$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft File: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft (raw, json) Hash identifier: cz2vdqK1Af6ehdtwKqlYWj49QP7ktxswLzdlk636gcA= Subject key identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D Authority key identifier: 64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 Certificate issuer: /CN=64586FB3438D76154454082FF8556B3D13F171B7 Certificate serial: 171C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft Manifest number: 171C Signing time: Mon 08 Sep 2025 01:03:18 +0000 Manifest this update: Mon 08 Sep 2025 01:03:18 +0000 Manifest next update: Mon 08 Sep 2025 07:03:18 +0000 Files and hashes: 1: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl (hash: dEUxLkwRtaYgHiwHbADJjAeQFrE/kW9y8uxcUbVnrLU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5916 (0x171c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64586FB3438D76154454082FF8556B3D13F171B7 Validity Not Before: Sep 8 01:03:18 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FF4F1BE7CA68092A10750FABC11F4DB6BD8F993D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:50:2d:04:51:f6:aa:bf:5f:ad:b7:5e:b3: c8:40:f7:71:65:fa:1c:81:8e:79:e0:a7:4d:52:49: 70:ee:de:c3:45:d6:e7:42:61:64:e5:8b:51:c5:50: e6:a1:61:aa:ef:a5:fc:d2:b8:37:f7:2a:b9:66:85: 61:b5:de:e7:48:8a:6d:72:c0:9e:44:3b:e1:d8:36: d1:81:16:d6:5e:bc:ae:62:e2:ed:e5:1e:35:93:70: 76:26:c4:a7:2c:80:85:fa:04:81:72:74:ce:fc:a1: 4e:a0:f3:75:4d:53:4b:a1:88:e0:69:35:9b:f1:26: 0f:7a:da:83:04:c5:81:65:c5:c6:8b:ae:7d:40:58: 1e:63:af:ac:b5:08:b0:3d:14:66:98:67:b3:2d:3c: a4:d2:4a:15:1a:33:d6:86:6d:7c:46:2f:4b:de:c0: 99:c2:99:e2:9f:72:c5:75:3f:96:f4:ae:e4:09:29: 4f:af:39:2d:c4:23:f9:e1:45:31:37:d7:f3:4c:cf: 4a:bb:07:d4:8c:da:04:b3:bc:46:6c:d4:15:be:7f: 83:bb:ad:90:55:1b:6d:db:29:8b:e2:2e:b2:6d:5b: b8:8e:fe:2a:e1:d8:9c:ce:7d:b0:fd:a4:42:62:3d: 18:7b:7c:c8:d7:57:8e:c8:67:5f:51:60:f6:20:0b: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D X509v3 Authority Key Identifier: keyid:64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:3e:e1:07:36:ff:cb:83:39:9a:2d:b5:3e:09:0e:3c:cd:1d: 55:a4:12:47:1b:67:66:ff:e0:85:b5:94:14:ef:8b:d5:c1:5b: c2:1f:d5:84:10:69:95:3f:4b:3c:b3:82:ca:15:5b:a3:98:f5: f4:4f:dd:4d:03:c1:28:5f:76:e4:62:b9:87:12:4c:37:49:05: 82:d1:2e:3a:73:22:f8:dc:92:8d:57:a3:76:84:61:60:92:1f: 69:74:be:dd:e9:f5:ce:d5:73:d9:71:47:16:de:08:40:36:39: ff:ff:a0:33:37:d7:47:95:1b:90:6c:dd:37:4b:36:65:7c:58: f0:e7:2c:70:39:14:19:a5:a9:21:24:ca:3c:17:f5:ad:5e:32: 50:26:11:05:c5:f8:5f:a1:d6:6c:66:d5:b5:aa:72:0f:5b:51: 7b:f8:ab:ea:bb:79:8b:f5:a6:c0:44:23:1f:be:52:fb:fc:62: 86:d1:6f:fd:fe:78:40:a5:07:67:70:c4:fc:8c:ac:7d:66:9c: c2:07:2a:56:bf:99:5a:bd:c8:d7:3c:5e:ae:0a:bc:72:2c:e3: d9:4c:87:ea:c9:19:aa:b5:74:76:71:68:d8:48:97:67:96:6f: 9e:08:27:1a:f1:b8:2c:5a:8c:ff:e2:2f:08:71:60:00:d9:56: 4a:78:b0:56 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjQ1 ODZGQjM0MzhENzYxNTQ0NTQwODJGRjg1NTZCM0QxM0YxNzFCNzAeFw0yNTA5MDgw MTAzMThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZGNEYxQkU3Q0E2ODA5 MkExMDc1MEZBQkMxMUY0REI2QkQ4Rjk5M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUOVAtBFH2qr9frbdes8hA93Fl+hyBjnngp01SSXDu3sNF1udC YWTli1HFUOahYarvpfzSuDf3KrlmhWG13udIim1ywJ5EO+HYNtGBFtZevK5i4u3l HjWTcHYmxKcsgIX6BIFydM78oU6g83VNU0uhiOBpNZvxJg962oMExYFlxcaLrn1A WB5jr6y1CLA9FGaYZ7MtPKTSShUaM9aGbXxGL0vewJnCmeKfcsV1P5b0ruQJKU+v OS3EI/nhRTE31/NMz0q7B9SM2gSzvEZs1BW+f4O7rZBVG23bKYviLrJtW7iO/irh 2JzOfbD9pEJiPRh7fMjXV47IZ19RYPYgC1jDAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/08b58poCSoQdQ+rwR9Ntr2PmT0wHwYDVR0jBBgwFoAUZFhvs0ONdhVEVAgv +FVrPRPxcbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMw L1pGaHZzME9OZGhWRVZBZ3YtRlZyUFJQeGNiYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWkZodnMwT05kaFZFVkFndi1GVnJQUlB4Y2JjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMwL1pGaHZzME9OZGhWRVZB Z3YtRlZyUFJQeGNiYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAZPuEHNv/LgzmaLbU+CQ48zR1VpBJHG2dm/+CFtZQU74vVwVvCH9WEEGmVP0s8 s4LKFVujmPX0T91NA8EoX3bkYrmHEkw3SQWC0S46cyL43JKNV6N2hGFgkh9pdL7d 6fXO1XPZcUcW3ghANjn//6AzN9dHlRuQbN03SzZlfFjw5yxwORQZpakhJMo8F/Wt XjJQJhEFxfhfodZsZtW1qnIPW1F7+Kvqu3mL9abARCMfvlL7/GKG0W/9/nhApQdn cMT8jKx9ZpzCBypWv5lavcjXPF6uCrxyLOPZTIfqyRmqtXR2cWjYSJdnlm+eCCca 8bgsWoz/4i8IcWAA2VZKeLBW -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:17 2025 by rpki-client