$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft File: rvnRXVUWBDHU9wnoqjo61bzM1uU.mft (raw, json) Hash identifier: s7KgJeLQ/nfvwQJGlEVtQ4np2XzsVaVrPKvDYkWMAEM= Subject key identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 Authority key identifier: AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 Certificate issuer: /CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Certificate serial: 172A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft Manifest number: 1729 Signing time: Mon 08 Sep 2025 04:05:02 +0000 Manifest this update: Mon 08 Sep 2025 04:05:02 +0000 Manifest next update: Mon 08 Sep 2025 10:05:02 +0000 Files and hashes: 1: rvnRXVUWBDHU9wnoqjo61bzM1uU.crl (hash: PFvtXzgM03Qswetienayadc5OeqVuVdQxtcM0CtmnNQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5930 (0x172a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Validity Not Before: Sep 8 04:05:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=0B8E0425F3DFB4FC5ADADEF1A84A31CC41970B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:4b:56:fa:21:51:7e:b9:ed:95:52:ab:dd: 85:90:94:18:ef:68:f7:fd:2e:8f:8c:93:ac:71:fa: 95:e7:7b:21:d5:3d:3f:3d:5f:af:f9:5a:04:d4:c4: 0e:4b:f8:b4:73:5d:cb:49:71:70:20:75:7d:a6:37: f6:9c:c8:2d:2c:dc:75:40:20:71:a0:f9:08:73:62: 46:bb:f7:c8:2a:e9:45:46:52:4d:20:bb:a5:fa:af: 78:48:b6:5c:73:a7:89:7f:7a:da:51:5f:c4:e7:60: 2a:74:2b:74:cd:88:8e:6b:4d:75:98:ad:24:22:75: 09:27:8d:70:18:ab:e3:58:31:7f:8a:c0:bb:49:68: 0d:e1:32:fd:29:2f:33:f9:0b:31:36:db:67:93:cc: 00:07:3b:07:6d:42:52:b0:63:e5:a1:c3:58:f2:59: ea:ed:f5:51:1f:86:b1:bf:e3:1d:25:9a:a0:2a:29: 33:8f:41:b0:19:63:29:69:a8:24:13:08:34:8f:41: 35:8f:65:ad:93:3a:77:7d:83:22:93:7f:64:d8:15: ac:35:25:fe:b9:04:2a:c7:9f:c8:ea:3f:e5:d0:0e: 7d:92:9c:2e:97:bf:1d:f6:07:de:f1:ae:33:63:7e: 45:4c:cd:60:a9:48:a7:8e:42:58:01:e9:a2:37:d9: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 X509v3 Authority Key Identifier: keyid:AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:06:e8:3c:bd:06:14:08:dd:12:7e:e0:87:9c:66:e9:02:65: 57:b6:b7:4c:fc:df:81:60:82:f9:8a:3b:f4:ff:d8:25:c9:80: 6f:0d:94:ff:05:d2:8f:93:2c:a6:20:7b:43:68:9f:86:0a:13: 3f:32:38:c0:7a:48:41:a3:8a:e2:7e:a1:73:5b:2f:aa:d7:c5: ea:c0:1a:d3:67:36:bf:ca:a9:91:21:d6:a8:fa:d8:9e:d0:44: 56:73:2b:54:38:26:68:eb:15:2f:be:bd:e2:56:38:3c:8c:d0: fe:71:69:34:18:9b:5f:a4:a0:5d:d0:34:77:1f:a7:1a:2b:f9: 8d:1d:2a:5d:2f:1e:58:c5:a6:29:b5:f5:bf:6d:6c:d8:8c:91: 84:d6:2b:d2:76:4e:ad:5b:1f:a3:5b:c6:9e:26:41:8a:f9:5b: 20:2e:2f:45:f1:06:b9:40:57:ae:f1:4c:db:f9:02:ce:fa:e5: df:42:3b:ca:69:ad:f3:28:67:1a:e1:53:56:e8:06:5e:c4:4f: 62:79:dd:9e:83:3c:d8:74:91:f6:98:68:c4:d6:29:c1:75:a7: f3:c0:e4:af:ce:58:d0:0e:85:9b:69:84:4e:d2:ed:f6:fc:c8: 37:6e:be:27:8b:e5:f0:06:05:18:b5:67:03:07:ca:b7:4b:24: 74:4d:0c:b1 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVG OUQxNUQ1NTE2MDQzMUQ0RjcwOUU4QUEzQTNBRDVCQ0NDRDZFNTAeFw0yNTA5MDgw NDA1MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDBCOEUwNDI1RjNERkI0 RkM1QURBREVGMUE4NEEzMUNDNDE5NzBCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfqktW+iFRfrntlVKr3YWQlBjvaPf9Lo+Mk6xx+pXneyHVPT89 X6/5WgTUxA5L+LRzXctJcXAgdX2mN/acyC0s3HVAIHGg+QhzYka798gq6UVGUk0g u6X6r3hItlxzp4l/etpRX8TnYCp0K3TNiI5rTXWYrSQidQknjXAYq+NYMX+KwLtJ aA3hMv0pLzP5CzE222eTzAAHOwdtQlKwY+Whw1jyWert9VEfhrG/4x0lmqAqKTOP QbAZYylpqCQTCDSPQTWPZa2TOnd9gyKTf2TYFaw1Jf65BCrHn8jqP+XQDn2SnC6X vx32B97xrjNjfkVMzWCpSKeOQlgB6aI32VlTAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUC44EJfPftPxa2t7xqEoxzEGXC2AwHwYDVR0jBBgwFoAUrvnRXVUWBDHU9wno qjo61bzM1uUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEw L3J2blJYVlVXQkRIVTl3bm9xam82MWJ6TTF1VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcnZuUlhWVVdCREhVOXdub3FqbzYxYnpNMXVVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEwL3J2blJYVlVXQkRIVTl3 bm9xam82MWJ6TTF1VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASBug8vQYUCN0SfuCHnGbpAmVXtrdM/N+BYIL5ijv0/9glyYBvDZT/BdKPkyym IHtDaJ+GChM/MjjAekhBo4rifqFzWy+q18XqwBrTZza/yqmRIdao+tie0ERWcytU OCZo6xUvvr3iVjg8jND+cWk0GJtfpKBd0DR3H6caK/mNHSpdLx5YxaYptfW/bWzY jJGE1ivSdk6tWx+jW8aeJkGK+VsgLi9F8Qa5QFeu8Uzb+QLO+uXfQjvKaa3zKGca 4VNW6AZexE9ied2egzzYdJH2mGjE1inBdafzwOSvzljQDoWbaYRO0u32/Mg3br4n i+XwBgUYtWcDB8q3SyR0TQyx -----END CERTIFICATE-----Generated at Mon Sep 8 05:59:31 2025 by rpki-client