$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft File: 5pgpU98Hd67biO4_8goVJkBXF4U.mft (raw, json) Hash identifier: tKF84VWCAIZYNZz68DTVtNsTxBtCq6C6+3MfhXHa5jo= Subject key identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 Certificate issuer: /CN=E6982953DF0777AEDB88EE3FF20A152640571785 Certificate serial: 2077 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft Manifest number: 2075 Signing time: Mon 08 Sep 2025 04:04:07 +0000 Manifest this update: Mon 08 Sep 2025 04:04:07 +0000 Manifest next update: Mon 08 Sep 2025 10:04:07 +0000 Files and hashes: 1: 5pgpU98Hd67biO4_8goVJkBXF4U.crl (hash: qJExJYBW11UwS/+BPn1KwSLfrSPAEGYzNmXjxQUnmu4=) 2: QwvD7ilHysLGynnkEaRLtZ8S6Us.roa (hash: YP5VY/+ASkz1LfhocyuQ44niccX27uswh8o+HNY2T1o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8311 (0x2077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785 Validity Not Before: Sep 8 04:04:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F56C6695780DDAF190BA5FB98C6980AADF62154E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:f9:ff:3a:5a:43:5a:91:63:2e:4d:ef:18: 5b:0b:0a:09:ca:d7:1d:0c:25:df:6d:00:13:84:bd: fd:4f:6a:e7:d8:48:ff:f1:f2:0a:62:d4:37:a4:a1: c8:bd:54:7c:b6:a7:72:d6:61:a8:39:d7:0f:52:21: 3f:56:13:3a:d7:be:50:e4:5b:ad:e0:18:7f:ce:34: de:d6:2e:28:36:a7:f3:59:66:fd:13:12:63:a4:21: ac:37:54:a9:5b:91:31:0c:15:3f:cb:1e:cf:cd:37: 59:e1:40:9e:da:92:74:06:f9:07:19:af:a2:a9:e5: 7c:fe:a1:6b:8a:8e:e2:4a:2d:63:fb:4f:20:fd:a5: 82:54:f0:25:ce:f4:b9:a1:da:b1:10:8a:7e:43:98: b9:7f:8f:c9:11:e8:cd:59:de:a7:ed:85:b4:44:61: a0:99:ce:f4:9b:46:27:fd:88:c1:30:d7:9a:4c:16: 20:04:49:a8:eb:96:d8:98:96:09:01:3f:2a:9a:c0: 19:ee:f8:17:ad:8d:e8:fa:b8:64:0e:f7:82:87:a6: c0:59:dc:77:98:b5:6f:80:40:f6:ad:7d:c9:e9:5f: 21:41:b0:64:c9:53:61:c7:99:72:da:92:99:cf:ac: c1:e3:dc:49:79:c2:2e:c7:58:bf:e9:f4:6a:4e:95: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E X509v3 Authority Key Identifier: keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:77:c8:0a:9e:81:63:ca:97:d6:92:4a:59:cd:d6:f1:0b:35: 2b:5c:c7:25:41:37:bf:11:9b:8f:10:15:e6:ed:d9:d8:71:56: 12:c0:61:22:5b:5f:96:d6:3c:2e:57:b1:d7:9e:05:51:90:11: 28:8b:92:b8:46:06:d4:89:7a:2a:f1:ee:fd:32:23:50:2b:cb: d9:ba:ba:33:af:8d:99:f1:14:31:04:d0:a7:87:7f:eb:8b:b5: 1c:14:bc:ba:2a:60:4f:a9:44:58:1b:c8:b3:7e:1c:83:db:2c: 4a:c0:f9:07:3c:83:11:45:46:02:e9:33:e8:26:87:97:cc:72: 99:ab:f0:56:77:6b:c3:91:e0:e1:08:01:ee:71:7f:c0:c1:6f: 36:06:9b:7e:f3:41:c1:9b:2c:0f:91:14:e9:e0:0f:44:8d:bf: b7:5c:c7:7f:32:4c:28:e5:e9:0c:f9:85:e4:3b:ed:30:81:2a: 21:45:b7:4d:de:94:9b:7c:f1:c4:55:b3:da:55:48:cd:18:63: 8f:44:8f:2e:b0:04:b5:a2:25:dc:c0:21:4e:63:98:63:e2:27: 67:03:e5:e5:3f:04:98:31:f8:26:8d:8b:86:5e:d9:f4:be:83: 29:64:a5:eb:c6:9e:84:c5:c9:e2:38:37:9c:39:2e:4c:e8:a6: 58:c8:79:2e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY5 ODI5NTNERjA3NzdBRURCODhFRTNGRjIwQTE1MjY0MDU3MTc4NTAeFw0yNTA5MDgw NDA0MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY1NkM2Njk1NzgwRERB RjE5MEJBNUZCOThDNjk4MEFBREY2MjE1NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa3vn/OlpDWpFjLk3vGFsLCgnK1x0MJd9tABOEvf1PaufYSP/x 8gpi1Dekoci9VHy2p3LWYag51w9SIT9WEzrXvlDkW63gGH/ONN7WLig2p/NZZv0T EmOkIaw3VKlbkTEMFT/LHs/NN1nhQJ7aknQG+QcZr6Kp5Xz+oWuKjuJKLWP7TyD9 pYJU8CXO9Lmh2rEQin5DmLl/j8kR6M1Z3qfthbREYaCZzvSbRif9iMEw15pMFiAE SajrltiYlgkBPyqawBnu+Betjej6uGQO94KHpsBZ3HeYtW+AQPatfcnpXyFBsGTJ U2HHmXLakpnPrMHj3El5wi7HWL/p9GpOlTODAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU9WxmlXgN2vGQul+5jGmAqt9iFU4wHwYDVR0jBBgwFoAU5pgpU98Hd67biO4/ 8goVJkBXF4UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5 LzVwZ3BVOThIZDY3YmlPNF84Z29WSmtCWEY0VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNXBncFU5OEhkNjdiaU80Xzhnb1ZKa0JYRjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5LzVwZ3BVOThIZDY3YmlP NF84Z29WSmtCWEY0VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAjd8gKnoFjypfWkkpZzdbxCzUrXMclQTe/EZuPEBXm7dnYcVYSwGEiW1+W1jwu V7HXngVRkBEoi5K4RgbUiXoq8e79MiNQK8vZurozr42Z8RQxBNCnh3/ri7UcFLy6 KmBPqURYG8izfhyD2yxKwPkHPIMRRUYC6TPoJoeXzHKZq/BWd2vDkeDhCAHucX/A wW82Bpt+80HBmywPkRTp4A9Ejb+3XMd/Mkwo5ekM+YXkO+0wgSohRbdN3pSbfPHE VbPaVUjNGGOPRI8usAS1oiXcwCFOY5hj4idnA+XlPwSYMfgmjYuGXtn0voMpZKXr xp6ExcniODecOS5M6KZYyHku -----END CERTIFICATE-----Generated at Mon Sep 8 06:05:28 2025 by rpki-client