$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft File: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft (raw, json) Hash identifier: JlHeUWD5fDXBHNIUnu0WY30C6VJarIsE6IcFVlhgWLw= Subject key identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 Authority key identifier: 66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF Certificate issuer: /CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Certificate serial: 0495 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft Manifest number: 0495 Signing time: Sun 20 Jul 2025 21:12:24 +0000 Manifest this update: Sun 20 Jul 2025 21:12:24 +0000 Manifest next update: Mon 21 Jul 2025 03:12:24 +0000 Files and hashes: 1: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl (hash: z400dWXo5jPji8iDBgdf06//uH9jWmFicklrg/frpUA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 03:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Validity Not Before: Jul 20 21:12:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F0DCD3E56B07333F5EAD5D479ED734FE6D5AB0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f2:74:a3:57:8d:a7:30:b6:5d:54:f2:76:3c: 75:bc:97:b6:8e:5d:b3:36:fd:e9:56:18:78:96:73: d8:ff:17:78:38:2d:df:e3:72:28:58:4a:da:e9:ea: 9a:95:a1:b3:92:d1:35:e8:3f:13:90:b8:5f:b4:ca: 48:5a:e8:9d:51:8b:d6:93:fc:7a:50:db:32:4a:ed: cf:6b:64:ff:80:3c:35:c0:18:c4:0a:8f:89:ed:c9: c3:48:f2:9c:e1:fc:da:ff:83:2d:fc:2a:fd:c1:44: 18:e1:88:a5:33:ff:cb:89:e7:0e:24:d0:28:f9:89: 4b:6d:10:f6:7e:10:b8:e6:c1:fe:15:cb:e0:d8:ee: 9c:c1:95:47:af:6a:b5:5a:6f:60:3d:c7:02:c0:d0: f1:df:6b:c8:4f:02:f9:17:d4:ee:e5:d4:1b:45:0c: 28:35:38:d9:18:79:63:13:d0:5c:c5:bf:0e:df:4b: 15:1f:71:fb:68:43:dc:77:6b:e1:c8:f2:e9:a3:cf: ea:4b:40:da:e0:c4:d5:37:3a:36:c0:c5:cd:b1:e5: 79:30:6e:94:b3:86:33:e0:f5:cb:74:28:3c:07:24: d6:49:c5:cc:ec:51:b5:e2:98:6e:12:e0:24:ed:3d: 46:93:41:37:88:14:aa:c9:09:cd:72:f1:5f:7c:ae: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 X509v3 Authority Key Identifier: keyid:66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:18:89:6f:fb:fe:a8:45:50:f7:d6:13:2e:6a:7d:f0:5f:3b: 03:32:6d:1f:5a:27:6c:a1:ba:bf:28:93:bb:21:3c:ba:d5:b8: 4a:60:9a:d3:29:0c:75:76:61:3a:bc:03:63:b6:81:15:eb:2c: 1d:0c:22:2b:89:fa:c1:41:f6:0b:e0:bd:0f:7a:5e:a6:48:1a: c3:95:94:c9:d3:78:b4:79:e5:bb:7a:d0:7e:86:a7:95:24:10: 5d:98:17:0f:c9:52:82:c3:76:0b:13:4d:39:de:00:77:a6:d5: ab:32:a7:9a:47:c0:c3:2d:fd:07:44:bf:99:d3:68:3c:90:96: 97:f7:6d:ab:91:b4:5c:e4:23:df:5e:75:b8:c9:c6:68:9f:eb: 79:14:7e:55:a1:a2:cc:f5:48:75:83:bd:6d:d0:db:ee:19:34: 4f:40:5d:72:43:f2:51:13:7d:75:d7:13:a4:35:09:94:44:98: dd:f5:76:d3:89:8f:12:81:5c:ed:15:27:7c:21:db:9b:5e:27: 67:20:dd:b3:61:79:05:8a:70:d2:c3:49:e1:de:62:fa:a8:08: 9b:2f:0b:64:97:8e:85:65:a6:a7:fe:03:29:6d:1a:98:49:93: de:00:ff:f4:62:25:e4:99:d4:15:80:31:89:a1:b3:ca:e4:fd: 54:d3:84:f7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY3 NkE2NjQyQTRGNjAxNkJDMDcxREY2MjZCMkJFQkNCNDNCNUVDRjAeFw0yNTA3MjAy MTEyMjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYwRENEM0U1NkIwNzMz M0Y1RUFENUQ0NzlFRDczNEZFNkQ1QUIwQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD08nSjV42nMLZdVPJ2PHW8l7aOXbM2/elWGHiWc9j/F3g4Ld/j cihYStrp6pqVobOS0TXoPxOQuF+0ykha6J1Ri9aT/HpQ2zJK7c9rZP+APDXAGMQK j4ntycNI8pzh/Nr/gy38Kv3BRBjhiKUz/8uJ5w4k0Cj5iUttEPZ+ELjmwf4Vy+DY 7pzBlUevarVab2A9xwLA0PHfa8hPAvkX1O7l1BtFDCg1ONkYeWMT0FzFvw7fSxUf cftoQ9x3a+HI8umjz+pLQNrgxNU3OjbAxc2x5XkwbpSzhjPg9ct0KDwHJNZJxczs UbXimG4S4CTtPUaTQTeIFKrJCc1y8V98rimxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8NzT5WsHMz9erV1Hntc0/m1asLMwHwYDVR0jBBgwFoAUZnamZCpPYBa8Bx32 JrK+vLQ7Xs8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MS9abmFtWkNwUFlCYThCeDMySnJLLXZMUTdYczguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1puYW1aQ3BQWUJhOEJ4MzJKckstdkxRN1hzOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvWm5hbVpDcFBZQmE4 QngzMkpySy12TFE3WHM4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAsYiW/7/qhFUPfWEy5qffBfOwMybR9aJ2yhur8ok7shPLrVuEpgmtMpDHV2 YTq8A2O2gRXrLB0MIiuJ+sFB9gvgvQ96XqZIGsOVlMnTeLR55bt60H6Gp5UkEF2Y Fw/JUoLDdgsTTTneAHem1asyp5pHwMMt/QdEv5nTaDyQlpf3bauRtFzkI99edbjJ xmif63kUflWhosz1SHWDvW3Q2+4ZNE9AXXJD8lETfXXXE6Q1CZREmN31dtOJjxKB XO0VJ3wh25teJ2cg3bNheQWKcNLDSeHeYvqoCJsvC2SXjoVlpqf+AyltGphJk94A //RiJeSZ1BWAMYmhs8rk/VTThPc= -----END CERTIFICATE-----Generated at Mon Jul 21 02:41:28 2025 by rpki-client