$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft File: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft (raw, json) Hash identifier: e+3JThRQoHyZe1BmdNejjh4LzYw8I9bz2Rt7d2UMHQk= Subject key identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 Authority key identifier: 3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA Certificate issuer: /CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Certificate serial: 0B6D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft Manifest number: 0B6D Signing time: Sun 20 Jul 2025 11:41:51 +0000 Manifest this update: Sun 20 Jul 2025 11:41:51 +0000 Manifest next update: Sun 20 Jul 2025 17:41:51 +0000 Files and hashes: 1: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl (hash: TT3z8S+x6ZRVzmtg2CsrPTzujiIVwa/rIVnGJwv8GHU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Validity Not Before: Jul 20 11:41:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=074D0AC2BAE811F7784C6BDE285A83A1EF259DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:6e:10:c5:a5:7f:48:a5:30:8d:d9:ff:92: 31:c7:f3:6f:c3:9d:87:43:8f:17:92:1a:0b:87:a4: 43:d8:0e:5b:24:2c:4a:38:51:ec:89:c8:49:67:de: 82:53:ee:cf:e4:25:36:e2:54:0a:be:24:0e:76:ef: 2e:ca:ba:ba:7a:f4:ff:8f:ae:f6:d5:6c:05:ae:4b: 50:2c:e3:0b:19:92:f3:29:c6:c6:91:d2:5f:03:77: e7:45:26:7f:b9:40:6e:ff:99:ab:7e:c1:7f:d0:ce: cd:e8:10:3d:57:31:c8:c9:d5:d6:5f:3f:98:44:b7: 08:d3:40:b9:ae:6c:31:22:77:c9:2d:2d:a3:6a:85: f8:ba:a1:bb:e2:15:e4:a5:a5:1c:fb:d9:09:63:11: 95:e5:43:0e:8f:68:79:ad:a8:0e:4a:2f:c5:be:02: 5d:22:fc:f3:8a:26:9a:24:52:de:83:52:02:a2:89: 58:ae:c3:eb:dd:64:a2:b8:bf:d3:94:98:da:20:8b: 84:4c:6d:7c:bf:6a:e1:62:af:a6:0d:85:69:8a:44: 15:cd:b3:3a:32:ee:df:ac:e9:eb:74:33:a5:2b:91: 25:40:77:44:08:1d:74:2d:1f:d9:5b:1e:51:bb:6f: 40:73:63:fb:88:5c:1f:8e:2d:aa:ab:12:d5:a6:41: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 X509v3 Authority Key Identifier: keyid:3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2a:1a:4f:85:cf:f7:b0:f3:48:ab:70:81:f5:f7:9d:43:0b: 1f:75:f0:23:bb:9b:66:82:9e:29:50:5f:2d:aa:63:51:6f:a0: fc:23:81:07:98:21:30:fc:2c:41:fc:ac:3c:e6:d8:38:af:ff: 65:0d:a4:90:20:c7:98:5a:2f:7f:48:61:e3:49:b1:d4:65:02: 26:ce:10:f1:bc:45:b6:75:ac:68:50:19:2a:f5:15:38:da:93: 87:a2:82:7f:4d:95:40:5e:a8:8f:c0:f7:1e:7d:52:c3:a3:51: bd:93:7d:c0:a2:7c:e2:ff:63:0f:a7:fc:8e:0c:d4:23:ed:d9: c1:7e:c7:b3:93:d4:e7:61:b2:34:06:26:57:f2:d6:22:8c:09: 80:10:66:5c:78:89:42:a2:02:86:af:91:75:82:9a:3b:58:e5: 46:ac:aa:c0:54:45:02:80:9c:85:b4:84:b1:89:12:bc:b2:6c: ae:98:45:5f:7f:5d:b8:40:22:51:c7:57:20:03:03:c5:35:ae: 4d:33:f8:13:0a:88:35:66:d6:84:0c:d0:ba:7b:be:9a:0f:b7: 70:31:e5:8c:8e:38:2a:d8:ee:6a:0c:08:08:16:5a:3f:48:c6: 22:ff:b7:87:45:09:1c:6b:8d:ae:10:12:4d:a3:88:72:a9:35: b0:e7:5f:2f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Mw OEVGRDU5ODA5QzE5RkExM0FGNDQ2NEYwNzRFRjJEODIzMEZCQTAeFw0yNTA3MjAx MTQxNTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA3NEQwQUMyQkFFODEx Rjc3ODRDNkJERTI4NUE4M0ExRUYyNTlERTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvP24QxaV/SKUwjdn/kjHH82/DnYdDjxeSGguHpEPYDlskLEo4 UeyJyEln3oJT7s/kJTbiVAq+JA527y7Kurp69P+PrvbVbAWuS1As4wsZkvMpxsaR 0l8Dd+dFJn+5QG7/mat+wX/Qzs3oED1XMcjJ1dZfP5hEtwjTQLmubDEid8ktLaNq hfi6obviFeSlpRz72QljEZXlQw6PaHmtqA5KL8W+Al0i/POKJpokUt6DUgKiiViu w+vdZKK4v9OUmNogi4RMbXy/auFir6YNhWmKRBXNszoy7t+s6et0M6UrkSVAd0QI HXQtH9lbHlG7b0BzY/uIXB+OLaqrEtWmQWnJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUB00KwrroEfd4TGveKFqDoe8lneMwHwYDVR0jBBgwFoAUPAjv1ZgJwZ+hOvRG TwdO8tgjD7owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Ny9QQWp2MVpnSndaLWhPdlJHVHdkTzh0Z2pEN28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1BBanYxWmdKd1otaE92UkdUd2RPOHRnakQ3by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDcvUEFqdjFaZ0p3Wi1o T3ZSR1R3ZE84dGdqRDdvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHkqGk+Fz/ew80ircIH1951DCx918CO7m2aCnilQXy2qY1FvoPwjgQeYITD8 LEH8rDzm2Div/2UNpJAgx5haL39IYeNJsdRlAibOEPG8RbZ1rGhQGSr1FTjak4ei gn9NlUBeqI/A9x59UsOjUb2TfcCifOL/Yw+n/I4M1CPt2cF+x7OT1OdhsjQGJlfy 1iKMCYAQZlx4iUKiAoavkXWCmjtY5UasqsBURQKAnIW0hLGJEryybK6YRV9/XbhA IlHHVyADA8U1rk0z+BMKiDVm1oQM0Lp7vpoPt3Ax5YyOOCrY7moMCAgWWj9IxiL/ t4dFCRxrja4QEk2jiHKpNbDnXy8= -----END CERTIFICATE-----Generated at Sun Jul 20 12:46:47 2025 by rpki-client