$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft File: fetUO9g1VViFIfIivviJGRdeExQ.mft (raw, json) Hash identifier: +F6RHb0md5BYFt4WbgjUW1Bk4JuvGYK6RGbxLyHxQvU= Subject key identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 Authority key identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 Certificate issuer: /CN=7DEB543BD83555588521F222BEF88919175E1314 Certificate serial: 0560 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft Manifest number: 0560 Signing time: Mon 21 Jul 2025 03:10:51 +0000 Manifest this update: Mon 21 Jul 2025 03:10:51 +0000 Manifest next update: Mon 21 Jul 2025 09:10:51 +0000 Files and hashes: 1: fetUO9g1VViFIfIivviJGRdeExQ.crl (hash: GKbiGEriYhdHNaPAeYKse8Za2nTcRFEiOVBGf70ylB4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DEB543BD83555588521F222BEF88919175E1314 Validity Not Before: Jul 21 03:10:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2B3328670B6810E8C39E2B643D2EE66F42C75510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7d:a3:8a:82:7f:e4:f3:db:3b:18:f0:4b:f3: 87:2a:48:0d:61:80:97:c2:87:93:94:44:b8:36:0d: 3d:c3:c9:35:7d:39:09:51:d8:c6:6c:6a:a7:45:59: 7f:86:44:7e:e5:af:88:89:d4:c9:99:cf:b7:5a:74: 8a:d4:91:3b:c7:3a:e6:ba:95:4d:0d:d5:0d:b7:5c: 1d:81:5c:db:33:3b:07:59:b4:eb:b5:37:38:31:24: 3f:31:af:63:ba:71:7e:c5:11:a7:41:47:15:83:c7: 62:01:a0:fb:7c:6d:c1:5f:67:11:e4:9b:38:df:89: c9:9b:07:66:dc:7b:72:ff:d2:44:26:db:24:f2:8d: cc:44:57:58:d5:95:bd:fb:12:73:a0:ca:65:88:ee: a2:13:a6:4c:68:9d:4a:07:e6:6d:40:5d:e8:14:66: 5e:12:65:5c:49:44:80:1d:f1:3d:a6:37:a3:56:dc: 6d:f7:dd:ef:6c:49:34:c3:0f:be:30:d1:cb:0c:12: 79:2c:c6:71:2b:9d:46:7e:09:ab:7d:55:1d:27:b0: dd:93:58:d3:63:c6:5a:58:b6:ea:e0:b3:15:0d:35: 57:b3:71:3d:a3:a3:5b:7e:f3:c9:86:ec:63:0e:9c: 5a:71:42:5b:3e:c9:3c:b2:00:2c:b3:91:f8:92:84: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 X509v3 Authority Key Identifier: keyid:7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:55:b9:5e:71:74:93:e9:fe:e3:31:6a:c7:7a:7e:cf:2f:b9: e9:2b:b6:53:4a:e7:ba:1e:06:0e:e4:3f:e3:c7:5f:52:dc:2d: d6:2f:fb:23:2c:ff:ce:52:49:5b:2e:4f:fa:66:c0:80:c0:a2: 00:7c:6c:fe:85:ba:2d:36:43:67:5c:cb:13:26:16:58:22:8c: 0c:de:b7:b2:a2:b2:34:07:83:c5:5b:10:90:43:2a:f3:4e:ec: 65:3f:5d:22:9f:b8:0e:2b:c0:61:cf:2b:bb:5c:11:51:af:43: 54:72:fa:c2:0a:ea:3e:fe:da:82:b4:03:82:7b:9a:d4:c4:ff: 4a:6b:39:da:c1:b3:e3:fa:2c:92:f3:1a:37:fe:c3:bc:33:12: 58:77:73:e7:96:ea:74:e3:e4:fe:32:ca:44:a8:e9:d7:ef:19: 3e:1d:aa:71:56:56:1b:6b:6a:5c:8a:03:c0:cd:91:b1:13:d4: 3b:9a:12:5b:28:97:50:ea:40:66:2b:fc:d9:ca:6f:68:d2:d0: 8e:6b:c2:6e:32:a3:55:f1:0d:97:d2:d2:b6:bc:69:3c:7f:1a: a8:d7:79:f8:4c:60:f6:ad:c3:65:44:e0:dc:dc:f2:e6:ba:30: 3a:cb:30:ff:90:6b:47:cf:f1:64:d1:23:c9:2a:04:15:74:9d: 3b:35:3a:2d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0RF QjU0M0JEODM1NTU1ODg1MjFGMjIyQkVGODg5MTkxNzVFMTMxNDAeFw0yNTA3MjEw MzEwNTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJCMzMyODY3MEI2ODEw RThDMzlFMkI2NDNEMkVFNjZGNDJDNzU1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsfaOKgn/k89s7GPBL84cqSA1hgJfCh5OURLg2DT3DyTV9OQlR 2MZsaqdFWX+GRH7lr4iJ1MmZz7dadIrUkTvHOua6lU0N1Q23XB2BXNszOwdZtOu1 NzgxJD8xr2O6cX7FEadBRxWDx2IBoPt8bcFfZxHkmzjficmbB2bce3L/0kQm2yTy jcxEV1jVlb37EnOgymWI7qITpkxonUoH5m1AXegUZl4SZVxJRIAd8T2mN6NW3G33 3e9sSTTDD74w0csMEnksxnErnUZ+Cat9VR0nsN2TWNNjxlpYturgsxUNNVezcT2j o1t+88mG7GMOnFpxQls+yTyyACyzkfiShHknAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKzMoZwtoEOjDnitkPS7mb0LHVRAwHwYDVR0jBBgwFoAUfetUO9g1VViFIfIi vviJGRdeExQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy My9mZXRVTzlnMVZWaUZJZklpdnZpSkdSZGVFeFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZldFVPOWcxVlZpRklmSWl2dmlKR1JkZUV4US5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjMvZmV0VU85ZzFWVmlG SWZJaXZ2aUpHUmRlRXhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEFVuV5xdJPp/uMxasd6fs8vuekrtlNK57oeBg7kP+PHX1LcLdYv+yMs/85S SVsuT/pmwIDAogB8bP6Fui02Q2dcyxMmFlgijAzet7KisjQHg8VbEJBDKvNO7GU/ XSKfuA4rwGHPK7tcEVGvQ1Ry+sIK6j7+2oK0A4J7mtTE/0prOdrBs+P6LJLzGjf+ w7wzElh3c+eW6nTj5P4yykSo6dfvGT4dqnFWVhtralyKA8DNkbET1DuaElsol1Dq QGYr/NnKb2jS0I5rwm4yo1XxDZfS0ra8aTx/GqjXefhMYPatw2VE4Nzc8ua6MDrL MP+Qa0fP8WTRI8kqBBV0nTs1Oi0= -----END CERTIFICATE-----Generated at Mon Jul 21 08:06:34 2025 by rpki-client