$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/kyJKXF8ZT3ppLYvrg_4sgV33P6E.mft File: kyJKXF8ZT3ppLYvrg_4sgV33P6E.mft (raw, json) Hash identifier: qUguGa5GeGj/P/O/bFKnxAmIKOZAu1ued51et+yqmnI= Subject key identifier: 14:8F:20:DD:B4:A5:E4:14:6F:12:87:76:65:C7:E8:17:6E:FD:3F:47 Authority key identifier: 93:22:4A:5C:5F:19:4F:7A:69:2D:8B:EB:83:FE:2C:81:5D:F7:3F:A1 Certificate issuer: /CN=93224A5C5F194F7A692D8BEB83FE2C815DF73FA1 Certificate serial: 1BDD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kyJKXF8ZT3ppLYvrg_4sgV33P6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/kyJKXF8ZT3ppLYvrg_4sgV33P6E.mft Manifest number: 1BDD Signing time: Sun 07 Sep 2025 18:04:16 +0000 Manifest this update: Sun 07 Sep 2025 18:04:16 +0000 Manifest next update: Mon 08 Sep 2025 00:04:16 +0000 Files and hashes: 1: kyJKXF8ZT3ppLYvrg_4sgV33P6E.crl (hash: QjCKhcjwG0tuKZs5paR6dk2lx6bt0StWY5N1ZiGqsTk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/kyJKXF8ZT3ppLYvrg_4sgV33P6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/kyJKXF8ZT3ppLYvrg_4sgV33P6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kyJKXF8ZT3ppLYvrg_4sgV33P6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7133 (0x1bdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93224A5C5F194F7A692D8BEB83FE2C815DF73FA1 Validity Not Before: Sep 7 18:04:16 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=148F20DDB4A5E4146F12877665C7E8176EFD3F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:a8:39:88:71:4d:24:0b:80:2c:5f:80:9a: 1d:f1:f7:4a:da:72:65:75:3c:c6:75:f6:45:01:42: f1:5d:e3:b4:d0:73:d0:94:ef:09:8c:16:75:f9:ae: d3:e9:63:26:a5:70:1a:17:96:db:a3:87:8b:3b:03: 4d:3a:04:e7:18:57:15:b2:c3:f0:d3:ea:e5:fb:fe: 98:e5:c9:82:ed:d2:8d:d6:d1:29:cd:e9:4d:1b:fb: a2:36:1e:d2:5b:fb:99:13:28:b1:5e:be:2b:d6:99: eb:3d:bc:62:16:5a:70:dd:55:82:b4:ad:a3:f7:8b: 96:e0:19:f9:f6:6e:d7:53:d4:4b:11:09:aa:6a:b6: 69:4c:17:60:bd:b5:a0:26:4f:b9:8c:d3:53:a5:63: cb:04:9d:7f:21:bb:a4:4d:2d:f4:72:de:66:08:e6: e0:65:41:e3:6c:d6:ea:7e:3e:1b:67:9d:55:ac:b4: 04:57:dd:0d:2d:b2:e7:bc:05:56:0f:c8:2e:b0:ca: 60:37:6f:22:92:ca:a3:d5:d9:43:0b:65:17:64:52: d9:03:75:24:68:c9:94:c6:b9:c8:ae:29:22:2f:d5: 63:bb:37:f3:20:01:03:f2:d7:9e:ea:b2:a0:98:1e: d1:cd:d2:be:3f:a6:b3:dd:c6:05:6c:c2:88:c8:bf: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8F:20:DD:B4:A5:E4:14:6F:12:87:76:65:C7:E8:17:6E:FD:3F:47 X509v3 Authority Key Identifier: