$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft File: BFagwwe9oIjxq3j2p-wFemB5Yy4.mft (raw, json) Hash identifier: wObaiFkvwUcNmkjG/vgWmhZbXAWNuOUmy1YcdLaezZs= Subject key identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 Authority key identifier: 04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E Certificate issuer: /CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Certificate serial: 3459 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft Manifest number: 3459 Signing time: Mon 08 Sep 2025 04:03:13 +0000 Manifest this update: Mon 08 Sep 2025 04:03:13 +0000 Manifest next update: Mon 08 Sep 2025 10:03:13 +0000 Files and hashes: 1: BFagwwe9oIjxq3j2p-wFemB5Yy4.crl (hash: X+Z3iqdKSkSYyCNj2UK99umNC8kgUjPm45dpVQrj+R4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13401 (0x3459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Validity Not Before: Sep 8 04:03:13 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=458891FA790C06BC3506F01EC58C2286F412A8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:bc:c9:e8:e6:04:bb:64:b8:68:bb:18:11: 8b:8d:7e:fc:53:d0:c1:e4:bb:57:e3:e0:48:ec:3a: 3d:fb:a6:04:d4:97:f3:f3:9c:be:f8:19:0e:60:7a: 56:bb:35:09:d7:90:56:0d:db:4b:0b:de:8d:98:83: af:fc:0f:80:17:f2:13:72:5a:5e:34:02:c5:7d:c9: 97:81:89:9d:43:8a:8f:51:13:34:e0:1a:8e:94:dc: 8c:12:4f:6c:1e:f1:2d:c2:7e:5f:62:88:40:96:c4: 93:5e:bb:4b:9b:08:ce:36:da:15:6b:40:d3:b0:38: 1d:52:78:09:1f:87:df:1e:0c:27:e1:fa:75:b8:07: b1:2a:2e:19:cf:80:28:b4:24:f8:bc:56:5b:cb:06: d7:64:27:0f:6b:fa:05:ed:94:2e:a8:94:3c:d7:fe: 0c:21:30:53:a3:07:c6:5a:36:48:d3:ca:81:fd:49: 2c:88:93:b5:9e:11:3f:f6:a1:cd:bf:27:71:0c:23: e7:23:f2:f6:ff:4b:50:77:17:23:ab:40:c5:5e:6f: dd:5b:0e:8f:a8:84:a8:2a:cf:9e:b5:b3:ba:62:61: f2:17:3e:00:9a:d2:82:a9:2a:a6:bf:5f:0c:72:30: d6:0e:a7:33:18:fe:aa:ff:8c:38:42:54:2f:b3:af: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 X509v3 Authority Key Identifier: keyid:04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:45:2d:84:71:e1:d0:5a:9f:b5:9d:7d:ad:71:9f:df:0d:07: 19:52:03:c4:2e:82:00:23:75:50:10:c8:da:e3:47:81:1a:5c: e3:7c:ab:32:3a:79:d3:b5:14:d8:06:0d:e7:9a:a7:85:13:64: 2a:c4:90:d8:ac:8d:02:81:9f:c9:f1:64:e6:a5:1e:d7:ba:bf: 6f:4f:46:5b:be:ca:84:eb:b4:01:31:ea:e0:3e:78:2f:ee:c1: 5a:4d:03:e6:3e:a0:a2:96:95:68:e2:12:9b:9b:1a:30:ca:ce: 58:c7:70:51:20:db:3e:96:d1:ad:7d:65:80:7e:d3:58:b6:b8: 39:96:d0:b2:04:49:ce:ab:54:cb:4b:60:a9:c8:5e:8a:59:25: b4:95:91:54:34:30:33:32:53:ee:88:d6:6a:e5:f8:03:3b:94: 81:ee:4b:38:af:44:dd:1d:d9:a1:70:64:bb:af:f8:a6:0d:ea: c5:89:68:fa:15:4c:c5:3c:8f:4a:d4:3c:2a:c8:46:b3:ac:e2: 54:92:fd:fa:9f:2f:de:a6:ec:4e:ef:06:f4:9e:37:07:e4:9d: a9:54:5e:48:d0:0d:3a:5d:a1:54:b5:42:c6:2f:86:5c:de:62: b2:9c:06:8f:b6:f6:fc:dc:33:3b:c8:da:47:eb:d7:31:ca:f2: 34:92:bd:19 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICNFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ1 NkEwQzMwN0JEQTA4OEYxQUI3OEY2QTdFQzA1N0E2MDc5NjMyRTAeFw0yNTA5MDgw NDAzMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ1ODg5MUZBNzkwQzA2 QkMzNTA2RjAxRUM1OEMyMjg2RjQxMkE4QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVvbzJ6OYEu2S4aLsYEYuNfvxT0MHku1fj4EjsOj37pgTUl/Pz nL74GQ5gela7NQnXkFYN20sL3o2Yg6/8D4AX8hNyWl40AsV9yZeBiZ1Dio9REzTg Go6U3IwST2we8S3Cfl9iiECWxJNeu0ubCM422hVrQNOwOB1SeAkfh98eDCfh+nW4 B7EqLhnPgCi0JPi8VlvLBtdkJw9r+gXtlC6olDzX/gwhMFOjB8ZaNkjTyoH9SSyI k7WeET/2oc2/J3EMI+cj8vb/S1B3FyOrQMVeb91bDo+ohKgqz561s7piYfIXPgCa 0oKpKqa/XwxyMNYOpzMY/qr/jDhCVC+zr7L/AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQURYiR+nkMBrw1BvAexYwihvQSqKMwHwYDVR0jBBgwFoAUBFagwwe9oIjxq3j2 p+wFemB5Yy4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzcv QkZhZ3d3ZTlvSWp4cTNqMnAtd0ZlbUI1WXk0LmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9CRmFnd3dlOW9JanhxM2oycC13RmVtQjVZeTQuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ny9CRmFnd3dlOW9JanhxM2oy cC13RmVtQjVZeTQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA nkUthHHh0FqftZ19rXGf3w0HGVIDxC6CACN1UBDI2uNHgRpc43yrMjp507UU2AYN 55qnhRNkKsSQ2KyNAoGfyfFk5qUe17q/b09GW77KhOu0ATHq4D54L+7BWk0D5j6g opaVaOISm5saMMrOWMdwUSDbPpbRrX1lgH7TWLa4OZbQsgRJzqtUy0tgqcheilkl tJWRVDQwMzJT7ojWauX4AzuUge5LOK9E3R3ZoXBku6/4pg3qxYlo+hVMxTyPStQ8 KshGs6ziVJL9+p8v3qbsTu8G9J43B+SdqVReSNANOl2hVLVCxi+GXN5ispwGj7b2 /NwzO8jaR+vXMcryNJK9GQ== -----END CERTIFICATE-----Generated at Mon Sep 8 06:05:28 2025 by rpki-client