$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft File: wrEFUbAKIe7r4enJQLSZntFcIfM.mft (raw, json) Hash identifier: JY3Uu+tdWDbOP7o+5cW32KLhtikIYkdTSOKPCFpjCr0= Subject key identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A Authority key identifier: C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 Certificate issuer: /CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Certificate serial: 27A5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft Manifest number: 27A5 Signing time: Sun 20 Jul 2025 12:40:09 +0000 Manifest this update: Sun 20 Jul 2025 12:40:09 +0000 Manifest next update: Sun 20 Jul 2025 18:40:09 +0000 Files and hashes: 1: wrEFUbAKIe7r4enJQLSZntFcIfM.crl (hash: +Geo/XVlAJ0OFs/VNjZtiuJPzoTJ0JlZ5WcvXUUimcE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 18:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10149 (0x27a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Validity Not Before: Jul 20 12:40:09 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=74C6E5BCFCAD2046F375D2A8B10240F7DCCAF44A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:25:a7:70:ec:92:88:a7:f5:83:b7:60:f5: e2:e1:8b:dd:20:b0:fe:13:2f:66:4c:3f:65:f2:25: 16:b7:98:d6:07:9b:6b:03:e9:67:0b:53:cd:0a:ad: 05:36:29:bb:39:d9:82:6a:0f:c1:8d:61:7f:30:d8: 8a:b1:f0:1b:ec:ff:a0:6c:ff:61:d9:12:50:fa:e0: af:0d:32:88:e1:23:85:86:f8:66:29:00:0b:2f:b5: 9d:aa:d1:17:7e:3f:81:df:47:9c:29:0e:3e:ab:5e: 50:d6:a3:36:c1:16:16:4b:f8:d3:b4:5a:0a:21:20: 1a:60:e8:56:8f:04:64:8d:e8:59:28:2c:f6:54:d5: 0a:56:b8:dd:23:ec:c1:2b:8f:5f:8f:24:6b:4a:74: 3e:65:09:c7:d0:95:5b:db:07:15:57:d0:52:a1:4c: 69:a9:02:42:e1:95:a4:0c:a1:1e:ec:b6:92:71:7f: 73:83:ed:80:07:33:10:9c:8d:93:ce:f3:e4:e1:ac: 45:5c:ed:80:70:4e:ca:0b:bd:97:ad:28:93:d6:68: bc:2e:85:38:2f:57:89:58:88:9d:5e:ec:79:fe:32: 3c:79:a9:62:aa:b6:9d:1e:1f:27:db:5f:fe:b5:54: e0:b9:1c:bf:58:20:d3:87:d7:eb:9e:5f:8b:f0:c2: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A X509v3 Authority Key Identifier: keyid:C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:78:5d:f6:d4:0e:a5:86:31:4a:96:96:6c:71:6d:2e:b0:11: 51:15:dc:ed:69:cd:cf:58:10:b8:6b:04:cd:46:cc:10:4e:d8: 55:e9:ef:0c:84:e5:dc:97:96:ab:45:a6:c7:07:03:37:72:ec: 98:2b:97:54:d7:de:03:27:13:6e:41:5f:03:45:6a:dc:0d:75: 25:1b:db:ad:15:09:09:4d:f5:b5:67:50:6b:f5:ac:37:ec:e2: d2:3a:dd:74:42:1c:44:3a:c2:df:89:13:dd:b2:a0:08:88:ac: df:31:54:00:89:9b:ca:56:53:e1:88:f4:41:d5:bb:b6:02:a5: e3:31:30:55:54:a8:ca:2c:65:76:ab:4f:0a:97:ba:ca:40:79: 12:5c:a2:cd:a0:a7:83:55:f8:71:f2:88:d4:99:5b:74:19:6e: 59:34:31:8c:25:0b:6b:46:8a:54:84:bf:aa:df:7d:99:d7:0e: 35:91:45:b6:d8:0a:e9:ba:02:dd:5b:49:c7:7a:80:cf:a4:13: 27:50:63:bf:7d:ca:80:f5:ad:b3:7a:8b:1b:7f:17:d9:b7:2f: b5:0f:7f:6d:79:7e:61:0e:5c:a6:51:95:70:3f:9e:ff:7f:fc: 6d:99:f5:da:97:57:f3:ec:e3:65:e5:a1:e8:4d:5c:27:66:be: 02:0c:28:cd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICJ6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzJC MTA1NTFCMDBBMjFFRUVCRTFFOUM5NDBCNDk5OUVEMTVDMjFGMzAeFw0yNTA3MjAx MjQwMDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0QzZFNUJDRkNBRDIw NDZGMzc1RDJBOEIxMDI0MEY3RENDQUY0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJyWncOySiKf1g7dg9eLhi90gsP4TL2ZMP2XyJRa3mNYHm2sD 6WcLU80KrQU2Kbs52YJqD8GNYX8w2Iqx8Bvs/6Bs/2HZElD64K8NMojhI4WG+GYp AAsvtZ2q0Rd+P4HfR5wpDj6rXlDWozbBFhZL+NO0WgohIBpg6FaPBGSN6FkoLPZU 1QpWuN0j7MErj1+PJGtKdD5lCcfQlVvbBxVX0FKhTGmpAkLhlaQMoR7stpJxf3OD 7YAHMxCcjZPO8+ThrEVc7YBwTsoLvZetKJPWaLwuhTgvV4lYiJ1e7Hn+Mjx5qWKq tp0eHyfbX/61VOC5HL9YINOH1+ueX4vwwgsZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdMblvPytIEbzddKosQJA99zK9EowHwYDVR0jBBgwFoAUwrEFUbAKIe7r4enJ QLSZntFcIfMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 Ny93ckVGVWJBS0llN3I0ZW5KUUxTWm50RmNJZk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dyRUZVYkFLSWU3cjRlbkpRTFNabnRGY0lmTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTcvd3JFRlViQUtJZTdy NGVuSlFMU1pudEZjSWZNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEd4XfbUDqWGMUqWlmxxbS6wEVEV3O1pzc9YELhrBM1GzBBO2FXp7wyE5dyX lqtFpscHAzdy7Jgrl1TX3gMnE25BXwNFatwNdSUb260VCQlN9bVnUGv1rDfs4tI6 3XRCHEQ6wt+JE92yoAiIrN8xVACJm8pWU+GI9EHVu7YCpeMxMFVUqMosZXarTwqX uspAeRJcos2gp4NV+HHyiNSZW3QZblk0MYwlC2tGilSEv6rffZnXDjWRRbbYCum6 At1bScd6gM+kEydQY799yoD1rbN6ixt/F9m3L7UPf215fmEOXKZRlXA/nv9//G2Z 9dqXV/Ps42XloehNXCdmvgIMKM0= -----END CERTIFICATE-----Generated at Sun Jul 20 16:50:25 2025 by rpki-client