$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft File: kADdQD0um0CSgjWMWbpbOMPeB-w.mft (raw, json) Hash identifier: zV5VgLyeWiEXZz/iVInoyliSVXRA0wIRrWQQBkwNLq4= Subject key identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 Authority key identifier: 90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC Certificate issuer: /CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Certificate serial: 0781 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft Manifest number: 0781 Signing time: Sun 20 Jul 2025 16:41:32 +0000 Manifest this update: Sun 20 Jul 2025 16:41:32 +0000 Manifest next update: Sun 20 Jul 2025 22:41:32 +0000 Files and hashes: 1: kADdQD0um0CSgjWMWbpbOMPeB-w.crl (hash: bnCowQa0EWe1T7NhEk2OxAx1L8kHMgU6RW4jIUNKxRk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 22:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Validity Not Before: Jul 20 16:41:32 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=714A6D9CD89CE5FB58BA4B8A52D38237E799ED81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:52:6a:0d:89:40:d5:62:f6:bd:31:23:24: aa:a0:39:ed:8a:6b:8f:36:37:e6:f1:dd:aa:23:0e: ad:4b:26:85:a9:ce:7e:6b:bb:3d:1a:ae:da:36:ae: 75:f1:95:7f:4c:ba:26:f0:40:31:78:68:77:4a:6a: 08:75:c1:45:8f:31:06:cd:a7:90:c3:8c:b2:26:44: f3:50:fe:39:cd:91:1e:67:2e:5c:c4:d9:1d:f5:1a: 13:13:cb:fe:19:89:4d:b2:55:58:41:86:4c:27:e1: 9b:28:9c:98:e9:d1:ff:c7:73:dd:79:49:1d:68:9f: 3c:97:dd:64:45:62:6d:f0:e1:4c:a5:74:5a:19:6b: d1:24:fb:7e:c7:db:82:6d:90:ef:eb:c1:4a:be:99: 26:00:0a:34:ab:0b:6d:15:0f:7b:8c:18:75:b1:28: e6:65:6e:65:7a:6d:0e:47:d5:af:83:ee:77:d9:49: 5e:f0:c5:de:44:ed:6e:40:b2:e4:9e:38:26:f4:1a: a9:01:dd:a9:80:e9:70:8d:85:fc:d7:34:37:45:7a: 87:f0:1f:12:ab:f5:b6:39:29:bd:25:07:9e:7b:28: 6a:29:c1:71:01:52:3c:ea:96:50:d6:6c:3a:da:a0: d9:c2:a2:f4:79:d1:a3:fd:5e:df:50:f3:64:06:c3: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 X509v3 Authority Key Identifier: keyid:90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5d:ce:04:cf:5e:10:ed:39:f5:d5:32:49:54:76:b1:d8:95: 68:f0:2a:eb:90:cb:0f:ab:ba:3e:47:37:ef:95:22:57:b5:04: 02:39:12:2e:b0:36:fa:b0:02:83:41:06:86:43:3e:63:af:29: 59:cd:07:63:72:ab:b9:19:da:5e:e9:c2:3c:20:8a:b0:1a:ab: ca:83:53:44:96:d2:70:e4:ad:08:94:2c:b7:c9:f1:61:f5:4d: 2a:2e:86:ac:4a:80:ee:ca:1c:e2:22:6a:6d:eb:75:98:3d:a1: 4d:a9:e2:dc:f5:40:4b:68:af:a5:45:c9:66:75:0b:55:01:3e: ed:9c:95:3e:ff:c0:dc:b1:73:2d:ae:e7:ba:f6:8f:2a:06:ff: 62:c2:7e:59:10:a2:bc:24:3c:52:df:07:c1:30:f6:e2:78:00: a0:57:67:eb:2c:5c:1a:5c:15:05:54:c5:1d:78:84:99:eb:13: d5:91:34:2b:c4:f6:16:25:08:75:71:2c:73:a8:ab:c8:ad:8e: a1:97:bf:00:e5:40:dc:e0:74:66:9b:cb:52:f4:c8:92:37:2c: 3b:9f:e1:08:c8:34:22:55:bc:69:7f:af:84:d7:ad:53:51:6e: 87:10:23:62:4c:26:05:b1:fa:36:16:b1:78:2e:8f:be:25:fe: 6d:ae:98:c6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTAw MERENDAzRDJFOUI0MDkyODIzNThDNTlCQTVCMzhDM0RFMDdFQzAeFw0yNTA3MjAx NjQxMzJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDcxNEE2RDlDRDg5Q0U1 RkI1OEJBNEI4QTUyRDM4MjM3RTc5OUVEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2w1JqDYlA1WL2vTEjJKqgOe2Ka482N+bx3aojDq1LJoWpzn5r uz0arto2rnXxlX9MuibwQDF4aHdKagh1wUWPMQbNp5DDjLImRPNQ/jnNkR5nLlzE 2R31GhMTy/4ZiU2yVVhBhkwn4ZsonJjp0f/Hc915SR1onzyX3WRFYm3w4UyldFoZ a9Ek+37H24JtkO/rwUq+mSYACjSrC20VD3uMGHWxKOZlbmV6bQ5H1a+D7nfZSV7w xd5E7W5AsuSeOCb0GqkB3amA6XCNhfzXNDdFeofwHxKr9bY5Kb0lB557KGopwXEB UjzqllDWbDraoNnCovR50aP9Xt9Q82QGw/I5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcUptnNic5ftYukuKUtOCN+eZ7YEwHwYDVR0jBBgwFoAUkADdQD0um0CSgjWM WbpbOMPeB+wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MC9rQURkUUQwdW0wQ1NnaldNV2JwYk9NUGVCLXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tBRGRRRDB1bTBDU2dqV01XYnBiT01QZUItdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDAva0FEZFFEMHVtMENT Z2pXTVdicGJPTVBlQi13Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC9dzgTPXhDtOfXVMklUdrHYlWjwKuuQyw+ruj5HN++VIle1BAI5Ei6wNvqw AoNBBoZDPmOvKVnNB2Nyq7kZ2l7pwjwgirAaq8qDU0SW0nDkrQiULLfJ8WH1TSou hqxKgO7KHOIiam3rdZg9oU2p4tz1QEtor6VFyWZ1C1UBPu2clT7/wNyxcy2u57r2 jyoG/2LCflkQorwkPFLfB8Ew9uJ4AKBXZ+ssXBpcFQVUxR14hJnrE9WRNCvE9hYl CHVxLHOoq8itjqGXvwDlQNzgdGaby1L0yJI3LDuf4QjINCJVvGl/r4TXrVNRbocQ I2JMJgWx+jYWsXguj74l/m2umMY= -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:25 2025 by rpki-client