$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft File: bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft (raw, json) Hash identifier: pNDnIzV1S4Miacz6CqWrcFW2r2H3Tq82KIaT+rHAQGk= Subject key identifier: 22:AE:15:C1:97:AB:3D:61:52:56:34:13:4E:D6:0B:38:12:C4:5A:7C Authority key identifier: 6C:93:8B:37:1E:9E:AA:3F:BA:5C:FC:86:37:ED:A3:2D:2F:4F:A3:0E Certificate issuer: /CN=6C938B371E9EAA3FBA5CFC8637EDA32D2F4FA30E Certificate serial: 3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bJOLNx6eqj-6XPyGN-2jLS9Pow4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft Manifest number: 3D Signing time: Mon 08 Sep 2025 04:03:53 +0000 Manifest this update: Mon 08 Sep 2025 04:03:53 +0000 Manifest next update: Mon 08 Sep 2025 10:03:53 +0000 Files and hashes: 1: bJOLNx6eqj-6XPyGN-2jLS9Pow4.crl (hash: r54osiMuDdMxhr2N1W1GtFzD9b56NFeSJFMe/oOvi6k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bJOLNx6eqj-6XPyGN-2jLS9Pow4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C938B371E9EAA3FBA5CFC8637EDA32D2F4FA30E Validity Not Before: Sep 8 04:03:53 2025 GMT Not After : Aug 27 07:48:07 2026 GMT Subject: CN=22AE15C197AB3D61525634134ED60B3812C45A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:67:6d:d6:a8:24:d7:84:f3:29:86:48:f3: 66:4d:fa:7e:67:55:e1:e2:7e:ac:ae:e1:5b:f6:76: 9f:19:f5:a1:db:94:e8:ee:6c:42:7a:5c:fd:c4:29: 2b:f1:c8:3b:9c:80:77:2f:43:72:7e:74:63:db:05: 1f:29:00:8a:81:f2:3f:99:0c:37:46:18:f2:76:b9: cd:59:c7:92:b8:91:89:c4:74:37:ee:8e:18:d5:0e: b8:c0:32:41:fd:f6:67:04:f4:cd:56:d0:35:9a:3d: 4c:97:ed:72:ec:d2:e1:08:9e:e2:b8:29:44:ee:23: 37:3b:79:29:79:98:3e:56:cc:dc:71:67:d5:67:95: 06:5f:a6:63:9e:86:16:d1:5a:42:b4:26:13:fc:46: c4:cf:e1:cb:f1:d2:96:20:d4:78:20:57:0e:78:32: ee:8f:0f:ec:40:b3:09:d2:7b:c9:11:fc:81:da:69: 58:6f:7d:ef:2e:72:51:45:bc:96:12:5d:2c:a3:06: d2:8c:bf:7a:db:73:3b:55:93:41:1f:45:ee:c4:c8: 99:52:f6:38:85:cf:6e:aa:c3:ed:d1:67:87:38:f9: 7a:99:c2:b1:25:b2:b8:9b:4e:ca:38:9e:a1:4c:a4: 25:c6:da:bf:ca:e8:51:72:5e:27:fc:29:c3:1e:18: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AE:15:C1:97:AB:3D:61:52:56:34:13:4E:D6:0B:38:12:C4:5A:7C X509v3 Authority Key Identifier: keyid:6C:93:8B:37:1E:9E:AA:3F:BA:5C:FC:86:37:ED:A3:2D:2F:4F:A3:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bJOLNx6eqj-6XPyGN-2jLS9Pow4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/465/bJOLNx6eqj-6XPyGN-2jLS9Pow4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e3:38:5c:1f:c4:39:07:c1:fd:b7:5d:63:22:9c:3e:fb:70: 