$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft File: 2hcs9oXXoU8egRnVmgEv4GHAblE.mft (raw, json) Hash identifier: qkACvJGRSMO2yUC+LisO9ehVtQD1SRCvwPBfA7aJmS0= Subject key identifier: A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA Authority key identifier: DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51 Certificate issuer: /CN=DA172CF685D7A14F1E8119D59A012FE061C06E51 Certificate serial: 20FB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft Manifest number: 20FB Signing time: Mon 08 Sep 2025 04:05:20 +0000 Manifest this update: Mon 08 Sep 2025 04:05:20 +0000 Manifest next update: Mon 08 Sep 2025 10:05:20 +0000 Files and hashes: 1: 2hcs9oXXoU8egRnVmgEv4GHAblE.crl (hash: 7F0KMFv1J1C3ksiz6xF1TGXssta7iw4iiN8wJGcDnxE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8443 (0x20fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA172CF685D7A14F1E8119D59A012FE061C06E51 Validity Not Before: Sep 8 04:05:20 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A14412443289FF6A8840257C69CC8F1CBDC61DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:fc:db:c0:7d:9c:8e:a7:df:5d:1b:49:fd: 08:8d:a0:1b:06:86:cb:1c:b9:e7:00:72:bd:1a:73: 94:98:01:66:a5:ab:68:96:69:cb:ab:fc:be:c2:93: 59:a9:e5:2b:b0:19:f4:33:0c:a6:db:77:ba:a5:56: 0d:da:d6:f5:04:ea:ff:48:10:69:99:e9:78:43:29: 56:01:bd:0d:90:26:43:1e:6d:b5:0a:90:73:12:4b: 35:4e:43:75:8e:83:7f:c5:db:0f:72:09:5d:90:9b: 83:c9:f6:0d:8b:1e:41:68:db:9c:8e:10:0e:1f:3a: 1a:d9:62:a2:40:29:2e:5b:54:08:53:80:d2:6b:1f: c3:96:cb:b9:8b:5d:3b:8a:5f:c9:55:42:02:cf:7a: 5a:d9:04:f6:cd:a9:22:10:0e:30:51:28:06:25:02: bb:65:38:04:0a:b5:00:b5:60:d5:d2:62:0c:92:72: b5:9f:32:8a:ea:54:cc:d2:b0:e7:f5:c8:51:cc:db: 15:6f:08:be:19:aa:4b:5b:0e:38:18:d2:e6:4e:04: 59:23:a4:01:0c:98:bd:94:5c:f0:59:aa:d7:d7:0f: 72:80:01:8c:09:0a:88:7c:72:b6:b7:a4:44:9a:70: cc:8e:5a:bf:67:32:49:1c:4c:58:9a:1d:2c:69:20: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA X509v3 Authority Key Identifier: keyid:DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d1:7d:5a:d1:9a:79:48:94:a8:a7:1d:d3:26:48:e0:4b:76: 52:04:26:26:60:2c:c1:5e:8d:fb:06:c1:8a:b9:3a:41:69:13: ba:2c:a1:d9:dc:d9:19:c5:77:a8:b7:a2:0d:1c:60:d3:0c:47: 40:1a:a3:0b:f9:fa:02:51:03:f8:c0:43:5d:d7:cc:91:53:a9: 11:ea:22:55:79:ca:bf:d8:71:a3:a2:4d:de:17:96:d2:37:52: a6:1a:ed:30:26:41:08:10:3f:e8:07:05:e5:5a:e5:53:b1:b0: c0:16:21:6d:65:43:fb:f8:06:82:33:d0:6f:03:1d:0d:71:bb: 89:5a:39:7b:4f:b9:34:f6:4b:ed:25:9f:fc:da:d2:ef:5c:c4: e9:b1:15:1e:31:73:df:1d:e2:ac:da:1c:ed:31:19:8f:4c:b7: 74:16:42:bc:7f:07:4a:05:86:b2:d9:14:a4:dc:8c:9f:0b:c1: cd:db:fe:4b:db:fb:34:b1:59:94:e6:c8:b8:3b:94:7c:19:0b: b8:7e:d2:12:12:e2:cb:ee:bd:15:da:2c:30:61:ec:e2:cd:6e: 73:3f:06:90:b8:e5:29:d0:04:71:a7:a1:84:76:0d:d2:06:f6: 26:80:0f:2e:5e:81:fe:31:4c:b2:41:80:ad:2c:40:b1:bf:e9: 1e:35:d7:1c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx NzJDRjY4NUQ3QTE0RjFFODExOUQ1OUEwMTJGRTA2MUMwNkU1MTAeFw0yNTA5MDgw NDA1MjBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEExNDQxMjQ0MzI4OUZG NkE4ODQwMjU3QzY5Q0M4RjFDQkRDNjFERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNRfzbwH2cjqffXRtJ/QiNoBsGhsscuecAcr0ac5SYAWalq2iW acur/L7Ck1mp5SuwGfQzDKbbd7qlVg3a1vUE6v9IEGmZ6XhDKVYBvQ2QJkMebbUK kHMSSzVOQ3WOg3/F2w9yCV2Qm4PJ9g2LHkFo25yOEA4fOhrZYqJAKS5bVAhTgNJr H8OWy7mLXTuKX8lVQgLPelrZBPbNqSIQDjBRKAYlArtlOAQKtQC1YNXSYgyScrWf MorqVMzSsOf1yFHM2xVvCL4ZqktbDjgY0uZOBFkjpAEMmL2UXPBZqtfXD3KAAYwJ Coh8cra3pESacMyOWr9nMkkcTFiaHSxpIMZ9AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUoUQSRDKJ/2qIQCV8acyPHL3GHfowHwYDVR0jBBgwFoAU2hcs9oXXoU8egRnV mgEv4GHAblEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg3 LzJoY3M5b1hYb1U4ZWdSblZtZ0V2NEdIQWJsRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMmhjczlvWFhvVThlZ1JuVm1nRXY0R0hBYmxFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTg3LzJoY3M5b1hYb1U4ZWdS blZtZ0V2NEdIQWJsRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAx0X1a0Zp5SJSopx3TJkjgS3ZSBCYmYCzBXo37BsGKuTpBaRO6LKHZ3NkZxXeo t6INHGDTDEdAGqML+foCUQP4wENd18yRU6kR6iJVecq/2HGjok3eF5bSN1KmGu0w JkEIED/oBwXlWuVTsbDAFiFtZUP7+AaCM9BvAx0NcbuJWjl7T7k09kvtJZ/82tLv XMTpsRUeMXPfHeKs2hztMRmPTLd0FkK8fwdKBYay2RSk3IyfC8HN2/5L2/s0sVmU 5si4O5R8GQu4ftISEuLL7r0V2iwwYezizW5zPwaQuOUp0ARxp6GEdg3SBvYmgA8u XoH+MUyyQYCtLECxv+keNdcc -----END CERTIFICATE-----Generated at Mon Sep 8 06:02:29 2025 by rpki-client