$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft File: D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft (raw, json) Hash identifier: wDdyBS7PamBXFpxh7U7LZxQvgCqfc3fIBtbst3mlWys= Subject key identifier: C3:3D:B5:F0:C8:9F:1E:7E:7D:D2:A1:FE:08:75:1D:A0:1B:9E:46:14 Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Certificate serial: 45BF28D84ED06B10BBC734D34C13EE85705396A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft Manifest number: 1029 Signing time: Fri 06 Jun 2025 16:44:27 +0000 Manifest this update: Fri 06 Jun 2025 16:39:27 +0000 Manifest next update: Sat 07 Jun 2025 20:01:27 +0000 Files and hashes: 1: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: 2rZKXXkXswk5ebiy14m5FQa7T+HojkYnnBjqPbD+L9Q=) 2: A828E0147CD8DE9E7A474DCDF06AD96FB37738EE.cer (hash: 25MvCakJBfcC/UtaNlTThX2mxFbh3vcJ/j+6G/E4MX8=) 3: D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl (hash: tOX4Hz3wm71mVQFcOW2SsZYToKekFpYA5qfU63/sUIM=) 4: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: /620wEwr4EtAiUc47dNV6h2+GBHKgUURSgTiikEB0Ig=) 5: 323430613a613830313a313a3a2f34382d3438203d3e20313434363939.roa (hash: /DmvYOpjXH2N9dZePw3mQshQPjheMTYnYMJ86aIM6ac=) Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bf:28:d8:4e:d0:6b:10:bb:c7:34:d3:4c:13:ee:85:70:53:96:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Validity Not Before: Jun 6 16:39:27 2025 GMT Not After : Jun 7 20:01:27 2025 GMT Subject: CN=C33DB5F0C89F1E7E7DD2A1FE08751DA01B9E4614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:da:4a:22:2b:14:07:29:a8:19:59:2e:60: 00:b7:a8:69:6d:0c:0e:e6:e7:dc:bb:e6:5f:34:ad: 4e:2e:7d:f8:c9:6d:92:33:1b:38:18:b8:ac:ec:61: 39:a3:09:91:50:7c:af:93:29:61:4b:43:0f:de:32: 35:df:55:7a:76:c8:57:61:f0:24:d8:c6:3d:f2:8d: aa:95:fa:a6:1b:63:e1:fd:14:a6:08:cd:f2:dd:4d: 5f:4d:80:48:d2:8b:06:c6:b3:2c:ed:e7:36:14:03: 83:26:6d:9c:a8:8b:78:b8:cd:36:be:94:09:05:c4: c2:6c:31:4b:83:b6:5a:3c:bb:3f:11:8d:46:88:78: 61:94:9c:5d:6e:0b:ae:3b:2f:3d:64:05:b1:2c:eb: 9d:91:0d:33:74:63:6a:95:c9:d0:7b:ea:c7:72:3e: 36:b9:8e:c2:53:0a:18:ab:1e:e9:76:b2:b5:fc:59: 37:19:a9:c5:83:bd:fc:8b:95:ef:ca:36:a6:21:66: 03:6f:5e:ed:dd:c6:b3:55:87:94:57:f4:a8:45:b2: 3e:31:58:e7:0e:43:78:db:39:08:6d:a5:00:68:1a: fb:1e:0a:e5:6c:73:5a:38:f4:a0:e3:77:4c:42:8d: 76:e8:be:9a:b6:f7:f0:d9:4b:7c:d0:9e:dd:98:93: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3D:B5:F0:C8:9F:1E:7E:7D:D2:A1:FE:08:75:1D:A0:1B:9E:46:14 X509v3 Authority Key Identifier: keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9e:c3:7f:8f:92:d6:04:39:3d:fb:ec:22:71:7a:eb:25:ad: e9:d2:69:b4:af:52:0c:d6:20:cd:cc:16:14:f4:c5:e7:67:ff: 1c:04:5a:a0:52:b9:bd:0e:25:8f:cb:8d:04:81:84:92:63:1a: 4a:51:68:e5:62:60:e6:6d:d8:06:5c:2b:67:26:5a:03:c1:a6: 70:62:36:a4:f5:b8:b4:31:22:2d:44:94:dc:aa:81:a1:a2:c7: 14:64:b6:26:34:9b:f2:27:33:06:9e:6f:65:18:69:0f:d9:9a: 15:6d:a1:f8:2d:7e:5c:b0:ca:f0:24:64:8b:e3:c7:a4:f7:24: 3e:98:f0:42:a0:31:7b:d8:89:30:db:5e:15:d6:a0:78:4f:62: e5:6b:63:a7:7c:33:9e:e3:0c:88:9a:8e:48:ae:f1:a4:91:0a: 3a:b1:a6:a6:00:5c:f8:92:0b:52:0d:a5:e9:2a:5b:0a:1c:fa: f8:ed:d6:1e:33:ac:2e:a7:0e:1b:db:97:80:bd:83:a3:c1:80: 38:08:40:3f:c6:13:f7:a5:a3:af:fb:ff:7a:3b:aa:a7:ad:2d: 83:3a:eb:ed:ce:46:11:2e:9c:e8:cd:4e:61:fa:b8:84:8e:e0: c2:04:b1:f9:90:a7:cb:10:c9:57:da:97:3e:2c:d7:49:86:d4: 2d:ee:91:33 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIURb8o2E7QaxC7xzTTTBPuhXBTlqEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEyhEMTI0ODYwN0Iw REREMEEyMTZFOEQ3RkFDNUUyQzJFNzc3MEExMTM5MB4XDTI1MDYwNjE2MzkyN1oX DTI1MDYwNzIwMDEyN1owMzExMC8GA1UEAxMoQzMzREI1RjBDODlGMUU3RTdERDJB MUZFMDg3NTFEQTAxQjlFNDYxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGf2koiKxQHKagZWS5gALeoaW0MDubn3LvmXzStTi59+MltkjMbOBi4rOxh OaMJkVB8r5MpYUtDD94yNd9VenbIV2HwJNjGPfKNqpX6phtj4f0UpgjN8t1NX02A SNKLBsazLO3nNhQDgyZtnKiLeLjNNr6UCQXEwmwxS4O2Wjy7PxGNRoh4YZScXW4L rjsvPWQFsSzrnZENM3RjapXJ0Hvqx3I+NrmOwlMKGKse6XaytfxZNxmpxYO9/IuV 78o2piFmA29e7d3Gs1WHlFf0qEWyPjFY5w5DeNs5CG2lAGga+x4K5WxzWjj0oON3 TEKNdui+mrb38NlLfNCe3ZiTux8CAwEAAaOCAgMwggH/MB0GA1UdDgQWBBTDPbXw yJ8efn3Sof4IdR2gG55GFDAfBgNVHSMEGDAWgBTRJIYHsN3Qohbo1/rF4sLndwoR OTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMS9EMTI0ODYwN0IwREREMEEyMTZF OEQ3RkFDNUUyQzJFNzc3MEExMTM5LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8wU1NHQjdEZDBLSVc2TmY2eGVMQzUz Y0tFVGsuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9y cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMS9EMTI0ODYwN0IwREREMEEy MTZFOEQ3RkFDNUUyQzJFNzc3MEExMTM5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJ7Df4+S1gQ5Pfvs InF66yWt6dJptK9SDNYgzcwWFPTF52f/HARaoFK5vQ4lj8uNBIGEkmMaSlFo5WJg 5m3YBlwrZyZaA8GmcGI2pPW4tDEiLUSU3KqBoaLHFGS2JjSb8iczBp5vZRhpD9ma FW2h+C1+XLDK8CRki+PHpPckPpjwQqAxe9iJMNteFdageE9i5Wtjp3wznuMMiJqO SK7xpJEKOrGmpgBc+JILUg2l6SpbChz6+O3WHjOsLqcOG9uXgL2Do8GAOAhAP8YT 96Wjr/v/ejuqp60tgzrr7c5GES6c6M1OYfq4hI7gwgSx+ZCnyxDJV9qXPizXSYbU Le6RMw== -----END CERTIFICATE-----Generated at Sat Jun 7 13:43:11 2025 by rpki-client