$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft File: fCewZFm5zh-8LzSJoPxnKF1942A.mft (raw, json) Hash identifier: IZD25J7+pC354aZRd/OC0LDyT/x2ehiDi48k4U2ayaY= Subject key identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A Authority key identifier: 7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 Certificate issuer: /CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Certificate serial: 078E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft Manifest number: 078E Signing time: Sun 20 Jul 2025 09:39:07 +0000 Manifest this update: Sun 20 Jul 2025 09:39:07 +0000 Manifest next update: Sun 20 Jul 2025 15:39:07 +0000 Files and hashes: 1: fCewZFm5zh-8LzSJoPxnKF1942A.crl (hash: Lg7Sjm3HPXNDkEe73YLvRnKcDMhesMCl6ktqtMBUC54=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Validity Not Before: Jul 20 09:39:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7001E5871E36F731E219A480CB7C61ADFD6CCD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:90:72:05:4e:a9:49:22:a5:80:29:93:b0: a0:68:a4:6f:df:bc:f8:b7:18:cf:00:01:5d:6a:82: 16:ae:f1:d2:95:e9:79:77:92:df:fc:8f:a9:12:04: 91:60:3a:ae:f4:81:f0:ee:0d:7a:d7:48:ae:56:43: 6c:7b:d7:51:d2:cd:c3:33:43:40:31:37:67:18:9a: 17:d2:1b:e1:bc:6d:f4:29:08:8c:be:cc:52:60:96: cc:7f:f4:a8:c0:cf:6a:8a:b6:b4:7d:b2:9f:4a:fe: 0d:53:1c:b8:e8:80:ee:62:62:04:b6:12:bf:89:af: ec:3f:ea:0c:fb:a5:38:bf:af:ca:f3:b7:1a:8b:a3: 0c:67:1d:27:d8:9f:9f:3f:5a:4f:50:cd:db:4a:47: d0:c6:a6:05:b4:95:e1:a9:5b:55:04:d6:a8:da:d5: ab:9e:fd:71:ab:58:ad:8e:ee:29:13:d2:7d:1f:22: 61:78:9d:bf:d7:34:5a:0f:ef:31:8c:df:47:1d:eb: d7:bc:4f:03:d9:18:3d:a4:bd:b4:66:a4:b8:33:f9: da:79:4d:75:f4:d3:40:6e:6d:1a:26:f5:71:fc:8d: 7d:8e:26:ca:a8:bc:39:5a:40:1f:34:da:79:c1:61: 87:0d:8d:1f:f7:d3:f2:06:8b:4b:90:5a:c6:53:75: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A X509v3 Authority Key Identifier: keyid:7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:64:2e:36:a8:ef:7a:c9:23:08:a2:ba:5c:9a:0e:77:6c:d7: 8f:59:ab:21:b1:c8:2e:e2:a4:f2:98:00:ef:5e:90:2e:25:fe: b7:b8:33:8a:d6:b2:06:f6:ee:53:16:0d:d7:f1:19:2e:cc:9e: ed:eb:7e:c2:27:28:73:5d:4d:3c:35:e4:8f:de:38:83:f4:50: 29:5d:d7:f2:95:37:67:c5:c4:46:01:af:24:86:19:c2:3d:21: a6:af:7b:c4:22:50:e6:56:42:67:6c:70:75:a6:a2:fd:0e:bb: 76:24:a1:4f:d5:14:fd:3f:86:9e:71:92:5f:3f:b0:e5:f7:8d: 00:18:2c:23:52:af:41:33:dd:dc:be:cd:7b:13:aa:56:fe:86: 76:70:04:73:3d:ed:4d:da:c7:21:85:fe:a2:dd:7f:c0:6e:e9: b4:9a:a0:8c:19:ae:a1:7a:6a:7e:e2:a9:4c:11:92:25:9c:97: 3b:1b:1b:c1:d6:a6:88:47:e4:95:da:e3:fe:9e:19:23:c9:45: 0b:db:8c:06:0d:8d:79:ca:65:ff:e6:af:b9:99:75:0c:62:bc: a6:75:df:06:2b:20:d8:1c:b1:58:5d:c9:0d:ae:23:b2:b2:bd: a1:d5:ec:91:76:57:bd:cd:02:d1:f6:fa:e0:cb:5d:00:7a:07: 57:3f:5d:cb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0My N0IwNjQ1OUI5Q0UxRkJDMkYzNDg5QTBGQzY3Mjg1RDdERTM2MDAeFw0yNTA3MjAw OTM5MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDcwMDFFNTg3MUUzNkY3 MzFFMjE5QTQ4MENCN0M2MUFERkQ2Q0NENkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFgJByBU6pSSKlgCmTsKBopG/fvPi3GM8AAV1qghau8dKV6Xl3 kt/8j6kSBJFgOq70gfDuDXrXSK5WQ2x711HSzcMzQ0AxN2cYmhfSG+G8bfQpCIy+ zFJglsx/9KjAz2qKtrR9sp9K/g1THLjogO5iYgS2Er+Jr+w/6gz7pTi/r8rztxqL owxnHSfYn58/Wk9QzdtKR9DGpgW0leGpW1UE1qja1aue/XGrWK2O7ikT0n0fImF4 nb/XNFoP7zGM30cd69e8TwPZGD2kvbRmpLgz+dp5TXX000BubRom9XH8jX2OJsqo vDlaQB802nnBYYcNjR/30/IGi0uQWsZTdRtXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcAHlhx429zHiGaSAy3xhrf1szWowHwYDVR0jBBgwFoAUfCewZFm5zh+8LzSJ oPxnKF1942AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 OC9mQ2V3WkZtNXpoLThMelNKb1B4bktGMTk0MkEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZDZXdaRm01emgtOEx6U0pvUHhuS0YxOTQyQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTgvZkNld1pGbTV6aC04 THpTSm9QeG5LRjE5NDJBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGpkLjao73rJIwiiulyaDnds149ZqyGxyC7ipPKYAO9ekC4l/re4M4rWsgb2 7lMWDdfxGS7Mnu3rfsInKHNdTTw15I/eOIP0UCld1/KVN2fFxEYBrySGGcI9Iaav e8QiUOZWQmdscHWmov0Ou3YkoU/VFP0/hp5xkl8/sOX3jQAYLCNSr0Ez3dy+zXsT qlb+hnZwBHM97U3axyGF/qLdf8Bu6bSaoIwZrqF6an7iqUwRkiWclzsbG8HWpohH 5JXa4/6eGSPJRQvbjAYNjXnKZf/mr7mZdQxivKZ13wYrINgcsVhdyQ2uI7KyvaHV 7JF2V73NAtH2+uDLXQB6B1c/Xcs= -----END CERTIFICATE-----Generated at Sun Jul 20 12:41:23 2025 by rpki-client