$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft File: JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft (raw, json) Hash identifier: Orev8ljZG5D0MADbcUcTaGvAUWs1Zq0tUyZHg94UW8M= Subject key identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E Authority key identifier: 24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 Certificate issuer: /CN=246B8D869C83018945DF9F99009342903D076471 Certificate serial: 0EAC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft Manifest number: 0EAC Signing time: Sun 20 Jul 2025 07:41:50 +0000 Manifest this update: Sun 20 Jul 2025 07:41:50 +0000 Manifest next update: Sun 20 Jul 2025 13:41:50 +0000 Files and hashes: 1: JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl (hash: buaxa8srWNsH+IlMx9gBcI2hUsgTY4oQItMF/56ZmKY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3756 (0xeac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246B8D869C83018945DF9F99009342903D076471 Validity Not Before: Jul 20 07:41:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8FDA8E1F762C3187576420B9E92948475E97BB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:41:ef:79:37:1e:c4:f8:1c:e5:0e:71:9d: c9:14:b5:45:c8:aa:4a:b6:7f:b6:64:6d:9c:c5:b4: 9d:64:a4:5d:ae:e0:ed:5a:99:90:d5:ed:c7:09:85: 0b:c6:66:ea:de:08:3b:27:c5:cf:0c:8c:3f:54:ad: 62:47:28:69:25:ab:e7:ba:5c:a2:35:85:40:00:ca: db:57:06:09:65:3d:dd:07:b0:1b:9b:da:10:2f:f3: 9a:68:b7:36:09:06:0a:4a:aa:1b:46:6f:b1:e6:45: d8:1a:ea:3f:5c:63:42:76:05:d5:24:29:3b:9b:7e: 1b:eb:34:ff:53:23:ab:6e:da:9a:59:45:35:96:30: 93:60:cb:65:9d:a8:c8:1b:e3:ab:f7:c7:ec:b0:b3: da:48:9c:79:e5:ac:6f:fc:af:ec:2b:30:f4:69:7a: 5b:07:4e:6a:5f:49:a9:b0:d5:ac:08:92:3f:c5:6e: 0a:fd:89:aa:7b:61:23:03:8e:ba:cd:f3:07:2e:54: c1:d9:42:92:6d:36:57:70:93:04:79:95:a2:d4:f7: c0:6c:c6:dd:1a:1c:88:96:b8:36:74:cf:47:aa:f9: ea:58:a5:1b:b4:05:52:37:ba:62:65:7b:4b:4f:39: a9:19:cf:aa:b3:fc:e9:18:0f:6c:f6:2f:52:2b:d1: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E X509v3 Authority Key Identifier: keyid:24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d5:8c:fc:63:2e:25:c4:e9:07:8f:0f:24:d2:17:45:30:dc: 23:aa:1f:fd:60:56:73:21:a0:e9:35:b9:f0:99:7f:63:4d:83: da:b6:fe:db:7f:79:ea:2a:94:75:1f:8d:5b:97:5f:18:af:6b: 28:ed:82:3e:0a:35:01:54:c7:b4:59:00:7d:33:0e:62:ae:53: 5b:e2:7f:b9:2a:e0:73:03:0f:36:e9:68:f4:98:17:63:47:e6: cf:10:00:1b:a6:b0:2d:94:23:10:b2:3f:c0:88:ba:98:8a:08: 4f:28:df:87:16:5d:94:7f:56:d3:cf:56:f1:36:22:08:47:71: a4:c3:f7:a4:bf:a0:3f:0c:8f:b2:a6:e0:0a:a6:a7:23:fc:2b: e4:e1:9c:84:39:f2:06:20:08:b7:7e:5a:93:6b:40:ff:14:14: 21:16:dc:22:89:ee:c8:40:eb:5f:85:e4:da:b0:86:e6:52:41: ad:61:09:3d:fd:42:37:55:80:a1:ec:45:df:2d:a9:9e:3f:f7: 89:42:1d:47:f3:c2:fe:81:62:4c:b7:d9:93:db:d7:1a:63:2a: 45:dc:a5:51:62:3c:fa:90:dc:be:9f:c9:da:10:81:37:65:8a: fe:9f:4c:a3:e3:f6:f7:0b:be:e9:1a:59:ad:97:85:1c:b1:21: 42:87:0d:28 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQ2 QjhEODY5QzgzMDE4OTQ1REY5Rjk5MDA5MzQyOTAzRDA3NjQ3MTAeFw0yNTA3MjAw NzQxNTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhGREE4RTFGNzYyQzMx ODc1NzY0MjBCOUU5Mjk0ODQ3NUU5N0JCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvv0HveTcexPgc5Q5xnckUtUXIqkq2f7ZkbZzFtJ1kpF2u4O1a mZDV7ccJhQvGZureCDsnxc8MjD9UrWJHKGklq+e6XKI1hUAAyttXBgllPd0HsBub 2hAv85potzYJBgpKqhtGb7HmRdga6j9cY0J2BdUkKTubfhvrNP9TI6tu2ppZRTWW MJNgy2WdqMgb46v3x+yws9pInHnlrG/8r+wrMPRpelsHTmpfSamw1awIkj/Fbgr9 iap7YSMDjrrN8wcuVMHZQpJtNldwkwR5laLU98Bsxt0aHIiWuDZ0z0eq+epYpRu0 BVI3umJle0tPOakZz6qz/OkYD2z2L1Ir0ZmXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUj9qOH3YsMYdXZCC56SlIR16Xu54wHwYDVR0jBBgwFoAUJGuNhpyDAYlF35+Z AJNCkD0HZHEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy NC9KR3VOaHB5REFZbEYzNS1aQUpOQ2tEMEhaSEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pHdU5ocHlEQVlsRjM1LVpBSk5Da0QwSFpIRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjQvSkd1TmhweURBWWxG MzUtWkFKTkNrRDBIWkhFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACPVjPxjLiXE6QePDyTSF0Uw3COqH/1gVnMhoOk1ufCZf2NNg9q2/tt/eeoq lHUfjVuXXxivayjtgj4KNQFUx7RZAH0zDmKuU1vif7kq4HMDDzbpaPSYF2NH5s8Q ABumsC2UIxCyP8CIupiKCE8o34cWXZR/VtPPVvE2IghHcaTD96S/oD8Mj7Km4Aqm pyP8K+ThnIQ58gYgCLd+WpNrQP8UFCEW3CKJ7shA61+F5NqwhuZSQa1hCT39QjdV gKHsRd8tqZ4/94lCHUfzwv6BYky32ZPb1xpjKkXcpVFiPPqQ3L6fydoQgTdliv6f TKPj9vcLvukaWa2XhRyxIUKHDSg= -----END CERTIFICATE-----Generated at Sun Jul 20 12:38:47 2025 by rpki-client