24:06:f9:d1:09:1d:0a:a5:1d:22:d8:8c:28:8b:9d:ac:ba:a6: 4b:7f:ec:94:b5:7a:67:b2:d9:80:d4:56:74:ed:2c:de:2d:c2: 53:58:bd:04:a4:00:ba:a0:f0:d7:12:bd:88:d1:cb:5f:fa:56: fc:ed:be:c4:fa:8a:5e:a5:c6:28:83:6d:ff:a0:49:a3:c4:70: 9a:d9:c7:2b:1e:fa:2c:65:81:0b:dd:ee:3c:7c:54:75:bc:28: c1:f8:f6:16:c3:64:b0:7e:34:cb:a1:a0:41:3e:0f:cc:01:53: 64:44:46:88:bb:81:74:6d:dd:78:96:91:40:39:87:87:68:db: f4:2a:2b:c7:2c:99:fd:17:1d:d8:d4:a4:16:ef:03:87:62:44: d5:23:ea:e9:61:8c:8a:e3:18:cc:1d:12:46:11:7b:8b:7b:78: 35:fa:0e:c3:0c:52:b6:dc:17:d3:ed:93:15:c3:fe:f6:7a:55: 28:6a:e3:43:33:9c:bc:4c:ef:88:9a:29:53:4b:7d:8e:73:a7: 83:82:f8:83:2e:9e:ef:7b:2b:6c:f7:d9:f7:93:74:e9:e2:fb: 1f:5b:22:a8:57:a2:26:03:ad:ff:2d:f2:2e:e4:a0:2c:e2:0f: ea:4d:83:9e -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Qzkz OEIzNzFFOUVBQTNGQkE1Q0ZDODYzN0VEQTMyRDJGNEZBMzBFMB4XDTI1MDkwODA0 MDM1M1oXDTI2MDgyNzA3NDgwN1owMzExMC8GA1UEAxMoMjJBRTE1QzE5N0FCM0Q2 MTUyNTYzNDEzNEVENjBCMzgxMkM0NUE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMcYZ23WqCTXhPMphkjzZk36fmdV4eJ+rK7hW/Z2nxn1oduU6O5s Qnpc/cQpK/HIO5yAdy9Dcn50Y9sFHykAioHyP5kMN0YY8na5zVnHkriRicR0N+6O GNUOuMAyQf32ZwT0zVbQNZo9TJftcuzS4Qie4rgpRO4jNzt5KXmYPlbM3HFn1WeV Bl+mY56GFtFaQrQmE/xGxM/hy/HSliDUeCBXDngy7o8P7ECzCdJ7yRH8gdppWG99 7y5yUUW8lhJdLKMG0oy/ettzO1WTQR9F7sTImVL2OIXPbqrD7dFnhzj5epnCsSWy uJtOyjieoUykJcbav8roUXJeJ/wpwx4Y8zECAwEAAaOCAgowggIGMB0GA1UdDgQW BBQirhXBl6s9YVJWNBNO1gs4EsRafDAfBgNVHSMEGDAWgBRsk4s3Hp6qP7pc/IY3 7aMtL0+jDjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80NjUv YkpPTE54NmVxai02WFB5R04tMmpMUzlQb3c0LmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9iSk9MTng2ZXFqLTZYUHlHTi0yakxTOVBvdzQuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80NjUvYkpPTE54NmVxai02WFB5 R04tMmpMUzlQb3c0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AFfjOFwfxDkHwf23XWMinD77cCQG+dEJHQqlHSLYjCiLnay6pkt/7JS1emey2YDU VnTtLN4twlNYvQSkALqg8NcSvYjRy1/6VvztvsT6il6lxiiDbf+gSaPEcJrZxyse +ixlgQvd7jx8VHW8KMH49hbDZLB+NMuhoEE+D8wBU2RERoi7gXRt3XiWkUA5h4do 2/QqK8csmf0XHdjUpBbvA4diRNUj6ulhjIrjGMwdEkYRe4t7eDX6DsMMUrbcF9Pt kxXD/vZ6VShq40MznLxM74iaKVNLfY5zp4OC+IMunu97K2z32feTdOni+x9bIqhX oiYDrf8t8i7koCziD+pNg54= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:29 2025 by rpki-client