
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
File: K6tMFwMvC3Tx01c-eeloid-ypu4.mft (raw, json)
Hash identifier: k0Tugy6rh7e0p3tNVZKsMv2WUqhN1w8PFrtg+2ycRx0=
Subject key identifier: BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0
Authority key identifier: 2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE
Certificate issuer: /CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE
Certificate serial: 061B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
Manifest number: 061B
Signing time: Fri 24 Oct 2025 17:36:30 +0000
Manifest this update: Fri 24 Oct 2025 17:36:30 +0000
Manifest next update: Fri 24 Oct 2025 23:36:30 +0000
Files and hashes: 1: K6tMFwMvC3Tx01c-eeloid-ypu4.crl (hash: /9RyinG103+hD06DnUxXsQG9LhUIIs+wYFPQQ/4bzOU=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 23:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1563 (0x61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE
Validity
Not Before: Oct 24 17:36:30 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=BE671BA73B86480189EF54ED7FEF88040D02D1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:18:79:57:d3:51:87:19:64:d4:2b:23:54:
8a:ac:f2:88:6d:a0:42:74:e0:65:b1:3b:ac:60:e5:
27:5b:40:9c:f9:f1:72:9b:0f:d0:ae:dd:56:b9:d3:
e0:f1:02:16:eb:b1:33:50:44:94:2c:d7:09:11:c5:
d0:bb:39:c1:09:55:17:68:ec:d0:69:25:42:b0:a8:
65:ec:e8:80:0c:0e:e5:2f:5c:d6:b3:5d:ae:24:9e:
45:97:66:32:17:b2:82:3f:6f:7b:94:54:d2:58:7e:
a7:50:23:74:2d:52:24:6e:73:51:95:71:d0:bc:fd:
f3:c3:41:d2:84:41:a9:65:82:fb:1d:df:bd:08:a9:
83:29:47:d0:76:fc:a7:f3:04:2f:e2:4f:f7:3e:92:
8d:84:db:0d:eb:71:7e:d6:d8:7e:de:2c:44:d0:53:
3c:36:d6:1f:63:5d:01:bb:53:89:e9:da:d8:e2:0c:
7b:3c:ed:a6:8d:91:9c:55:e7:33:7e:ad:7e:46:9c:
54:c4:c3:b8:f0:8e:68:f9:4e:9d:f6:aa:fc:b9:d0:
9f:a8:be:a4:22:4f:72:15:98:47:c7:fc:38:f4:d3:
3b:56:d5:02:ea:ca:7b:80:63:a5:5a:f7:0d:97:0d:
30:fd:e2:4e:ba:23:23:81:db:dd:28:9c:ee:76:fe:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0
X509v3 Authority Key Identifier:
keyid:2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:c7:c3:9e:ec:a8:aa:cd:59:64:03:5a:78:eb:01:09:08:50:
9d:81:98:9c:20:f6:ef:a7:6e:f7:69:81:97:0b:d9:a3:4c:5b:
3a:3b:f9:86:ab:a2:c1:a3:ee:cc:d9:7c:d9:8d:4c:09:09:19:
08:16:e3:6b:28:61:8b:2d:8a:32:ca:fe:6b:34:9f:0b:e1:60:
d1:24:e8:cc:a7:8c:38:95:da:79:19:41:9e:8c:f6:1c:d0:ca:
b8:2e:2d:d4:93:34:af:68:34:75:97:d0:16:01:df:9e:c5:9c:
c8:c7:db:8e:b2:ff:9c:a3:b9:05:0d:51:82:dc:ab:45:04:74:
fa:5d:8b:5a:aa:b9:88:42:52:b5:f8:9d:c9:8f:3b:56:08:d7:
b3:e2:c5:aa:4b:09:b6:1b:21:ff:6f:48:cf:f6:b3:9e:5d:25:
2e:5b:c0:eb:48:c6:65:77:3d:c6:8c:80:18:53:76:85:90:60:
b0:32:1c:16:8d:4c:8f:ae:b8:c2:83:3d:db:be:a3:ab:c3:e1:
37:01:93:fe:8f:ed:c9:d6:2e:56:cf:9a:57:30:a2:50:06:9d:
4a:b3:ae:16:04:68:d7:0e:b6:00:8e:e5:b8:f6:c2:7d:27:76:
a8:2f:90:95:6b:3a:72:df:82:8a:b3:67:9e:3b:5e:f8:06:a9:
f4:1d:b9:19
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkJB
QjRDMTcwMzJGMEI3NEYxRDM1NzNFNzlFOTY4ODlERkIyQTZFRTAeFw0yNTEwMjQx
NzM2MzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJFNjcxQkE3M0I4NjQ4
MDE4OUVGNTRFRDdGRUY4ODA0MEQwMkQxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL2xh5V9NRhxlk1CsjVIqs8ohtoEJ04GWxO6xg5SdbQJz58XKb
D9Cu3Va50+DxAhbrsTNQRJQs1wkRxdC7OcEJVRdo7NBpJUKwqGXs6IAMDuUvXNaz
Xa4knkWXZjIXsoI/b3uUVNJYfqdQI3QtUiRuc1GVcdC8/fPDQdKEQallgvsd370I
qYMpR9B2/KfzBC/iT/c+ko2E2w3rcX7W2H7eLETQUzw21h9jXQG7U4np2tjiDHs8
7aaNkZxV5zN+rX5GnFTEw7jwjmj5Tp32qvy50J+ovqQiT3IVmEfH/Dj00ztW1QLq
ynuAY6Va9w2XDTD94k66IyOB290onO52/p/NAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUvmcbpzuGSAGJ71Ttf++IBA0C0cAwHwYDVR0jBBgwFoAUK6tMFwMvC3Tx01c+
eeloid+ypu4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
OC9LNnRNRndNdkMzVHgwMWMtZWVsb2lkLXlwdTQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0s2dE1Gd012QzNUeDAxYy1lZWxvaWQteXB1NC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzgvSzZ0TUZ3TXZDM1R4
MDFjLWVlbG9pZC15cHU0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABTHw57sqKrNWWQDWnjrAQkIUJ2BmJwg9u+nbvdpgZcL2aNMWzo7+YarosGj
7szZfNmNTAkJGQgW42soYYstijLK/ms0nwvhYNEk6MynjDiV2nkZQZ6M9hzQyrgu
LdSTNK9oNHWX0BYB357FnMjH246y/5yjuQUNUYLcq0UEdPpdi1qquYhCUrX4ncmP
O1YI17PixapLCbYbIf9vSM/2s55dJS5bwOtIxmV3PcaMgBhTdoWQYLAyHBaNTI+u
uMKDPdu+o6vD4TcBk/6P7cnWLlbPmlcwolAGnUqzrhYEaNcOtgCO5bj2wn0ndqgv
kJVrOnLfgoqzZ547XvgGqfQduRk=
-----END CERTIFICATE-----
Generated at Fri Oct 24 21:22:08 2025 by rpki-client