$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft File: 3GiS42IN0PH9YpguEY4pdX3Iyz0.mft (raw, json) Hash identifier: x/ZOawG3rBsp7PpGVQIvTZLXdo2XP8Fy9jRt0iIFeXw= Subject key identifier: AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10 Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 15E6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft Manifest number: 1588 Signing time: Tue 03 Jun 2025 21:09:04 +0000 Manifest this update: Tue 03 Jun 2025 21:09:04 +0000 Manifest next update: Wed 04 Jun 2025 03:09:04 +0000 Files and hashes: 1: 3GiS42IN0PH9YpguEY4pdX3Iyz0.crl (hash: nj6wZ0lsQz8HyL0MNVAsLHKBrw36e3LGdiH2Ru/y0hc=) 2: 5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa (hash: +BAnoDks/I9MJXYriLgObyMPkMI3GpRgHTysE1uOmJ0=) 3: 75ys0PrDinDFKrNoR4e23Idu8m4.roa (hash: hqT2Mqlf2A+MLPQIu6Z0Qjy6Mwg44SLEln0zoQxySso=) 4: RHNCRs2Sd7uHRk_s1RRFIaMhVkg.roa (hash: CeZWKFta3q7XOY1PMeung3ofIhHqs04YGuQxyt3uHH4=) 5: SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa (hash: 5C4Kz2tvXlKpPp0zUdoEHwlfyvHduEz/cUpmRj3xDAg=) 6: bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa (hash: FPsYvAAOaQMSgDGGxAOpHgM9zH3kX06iyzaLE9msP8c=) 7: c8cUFZDH6O5exb6j4uFUNQZBVwA.roa (hash: ChxxrTVExxNhWtyTkhs7Lts9bjh8WwMtzGdZlOqpElw=) 8: iPCP6IuT-0QUdjr7rWq4x3eahUs.roa (hash: 392WqWeFbPlBXrnmWzfBSMp8DlyfnVN0seKH8/K1kVA=) 9: mOP5PXAJj2kQLFwCgVjCZczJXBo.roa (hash: wfV0HRjPUvGW/UwP9JCls20oaaBHIMZWwQL7DaYqcbw=) 10: rJq0JCq-nYCiaPtjdTG4aGX_lew.roa (hash: pRKxjBukzQitNjXwkG8mzwM2l2UavR4iKrfomRa7B/c=) 11: rlzdZPwqK5Oa0YBChiK_h_0EwVY.roa (hash: oIVPo7fR1TB38YsoJ++yXQ6k9SlvuWne2dWr+5XWVGw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5606 (0x15e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Jun 3 21:09:04 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=AEC4B33917814BC00A65EB9CEC3E1DFD8D383010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:79:0f:fa:67:80:fa:5d:2e:95:a1:98:8c: 49:15:6b:7c:b6:6b:21:fc:03:e9:69:75:27:1f:63: 35:4e:93:f0:74:1c:93:1e:dd:35:8e:2f:e5:d6:40: 1b:5f:12:fd:cc:78:a9:5b:c2:74:89:e7:af:f8:c3: 18:e2:d3:e7:b8:0d:c6:63:2d:ca:c4:ca:b4:6b:ea: 4b:54:e6:6d:a9:02:d4:74:c0:a8:da:2a:a6:de:d8: 0e:b3:9b:c2:ed:0f:e9:68:f6:09:f8:41:6a:7a:4d: 56:b3:8a:db:e0:be:ad:fb:85:b1:e0:0b:88:d3:bb: 26:1d:48:96:09:cb:ee:cb:6f:14:5f:4d:dd:fc:ec: 98:94:32:8e:8e:00:de:15:eb:d0:3a:2d:55:cf:a9: 09:2a:8d:5a:08:1e:1a:72:cd:b9:cc:49:e9:79:22: 