 +0000 Files and hashes: 1: m8QEseR7zsOsCVFKs8yq609Bh4s.crl (hash: 8RwD/5nOQSH2Ob4dxJjIoCMcTL0Y51P5173sw/CZ+Fs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m8QEseR7zsOsCVFKs8yq609Bh4s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BC404B1E47BCEC3AC09514AB3CCAAEB4F41878B Validity Not Before: Sep 8 04:03:54 2025 GMT Not After : Aug 27 08:25:14 2026 GMT Subject: CN=C9BACC7EB0C1CB53B202E7DD832AC7D725F665FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:3d:0e:73:e4:e6:34:ba:dd:8a:a2:52:65: 9a:30:10:b5:94:a2:f6:8e:84:b4:6a:5d:78:47:ee: b2:ed:8d:24:3e:15:d3:81:8b:29:0d:fe:2b:6d:40: 80:c9:df:67:18:62:53:94:d1:04:da:8a:91:93:ef: 33:c9:85:30:0d:1c:50:e2:43:95:8b:4f:78:c8:25: a7:94:bb:b9:e4:b7:a5:43:eb:27:e1:6d:f4:a6:91: 58:01:b0:21:c8:29:f2:95:52:d7:5d:a4:4f:c5:da: 45:b1:03:dc:b8:02:06:03:40:72:3c:f0:e3:76:a0: 93:9e:3f:6d:92:a8:d9:0b:2d:ed:63:1b:98:42:82: 40:8a:8f:db:19:27:46:00:f9:92:ae:4b:14:86:5a: 1c:4e:83:cb:95:09:f5:e1:14:3f:fe:4e:f4:62:79: d5:71:eb:ef:be:d3:98:c5:88:49:0b:12:ba:3f:db: db:09:ac:49:e3:3c:e0:b7:1b:c4:41:04:8e:30:a1: db:c5:85:44:77:b7:84:69:52:79:ff:61:0f:46:fe: a7:38:66:68:07:a7:38:86:19:d5:5a:76:74:b5:d2: 37:9e:f3:70:b8:db:25:69:93:a1:14:23:b6:cb:d6: 41:bf:15:03:4e:65:a5:8b:af:d2:57:a0:1c:d0:27: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BA:CC:7E:B0:C1:CB:53:B2:02:E7:DD:83:2A:C7:D7:25:F6:65:FF X509v3 Authority Key Identifier: keyid:9B:C4:04:B1:E4:7B:CE:C3:AC:09:51:4A:B3:CC:AA:EB:4F:41:87:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m8QEseR7zsOsCVFKs8yq609Bh4s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/381/m8QEseR7zsOsCVFKs8yq609Bh4s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0e:75:04:4f:0a:8e:01:33:72:47:cc:08:83:fd:dd:8d:9e: 46:da:36:ec:f6:41:81:c9:dd:ab:b3:4f:06:e9:6c:07:c5:4d: c3:77:0f:65:bc:2e:6e:e0:1a:4f:b5:fc:cd:b7:01:b6:d8:c7: 82:7e:02:32:d2:d4:99:8f:1c:f8:de:6b:32:0f:0e:cc:ce:00: bd:b0:ef:d3:8f:39:6d:aa:2b:fd:d9:eb:20:b6:10:63:8d:f7: b6:c2:bb:74:bd:dd:d4:e2:46:ef:31:05:0c:8e:09:83:07:2f: 09:14:bc:c6:b3:d8:49:a5:2d:0b:5b:e8:76:fb:05:df:2e:4c: ea:1b:80:69:68:ef:cd:e0:ce:42:e4:28:17:1f:44:df:3c:45: 97:c5:10:b7:03:35:40:10:ed:62:4b:94:0c:17:65:3c:d0:70: 34:97:b8:db:27:81:b5:2d:8a:70:aa:87:38:d2:80:12:1c:c2: 13:9b:8c:d0:fa:3a:33:a9:f1:6d:62:8a:94:0e:6d:26:5b:22: 79:83:ab:76:c2:aa:46:ac:71:f6:4c:cf:51:bd:d7:ee:84:c1: 31:34:1d:8c:c9:d3:f4:1c:b0:2e:4c:5e:a0:7b:d7:55:ed:be: a4:8d:58:16:7f:ec:f9:30:d0:e9:5e:0f:87:bd:17:1c:7e:68: 11:6e:e7:23 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QkM0 MDRCMUU0N0JDRUMzQUMwOTUxNEFCM0NDQUFFQjRGNDE4NzhCMB4XDTI1MDkwODA0 MDM1NFoXDTI2MDgyNzA4MjUxNFowMzExMC8GA1UEAxMoQzlCQUNDN0VCMEMxQ0I1 M0IyMDJFN0REODMyQUM3RDcyNUY2NjVGRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALPyPQ5z5OY0ut2KolJlmjAQtZSi9o6EtGpdeEfusu2NJD4V04GL KQ3+K21AgMnfZxhiU5TRBNqKkZPvM8mFMA0cUOJDlYtPeMglp5S7ueS3pUPrJ+Ft 9KaRWAGwIcgp8pVS112kT8XaRbED3LgCBgNAcjzw43agk54/bZKo2Qst7WMbmEKC QIqP2xknRgD5kq5LFIZaHE6Dy5UJ9eEUP/5O9GJ51XHr777TmMWISQsSuj/b2wms SeM84LcbxEEEjjCh28WFRHe3hGlSef9hD0b+pzhmaAenOIYZ1Vp2dLXSN57zcLjb JWmToRQjtsvWQb8VA05lpYuv0legHNAnGb8CAwEAAaOCAgowggIGMB0GA1UdDgQW BBTJusx+sMHLU7IC592DKsfXJfZl/zAfBgNVHSMEGDAWgBSbxASx5HvOw6wJUUqz zKrrT0GHizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zODEv bThRRXNlUjd6c09zQ1ZGS3M4eXE2MDlCaDRzLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tOFFFc2VSN3pzT3NDVkZLczh5cTYwOUJoNHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zODEvbThRRXNlUjd6c09zQ1ZG S3M4eXE2MDlCaDRzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AH8OdQRPCo4BM3JHzAiD/d2NnkbaNuz2QYHJ3auzTwbpbAfFTcN3D2W8Lm7gGk+1 /M23AbbYx4J+AjLS1JmPHPjeazIPDszOAL2w79OPOW2qK/3Z6yC2EGON97bCu3S9 3dTiRu8xBQyOCYMHLwkUvMaz2EmlLQtb6Hb7Bd8uTOobgGlo783gzkLkKBcfRN88 RZfFELcDNUAQ7WJLlAwXZTzQcDSXuNsngbUtinCqhzjSgBIcwhObjND6OjOp8W1i ipQObSZbInmDq3bCqkascfZMz1G91+6EwTE0HYzJ0/QcsC5MXqB711XtvqSNWBZ/ 7Pkw0OleD4e9Fxx+aBFu5yM= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:18 2025 by rpki-client