$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json) Hash identifier: CWgY84rvHfOs2pxZQvVVAxf7I1NfiSP7DAX955acStE= Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Certificate serial: 1649 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft Manifest number: 1641 Signing time: Sun 20 Jul 2025 07:41:02 +0000 Manifest this update: Sun 20 Jul 2025 07:41:02 +0000 Manifest next update: Sun 20 Jul 2025 13:41:02 +0000 Files and hashes: 1: 2XEBblbU0AtO7E6g_mThkL95ubE.roa (hash: DUInj+jg8J7IJSWSU2YD6iUFjAi3mK5xuxno0tl+ZGU=) 2: QVGtqSaVkscnVb64lhRi-cMEHSc.roa (hash: Ww6dLhQGxl5xTNIHfw+jluIsVDrzSDLMJsr6pk3RFXE=) 3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: DNMnWkH72HvZWjMIhsZyB6c6sZgLjrRbl6PkmOvh1dU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5705 (0x1649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Validity Not Before: Jul 20 07:41:02 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5: 5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f: f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90: 6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9: 14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc: ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c: 3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2: 68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a: 3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e: a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1: 23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54: 76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47: 5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8: 8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7: b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59: 48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91: 7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 X509v3 Authority Key Identifier: keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:05:31:65:67:41:d5:86:c0:58:c9:bf:7b:b2:5c:5a:65:95: da:a3:5e:a6:4d:f6:7a:f8:e4:67:80:0e:8f:81:28:49:e9:38: d2:d2:d5:4f:77:81:96:27:c5:b2:2f:d0:5d:36:bd:1a:2e:5d: 6c:2e:bb:a1:b2:68:98:3e:e8:df:b4:3d:28:c6:a5:dd:30:ba: 79:25:0f:3d:31:13:16:33:c2:37:02:5a:32:a5:34:f1:08:34: 8e:a2:66:3d:27:2d:dc:13:dc:f8:10:41:84:ef:fd:28:4f:c6: ab:12:b3:b0:ff:6e:dd:ca:79:83:c9:90:43:61:73:41:4d:17: 4f:17:3c:80:05:0c:c0:92:ac:46:d2:8c:1a:83:18:61:ff:84: 8a:b1:b3:58:d6:33:53:dd:74:4f:9d:95:09:62:31:2c:bd:41: b3:75:9d:98:4e:ea:7f:16:a0:33:3d:bc:f1:5c:14:dc:26:33: 92:6c:81:9d:9b:3f:a0:86:49:fd:69:66:69:0a:62:af:f1:e7: c2:98:13:23:11:c2:c6:52:41:37:84:6d:10:50:f5:a4:8a:5a: c6:58:6f:c3:6c:9d:df:7d:bc:d6:b9:5d:ed:11:1a:4e:f3:82: d2:bb:51:c4:ab:f3:26:bb:14:b8:8e:b8:8b:0b:de:b8:c7:58: 7d:a3:dd:d4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE5 MUFBQ0RDRTU2MEE3NEQ4M0MwNURBOEVBOTMyN0FGOTQ0REJCRDAeFw0yNTA3MjAw NzQxMDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM5MjE0NkIyRDlFRkU2 OEQxQkM5QTkwM0JEOTZDODRDRkU3MkU3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLpsZFTRyn6+cfCy2p5V/gf6XNqi2jBzxiFKDXT/QxX4S1dWbf 3pxmJhMqkGuLMIsBPoUgvbfnYOR9+RTvCzjAe/yK6Fhu/daU3O5entCwYZmEBTKW h3v7DD2+mgQrWMMNSaZnOniwsmhsZBvjXHkKhkvOjW0LCjxWAmJBFPpzuYB9WhIn LqMvBCM9QHpX2ld1WV9lsSMzUyuwpq2CDIYhCTCRVHZxJ8XTi6KWaFXu+F6LR1pR 24jnhOgDz/evNp6I6I2RnZMIyP+2qwz/rWjf57klXn95pM7bQ+0SKIpEWUjUzqqX UqF9MQhBAHn7kXyemQNuynJH9EsW/Ucy3NXnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUOSFGstnv5o0byakDvZbITP5y59MwHwYDVR0jBBgwFoAUYZGqzc5WCnTYPAXa jqkyevlE270wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw MC9ZWkdxemM1V0NuVFlQQVhhanFreWV2bEUyNzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMDAvWVpHcXpjNVdDblRZ UEFYYWpxa3lldmxFMjcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACsFMWVnQdWGwFjJv3uyXFplldqjXqZN9nr45GeADo+BKEnpONLS1U93gZYn xbIv0F02vRouXWwuu6GyaJg+6N+0PSjGpd0wunklDz0xExYzwjcCWjKlNPEINI6i Zj0nLdwT3PgQQYTv/ShPxqsSs7D/bt3KeYPJkENhc0FNF08XPIAFDMCSrEbSjBqD GGH/hIqxs1jWM1PddE+dlQliMSy9QbN1nZhO6n8WoDM9vPFcFNwmM5JsgZ2bP6CG Sf1pZmkKYq/x58KYEyMRwsZSQTeEbRBQ9aSKWsZYb8Nsnd99vNa5Xe0RGk7zgtK7 UcSr8ya7FLiOuIsL3rjHWH2j3dQ= -----END CERTIFICATE-----Generated at Sun Jul 20 12:57:50 2025 by rpki-client