$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.mft File: 43jgi3Ya_kLW_A_wZyPIpQRjIkY.mft (raw, json) Hash identifier: md2q30lH0f/SnAvR5MHE1LI0Z2vCNc2ho/3lQimWhUQ= Subject key identifier: A0:BE:16:6F:97:EE:7B:96:2F:7B:11:F4:F0:2A:68:8F:7F:79:FC:87 Authority key identifier: E3:78:E0:8B:76:1A:FE:42:D6:FC:0F:F0:67:23:C8:A5:04:63:22:46 Certificate issuer: /CN=E378E08B761AFE42D6FC0FF06723C8A504632246 Certificate serial: 3E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43jgi3Ya_kLW_A_wZyPIpQRjIkY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.mft Manifest number: 3E Signing time: Mon 08 Sep 2025 04:03:49 +0000 Manifest this update: Mon 08 Sep 2025 04:03:49 +0000 Manifest next update: Mon 08 Sep 2025 10:03:49 +0000 Files and hashes: 1: 43jgi3Ya_kLW_A_wZyPIpQRjIkY.crl (hash: fl3dDAWo1ckEcvAzdpB38gX24vOY1g5UjRhbEyTyuBQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43jgi3Ya_kLW_A_wZyPIpQRjIkY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E378E08B761AFE42D6FC0FF06723C8A504632246 Validity Not Before: Sep 8 04:03:49 2025 GMT Not After : Aug 27 02:44:54 2026 GMT Subject: CN=A0BE166F97EE7B962F7B11F4F02A688F7F79FC87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:0d:1a:aa:6a:87:fe:17:cd:19:ff:04:7a: 8b:09:a5:14:72:19:51:71:ec:fd:c3:c7:c5:04:6e: 18:8a:84:4f:07:50:bb:9b:31:e3:7c:8c:9f:ab:19: d0:e1:77:fe:c6:fa:a7:4e:c3:1b:fc:49:19:ac:02: 13:ca:b4:97:e5:75:34:c1:9c:62:99:92:aa:c9:b3: c3:f5:fd:31:9c:b6:d4:f7:15:4e:15:f8:2c:82:0d: e7:4a:c4:37:aa:fb:e7:27:91:cf:c2:dd:13:f8:4d: 2c:b4:d9:4f:08:3f:cc:73:0b:8f:1f:f8:36:bf:16: cd:49:8e:cb:2f:16:de:96:a8:aa:96:91:b9:91:48: 74:2d:b9:34:93:13:01:5b:9d:e0:89:e0:ab:28:0e: f2:3e:01:58:48:8a:67:5b:2d:51:a1:3d:38:38:e2: 34:72:f7:39:b9:34:19:5b:b5:28:20:9e:08:06:6a: 59:36:49:92:c4:ca:cd:d6:17:70:7b:d5:49:32:be: 03:56:de:6d:ab:7d:d4:9c:a4:14:39:8d:4f:ef:a9: 65:d7:56:d7:a2:8e:6e:82:31:03:df:89:30:9d:ea: 38:f7:53:e0:3b:80:69:e1:d7:67:3a:8e:b0:a3:f5: 48:7c:d2:8c:88:7a:3a:6f:81:77:fe:a2:ab:51:69: 8e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BE:16:6F:97:EE:7B:96:2F:7B:11:F4:F0:2A:68:8F:7F:79:FC:87 X509v3 Authority Key Identifier: keyid:E3:78:E0:8B:76:1A:FE:42:D6:FC:0F:F0:67:23:C8:A5:04:63:22:46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43jgi3Ya_kLW_A_wZyPIpQRjIkY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/747/43jgi3Ya_kLW_A_wZyPIpQRjIkY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b1:88:b1:35:1f:8a:b7:de:c4:d9:e3:a9:05:2c:4e:2d:cb: 