$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft File: G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft (raw, json) Hash identifier: 9M7My/pwUScmBz0z2OwIV94Hg24eQr3H/tdqGmtBYpI= Subject key identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 06BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft Manifest number: 06B1 Signing time: Tue 03 Jun 2025 21:11:36 +0000 Manifest this update: Tue 03 Jun 2025 21:11:36 +0000 Manifest next update: Wed 04 Jun 2025 03:11:36 +0000 Files and hashes: 1: 5OEuFKPxJaq1YidFs9FhBAB9P64.roa (hash: ai6iEpYFHCC4+YcYY1ILAHS+XendDmfNBlH2O+XrO30=) 2: 5iA-h01FgjAaC-DPAOpdAAX_FUQ.roa (hash: 6Xo71nk33XT6X/k3IVsNNARD6WK9MRPdCpAx2+YpPBY=) 3: 7GZTK5QwS8vnTmYs4X-8-_ZS4PM.roa (hash: Fypc5S3wysoSbXk7yh6NHgb67GpfLGm2tLs4epy1xF8=) 4: G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl (hash: ByqQ+sUScDqaANTzN7Ds4so29HrWtU48jhqofvErcAc=) 5: LH2PyxaebTwUWCqIBs1Kq9jLOjU.roa (hash: L04+TBCa3SIZMlFAdOVBBd3Gf27YDwcU8ancEUoAIfY=) 6: Y2ZKD-A30k3bDBgJvwCgTOSEfgE.roa (hash: 9hA3D9MXarvGgUQCQ8E1yH6YN9fGRixIrfBTcD/M2r0=) 7: dTMFnNYS9LqVMpJIioge2ooc5gE.roa (hash: pCXNC0r3wfXitDNymXsPE77AREO+Pz310OZK4OIzz2Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1722 (0x6ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Jun 3 21:11:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C92091CD704E8E01CB5621F4BFAA3A3F31DF49B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:a9:d9:1e:ae:44:4e:64:08:03:b8:dd:8f: d0:cf:76:8f:f3:30:8d:92:2d:f5:31:26:2c:cb:16: 3d:e4:53:4a:25:55:f4:0c:08:a7:0b:fd:7c:cb:6d: a2:dd:92:63:9b:79:f3:49:82:2c:07:00:ff:8c:46: b5:22:11:04:49:70:35:97:40:f3:6f:f3:35:ab:c1: 3b:26:2b:e6:4a:7a:5e:06:d7:eb:a7:23:7a:c4:ee: 07:38:38:23:35:dc:83:3d:f3:50:e8:69:c9:05:f4: b5:43:13:94:78:2d:49:57:dd:7d:10:05:57:f1:5c: a4:8a:cf:83:13:08:25:fd:7f:cb:b6:71:0b:36:9c: 0a:53:35:51:f5:fd:48:73:7e:f6:61:5b:00:54:14: c0:48:10:74:88:1d:1f:11:0d:f7:c6:81:7c:b9:66: 25:3c:0e:52:cd:9a:7f:9c:f9:e9:6e:dd:49:ca:c9: 3d:57:2a:5e:53:9f:fa:6a:1e:23:49:f1:01:67:5e: 2c:a1:70:bc:18:73:ea:2d:2d:ce:c6:d8:c4:5d:b0: ef:1f:1a:27:e0:f4:c8:49:d0:19:81:44:51:a5:67: d1:43:ed:c1:97:9b:69:72:3c:c2:c9:64:6c:d2:a2: 1f:d5:ef:dc:17:ea:8d:4e:a7:d9:0e:79:e6:65:d9: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:5e:5e:9c:2e:a7:1d:5d:2f:77:51:9f:60:bf:4a:e6:60:f6: 48:d9:f2:42:6b:4c:59:a8:2f:60:fa:64:4a:86:eb:8f:b3:86: 31:6b:13:77:39:a2:08:41:f6:88:e1:8f:d5:04:8d:d6:59:2f: cb:3d:a5:7a:b1:31:4b:e9:b5:5c:77:5e:63:13:2b:25:44:0f: 43:0a:31:dd:48:af:f1:92:e4:26:68:63:7b:9f:7b:50:5f:67: fd:d0:c1:f1:38:ea:31:5d:6c:30:ef:ab:c2:52:66:92:67:a4: 7d:a5:99:8f:27:a1:a7:06:da:58:6f:fd:d4:c7:70:62:57:02: 15:51:83:bb:d1:b6:a5:86:a3:a2:e6:26:c3:5e:88:ab:23:18: a8:62:3a:58:62:91:d0:e5:1b:97:30:30:2e:61:3d:6c:44:a0: a2:0c:cc:36:5d:1d:cf:72:3a:7a:04:d3:04:73:63:b9:c1:16: c4:10:34:ab:ad:ae:37:26:91:a6:c2:93:b5:5e:77:6e:4f:39: 67:29:cd:2d:e5:0d:c8:a8:a2:6a:13:2a:b4:b8:60:c9:09:f4: 7b:d7:4d:00:97:a1:0d:cf:0c:b3:38:00:cf:c8:9b:b3:5d:a1: 18:90:95:e6:86:f7:52:f4:95:ca:97:2f:85:e9:86:aa:83:35: 9d:4a:c7:bc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA2MDMy MTExMzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM5MjA5MUNENzA0RThF MDFDQjU2MjFGNEJGQUEzQTNGMzFERjQ5QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLiqnZHq5ETmQIA7jdj9DPdo/zMI2SLfUxJizLFj3kU0olVfQM CKcL/XzLbaLdkmObefNJgiwHAP+MRrUiEQRJcDWXQPNv8zWrwTsmK+ZKel4G1+un I3rE7gc4OCM13IM981DoackF9LVDE5R4LUlX3X0QBVfxXKSKz4MTCCX9f8u2cQs2 nApTNVH1/UhzfvZhWwBUFMBIEHSIHR8RDffGgXy5ZiU8DlLNmn+c+elu3UnKyT1X Kl5Tn/pqHiNJ8QFnXiyhcLwYc+otLc7G2MRdsO8fGifg9MhJ0BmBRFGlZ9FD7cGX m2lyPMLJZGzSoh/V79wX6o1Op9kOeeZl2QOjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUySCRzXBOjgHLViH0v6o6PzHfSbcwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvRzhiWnFmU2lKcVlm WDZHcEZqbEIxTE5ibzFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAL9eXpwupx1dL3dRn2C/SuZg9kjZ8kJrTFmoL2D6ZEqG64+zhjFrE3c5oghB 9ojhj9UEjdZZL8s9pXqxMUvptVx3XmMTKyVED0MKMd1Ir/GS5CZoY3ufe1BfZ/3Q wfE46jFdbDDvq8JSZpJnpH2lmY8noacG2lhv/dTHcGJXAhVRg7vRtqWGo6LmJsNe iKsjGKhiOlhikdDlG5cwMC5hPWxEoKIMzDZdHc9yOnoE0wRzY7nBFsQQNKutrjcm kabCk7Ved25POWcpzS3lDcioomoTKrS4YMkJ9HvXTQCXoQ3PDLM4AM/Im7NdoRiQ leaG91L0lcqXL4XphqqDNZ1Kx7w= -----END CERTIFICATE-----Generated at Wed Jun 4 00:34:37 2025 by rpki-client