keyid:93:22:4A:5C:5F:19:4F:7A:69:2D:8B:EB:83:FE:2C:81:5D:F7:3F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/kyJKXF8ZT3ppLYvrg_4sgV33P6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kyJKXF8ZT3ppLYvrg_4sgV33P6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/kyJKXF8ZT3ppLYvrg_4sgV33P6E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c4:0f:5d:1a:57:4e:94:4c:fd:40:29:c5:fa:80:84:a5:28: 84:16:6e:c0:a4:08:be:80:14:69:2a:fd:b6:ba:13:80:e9:06: c6:f8:f4:c0:d1:de:e6:16:52:f6:ea:2a:5d:a1:82:2e:ed:b2: 8f:c4:87:8a:f1:2a:32:32:72:56:fb:e2:94:f8:5a:7a:6e:db: 76:64:69:60:cf:43:c4:84:2c:86:3e:74:9a:14:0b:fa:95:ce: 4a:c0:ab:e5:c9:6a:ba:7b:2d:13:55:e9:22:b4:fe:ba:7a:be: c7:84:09:38:48:85:23:b3:40:67:97:f5:20:35:32:57:1f:6b: 10:c3:1e:00:69:be:e4:d5:eb:fd:ba:5c:3c:c2:ac:76:d5:d8: 22:e2:72:44:d6:30:6d:71:7b:bd:96:5a:b9:65:c6:5b:1f:0a: ed:cd:09:99:17:b9:c6:9b:0d:54:ae:d4:3c:bc:07:69:c4:db: 2d:fa:ab:6c:55:a0:de:43:cc:0a:29:d0:8d:e7:50:ef:c3:3a: cc:c5:e6:f0:a9:9b:ed:62:4b:67:0b:a7:49:8a:0e:e3:73:95: 3f:c3:f7:1d:d7:30:26:ec:f9:9c:e8:22:ca:8f:e8:11:b5:c2: 57:ce:76:5f:d0:9f:e0:f3:a3:bf:d3:c6:98:d6:83:9f:30:7d: c0:ce:50:76 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICG90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTMy MjRBNUM1RjE5NEY3QTY5MkQ4QkVCODNGRTJDODE1REY3M0ZBMTAeFw0yNTA5MDcx ODA0MTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDE0OEYyMEREQjRBNUU0 MTQ2RjEyODc3NjY1QzdFODE3NkVGRDNGNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDqag5iHFNJAuALF+Amh3x90racmV1PMZ19kUBQvFd47TQc9CU 7wmMFnX5rtPpYyalcBoXltujh4s7A006BOcYVxWyw/DT6uX7/pjlyYLt0o3W0SnN 6U0b+6I2HtJb+5kTKLFevivWmes9vGIWWnDdVYK0raP3i5bgGfn2btdT1EsRCapq tmlMF2C9taAmT7mM01OlY8sEnX8hu6RNLfRy3mYI5uBlQeNs1up+PhtnnVWstARX 3Q0tsue8BVYPyC6wymA3byKSyqPV2UMLZRdkUtkDdSRoyZTGuciuKSIv1WO7N/Mg AQPy157qsqCYHtHN0r4/prPdxgVswojIv6QdAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUFI8g3bSl5BRvEod2ZcfoF279P0cwHwYDVR0jBBgwFoAUkyJKXF8ZT3ppLYvr g/4sgV33P6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2 L2t5SktYRjhaVDNwcExZdnJnXzRzZ1YzM1A2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAva3lKS1hGOFpUM3BwTFl2cmdfNHNnVjMzUDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L2t5SktYRjhaVDNwcExZ dnJnXzRzZ1YzM1A2RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZxA9dGldOlEz9QCnF+oCEpSiEFm7ApAi+gBRpKv22uhOA6QbG+PTA0d7mFlL2 6ipdoYIu7bKPxIeK8SoyMnJW++KU+Fp6btt2ZGlgz0PEhCyGPnSaFAv6lc5KwKvl yWq6ey0TVekitP66er7HhAk4SIUjs0Bnl/UgNTJXH2sQwx4Aab7k1ev9ulw8wqx2 1dgi4nJE1jBtcXu9llq5ZcZbHwrtzQmZF7nGmw1UrtQ8vAdpxNst+qtsVaDeQ8wK KdCN51DvwzrMxebwqZvtYktnC6dJig7jc5U/w/cd1zAm7Pmc6CLKj+gRtcJXznZf 0J/g86O/08aY1oOfMH3AzlB2 -----END CERTIFICATE-----Generated at Sun Sep 7 20:09:41 2025 by rpki-client