$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft File: OpXd7iyMGeRxgIou20cqqm_g9Jg.mft (raw, json) Hash identifier: uOw2kilVIyhSLBEfArbpgw9G4+JmTEjOvFI3ijgjLF0= Subject key identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 Authority key identifier: 3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 Certificate issuer: /CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Certificate serial: 0798 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft Manifest number: 0798 Signing time: Sun 20 Jul 2025 11:09:07 +0000 Manifest this update: Sun 20 Jul 2025 11:09:07 +0000 Manifest next update: Sun 20 Jul 2025 17:09:07 +0000 Files and hashes: 1: OpXd7iyMGeRxgIou20cqqm_g9Jg.crl (hash: +LaxemPAijmsJP3sDM08e69rkHz++Xi2wlXaVmR4Ylg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 17:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Validity Not Before: Jul 20 11:09:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=024B9897BA27D76C6D9B8F9C57C997D19875C2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9a:fb:3f:3b:ce:94:d2:81:30:cb:cc:a5:ce: e3:ad:a8:f0:a2:da:6f:11:37:7a:4b:db:83:6e:5b: b2:87:05:0a:37:9b:0d:12:08:f1:cf:a6:99:d7:3d: 13:cc:9e:48:88:0b:43:5e:7c:0f:b3:d3:11:b3:65: ea:db:89:23:e3:79:1f:2a:05:2e:d3:d1:37:d9:30: 6d:1d:ab:a2:2b:fc:7b:93:72:42:42:e2:24:30:ee: 3d:4e:27:fe:90:f8:d1:1b:81:17:1a:56:5a:55:50: e8:ec:ff:93:aa:4a:2f:f0:ad:25:96:3e:83:9d:bd: 66:17:0b:5b:03:ee:92:f3:08:71:44:c1:b5:0b:59: 56:81:b4:e3:de:b6:a7:36:0a:8c:d3:97:2b:ef:aa: 72:5a:bb:d4:47:d3:ed:c1:e5:14:b6:b8:3d:3d:36: 46:06:63:a9:4a:0c:74:c2:25:f9:fd:90:a1:83:24: db:f9:69:2f:61:1d:dc:f7:c5:46:38:ff:96:98:97: 4f:3f:a4:00:f7:db:1d:57:95:b1:3b:90:29:36:7a: e2:bb:99:09:85:89:d2:ad:05:6a:78:a2:7f:5f:ea: 83:8d:cf:c3:46:9f:39:87:39:de:00:46:9f:12:a8: 4e:3a:7d:66:49:5e:98:ba:ef:1d:55:9c:6d:c5:cb: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 X509v3 Authority Key Identifier: keyid:3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:87:a4:64:af:98:82:ca:aa:5d:f7:65:ff:a0:5d:ea:96:a0: 4e:87:49:0c:ea:7a:de:fe:4e:a3:c2:c0:0a:e2:11:c0:c9:20: 6c:8b:1b:73:de:80:57:d4:4f:7c:4c:fa:67:7b:3b:b9:c4:7a: 30:c6:52:79:e6:b5:0c:f8:28:39:4d:13:6f:46:f6:43:6a:15: 26:70:02:38:d9:94:ac:ee:89:f2:3a:00:52:31:2d:94:3d:a2: 94:23:65:01:7b:65:7b:82:62:83:0e:62:27:df:d5:de:43:f1: 94:b2:73:ef:dc:f7:7f:8f:e7:01:23:32:69:c6:a2:c8:ba:d3: 60:88:79:1c:0f:7e:2d:08:77:49:ba:bc:5e:bb:85:62:dd:f5: 8a:3f:fa:dd:5d:d1:78:b2:38:e9:0d:79:89:18:6c:70:10:25: 19:55:9d:33:42:bb:66:f1:b8:a1:3e:cc:59:c0:ec:85:58:c5: 0e:02:fe:99:af:a6:91:4b:cd:c5:36:43:fd:60:2d:6e:59:45: 9f:67:70:82:48:a1:46:c6:db:ed:1c:73:19:24:82:07:e4:c5: 1f:56:2f:5c:71:1b:1b:a3:6e:41:1f:81:21:62:e2:f2:61:88: 3b:13:4a:df:6e:62:30:74:31:f9:30:0e:6f:5c:4a:d4:ca:6e: c7:a3:91:94 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E5 NURERUUyQzhDMTlFNDcxODA4QTJFREI0NzJBQUE2RkUwRjQ5ODAeFw0yNTA3MjAx MTA5MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAyNEI5ODk3QkEyN0Q3 NkM2RDlCOEY5QzU3Qzk5N0QxOTg3NUMyRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpmvs/O86U0oEwy8ylzuOtqPCi2m8RN3pL24NuW7KHBQo3mw0S CPHPppnXPRPMnkiIC0NefA+z0xGzZerbiSPjeR8qBS7T0TfZMG0dq6Ir/HuTckJC 4iQw7j1OJ/6Q+NEbgRcaVlpVUOjs/5OqSi/wrSWWPoOdvWYXC1sD7pLzCHFEwbUL WVaBtOPetqc2CozTlyvvqnJau9RH0+3B5RS2uD09NkYGY6lKDHTCJfn9kKGDJNv5 aS9hHdz3xUY4/5aYl08/pAD32x1XlbE7kCk2euK7mQmFidKtBWp4on9f6oONz8NG nzmHOd4ARp8SqE46fWZJXpi67x1VnG3FyzHfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAkuYl7on12xtm4+cV8mX0Zh1wvAwHwYDVR0jBBgwFoAUOpXd7iyMGeRxgIou 20cqqm/g9JgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9PcFhkN2l5TUdlUnhnSW91MjBjcXFtX2c5SmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09wWGQ3aXlNR2VSeGdJb3UyMGNxcW1fZzlKZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvT3BYZDdpeU1HZVJ4 Z0lvdTIwY3FxbV9nOUpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE6HpGSvmILKql33Zf+gXeqWoE6HSQzqet7+TqPCwAriEcDJIGyLG3PegFfU T3xM+md7O7nEejDGUnnmtQz4KDlNE29G9kNqFSZwAjjZlKzuifI6AFIxLZQ9opQj ZQF7ZXuCYoMOYiff1d5D8ZSyc+/c93+P5wEjMmnGosi602CIeRwPfi0Id0m6vF67 hWLd9Yo/+t1d0XiyOOkNeYkYbHAQJRlVnTNCu2bxuKE+zFnA7IVYxQ4C/pmvppFL zcU2Q/1gLW5ZRZ9ncIJIoUbG2+0ccxkkggfkxR9WL1xxGxujbkEfgSFi4vJhiDsT St9uYjB0MfkwDm9cStTKbsejkZQ= -----END CERTIFICATE-----Generated at Sun Jul 20 16:37:11 2025 by rpki-client