$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft File: vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json) Hash identifier: h59l9xXglFHkQxWdFId7uS7Vg+DKI+qxYvrTEmf/EHY= Subject key identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 67CF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft Manifest number: 46FB Signing time: Tue 03 Jun 2025 21:41:43 +0000 Manifest this update: Tue 03 Jun 2025 21:41:42 +0000 Manifest next update: Wed 04 Jun 2025 03:41:42 +0000 Files and hashes: 1: TPtfSFIXC8XSqOjhrbNIyuanY58.roa (hash: ymQTKmN7NzjvvEac0W/ENoEY5PeNUPzvKgbXQgIlQBA=) 2: uVgk8t-O2k60XCEaCsMauOlrBAo.roa (hash: owHUj/RmYqUVmV7ohWesDrEdgk+fQY/BCNEPtGgDvC4=) 3: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: /ZT88r2FdF2Qrw1AGq9NKTXCB+tlihwP2aJqV4DpttE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26575 (0x67cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jun 3 21:41:42 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c: a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef: 6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d: e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06: 74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe: aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a: f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c: 74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86: 4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab: 21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c: 3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c: d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70: 45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed: 42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c: 95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce: e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4: 4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:10:3f:ed:47:55:d5:a0:aa:84:8c:6a:ec:b9:ef:04:7f:57: d4:34:bc:cc:03:ba:a8:2b:a3:75:a8:45:d6:f8:f0:64:bf:44: e2:93:b6:c3:c8:54:f4:76:92:91:10:0b:03:d4:87:24:25:36: b2:19:01:33:4b:12:82:14:ab:6e:ff:3b:df:2b:e8:a0:1f:3b: f6:94:6c:15:34:fd:4b:93:cb:b5:55:8c:85:3d:14:96:dc:03: 88:c8:90:8b:bb:9d:0c:e0:d1:ad:83:10:61:70:5b:75:b9:d1: cb:12:7c:02:f0:38:a4:21:52:98:f2:f7:34:11:b7:a3:42:66: 4b:a1:4f:96:dc:54:92:5f:56:f9:ab:d7:ac:89:76:cf:4e:d7: 6c:e9:9e:c1:81:ac:9a:2b:a3:c5:f4:ac:24:f7:da:70:2b:b0: 7c:c5:8e:34:9f:74:b3:32:70:8e:5b:44:dd:84:64:14:c4:f5: 75:5d:6a:a4:df:5c:5a:7c:a3:fd:a7:0a:80:29:1a:50:46:98: f7:2e:77:b8:fe:c1:8e:47:82:64:f8:4f:47:e8:e5:dd:98:fb: 8c:7f:83:9c:39:94:2e:c8:9d:d1:53:6a:4d:34:a6:95:0f:c5: 40:68:a3:6f:15:a9:b6:d6:fd:2d:08:86:1a:0d:17:84:93:7f: d2:1b:30:d4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICZ88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDMy MTQxNDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU4OTI0NjVCMEE0RjM1 NjEzRDY5MkIzQjY4NTM2RThFQzEwRTBCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7L9Ho9iRXPO+XbdUrbKBD92Jo4hqyRWVeI5vv72/4T+WgxRZ3 rrlAbdLsXegiVk778yzSIfVM4jHeBnRYnNEsORB8iiOzTXun/qpK8GUJuVuyCdMB GFP8KvHPBO3tCet6lEqP53bYfHTj+C1SRbBX/I9d7fyrhkwa1OcktwCGfYmwKt8L qyH4tEKCze3EczTun8mELDtJxrhkRo+Cm8iA7U8FfNPgIwB9UksmEmgJJlhYcEW/ 1yZ9BX9g13l4e0kP7UJxhrP+X3vnQvpu6HaMDJWLWfuI6Upq8hK7eII2zulAUS8J LKXIbCv+YVtU5ErAzbOsYEj1vSqTCvyqrY79AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU6JJGWwpPNWE9aSs7aFNujsEOC7MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZldnRoa0RMcGxrOXFm bWozU0tOT0pFa1dPby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfED/tR1XVoKqEjGrsue8Ef1fUNLzMA7qoK6N1qEXW+PBkv0Tik7bDyFT0dpKR EAsD1IckJTayGQEzSxKCFKtu/zvfK+igHzv2lGwVNP1Lk8u1VYyFPRSW3AOIyJCL u50M4NGtgxBhcFt1udHLEnwC8DikIVKY8vc0EbejQmZLoU+W3FSSX1b5q9esiXbP Ttds6Z7BgayaK6PF9Kwk99pwK7B8xY40n3SzMnCOW0TdhGQUxPV1XWqk31xafKP9 pwqAKRpQRpj3Lne4/sGOR4Jk+E9H6OXdmPuMf4OcOZQuyJ3RU2pNNKaVD8VAaKNv Fam21v0tCIYaDReEk3/SGzDU -----END CERTIFICATE-----Generated at Wed Jun 4 00:17:06 2025 by rpki-client