$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft File: gZQTSW-NG4qcKpMSrCzZAljzOwY.mft (raw, json) Hash identifier: 1d7vF0JjUOadBocLvk8iDwjNOS1zvXOL7siwu3uSf0E= Subject key identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 Authority key identifier: 81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 Certificate issuer: /CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Certificate serial: 090C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft Manifest number: 090C Signing time: Mon 21 Jul 2025 07:09:49 +0000 Manifest this update: Mon 21 Jul 2025 07:09:49 +0000 Manifest next update: Mon 21 Jul 2025 13:09:49 +0000 Files and hashes: 1: gZQTSW-NG4qcKpMSrCzZAljzOwY.crl (hash: +AZFN0tmmGj6+7yQYrt3LsiAQ8IRMNo0WFWrNySZa7Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2316 (0x90c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Validity Not Before: Jul 21 07:09:49 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F2C73B6A70D55B1DCC1B9C1A49EC30072DE52F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:33:cf:4b:fb:56:6e:ed:e3:50:6f:3b:53: 3c:bb:0b:40:dc:1c:90:08:49:23:e6:ce:50:45:7f: ff:23:c6:2b:58:ae:5a:0d:3f:47:dc:5b:8c:4d:93: 7f:6c:19:c2:d5:1d:d8:79:2f:45:20:67:86:c3:cd: 9b:f5:0a:27:d9:8d:82:23:4a:de:4e:47:39:e1:80: 00:72:05:d9:18:64:98:cc:e7:39:03:f7:38:e4:b6: 0f:6d:6a:f5:25:bb:2a:ac:d6:c1:4c:dc:fa:14:ee: 12:68:09:3b:35:e1:99:1d:35:c7:92:c8:ab:6a:f0: c1:2d:c0:74:9e:3e:15:69:5a:6a:f5:4c:82:49:70: 62:73:b4:80:d7:d7:1d:62:b5:e6:cc:a0:fb:fb:60: 9f:de:64:cf:d0:57:c7:c2:a9:ee:1f:1e:0c:16:23: d3:91:cc:14:eb:63:79:5c:ef:a5:bf:96:dc:2d:e4: 0a:2c:fa:06:44:e2:95:9b:2e:f2:8e:c0:7e:54:88: 49:ce:58:b5:b5:35:72:e6:a2:a7:7c:e4:ae:2f:4b: 9e:ff:e4:44:0e:d7:1f:8d:77:f2:f1:b8:87:a1:f4: 8e:b9:ae:07:8f:e5:cc:b5:d3:ed:e0:dd:0d:21:1f: 20:c3:2b:cc:10:4e:d6:78:68:65:14:62:a3:d0:c5: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 X509v3 Authority Key Identifier: keyid:81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:67:a9:33:c8:21:a6:e6:0c:0b:66:88:dc:9c:a2:5e:b4:71: d1:b1:95:f5:fd:d7:3f:a3:55:18:d6:46:f0:52:dd:3e:79:44: a0:a0:26:d2:c9:0d:68:08:8f:d1:73:d7:b6:19:51:41:d0:8a: d0:11:79:e6:4b:26:fd:e5:7d:cb:e4:d7:6e:82:12:69:ea:94: 24:e6:ea:0b:fa:bd:35:d1:c0:3a:87:4d:fd:31:25:13:46:d7: 83:b4:11:d4:58:51:f5:6f:de:c8:a2:92:fd:1a:17:06:a8:b8: 90:88:52:47:6a:19:0d:9b:e6:6c:3e:a3:0d:4d:b3:96:38:a2: 42:57:ee:7f:85:24:b5:c8:f0:38:1a:8e:e5:e9:c9:66:74:c0: c4:e2:4b:88:27:c6:82:4c:22:7c:d6:61:90:51:4f:fb:d9:09: 27:4b:e5:ef:22:dd:8f:a7:ed:2c:f0:9d:68:7b:22:a0:73:7b: 87:2c:39:14:3e:a7:44:71:78:7d:63:cb:0f:37:ed:1e:be:7c: fd:ff:65:fd:fd:85:80:10:e0:f0:2b:61:b6:bc:ce:cc:84:50: 2a:a9:79:f2:5b:65:ba:26:a7:f1:17:ef:c9:07:36:86:56:94: 8b:e0:9b:f7:db:42:c5:ce:25:46:62:88:a8:42:a4:dc:47:c4: 39:37:8b:15 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODE5 NDEzNDk2RjhEMUI4QTlDMkE5MzEyQUMyQ0Q5MDI1OEYzM0IwNjAeFw0yNTA3MjEw NzA5NDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYyQzczQjZBNzBENTVC MURDQzFCOUMxQTQ5RUMzMDA3MkRFNTJGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNFzPPS/tWbu3jUG87Uzy7C0DcHJAISSPmzlBFf/8jxitYrloN P0fcW4xNk39sGcLVHdh5L0UgZ4bDzZv1CifZjYIjSt5ORznhgAByBdkYZJjM5zkD 9zjktg9tavUluyqs1sFM3PoU7hJoCTs14ZkdNceSyKtq8MEtwHSePhVpWmr1TIJJ cGJztIDX1x1itebMoPv7YJ/eZM/QV8fCqe4fHgwWI9ORzBTrY3lc76W/ltwt5Aos +gZE4pWbLvKOwH5UiEnOWLW1NXLmoqd85K4vS57/5EQO1x+Nd/LxuIeh9I65rgeP 5cy10+3g3Q0hHyDDK8wQTtZ4aGUUYqPQxebtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8sc7anDVWx3MG5waSewwBy3lL1EwHwYDVR0jBBgwFoAUgZQTSW+NG4qcKpMS rCzZAljzOwYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 NC9nWlFUU1ctTkc0cWNLcE1TckN6WkFsanpPd1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2daUVRTVy1ORzRxY0twTVNyQ3paQWxqek93WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzQvZ1pRVFNXLU5HNHFj S3BNU3JDelpBbGp6T3dZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACxnqTPIIabmDAtmiNycol60cdGxlfX91z+jVRjWRvBS3T55RKCgJtLJDWgI j9Fz17YZUUHQitAReeZLJv3lfcvk126CEmnqlCTm6gv6vTXRwDqHTf0xJRNG14O0 EdRYUfVv3siikv0aFwaouJCIUkdqGQ2b5mw+ow1Ns5Y4okJX7n+FJLXI8DgajuXp yWZ0wMTiS4gnxoJMInzWYZBRT/vZCSdL5e8i3Y+n7SzwnWh7IqBze4csORQ+p0Rx eH1jyw837R6+fP3/Zf39hYAQ4PArYba8zsyEUCqpefJbZbomp/EX78kHNoZWlIvg m/fbQsXOJUZiiKhCpNxHxDk3ixU= -----END CERTIFICATE-----Generated at Mon Jul 21 08:28:09 2025 by rpki-client