$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft File: jm3DpYneR53ZjpODO_zBYddCgiQ.mft (raw, json) Hash identifier: Qmv9/oaXvfy3+MkupK2Myja4Ny1wJ2uRQQPHlLDBDsk= Subject key identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 Authority key identifier: 8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 Certificate issuer: /CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Certificate serial: 2069 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft Manifest number: 2069 Signing time: Tue 09 Sep 2025 00:06:21 +0000 Manifest this update: Tue 09 Sep 2025 00:06:21 +0000 Manifest next update: Tue 09 Sep 2025 06:06:21 +0000 Files and hashes: 1: jm3DpYneR53ZjpODO_zBYddCgiQ.crl (hash: 4Q1iV5hSN+mbUJqoA5q330CKiQ9t2WqzLF1347FPYyw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8297 (0x2069) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Validity Not Before: Sep 9 00:06:21 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D75FB06620B70BA3A0FF0F4FA2329D1AAC8F2131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:79:5d:b6:9a:ea:98:0e:97:0d:79:e7:b8: 2b:a6:e9:eb:40:e9:2f:31:d5:3b:8f:4e:74:ce:64: c0:8c:71:e7:75:d1:44:47:5b:88:d6:d8:32:2a:e6: 7c:56:0e:f3:a6:89:10:14:70:4d:fa:7f:9b:c0:26: 19:d7:c2:9a:c2:cf:74:26:90:25:69:0c:4a:26:63: 86:10:65:78:e9:60:7f:5e:61:10:75:cf:b6:b2:d7: d0:72:52:5d:16:61:7d:00:be:18:f4:0d:04:ea:13: 89:9b:74:56:b7:c4:8c:20:81:27:ef:e6:e7:35:fe: fe:3e:b4:c0:fa:1d:d1:d7:60:3c:56:1d:bc:b9:92: 44:47:27:a4:5a:12:9e:4f:c4:72:01:d7:be:48:ca: 43:a8:a0:19:4e:e6:07:a8:13:39:26:20:61:5b:ed: 6f:6d:a3:d1:da:64:5d:1b:6e:9d:dc:ba:b5:38:09: a7:f4:49:a6:b0:49:3f:ef:57:81:0c:13:a8:2f:58: 50:38:45:90:74:3a:4b:5a:b3:f3:b3:01:05:e7:07: 01:85:24:71:76:f1:6a:37:36:d5:d1:3d:82:65:51: c8:66:93:fa:12:7d:57:c7:a3:8c:86:e7:51:f9:73: 1f:ba:a8:db:d5:2a:10:d4:e6:dd:cd:e7:e4:8d:9b: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 X509v3 Authority Key Identifier: keyid:8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:29:dc:a5:00:f1:e1:a1:ea:6e:ef:a7:20:b9:28:08:c5:0f: a2:33:ff:73:80:b4:61:ee:d8:77:39:d9:cc:ac:18:5f:2b:cd: 77:d0:f4:55:e9:f9:d3:9a:f4:ae:71:7a:df:31:f1:57:10:2c: c7:fb:c2:7a:00:65:e2:65:96:54:5d:83:01:e7:c7:64:0a:6a: fb:9d:a3:5a:a4:d1:63:a8:28:b2:58:37:b6:72:53:f0:28:4a: 01:68:ee:86:71:a1:27:18:7b:b6:5d:fc:57:55:32:00:13:01: 6a:4c:73:29:45:9b:82:75:69:b8:7e:ee:88:2d:56:67:b1:ae: bb:aa:6a:7d:9f:0d:7c:a1:41:9e:c6:28:99:0f:74:bf:3f:a5: df:83:cb:c5:15:4b:13:b1:3d:f2:51:01:32:c3:3a:92:88:08: 6d:92:45:06:30:bf:38:e3:cc:2d:32:09:d8:b8:60:57:77:a8: 07:45:7a:81:2b:90:c7:a7:e5:b3:54:07:d7:b2:6c:cb:13:c8: 1d:45:af:90:88:7a:dc:04:01:42:bb:76:44:ae:07:26:fe:b3: 28:50:66:0a:0d:4f:da:7f:37:40:90:15:28:26:6c:47:2d:75: 7a:74:b8:96:38:e6:6a:a9:90:a7:91:df:e9:77:0a:6e:30:a1: 07:21:b3:45 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU2 REMzQTU4OURFNDc5REQ5OEU5MzgzM0JGQ0MxNjFENzQyODIyNDAeFw0yNTA5MDkw MDA2MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ3NUZCMDY2MjBCNzBC QTNBMEZGMEY0RkEyMzI5RDFBQUM4RjIxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVg3ldtprqmA6XDXnnuCum6etA6S8x1TuPTnTOZMCMced10URH W4jW2DIq5nxWDvOmiRAUcE36f5vAJhnXwprCz3QmkCVpDEomY4YQZXjpYH9eYRB1 z7ay19ByUl0WYX0Avhj0DQTqE4mbdFa3xIwggSfv5uc1/v4+tMD6HdHXYDxWHby5 kkRHJ6RaEp5PxHIB175IykOooBlO5geoEzkmIGFb7W9to9HaZF0bbp3curU4Caf0 SaawST/vV4EME6gvWFA4RZB0Oktas/OzAQXnBwGFJHF28Wo3NtXRPYJlUchmk/oS fVfHo4yG51H5cx+6qNvVKhDU5t3N5+SNm27rAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU11+wZiC3C6Og/w9PojKdGqyPITEwHwYDVR0jBBgwFoAUjm3DpYneR53ZjpOD O/zBYddCgiQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1 L2ptM0RwWW5lUjUzWmpwT0RPX3pCWWRkQ2dpUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvam0zRHBZbmVSNTNaanBPRE9fekJZZGRDZ2lRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1L2ptM0RwWW5lUjUzWmpw T0RPX3pCWWRkQ2dpUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAbKdylAPHhoepu76cguSgIxQ+iM/9zgLRh7th3OdnMrBhfK8130PRV6fnTmvSu cXrfMfFXECzH+8J6AGXiZZZUXYMB58dkCmr7naNapNFjqCiyWDe2clPwKEoBaO6G caEnGHu2XfxXVTIAEwFqTHMpRZuCdWm4fu6ILVZnsa67qmp9nw18oUGexiiZD3S/ P6Xfg8vFFUsTsT3yUQEywzqSiAhtkkUGML8448wtMgnYuGBXd6gHRXqBK5DHp+Wz VAfXsmzLE8gdRa+QiHrcBAFCu3ZErgcm/rMoUGYKDU/afzdAkBUoJmxHLXV6dLiW OOZqqZCnkd/pdwpuMKEHIbNF -----END CERTIFICATE-----Generated at Tue Sep 9 05:51:52 2025 by rpki-client