$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft File: REpvrwhyRfumTIvW5EyRKvs9IGY.mft (raw, json) Hash identifier: f6qdc1nH+3e2ccG3oKvyINl/hFHrdJafo42Zv+yKUJ4= Subject key identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 Authority key identifier: 44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 Certificate issuer: /CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Certificate serial: 0536 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft Manifest number: 0536 Signing time: Sun 20 Jul 2025 07:41:39 +0000 Manifest this update: Sun 20 Jul 2025 07:41:39 +0000 Manifest next update: Sun 20 Jul 2025 13:41:39 +0000 Files and hashes: 1: REpvrwhyRfumTIvW5EyRKvs9IGY.crl (hash: HX4SxlXaoDwOLnmLGYXoicUq7LhRIJfaWtXcYiy9uBY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Validity Not Before: Jul 20 07:41:39 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1AB861E2929A89AC6582D35AAD01A279CA426392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:79:8f:a0:8b:63:12:f9:e5:9d:c1:55:0a: 09:d9:71:50:88:eb:61:0a:93:7b:74:0e:80:b1:46: 0e:7a:1a:a5:2f:0b:0b:51:b7:6d:82:d7:3b:a1:1f: 8f:ce:71:78:39:27:2d:1a:42:61:ff:95:30:a5:d1: f7:44:a2:ed:fc:cb:27:33:46:f1:b0:2f:b3:86:7c: 67:66:1d:d7:63:38:b0:51:25:b3:ba:d6:e0:42:43: 07:6e:68:b8:6c:b3:17:df:1c:ec:37:21:24:db:9d: 43:2e:91:ed:73:a6:8d:b2:85:dc:c1:74:cd:ea:ef: 77:2e:b6:30:94:85:c0:37:29:1d:b4:82:27:d5:9c: 63:c6:5c:2c:72:0a:e1:9c:51:d0:9a:69:ea:c3:3c: 44:9e:fc:b0:cf:25:c1:0d:dd:82:f2:67:a8:97:9e: 00:b0:83:1e:17:ac:2a:d0:c1:56:13:b0:d7:15:68: 17:9b:96:05:69:b6:ee:d6:48:56:ad:82:f1:0a:8f: 9b:27:c4:05:fa:5e:6e:95:26:f5:95:02:b1:73:19: af:97:e7:8f:b0:63:69:9c:de:4e:8f:b3:fd:af:ec: e4:5e:22:31:f3:fd:50:e7:6b:26:7a:16:a1:9c:06: 6d:b1:69:52:1d:6b:14:f6:3c:e9:17:bc:55:44:3e: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 X509v3 Authority Key Identifier: keyid:44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:f2:4d:80:11:5e:69:0c:d3:0e:02:9c:52:22:0e:3b:d2:48: f1:f5:e1:87:10:73:6c:d8:eb:6f:7a:09:c3:44:28:cd:4b:51: 4f:1a:e4:8d:74:d7:12:de:88:cb:01:a8:d4:20:77:12:48:25: 0e:d7:ac:bc:1f:92:12:c2:10:02:89:ca:90:de:5a:17:30:f4: ea:e3:38:c9:5c:f5:f6:0c:22:55:77:f6:9c:55:1c:3a:d9:c0: 76:9e:df:93:22:ab:2c:52:92:3c:7e:1a:9b:10:eb:fe:46:30: 78:05:30:39:6e:a3:ba:1f:a8:78:61:d2:01:41:9a:63:d2:60: eb:d0:f4:2e:57:81:c5:01:fc:6c:60:b0:12:12:1c:42:1c:88: 3c:47:13:dc:e6:25:a4:7a:29:29:d3:e2:ae:55:02:81:69:3c: 0d:25:6f:1c:c9:5d:d6:4e:6f:83:10:1c:52:74:6a:45:39:16: 0b:95:84:4b:e9:6f:4b:e3:5a:9e:23:4b:39:b0:0a:1c:97:68: f1:00:45:59:f0:fc:c1:a7:83:86:8e:13:33:28:ea:4a:81:0a: c8:68:14:f1:5f:9d:3e:be:a1:56:24:76:ee:cf:b5:dd:73:59: a2:c1:90:86:c6:0c:75:c9:ad:ed:dc:a4:bc:0b:ee:13:9c:9c: ca:e1:28:5f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ0 QTZGQUYwODcyNDVGQkE2NEM4QkQ2RTQ0QzkxMkFGQjNEMjA2NjAeFw0yNTA3MjAw NzQxMzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBQjg2MUUyOTI5QTg5 QUM2NTgyRDM1QUFEMDFBMjc5Q0E0MjYzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDATXmPoItjEvnlncFVCgnZcVCI62EKk3t0DoCxRg56GqUvCwtR t22C1zuhH4/OcXg5Jy0aQmH/lTCl0fdEou38yyczRvGwL7OGfGdmHddjOLBRJbO6 1uBCQwduaLhssxffHOw3ISTbnUMuke1zpo2yhdzBdM3q73cutjCUhcA3KR20gifV nGPGXCxyCuGcUdCaaerDPESe/LDPJcEN3YLyZ6iXngCwgx4XrCrQwVYTsNcVaBeb lgVptu7WSFatgvEKj5snxAX6Xm6VJvWVArFzGa+X54+wY2mc3k6Ps/2v7OReIjHz /VDnayZ6FqGcBm2xaVIdaxT2POkXvFVEPmZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGrhh4pKaiaxlgtNarQGiecpCY5IwHwYDVR0jBBgwFoAUREpvrwhyRfumTIvW 5EyRKvs9IGYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9SRXB2cndoeVJmdW1USXZXNUV5Ukt2czlJR1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JFcHZyd2h5UmZ1bVRJdlc1RXlSS3ZzOUlHWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvUkVwdnJ3aHlSZnVt VEl2VzVFeVJLdnM5SUdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGfyTYARXmkM0w4CnFIiDjvSSPH14YcQc2zY6296CcNEKM1LUU8a5I101xLe iMsBqNQgdxJIJQ7XrLwfkhLCEAKJypDeWhcw9OrjOMlc9fYMIlV39pxVHDrZwHae 35MiqyxSkjx+GpsQ6/5GMHgFMDluo7ofqHhh0gFBmmPSYOvQ9C5XgcUB/GxgsBIS HEIciDxHE9zmJaR6KSnT4q5VAoFpPA0lbxzJXdZOb4MQHFJ0akU5FguVhEvpb0vj Wp4jSzmwChyXaPEARVnw/MGng4aOEzMo6kqBCshoFPFfnT6+oVYkdu7Ptd1zWaLB kIbGDHXJre3cpLwL7hOcnMrhKF8= -----END CERTIFICATE-----Generated at Sun Jul 20 12:57:52 2025 by rpki-client