$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft File: pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft (raw, json) Hash identifier: yGwOk0nyh/ZUvX3LywEU0FD9BSYCwCFzuRyDe9Cca00= Subject key identifier: AA:E3:53:CF:82:9C:99:7E:97:DA:5A:72:18:E2:0D:63:38:F6:E5:7B Authority key identifier: A4:E8:08:D7:DB:52:F1:C0:CA:0C:D3:AD:AF:67:B4:CD:2D:51:CB:C4 Certificate issuer: /CN=A4E808D7DB52F1C0CA0CD3ADAF67B4CD2D51CBC4 Certificate serial: 07B6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft Manifest number: 07B6 Signing time: Sun 20 Jul 2025 16:43:51 +0000 Manifest this update: Sun 20 Jul 2025 16:43:51 +0000 Manifest next update: Sun 20 Jul 2025 22:43:51 +0000 Files and hashes: 1: pOgI19tS8cDKDNOtr2e0zS1Ry8Q.crl (hash: hhmtsV2jFcrlJA5ft0Ba4R0XaZ+FpAMFNK0j5a+IcTQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 22:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4E808D7DB52F1C0CA0CD3ADAF67B4CD2D51CBC4 Validity Not Before: Jul 20 16:43:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=AAE353CF829C997E97DA5A7218E20D6338F6E57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:89:a9:dc:32:8c:41:48:14:7e:01:c2:c1: 24:1e:8c:32:91:86:49:0f:04:c3:54:bb:af:16:1c: e6:81:ca:ad:5e:93:ae:c8:fc:3b:e8:66:88:d3:40: 95:e4:33:c0:75:de:8c:a3:07:6f:4e:7d:76:1a:4a: 08:36:01:53:36:22:ca:c9:1c:c4:72:05:ec:68:8f: 5f:8d:64:7a:70:30:9d:0f:c4:96:0c:35:9c:35:3f: 75:13:fb:79:a1:41:e2:4b:83:94:06:0a:98:ba:83: 32:2f:1a:5d:df:79:12:6b:7c:a3:f4:d9:07:bd:89: aa:99:a8:99:72:e8:73:13:bc:82:84:77:50:60:64: d2:fc:16:05:b3:8f:32:62:16:de:1e:0d:72:05:05: a6:e7:20:f4:8f:a1:05:d7:60:67:d3:e6:84:b3:4c: 9e:91:60:50:45:70:2c:c2:f0:6c:25:80:af:95:53: 75:3d:ef:37:3c:4d:bf:c3:a2:f3:87:8f:74:a2:da: 36:63:7b:06:6f:32:e3:c8:f2:bc:e3:99:12:1c:5a: fa:24:be:5d:f5:39:00:19:a3:0a:70:8d:fe:7a:3c: 11:66:36:2f:22:4f:d9:4d:94:22:4e:26:dd:df:15: 21:e5:5d:b6:7b:7f:1f:ca:e6:7e:92:1b:1a:74:a1: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E3:53:CF:82:9C:99:7E:97:DA:5A:72:18:E2:0D:63:38:F6:E5:7B X509v3 Authority Key Identifier: keyid:A4:E8:08:D7:DB:52:F1:C0:CA:0C:D3:AD:AF:67:B4:CD:2D:51:CB:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:8c:34:d6:3c:e7:8f:21:e8:62:b4:9b:93:e9:cb:72:58:b5: d1:4b:1f:89:7d:f1:b2:b9:7c:7e:a7:22:d0:f3:87:f6:8a:2b: 58:bc:ac:52:d3:a4:85:20:63:4e:c2:da:cf:9a:a5:65:be:65: 28:f3:00:20:c2:3a:33:15:86:1c:8e:55:b1:27:bf:2a:81:35: f8:45:c6:61:9d:21:d7:96:e6:c7:19:27:7e:93:cf:c1:54:f8: e7:04:d7:b2:fd:52:f4:e9:76:71:fd:6e:a3:1c:0e:cd:1b:ce: f3:0c:1b:a4:8b:94:66:d6:4b:35:3a:e3:fd:c4:03:65:76:4a: f0:33:f3:1e:75:2e:0d:be:94:2a:96:04:af:14:85:cb:89:93: 56:3b:9c:5a:d8:53:6d:ef:02:e2:12:12:62:cf:0f:c0:83:e4: 8d:86:1e:22:2e:b1:f9:ce:50:08:31:c9:ac:e8:fb:dc:f0:01: ee:e6:3e:cd:ab:f2:40:38:8d:08:a9:aa:20:23:02:d9:78:d5: 9e:e3:70:c5:17:c3:36:29:cc:a1:5d:18:a2:36:c1:4b:27:a8: 55:41:44:e4:f6:d9:d1:47:07:b5:57:cf:6c:ed:f6:12:24:a8: 66:48:b1:cd:17:b7:7c:66:91:37:30:c1:84:06:15:bc:3e:cc: 1e:c2:46:a0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTRF ODA4RDdEQjUyRjFDMENBMENEM0FEQUY2N0I0Q0QyRDUxQ0JDNDAeFw0yNTA3MjAx NjQzNTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFBRTM1M0NGODI5Qzk5 N0U5N0RBNUE3MjE4RTIwRDYzMzhGNkU1N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFSYmp3DKMQUgUfgHCwSQejDKRhkkPBMNUu68WHOaByq1ek67I /DvoZojTQJXkM8B13oyjB29OfXYaSgg2AVM2IsrJHMRyBexoj1+NZHpwMJ0PxJYM NZw1P3UT+3mhQeJLg5QGCpi6gzIvGl3feRJrfKP02Qe9iaqZqJly6HMTvIKEd1Bg ZNL8FgWzjzJiFt4eDXIFBabnIPSPoQXXYGfT5oSzTJ6RYFBFcCzC8GwlgK+VU3U9 7zc8Tb/DovOHj3Si2jZjewZvMuPI8rzjmRIcWvokvl31OQAZowpwjf56PBFmNi8i T9lNlCJOJt3fFSHlXbZ7fx/K5n6SGxp0oe2hAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUquNTz4KcmX6X2lpyGOINYzj25XswHwYDVR0jBBgwFoAUpOgI19tS8cDKDNOt r2e0zS1Ry8QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NC9wT2dJMTl0UzhjREtETk90cjJlMHpTMVJ5OFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3BPZ0kxOXRTOGNES0ROT3RyMmUwelMxUnk4US5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTQvcE9nSTE5dFM4Y0RL RE5PdHIyZTB6UzFSeThRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEeMNNY8548h6GK0m5Ppy3JYtdFLH4l98bK5fH6nItDzh/aKK1i8rFLTpIUg Y07C2s+apWW+ZSjzACDCOjMVhhyOVbEnvyqBNfhFxmGdIdeW5scZJ36Tz8FU+OcE 17L9UvTpdnH9bqMcDs0bzvMMG6SLlGbWSzU64/3EA2V2SvAz8x51Lg2+lCqWBK8U hcuJk1Y7nFrYU23vAuISEmLPD8CD5I2GHiIusfnOUAgxyazo+9zwAe7mPs2r8kA4 jQipqiAjAtl41Z7jcMUXwzYpzKFdGKI2wUsnqFVBROT22dFHB7VXz2zt9hIkqGZI sc0Xt3xmkTcwwYQGFbw+zB7CRqA= -----END CERTIFICATE-----Generated at Sun Jul 20 19:09:24 2025 by rpki-client