$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft File: Nd6o5bEoW5KyERchGKNBqy3bdrU.mft (raw, json) Hash identifier: YXPTh6nUzRWzF6BdFZv5F9PzBgOI0DI5BaGZESOgV6Q= Subject key identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 Authority key identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 Certificate issuer: /CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Certificate serial: 0E0A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft Manifest number: 0E0A Signing time: Sun 20 Jul 2025 06:44:19 +0000 Manifest this update: Sun 20 Jul 2025 06:44:19 +0000 Manifest next update: Sun 20 Jul 2025 12:44:19 +0000 Files and hashes: 1: Nd6o5bEoW5KyERchGKNBqy3bdrU.crl (hash: 6orTDlh0kWvoeAvu4Gnq0kf312t+jvf89PbBt6qd5fg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 12:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3594 (0xe0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Validity Not Before: Jul 20 06:44:19 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5BF91187435E01A842776355A2D3F3D0C6B75447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:4a:2e:e3:69:8c:36:a2:0f:c6:e1:ab:fa: a2:b8:c7:c6:f4:4f:0b:69:37:bd:7d:e9:b1:d2:d7: a3:24:85:7c:76:27:64:4d:ed:80:85:14:bb:3e:13: 65:f5:c8:27:33:60:41:5b:7d:61:d2:af:4a:c4:5d: f4:20:d5:b9:95:1d:43:95:d1:fd:ba:e7:ac:b9:6d: c7:8a:31:7c:c2:5a:43:2a:f4:7f:da:3a:06:61:59: 60:45:5f:ca:e3:dd:ac:ce:be:b3:ed:35:c9:6f:89: 0c:e8:2a:a0:99:f3:54:27:86:81:eb:1b:88:e5:55: 6e:b7:ef:a2:91:aa:4e:87:b5:be:43:4e:36:dc:d8: aa:30:14:03:f4:1e:2b:ae:1c:1a:26:0c:5d:39:e6: 68:eb:10:a7:ea:b1:6f:b0:b3:e9:f9:89:a2:8e:68: 0a:20:19:9a:91:27:df:a5:27:05:f8:79:1a:16:80: a1:0d:16:dc:2b:9c:ac:0f:8a:6b:cc:b3:3f:8d:00: 8e:5e:3f:3e:f5:77:80:e4:fc:9e:57:18:23:25:bf: 4b:c0:f7:23:72:90:43:d5:75:78:21:d0:87:e4:b2: b2:fb:d8:27:55:99:82:8e:68:53:18:f8:1a:88:95: 97:73:d4:5c:33:89:56:99:70:1a:bf:13:72:db:07: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 X509v3 Authority Key Identifier: keyid:35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a7:35:a5:49:ca:42:02:c6:f6:99:75:25:b8:dc:c3:f1:77: b6:8e:b9:8a:d5:26:0f:97:48:a2:ac:65:14:13:e3:f0:ea:f2: 84:f8:26:65:e3:94:a6:f9:8c:ff:66:24:a9:52:6c:bd:38:ec: de:5c:b9:91:e9:bb:5d:11:e9:cc:a8:bd:03:68:64:56:92:b1: 86:51:ac:27:b4:6b:9b:80:73:07:08:73:1f:03:66:7a:3f:30: de:18:9b:e8:17:30:0f:c8:1d:4a:4e:ee:c4:e9:2e:4e:14:c5: 33:9e:4e:59:e9:2b:5d:73:a4:2d:66:88:dc:99:04:70:59:3b: 35:1d:96:1c:6c:98:ed:76:e1:06:d7:05:ea:f2:0d:43:ab:ba: 0b:4a:91:3f:b7:58:e1:f5:c9:e6:4f:41:6e:da:74:24:87:2e: 1f:97:9c:d3:e6:78:d8:b0:7d:9b:e4:d7:73:44:e6:df:21:f0: de:14:eb:31:6b:a1:98:dd:ed:a8:f7:e3:2d:8b:02:b8:53:be: 39:19:71:05:7d:ed:de:cc:c0:80:80:a5:a9:58:9c:a3:af:02: 22:39:82:2a:eb:ae:1f:c2:95:f0:b0:26:77:f7:3c:f2:fe:ca: ff:9f:a3:fc:e7:ea:c6:eb:10:c7:48:04:60:b9:70:74:19:b5: f3:74:9c:43 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVE RUE4RTVCMTI4NUI5MkIyMTExNzIxMThBMzQxQUIyRERCNzZCNTAeFw0yNTA3MjAw NjQ0MTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVCRjkxMTg3NDM1RTAx QTg0Mjc3NjM1NUEyRDNGM0QwQzZCNzU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL1kou42mMNqIPxuGr+qK4x8b0TwtpN7196bHS16MkhXx2J2RN 7YCFFLs+E2X1yCczYEFbfWHSr0rEXfQg1bmVHUOV0f2656y5bceKMXzCWkMq9H/a OgZhWWBFX8rj3azOvrPtNclviQzoKqCZ81QnhoHrG4jlVW6376KRqk6Htb5DTjbc 2KowFAP0HiuuHBomDF055mjrEKfqsW+ws+n5iaKOaAogGZqRJ9+lJwX4eRoWgKEN FtwrnKwPimvMsz+NAI5ePz71d4Dk/J5XGCMlv0vA9yNykEPVdXgh0IfksrL72CdV mYKOaFMY+BqIlZdz1FwziVaZcBq/E3LbBxk/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUW/kRh0NeAahCd2NVotPz0Ma3VEcwHwYDVR0jBBgwFoAUNd6o5bEoW5KyERch GKNBqy3bdrUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Mi9OZDZvNWJFb1c1S3lFUmNoR0tOQnF5M2JkclUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05kNm81YkVvVzVLeUVSY2hHS05CcXkzYmRyVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzIvTmQ2bzViRW9XNUt5 RVJjaEdLTkJxeTNiZHJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIunNaVJykICxvaZdSW43MPxd7aOuYrVJg+XSKKsZRQT4/Dq8oT4JmXjlKb5 jP9mJKlSbL047N5cuZHpu10R6cyovQNoZFaSsYZRrCe0a5uAcwcIcx8DZno/MN4Y m+gXMA/IHUpO7sTpLk4UxTOeTlnpK11zpC1miNyZBHBZOzUdlhxsmO124QbXBery DUOrugtKkT+3WOH1yeZPQW7adCSHLh+XnNPmeNiwfZvk13NE5t8h8N4U6zFroZjd 7aj34y2LArhTvjkZcQV97d7MwICApalYnKOvAiI5girrrh/ClfCwJnf3PPL+yv+f o/zn6sbrEMdIBGC5cHQZtfN0nEM= -----END CERTIFICATE-----Generated at Sun Jul 20 12:35:12 2025 by rpki-client