$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft File: vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json) Hash identifier: joN7oNB1F4wSpdqzV5SRiFHudDYvc2K/aJHnziTPGLQ= Subject key identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 792D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft Manifest number: 4FAA Signing time: Sun 20 Jul 2025 11:12:12 +0000 Manifest this update: Sun 20 Jul 2025 11:12:12 +0000 Manifest next update: Sun 20 Jul 2025 17:12:12 +0000 Files and hashes: 1: VoL5xeeYmXm8CaSt8uMMgR3CUiA.roa (hash: g2sA7aD4g7EMFYXQls3FdFPZGMuJxKER+TX7zRoGYmQ=) 2: uVgk8t-O2k60XCEaCsMauOlrBAo.roa (hash: owHUj/RmYqUVmV7ohWesDrEdgk+fQY/BCNEPtGgDvC4=) 3: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: m0aXa2YgV7VcRjSZVxclhYKcTU7vjLh/W7uavfkajjY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31021 (0x792d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jul 20 11:12:12 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c: a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef: 6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d: e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06: 74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe: aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a: f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c: 74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86: 4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab: 21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c: 3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c: d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70: 45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed: 42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c: 95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce: e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4: 4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:1e:88:fd:33:95:4f:f3:4c:9b:42:08:32:84:53:1e:08:b1: 34:b5:07:96:1e:df:34:57:14:a4:8c:29:50:a1:75:a4:06:b5: 91:47:da:de:ad:f7:db:2b:f9:58:65:ff:a9:1c:a5:6f:60:cc: 2e:ec:53:4e:11:53:42:fc:2e:43:66:f1:0e:83:0d:a7:3c:57: 3c:7b:43:5e:14:ec:e7:65:09:ad:0a:23:ba:80:26:aa:38:dd: 18:a3:e3:fd:3b:a0:87:66:0c:f1:e7:0d:89:aa:b5:c3:ef:1c: 64:3f:65:b5:a5:f9:c8:a5:47:c0:53:ed:22:5e:23:69:7a:79: a0:29:46:fb:8f:34:73:a4:92:9d:11:4e:8b:47:22:ed:17:96: 97:09:a1:a0:a2:07:29:c1:74:4d:72:77:7b:26:7c:6d:ad:5a: 86:a5:d2:8d:af:7f:77:34:af:db:be:0e:a2:99:df:42:f2:8c: d2:a0:28:88:3e:72:72:f3:ec:9b:aa:06:3a:b9:82:23:84:38: 99:f8:01:a0:71:a0:30:5a:2d:25:a4:61:c5:f9:a6:36:b9:b3: ba:40:a4:4d:e7:24:a8:ef:e2:2b:33:01:b7:36:14:5c:b4:b7: d1:3e:ea:89:46:2c:d3:8f:b2:57:31:b3:87:19:c0:b0:1f:e8: ee:46:01:8a -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICeS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MjAx MTEyMTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU4OTI0NjVCMEE0RjM1 NjEzRDY5MkIzQjY4NTM2RThFQzEwRTBCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7L9Ho9iRXPO+XbdUrbKBD92Jo4hqyRWVeI5vv72/4T+WgxRZ3 rrlAbdLsXegiVk778yzSIfVM4jHeBnRYnNEsORB8iiOzTXun/qpK8GUJuVuyCdMB GFP8KvHPBO3tCet6lEqP53bYfHTj+C1SRbBX/I9d7fyrhkwa1OcktwCGfYmwKt8L qyH4tEKCze3EczTun8mELDtJxrhkRo+Cm8iA7U8FfNPgIwB9UksmEmgJJlhYcEW/ 1yZ9BX9g13l4e0kP7UJxhrP+X3vnQvpu6HaMDJWLWfuI6Upq8hK7eII2zulAUS8J LKXIbCv+YVtU5ErAzbOsYEj1vSqTCvyqrY79AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU6JJGWwpPNWE9aSs7aFNujsEOC7MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZldnRoa0RMcGxrOXFm bWozU0tOT0pFa1dPby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlHoj9M5VP80ybQggyhFMeCLE0tQeWHt80VxSkjClQoXWkBrWRR9rerffbK/lY Zf+pHKVvYMwu7FNOEVNC/C5DZvEOgw2nPFc8e0NeFOznZQmtCiO6gCaqON0Yo+P9 O6CHZgzx5w2JqrXD7xxkP2W1pfnIpUfAU+0iXiNpenmgKUb7jzRzpJKdEU6LRyLt F5aXCaGgogcpwXRNcnd7JnxtrVqGpdKNr393NK/bvg6imd9C8ozSoCiIPnJy8+yb qgY6uYIjhDiZ+AGgcaAwWi0lpGHF+aY2ubO6QKRN5ySo7+IrMwG3NhRctLfRPuqJ RizTj7JXMbOHGcCwH+juRgGK -----END CERTIFICATE-----Generated at Sun Jul 20 12:35:04 2025 by rpki-client