61:c1:79:56:2b:1f:15:2b:20:d5:96:30:be:1e:d1: 92:11:20:52:24:3a:e4:c1:6b:a0:3d:4d:76:f9:6e: d9:94:40:f7:43:58:86:f3:2d:ca:8d:97:13:23:18: 9a:8f:af:c2:b3:83:40:46:86:39:f9:3a:11:4d:b5: 41:56:73:5c:54:d9:44:1c:4e:72:d5:5f:8a:34:63: 31:84:47:5d:8d:92:52:f7:c0:b7:80:8a:0b:02:88: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10 X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:28:78:66:c3:a8:41:6f:c9:b7:9f:fd:f7:c3:8d:ed:6f:e0: e2:8a:15:37:bb:8f:e2:71:7e:58:a3:9c:91:78:36:e6:ac:df: 1c:a5:bb:c1:42:76:0d:cf:82:8e:f1:87:38:62:e1:92:d9:a5: 6e:c6:b5:31:36:d3:f4:9b:3f:ae:51:4c:22:a6:a5:93:35:6c: c6:32:75:f0:b5:0d:d3:35:a4:93:21:49:0e:d2:29:2a:d4:bb: 4b:37:e9:05:6f:ef:1e:28:12:68:58:dc:3c:28:fd:32:f5:d3: 52:a4:28:c6:8c:b2:91:9b:d3:e4:44:aa:ba:d7:ce:64:9b:f2: e9:0b:47:ec:83:12:08:9b:cc:30:b2:b8:94:dc:a4:28:c0:4b: e4:3e:7c:cf:1e:b9:cf:e8:d5:b4:f3:f2:2b:d7:2f:35:e8:50: 2f:01:b7:ca:e8:8e:48:e2:aa:10:9d:e7:3f:31:24:31:a0:a7: 5a:41:0f:9b:c2:88:6c:87:e6:80:04:3f:a3:24:f2:ef:4d:5b: 56:b8:91:42:11:d6:45:d8:e2:42:0b:2d:12:61:d4:79:d8:7f: df:5d:4a:79:82:0e:da:97:fe:fe:a4:e8:ef:c8:69:19:18:e4: 62:fa:76:3c:56:15:73:4b:64:9a:98:73:be:1e:51:29:c3:c8: db:39:5b:b5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA2MDMy MTA5MDRaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKEFFQzRCMzM5MTc4MTRC QzAwQTY1RUI5Q0VDM0UxREZEOEQzODMwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC563kP+meA+l0ulaGYjEkVa3y2ayH8A+lpdScfYzVOk/B0HJMe 3TWOL+XWQBtfEv3MeKlbwnSJ56/4wxji0+e4DcZjLcrEyrRr6ktU5m2pAtR0wKja Kqbe2A6zm8LtD+lo9gn4QWp6TVazitvgvq37hbHgC4jTuyYdSJYJy+7LbxRfTd38 7JiUMo6OAN4V69A6LVXPqQkqjVoIHhpyzbnMSel5ImHBeVYrHxUrINWWML4e0ZIR IFIkOuTBa6A9TXb5btmUQPdDWIbzLcqNlxMjGJqPr8Kzg0BGhjn5OhFNtUFWc1xU 2UQcTnLVX4o0YzGER12NklL3wLeAigsCiJ3JAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUrsSzOReBS8AKZeuc7D4d/Y04MBAwHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvM0dpUzQySU4wUEg5 WXBndUVZNHBkWDNJeXowLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAM4oeGbDqEFvybef/ffDje1v4OKKFTe7j+JxflijnJF4Nuas3xylu8FCdg3P go7xhzhi4ZLZpW7GtTE20/SbP65RTCKmpZM1bMYydfC1DdM1pJMhSQ7SKSrUu0s3 6QVv7x4oEmhY3Dwo/TL101KkKMaMspGb0+REqrrXzmSb8ukLR+yDEgibzDCyuJTc pCjAS+Q+fM8euc/o1bTz8ivXLzXoUC8Bt8rojkjiqhCd5z8xJDGgp1pBD5vCiGyH 5oAEP6Mk8u9NW1a4kUIR1kXY4kILLRJh1HnYf99dSnmCDtqX/v6k6O/IaRkY5GL6 djxWFXNLZJqYc74eUSnDyNs5W7U= -----END CERTIFICATE-----Generated at Wed Jun 4 01:00:09 2025 by rpki-client