$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft File: QfzZUdjNh-WF4Cc23dlPpCcqw70.mft (raw, json) Hash identifier: zub0wZ3spdknzV2IQy1xNEbfn/fGJETtu0jgpzK8lLM= Subject key identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC Authority key identifier: 41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD Certificate issuer: /CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Certificate serial: 47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft Manifest number: 47 Signing time: Mon 08 Sep 2025 04:03:24 +0000 Manifest this update: Mon 08 Sep 2025 04:03:24 +0000 Manifest next update: Mon 08 Sep 2025 10:03:24 +0000 Files and hashes: 1: QfzZUdjNh-WF4Cc23dlPpCcqw70.crl (hash: xBNKzu+8DvPvnPzd6cNbsS/CVHCSytWc3g2gV7ntEQc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Validity Not Before: Sep 8 04:03:24 2025 GMT Not After : Aug 25 02:07:51 2026 GMT Subject: CN=8655254ADD036D7B08B936476485F6CCC77088BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:86:3e:66:19:d6:5d:f7:d4:f4:34:a7:5b: f8:0a:bc:6d:cd:97:03:fb:4f:65:5c:9b:30:e6:06: 11:f7:42:c1:60:c0:08:8e:b6:2e:15:70:1c:79:02: 48:32:17:9f:c8:b4:e5:0f:1f:98:49:86:b3:ae:e9: ca:b7:2b:19:0a:46:1f:04:f6:54:b1:16:92:71:6c: 7d:5b:df:2e:f3:57:83:e1:de:de:a1:99:bf:f6:dc: da:66:3c:dc:18:b6:68:fd:29:f0:cd:7d:51:06:57: 2c:5e:0c:6f:10:9b:74:d4:68:bd:97:00:51:7e:e7: e4:98:37:8d:c7:e7:6f:e7:e1:b7:61:bf:e7:fd:3f: b8:bf:68:43:98:78:f4:b8:11:98:15:6e:ce:3c:92: 61:ff:df:35:4a:45:d7:d1:39:3d:52:48:4e:58:40: 44:81:86:8c:39:39:e9:f2:0e:7c:e7:a4:c9:4e:c4: 7b:cd:9e:56:b1:7f:be:e2:24:bc:ca:a1:5b:29:3a: 2b:2e:7f:cf:de:12:ed:2c:d8:45:e6:40:5d:e2:5f: eb:8c:b0:42:75:da:a3:3f:da:62:3f:f1:1c:67:d3: 22:a6:35:90:86:8d:b0:f9:43:a6:29:6b:94:42:c6: b1:5e:fa:e8:c7:18:8a:ef:3c:b5:47:90:dc:2b:77: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC X509v3 Authority Key Identifier: keyid:41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:94:7d:00:c9:00:70:82:73:16:90:8e:ab:6a:63:9d:bd:e7: a7:e6:10:1a:68:f3:a7:ea:bf:8f:42:a3:b8:c9:75:aa:9a:24: 5c:e5:37:50:56:84:ca:6f:e6:7b:6d:83:b8:d6:51:d7:19:c4: 84:7d:47:ce:f6:61:62:dc:e0:cf:5a:98:cc:39:e7:32:ef:10: 10:3e:28:e0:65:7a:45:d8:db:91:d0:e0:1d:09:05:4b:a5:a0: 5d:14:af:6f:59:fe:23:6f:aa:4a:30:e6:77:17:70:b1:11:8c: 72:81:88:46:81:eb:d4:dc:52:c4:7f:7b:f9:2d:f5:ab:e7:4e: 39:9f:eb:2e:fd:30:05:df:3e:dc:37:02:13:d0:37:21:ea:97: 81:a3:12:9d:46:24:63:71:e8:da:f7:13:68:c3:4c:62:21:dc: bb:8c:3b:8c:36:b9:b5:f7:5c:55:f0:af:3b:08:bf:3a:e1:b7: dd:f2:77:b7:10:d5:35:8d:48:b1:54:5b:5d:f0:af:da:bb:6f: 95:e9:44:79:25:5c:fe:ae:54:52:97:5f:a7:29:ed:a7:9f:7b: 36:12:05:0d:e4:28:a6:ea:96:24:ec:ee:e7:2a:d6:41:c5:72: f1:33:77:53:16:5d:28:89:43:27:39:33:de:8d:94:f0:84:d2: a9:ee:10:e8 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MUZD RDk1MUQ4Q0Q4N0U1ODVFMDI3MzZEREQ5NEZBNDI3MkFDM0JEMB4XDTI1MDkwODA0 MDMyNFoXDTI2MDgyNTAyMDc1MVowMzExMC8GA1UEAxMoODY1NTI1NEFERDAzNkQ3 QjA4QjkzNjQ3NjQ4NUY2Q0NDNzcwODhCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOcZhj5mGdZd99T0NKdb+Aq8bc2XA/tPZVybMOYGEfdCwWDACI62 LhVwHHkCSDIXn8i05Q8fmEmGs67pyrcrGQpGHwT2VLEWknFsfVvfLvNXg+He3qGZ v/bc2mY83Bi2aP0p8M19UQZXLF4MbxCbdNRovZcAUX7n5Jg3jcfnb+fht2G/5/0/ uL9oQ5h49LgRmBVuzjySYf/fNUpF19E5PVJITlhARIGGjDk56fIOfOekyU7Ee82e VrF/vuIkvMqhWyk6Ky5/z94S7SzYReZAXeJf64ywQnXaoz/aYj/xHGfTIqY1kIaN sPlDpilrlELGsV766McYiu88tUeQ3Ct3m18CAwEAAaOCAgowggIGMB0GA1UdDgQW BBSGVSVK3QNtewi5NkdkhfbMx3CIvDAfBgNVHSMEGDAWgBRB/NlR2M2H5YXgJzbd 2U+kJyrDvTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80MDkv UWZ6WlVkak5oLVdGNENjMjNkbFBwQ2NxdzcwLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9RZnpaVWRqTmgtV0Y0Q2MyM2RsUHBDY3F3NzAuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80MDkvUWZ6WlVkak5oLVdGNENj MjNkbFBwQ2NxdzcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AAmUfQDJAHCCcxaQjqtqY52956fmEBpo86fqv49Co7jJdaqaJFzlN1BWhMpv5ntt g7jWUdcZxIR9R872YWLc4M9amMw55zLvEBA+KOBlekXY25HQ4B0JBUuloF0Ur29Z /iNvqkow5ncXcLERjHKBiEaB69TcUsR/e/kt9avnTjmf6y79MAXfPtw3AhPQNyHq l4GjEp1GJGNx6Nr3E2jDTGIh3LuMO4w2ubX3XFXwrzsIvzrht93yd7cQ1TWNSLFU W13wr9q7b5XpRHklXP6uVFKXX6cp7aefezYSBQ3kKKbqliTs7ucq1kHFcvEzd1MW XSiJQyc5M96NlPCE0qnuEOg= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:28 2025 by rpki-client