$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft File: yZxuUM1dFkZVP-VT5x64vu2RUKo.mft (raw, json) Hash identifier: 7jFoAhTS/zr5BmVLwxkLpc13ZMG96u6vLj4liDlMZb8= Subject key identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D Authority key identifier: C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA Certificate issuer: /CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Certificate serial: 1F32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft Manifest number: 1F32 Signing time: Sun 20 Jul 2025 07:41:43 +0000 Manifest this update: Sun 20 Jul 2025 07:41:43 +0000 Manifest next update: Sun 20 Jul 2025 13:41:43 +0000 Files and hashes: 1: yZxuUM1dFkZVP-VT5x64vu2RUKo.crl (hash: hiBhO4LgMsPh1O1UgidcLYOliCjkIxb6ssZ1NNfSis8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7986 (0x1f32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Validity Not Before: Jul 20 07:41:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=677201A6628230D0D633B6E41AA4EA04F127C18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:c7:7c:50:81:f4:7e:df:0b:fd:f4:0e:76: 24:1c:17:31:c1:3b:df:fe:96:84:35:f6:a5:1d:83: b6:df:67:63:94:53:eb:e3:1d:3b:a7:24:4b:c3:df: 09:fe:24:f4:f1:9e:27:7c:36:75:2b:ed:54:62:e9: 66:e3:14:7b:db:a7:d9:9e:1d:27:06:b7:9b:c7:84: e7:95:6c:78:68:d8:e9:ce:51:41:52:79:f2:1c:f1: 72:90:57:2b:05:a5:99:3a:ed:a9:e1:bb:3e:9b:f9: ff:da:34:39:a5:d2:56:fb:64:14:74:3f:86:cf:97: 7e:fb:89:38:af:f7:98:55:e1:d5:e3:61:5b:78:7e: 70:0f:9c:81:3b:37:fd:5e:db:9e:5f:e3:e8:0b:8f: 88:0b:d8:b4:fb:4e:22:96:cd:e2:d3:9a:7d:bd:8b: 8c:83:d7:e4:c3:7d:0a:e0:09:e8:fa:18:e0:db:f3: 8f:64:4b:21:e9:fa:57:88:21:82:de:6d:77:0f:fb: cb:69:12:d8:bf:87:7b:02:fc:77:b5:7a:ec:d0:93: c6:01:00:a6:a7:5a:bd:7d:fa:e4:ec:32:b7:47:e6: c0:42:f3:ef:df:84:9d:d0:1d:54:ff:51:9a:8e:d5: 5c:0d:f8:d7:11:b3:c2:16:a5:27:0d:01:3e:d2:c1: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D X509v3 Authority Key Identifier: keyid:C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:77:79:b1:7e:cb:76:44:ed:c2:82:f8:af:5b:c9:ae:88:a1: 4d:08:82:a6:a5:66:65:dd:75:24:6c:a8:94:67:17:40:e7:92: a1:84:3b:2a:93:6a:fe:ad:97:1c:38:76:54:57:be:f8:a9:86: 56:b0:96:0b:f0:89:5b:0f:d6:42:a8:cf:9e:b2:69:7a:cc:f3: d2:e8:b9:b1:8d:56:03:64:cf:ea:01:ba:5e:51:5c:67:fc:89: 22:74:ff:d8:e9:9d:b6:dc:90:2f:c2:77:95:45:f7:69:e0:72: 92:aa:02:58:2b:c6:4b:f2:d3:b6:2b:e5:4f:40:d5:6e:81:ec: 1f:36:2d:87:85:cc:68:43:d7:cf:7e:0f:b2:72:49:d4:cc:6e: d6:c1:5f:c6:09:96:75:91:0d:1e:1b:b0:2b:0e:fa:e6:a0:1b: 9d:6e:7d:cb:20:f1:10:1e:82:c9:28:71:74:ef:a0:5e:5a:be: d8:5b:76:78:dc:c7:7d:bd:67:4c:ff:5b:64:2b:91:da:5e:b1: bc:72:5f:cb:a1:ff:17:38:0f:7d:53:67:66:a7:79:c6:2e:80: 91:22:ab:2a:cd:c8:79:d3:f3:12:be:0f:62:be:a4:1d:3e:c1: 77:39:0b:59:c6:cc:45:77:7d:16:dc:4a:e3:56:bd:3f:97:74: b3:1c:a2:5f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk5 QzZFNTBDRDVEMTY0NjU1M0ZFNTUzRTcxRUI4QkVFRDkxNTBBQTAeFw0yNTA3MjAw NzQxNDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDY3NzIwMUE2NjI4MjMw RDBENjMzQjZFNDFBQTRFQTA0RjEyN0MxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXiMd8UIH0ft8L/fQOdiQcFzHBO9/+loQ19qUdg7bfZ2OUU+vj HTunJEvD3wn+JPTxnid8NnUr7VRi6WbjFHvbp9meHScGt5vHhOeVbHho2OnOUUFS efIc8XKQVysFpZk67anhuz6b+f/aNDml0lb7ZBR0P4bPl377iTiv95hV4dXjYVt4 fnAPnIE7N/1e255f4+gLj4gL2LT7TiKWzeLTmn29i4yD1+TDfQrgCej6GODb849k SyHp+leIIYLebXcP+8tpEti/h3sC/He1euzQk8YBAKanWr19+uTsMrdH5sBC8+/f hJ3QHVT/UZqO1VwN+NcRs8IWpScNAT7Swco5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ3IBpmKCMNDWM7bkGqTqBPEnwY0wHwYDVR0jBBgwFoAUyZxuUM1dFkZVP+VT 5x64vu2RUKowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy MC95Wnh1VU0xZEZrWlZQLVZUNXg2NHZ1MlJVS28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3laeHVVTTFkRmtaVlAtVlQ1eDY0dnUyUlVLby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjAveVp4dVVNMWRGa1pW UC1WVDV4NjR2dTJSVUtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMd3ebF+y3ZE7cKC+K9bya6IoU0IgqalZmXddSRsqJRnF0DnkqGEOyqTav6t lxw4dlRXvviphlawlgvwiVsP1kKoz56yaXrM89LoubGNVgNkz+oBul5RXGf8iSJ0 /9jpnbbckC/Cd5VF92ngcpKqAlgrxkvy07Yr5U9A1W6B7B82LYeFzGhD189+D7Jy SdTMbtbBX8YJlnWRDR4bsCsO+uagG51ufcsg8RAegskocXTvoF5avthbdnjcx329 Z0z/W2QrkdpesbxyX8uh/xc4D31TZ2anecYugJEiqyrNyHnT8xK+D2K+pB0+wXc5 C1nGzEV3fRbcSuNWvT+XdLMcol8= -----END CERTIFICATE-----Generated at Sun Jul 20 12:45:49 2025 by rpki-client