$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft File: ehQ2ihcE3eKwKNJtVNg718g0fOM.mft (raw, json) Hash identifier: SeEKlW4JpR6ESI1+ebNiuuJ9R+IBOyhx2pIR+wro2yo= Subject key identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C Authority key identifier: 7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 Certificate issuer: /CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Certificate serial: 0253 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft Manifest number: 0250 Signing time: Mon 08 Sep 2025 01:02:59 +0000 Manifest this update: Mon 08 Sep 2025 01:02:59 +0000 Manifest next update: Mon 08 Sep 2025 07:02:59 +0000 Files and hashes: 1: HfBEtTqWTSkAtipWavXVR-y9-jo.roa (hash: 3hFDbCdIfL+OLtSS0OXYLw7zBn+k/fXqDRXMxteGY5E=) 2: OURKKMBERp6fhyznG4QUV7I1fU8.roa (hash: tEDAKCve4qFLWqxZlyva9GdzhXGBXId4jj4unjkX/zM=) 3: ehQ2ihcE3eKwKNJtVNg718g0fOM.crl (hash: bGVgeEvdOpgEklGu9yauvvbU96Z5ILHgaGOyhRb6MKk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Validity Not Before: Sep 8 01:02:59 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=4BEF53D0EA53374A1D5CA734258AB7819575AE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:c6:32:b6:77:89:30:3d:05:9e:c2:db:5d: 45:51:28:85:3d:87:d8:4f:bc:c4:91:ab:1e:22:5b: 7d:3a:77:2d:fc:42:da:d3:d4:44:38:0d:4a:a6:08: 35:c9:d7:ca:04:4e:61:04:1b:a8:78:c5:e9:a2:d1: 5a:c5:a3:a4:82:a3:1b:83:18:bc:6d:45:bd:ac:46: 86:4c:bb:f1:9a:83:3c:ce:7c:55:9b:2e:e3:77:1c: c1:11:eb:48:ad:7d:89:39:0c:8e:1e:34:08:fe:c8: 1c:e9:1e:fc:c9:e0:64:af:1d:23:6c:78:4b:9e:1d: b3:32:0d:37:66:e5:97:ea:9b:05:38:23:9b:48:d6: 6e:9c:ee:9e:a2:0e:fc:ed:89:c7:9b:76:25:42:31: 7c:f3:b5:84:0e:72:a3:e3:9d:cc:50:86:1b:a8:07: 01:94:66:83:44:8c:23:07:b8:72:77:2b:40:a5:31: 15:7d:70:84:d9:6c:c5:76:dd:2d:96:69:b0:75:76: d1:45:75:f4:47:3a:c2:1b:e2:51:ad:e3:a5:e1:e5: c6:79:0e:97:62:2a:f1:c8:46:7b:de:97:1b:8c:41: 77:9f:8b:f0:4d:3b:00:f3:15:6d:27:5c:3f:f7:d4: f6:ad:e9:da:1c:c8:af:37:46:cf:60:1d:14:34:82: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C X509v3 Authority Key Identifier: keyid:7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a3:5c:05:8a:32:8a:9e:4b:52:9a:98:2a:1b:b2:2e:a9:84: 39:45:bb:5f:fc:0c:e2:2f:6b:d4:6f:93:c0:86:8c:4d:5a:64: 18:1c:dc:83:14:61:b8:64:91:32:4d:a1:d6:2c:72:e1:67:8c: a2:57:75:bc:5a:d0:04:14:96:3c:c8:0e:4b:8e:f3:63:8e:e7: f3:2d:70:0f:56:3e:00:39:8b:2b:53:2d:2e:c3:44:97:45:fa: f2:a5:88:f3:53:e2:72:9f:37:d6:8d:c4:a9:84:de:d8:60:2e: 5f:a2:55:ce:9b:e3:64:ea:b1:f1:a7:2a:62:11:23:f9:bc:61: b3:7e:75:ae:08:d4:7a:1c:c5:9e:06:e1:c9:a4:93:21:92:f6: 84:21:dd:da:a2:2d:12:07:1d:59:3a:12:84:c5:95:55:d8:dd: 41:39:ff:31:19:1d:38:11:31:5e:c6:8e:33:d4:4a:a8:86:80: 80:de:1f:21:b7:67:06:5e:e3:8a:15:82:8d:3a:cc:72:19:5c: 8b:81:a8:54:e9:af:66:f0:13:ab:39:3e:09:f6:3f:a6:ac:83: ba:62:0f:ea:ea:dc:71:cb:c9:72:8e:ca:7f:02:ae:d0:3f:a4: 6b:5f:0d:e9:d3:95:5a:13:e3:a2:a8:ef:64:8c:e5:79:ad:8c: d5:d8:27:7b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Ex NDM2OEExNzA0RERFMkIwMjhEMjZENTREODNCRDdDODM0N0NFMzAeFw0yNTA5MDgw MTAyNTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDRCRUY1M0QwRUE1MzM3 NEExRDVDQTczNDI1OEFCNzgxOTU3NUFFNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJC8YytneJMD0FnsLbXUVRKIU9h9hPvMSRqx4iW306dy38QtrT 1EQ4DUqmCDXJ18oETmEEG6h4xemi0VrFo6SCoxuDGLxtRb2sRoZMu/GagzzOfFWb LuN3HMER60itfYk5DI4eNAj+yBzpHvzJ4GSvHSNseEueHbMyDTdm5ZfqmwU4I5tI 1m6c7p6iDvzticebdiVCMXzztYQOcqPjncxQhhuoBwGUZoNEjCMHuHJ3K0ClMRV9 cITZbMV23S2WabB1dtFFdfRHOsIb4lGt46Xh5cZ5DpdiKvHIRnvelxuMQXefi/BN OwDzFW0nXD/31Pat6docyK83Rs9gHRQ0ggpjAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUS+9T0OpTN0odXKc0JYq3gZV1rlwwHwYDVR0jBBgwFoAUehQ2ihcE3eKwKNJt VNg718g0fOMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzE1 L2VoUTJpaGNFM2VLd0tOSnRWTmc3MThnMGZPTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZWhRMmloY0UzZUt3S05KdFZOZzcxOGcwZk9NLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzE1L2VoUTJpaGNFM2VLd0tO SnRWTmc3MThnMGZPTS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHo1wFijKKnktSmpgqG7IuqYQ5Rbtf/AziL2vUb5PAhoxNWmQYHNyDFGG4ZJEy TaHWLHLhZ4yiV3W8WtAEFJY8yA5LjvNjjufzLXAPVj4AOYsrUy0uw0SXRfrypYjz U+JynzfWjcSphN7YYC5folXOm+Nk6rHxpypiESP5vGGzfnWuCNR6HMWeBuHJpJMh kvaEId3aoi0SBx1ZOhKExZVV2N1BOf8xGR04ETFexo4z1EqohoCA3h8ht2cGXuOK FYKNOsxyGVyLgahU6a9m8BOrOT4J9j+mrIO6Yg/q6txxy8lyjsp/Aq7QP6RrXw3p 05VaE+OiqO9kjOV5rYzV2Cd7 -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:28 2025 by rpki-client