40:9e:b7:41:fa:fb:0e:3a:21:ff:88:a5:a4:62:49:1c:8c:e4: 5e:9f:84:85:0c:4e:d1:d6:b0:f4:1a:5e:d8:e6:57:ba:52:d3: f1:b3:3a:33:1f:05:18:e4:aa:1e:3e:1d:19:fe:1c:47:05:ca: d7:3a:05:43:5a:af:3a:11:d0:59:62:8f:8e:52:4d:7b:ce:85: ce:60:de:c6:a2:b0:f4:17:4b:93:11:1a:88:09:57:33:1a:c5: 0d:53:2c:3b:f8:33:cb:90:a3:11:1d:9e:3e:51:01:34:02:86: bf:b9:23:7b:ab:43:44:b5:f7:42:6d:95:ec:21:c5:d9:db:ec: 55:85:15:b5:7e:a3:ad:21:e7:89:f6:1a:c1:df:29:28:d5:a4: 73:06:3f:4e:e6:39:2a:53:6a:9b:ab:f4:bd:75:1b:e5:8c:e6: 6d:d5:1f:92:74:60:43:8a:d3:7c:52:b7:1d:77:83:bf:f7:c8: 93:b8:be:8c:33:6e:14:2b:30:15:3a:2c:3a:dd:2d:07:ad:32: 37:4e:4c:7a:43:da:51:c4:49:b4:99:f0:97:19:40:cf:86:3c: 3e:03:f2:eb:fd:43:5d:a2:1c:2e:dd:6e:df:25:7a:f3:99:a3: 6b:ee:a5:e1 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMzc4 RTA4Qjc2MUFGRTQyRDZGQzBGRjA2NzIzQzhBNTA0NjMyMjQ2MB4XDTI1MDkwODA0 MDM0OVoXDTI2MDgyNzAyNDQ1NFowMzExMC8GA1UEAxMoQTBCRTE2NkY5N0VFN0I5 NjJGN0IxMUY0RjAyQTY4OEY3Rjc5RkM4NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALaNDRqqaof+F80Z/wR6iwmlFHIZUXHs/cPHxQRuGIqETwdQu5sx 43yMn6sZ0OF3/sb6p07DG/xJGawCE8q0l+V1NMGcYpmSqsmzw/X9MZy21PcVThX4 LIIN50rEN6r75yeRz8LdE/hNLLTZTwg/zHMLjx/4Nr8WzUmOyy8W3paoqpaRuZFI dC25NJMTAVud4IngqygO8j4BWEiKZ1stUaE9ODjiNHL3Obk0GVu1KCCeCAZqWTZJ ksTKzdYXcHvVSTK+A1bebat91JykFDmNT++pZddW16KOboIxA9+JMJ3qOPdT4DuA aeHXZzqOsKP1SHzSjIh6Om+Bd/6iq1Fpjl0CAwEAAaOCAgowggIGMB0GA1UdDgQW BBSgvhZvl+57li97EfTwKmiPf3n8hzAfBgNVHSMEGDAWgBTjeOCLdhr+Qtb8D/Bn I8ilBGMiRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83NDcv NDNqZ2kzWWFfa0xXX0Ffd1p5UElwUVJqSWtZLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC80M2pnaTNZYV9rTFdfQV93WnlQSXBRUmpJa1kuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83NDcvNDNqZ2kzWWFfa0xXX0Ff d1p5UElwUVJqSWtZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AEaxiLE1H4q33sTZ46kFLE4ty0Cet0H6+w46If+IpaRiSRyM5F6fhIUMTtHWsPQa XtjmV7pS0/GzOjMfBRjkqh4+HRn+HEcFytc6BUNarzoR0Flij45STXvOhc5g3sai sPQXS5MRGogJVzMaxQ1TLDv4M8uQoxEdnj5RATQChr+5I3urQ0S190Jtlewhxdnb 7FWFFbV+o60h54n2GsHfKSjVpHMGP07mOSpTapur9L11G+WM5m3VH5J0YEOK03xS tx13g7/3yJO4vowzbhQrMBU6LDrdLQetMjdOTHpD2lHESbSZ8JcZQM+GPD4D8uv9 Q12iHC7dbt8levOZo2vupeE= -----END CERTIFICATE-----Generated at Mon Sep 8 06:05:28 2025 by rpki-client