$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft File: ze9xEd6YvXVtkrNNOU2i057_m44.mft (raw, json) Hash identifier: rxOj6+ZOojPu97z7y0EqOrXnqxyNdTFaZ9SGBZMtkcg= Subject key identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 1646 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft Manifest number: 1639 Signing time: Sun 20 Jul 2025 11:40:15 +0000 Manifest this update: Sun 20 Jul 2025 11:40:15 +0000 Manifest next update: Sun 20 Jul 2025 17:40:15 +0000 Files and hashes: 1: 3CfhItJuTD6YcZOf4dGRgLCyLnk.roa (hash: Yr2TtYz0Jmy9vk96z+H1KPmDNXvxDzY+tBB3ofIrHtI=) 2: fFW5_t7XVzLKernsExPGIFpM2JA.roa (hash: pRxq7Rip4CxMTe0waVEB0Oz3tf8WBd6skOfdjzyUrSs=) 3: f_hTmu8kp_zGg2aqVknFJuMvbnE.roa (hash: 5bVZ4ZpRFYhc00rYxxPxP83AXo11XM/TioixA6h/bRU=) 4: ze9xEd6YvXVtkrNNOU2i057_m44.crl (hash: PYpnQhgIC7djGC38mch6JvPFsDLgupKRxtkxycJ4IPg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5702 (0x1646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Jul 20 11:40:15 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2A30BAAC6C80DCB960834B58D4E4945741F7D779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:c1:50:fb:62:2c:ae:7e:1f:1f:c5:69:be: 9f:6e:8b:51:05:a6:a8:80:48:d4:d9:8e:00:d2:b9: c3:8a:5e:7a:e9:d5:66:b5:e8:f9:4f:88:d2:09:34: a6:fa:6a:36:b9:3a:41:f4:b4:fd:81:c1:2b:51:b5: 06:3d:b0:07:02:df:6a:5e:f8:d3:91:23:6c:e1:40: 22:53:de:88:d2:52:76:1e:ef:fd:57:ef:55:9d:75: b9:25:43:38:cc:48:4b:73:69:11:37:9f:51:4f:92: 91:1c:a6:85:f0:56:8a:62:87:1b:0c:13:00:37:44: 5f:62:62:d2:3f:83:27:1d:85:1a:d6:d2:5d:9b:fd: f8:f3:14:83:47:27:32:da:2c:a7:2b:de:6b:ec:d9: 4f:e2:ec:2f:3e:e3:2a:37:24:32:af:90:8a:2c:5b: 5f:e5:8e:07:17:da:30:68:b0:05:b9:58:48:90:e7: 28:c0:d1:42:c9:96:20:37:c4:d1:49:bb:a5:0d:4b: 34:ae:b9:92:eb:11:db:ef:23:27:8c:48:d4:94:79: e0:58:af:a9:fd:50:8e:d7:81:d3:f6:05:bc:11:81: 6c:f2:7b:34:9a:d6:7f:da:16:1b:6a:ba:92:b5:c1: 30:3b:aa:f2:e8:c9:7c:fe:7d:de:c7:ec:3c:ef:2f: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f6:fa:b2:f2:f3:0a:65:7d:a7:be:02:a5:bc:c8:6f:6b:1b: dd:aa:b1:46:6c:a0:55:0d:a6:f6:f5:c8:8f:0d:a7:43:94:e3: d9:f1:0f:df:b1:c6:0d:97:82:34:d0:3e:ac:66:bb:63:da:1c: d6:8b:d1:82:08:7b:f5:02:0f:1e:ad:c7:cc:97:f1:74:7d:86: 1d:a7:2f:f3:c9:26:b6:17:9e:df:36:b5:e4:2b:de:0c:3e:66: 27:de:b9:69:c9:1b:b0:35:30:2a:2c:b1:94:ae:a6:15:17:10: 3f:4d:74:fd:9f:4e:a8:54:45:b8:76:7f:ac:6a:36:aa:58:bc: ed:e3:33:9e:44:b4:0f:f4:f6:45:aa:19:f8:3a:67:3a:86:62: 02:c0:88:45:2e:13:71:d3:8a:5d:ad:b0:07:55:ed:a3:ee:09: 58:36:4c:58:ea:c4:cd:10:67:7c:76:6f:a7:6d:af:9e:95:42: 36:43:e7:ce:03:c8:37:8c:b2:89:22:16:de:e4:02:d3:b3:4d: 57:ab:4e:75:92:76:ef:b7:35:77:49:0e:c1:18:92:32:9d:27: cb:61:73:00:3b:82:ca:2d:eb:dd:0f:3d:00:38:c6:ad:4e:8e: 06:1a:b3:69:f7:44:bb:13:79:f7:08:43:e0:75:31:3a:bc:8d: e0:33:33:c8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNTA3MjAx MTQwMTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJBMzBCQUFDNkM4MERD Qjk2MDgzNEI1OEQ0RTQ5NDU3NDFGN0Q3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw7MFQ+2Isrn4fH8Vpvp9ui1EFpqiASNTZjgDSucOKXnrp1Wa1 6PlPiNIJNKb6aja5OkH0tP2BwStRtQY9sAcC32pe+NORI2zhQCJT3ojSUnYe7/1X 71WddbklQzjMSEtzaRE3n1FPkpEcpoXwVopihxsMEwA3RF9iYtI/gycdhRrW0l2b /fjzFINHJzLaLKcr3mvs2U/i7C8+4yo3JDKvkIosW1/ljgcX2jBosAW5WEiQ5yjA 0ULJliA3xNFJu6UNSzSuuZLrEdvvIyeMSNSUeeBYr6n9UI7XgdP2BbwRgWzyezSa 1n/aFhtqupK1wTA7qvLoyXz+fd7H7DzvL8iFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKjC6rGyA3Llgg0tY1OSUV0H313kwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvemU5eEVkNll2WFZ0 a3JOTk9VMmkwNTdfbTQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACv2+rLy8wplfae+AqW8yG9rG92qsUZsoFUNpvb1yI8Np0OU49nxD9+xxg2X gjTQPqxmu2PaHNaL0YIIe/UCDx6tx8yX8XR9hh2nL/PJJrYXnt82teQr3gw+Zife uWnJG7A1MCossZSuphUXED9NdP2fTqhURbh2f6xqNqpYvO3jM55EtA/09kWqGfg6 ZzqGYgLAiEUuE3HTil2tsAdV7aPuCVg2TFjqxM0QZ3x2b6dtr56VQjZD584DyDeM sokiFt7kAtOzTVerTnWSdu+3NXdJDsEYkjKdJ8thcwA7gsot690PPQA4xq1OjgYa s2n3RLsTefcIQ+B1MTq8jeAzM8g= -----END CERTIFICATE-----Generated at Sun Jul 20 12:55:43 2025 by rpki-client