$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft File: AvsF3jxUSp8cNEpj619s_dNIEVY.mft (raw, json) Hash identifier: 09Xlcook3HYOdtFFmq4/6ZMpwIXUzlROL9D93GKAR8U= Subject key identifier: 96:01:2E:59:7C:58:8B:4E:7A:C6:FB:9E:92:6E:A6:10:74:F3:0D:A2 Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Certificate serial: 14C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft Manifest number: 14AF Signing time: Sun 20 Jul 2025 17:40:00 +0000 Manifest this update: Sun 20 Jul 2025 17:40:00 +0000 Manifest next update: Sun 20 Jul 2025 23:40:00 +0000 Files and hashes: 1: 1Y9Spn_zTd19UzZUD2ZSqP8b0Qk.roa (hash: fQicQIvQDxK8UPOh7JVgkPbdWFd1x3I9/rfZ9+gHmvE=) 2: 2TY9VoA3ypgrPhPSlXQafnyCiZQ.roa (hash: vDSNz/Qcv+DhHxxw1rypQ9nLIGQJWwh3M36UKDV6pr0=) 3: 9cZpgnzoPGIWYixzzKuMGizw5UI.roa (hash: PuC6vc7VeYCNBjuO4vQRqeeLIKuEY/cYv7GJWE71Zso=) 4: AvsF3jxUSp8cNEpj619s_dNIEVY.crl (hash: FceJ/GpUC6Rg8IqaVlIFj2qSyG/vkvmBksRbD0mxCOs=) 5: E-M1zrZ1VgMPsvQs6ptKjjwBKEE.roa (hash: E+JlJ9owRGERj4fcb8S7sEUCY+F+gH0TcizADICZ0kc=) 6: IGn-XmZuKtQL73cha8UpyIipgDM.roa (hash: A14YSG0N4jkA/PqSNWJ36Q5QgFwbmJx9CRG22fBL64Y=) 7: Te6MTilA5PAitEutPNt0SViv9Tk.roa (hash: CKprCz5hT7alfsZYA0ghEsfYsbXr+6TL6AiieK6KZTQ=) 8: bGDdvDCWdAGyEibfBn5swNGvjtE.roa (hash: C3DU7y+/2HvqeUkgAPjDBWh4olulMlNsBYbI1G3K2YA=) 9: oGVNYraFzoy23d28dMWFOXR7bQ4.roa (hash: gxig9kWgKm7yjMUYJRwX7ylRUrHYzX6b/8/0eoj+2TE=) 10: omDqZ3E36yg9qFeS144ER9TTthE.roa (hash: 8N4cGiHmUy+WroqgGxchyoS+2gKZxZKaMLRuYlwZftY=) 11: p7Jqn23IuE0FpQRuz5kgUIxzbOs.roa (hash: ME+EBRtckuYtQG4SD53RhFtatuorO97DAlg/zpUiSps=) 12: v3RnkysGveAP__mOvzZebm8t9kw.roa (hash: v1qlf/FN/yj0agXdE6sRMi0An5qaRHGBGueIj4qUnNM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 23:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5317 (0x14c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Validity Not Before: Jul 20 17:40:00 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=96012E597C588B4E7AC6FB9E926EA61074F30DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:54:81:ef:cb:36:e1:7c:3b:bc:e9:68:a0:9f: 3d:66:05:59:9b:81:6e:b8:af:11:13:6c:07:a7:27: 25:11:7f:9e:09:8e:e8:bd:d7:55:f9:98:76:22:7c: 87:3b:46:e1:cd:aa:a1:a5:b0:02:69:6d:fc:4b:54: e7:cf:36:49:b3:16:09:b9:b9:df:ad:00:fe:c0:2c: bf:5e:34:8f:a6:e5:ba:d2:37:d3:56:b7:d5:f2:94: 2a:06:95:b3:b3:c6:df:95:0d:58:14:ca:ab:db:6c: e8:df:11:9a:0b:65:fb:93:3d:37:2c:f5:b5:b8:97: 4b:1d:89:56:0b:3c:e3:b8:58:39:3e:03:85:97:51: bb:69:7f:f8:bd:86:21:23:b9:e8:2a:f4:24:30:d0: 37:40:f6:86:f5:35:5d:cd:cd:8e:0a:d6:7a:eb:af: 32:7c:2a:39:8d:cb:32:bb:31:09:37:f2:96:e9:89: bb:c2:e3:54:3d:1e:98:82:c1:01:88:0e:8c:76:b7: bf:36:0f:14:cb:dc:6f:de:77:c4:30:7a:69:ab:ba: 1b:c9:d0:34:1f:46:6b:58:fb:22:4d:4b:e3:1e:d5: 12:14:f8:ec:d7:87:8e:06:13:1c:bc:6a:7b:f2:08: 6f:85:77:3a:62:6b:87:88:8b:42:ea:87:8c:6f:e8: cc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:2E:59:7C:58:8B:4E:7A:C6:FB:9E:92:6E:A6:10:74:F3:0D:A2 X509v3 Authority Key Identifier: keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6e:ab:ea:21:99:ce:68:61:08:47:aa:fc:48:f2:6f:f3:da: 28:04:36:cf:fc:79:d5:19:13:d9:4b:94:5c:a0:41:37:58:8f: 23:dd:2f:3f:72:61:7f:58:45:a1:3b:19:e7:c4:c9:21:c5:97: f8:1f:03:93:17:47:2e:56:78:02:b0:71:97:d2:d7:14:53:cc: c4:c6:d4:6a:a3:fd:a8:31:27:2a:cb:de:69:d9:89:30:b6:8d: 00:34:a6:b9:f3:12:65:91:ec:1c:5d:83:33:07:cb:a8:27:66: 6a:8f:f3:d2:cd:12:6a:f2:f9:ee:55:be:84:ec:67:81:dd:f8: 4d:30:92:b0:e5:5c:83:af:df:a5:15:cc:6e:81:d9:00:83:19: e8:fc:36:33:48:e3:f8:a3:0b:91:66:7c:4a:dc:e5:c0:f8:19: 65:b2:37:e5:d7:aa:d5:df:8b:19:1a:a3:01:44:8d:10:a9:e6: 88:58:c1:9a:74:6d:5d:3d:2c:3b:8a:9a:d8:21:09:98:7f:b2: 6e:48:af:c8:ba:f3:e3:61:f7:af:76:aa:8c:36:d8:de:07:83: 8c:76:0d:d3:5f:bb:36:8a:54:f1:01:5a:a3:b6:a1:11:8e:66: b9:79:3c:b9:84:ee:1c:43:9a:92:8a:34:80:82:d6:f4:e3:2c: 9c:32:d0:08 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNTA3MjAx NzQwMDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDk2MDEyRTU5N0M1ODhC NEU3QUM2RkI5RTkyNkVBNjEwNzRGMzBEQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2VIHvyzbhfDu86Wignz1mBVmbgW64rxETbAenJyURf54Jjui9 11X5mHYifIc7RuHNqqGlsAJpbfxLVOfPNkmzFgm5ud+tAP7ALL9eNI+m5brSN9NW t9XylCoGlbOzxt+VDVgUyqvbbOjfEZoLZfuTPTcs9bW4l0sdiVYLPOO4WDk+A4WX Ubtpf/i9hiEjuegq9CQw0DdA9ob1NV3NzY4K1nrrrzJ8KjmNyzK7MQk38pbpibvC 41Q9HpiCwQGIDox2t782DxTL3G/ed8QwemmruhvJ0DQfRmtY+yJNS+Me1RIU+OzX h44GExy8anvyCG+Fdzpia4eIi0Lqh4xv6MzdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUlgEuWXxYi056xvuekm6mEHTzDaIwHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj 619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3 MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvQXZzRjNqeFVTcDhj TkVwajYxOXNfZE5JRVZZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB9uq+ohmc5oYQhHqvxI8m/z2igENs/8edUZE9lLlFygQTdYjyPdLz9yYX9Y RaE7GefEySHFl/gfA5MXRy5WeAKwcZfS1xRTzMTG1Gqj/agxJyrL3mnZiTC2jQA0 prnzEmWR7BxdgzMHy6gnZmqP89LNEmry+e5VvoTsZ4Hd+E0wkrDlXIOv36UVzG6B 2QCDGej8NjNI4/ijC5FmfErc5cD4GWWyN+XXqtXfixkaowFEjRCp5ohYwZp0bV09 LDuKmtghCZh/sm5Ir8i68+Nh9692qow22N4Hg4x2DdNfuzaKVPEBWqO2oRGOZrl5 PLmE7hxDmpKKNICC1vTjLJwy0Ag= -----END CERTIFICATE-----Generated at Sun Jul 20 19:31:27 2025 by rpki-client