$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft File: tw-ay_EAFGtabH5NDOLP3_sXgA0.mft (raw, json) Hash identifier: wOp4nNOJAAF++zvdROo2YejNUi8N+vXzGinvEVDb7VI= Subject key identifier: 54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98 Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Certificate serial: 03DA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft Manifest number: 03DA Signing time: Sun 20 Jul 2025 06:43:40 +0000 Manifest this update: Sun 20 Jul 2025 06:43:40 +0000 Manifest next update: Sun 20 Jul 2025 12:43:40 +0000 Files and hashes: 1: tw-ay_EAFGtabH5NDOLP3_sXgA0.crl (hash: SOxw7nDdQyAJGT+U5xCPH/dxOZCTriKELsNjyVl8GXY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 12:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Validity Not Before: Jul 20 06:43:40 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=54D82569197583EE89B0F404B8F55339789F8598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:e3:97:e5:d6:e5:7b:7a:46:f9:98:ea:1f: ab:e8:67:42:de:c4:6e:6c:bd:f2:10:47:c7:39:80: 53:f3:3e:d9:9a:d5:c7:31:45:93:93:ee:25:13:97: bb:87:0a:15:20:8b:a7:87:49:f1:43:17:4f:06:4b: 44:29:12:14:69:17:78:83:a2:3b:94:54:77:2a:a0: f0:86:3d:50:52:06:7c:e3:4c:4c:2e:ba:89:34:ba: 48:d7:2a:87:92:cc:65:e0:eb:4c:8b:5c:ef:a6:30: 44:f2:de:a2:7b:1e:31:bd:d8:79:96:04:1f:74:c8: 6a:42:60:ff:4d:6f:63:36:92:df:f3:55:dd:90:e2: 65:01:3f:e2:88:91:1a:5a:63:74:c7:b1:e3:a8:d8: 9a:4d:ab:e2:24:b8:77:58:f2:db:25:53:a6:22:aa: e5:d2:29:32:54:3c:2b:0c:53:be:dc:31:14:db:ec: c1:00:6e:64:b8:3b:87:f7:f6:3a:bf:c1:0d:50:71: 2b:86:e6:3e:bd:b7:12:02:98:84:6d:e1:42:ea:08: f2:15:47:4a:55:9a:2e:5c:02:3f:ac:cc:de:39:52: e7:0d:d0:78:22:b6:b1:b3:13:a7:5f:73:27:b4:97: e8:8f:0b:b2:9f:b0:a6:1b:4c:50:e2:56:05:09:0b: 03:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98 X509v3 Authority Key Identifier: keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ae:76:bd:7c:df:04:b6:02:94:8a:be:91:bc:26:86:f5:a3: 53:9a:93:ab:6d:20:19:0b:ce:f2:7a:e4:7e:20:1d:8d:4c:6f: 8a:30:82:2a:e3:2c:2f:dc:b9:69:9b:d8:f2:d7:46:55:bc:4f: fe:49:b9:8d:eb:5e:f4:95:63:74:3a:1a:5e:75:e2:75:9a:e6: 90:41:4f:53:90:5f:56:75:27:44:bb:2e:b3:78:a4:cf:ef:b9: 7d:b4:fe:4a:30:55:80:a2:05:23:6a:02:f0:51:31:74:1f:9c: 0d:0e:02:90:08:69:dc:57:3e:aa:79:e1:2d:cc:d1:50:80:ff: f2:5c:39:7c:7a:4b:e9:3a:15:ae:15:60:1f:73:38:ac:0f:61: c6:98:34:08:5c:86:90:43:a4:ff:db:02:9c:a0:d6:f1:e6:5d: 2d:d7:8a:8b:df:6b:ae:ea:f7:4f:a3:eb:fb:f0:9f:78:b0:0c: cd:d0:fd:7c:e3:a2:1e:8e:0b:8d:e8:18:95:54:ba:5c:5e:6b: 2c:34:b8:ff:9d:58:6d:ac:7f:06:c7:e2:3e:42:fa:f0:98:f8: a9:d7:d4:c5:85:63:94:e1:8d:57:ab:58:90:54:7f:b3:99:b8: 5e:50:4c:da:28:6b:6f:f1:22:eb:69:19:b5:e1:d9:5f:3f:3f: 0d:b7:de:30 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjcw RjlBQ0JGMTAwMTQ2QjVBNkM3RTREMENFMkNGREZGQjE3ODAwRDAeFw0yNTA3MjAw NjQzNDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDU0RDgyNTY5MTk3NTgz RUU4OUIwRjQwNEI4RjU1MzM5Nzg5Rjg1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFEeOX5dble3pG+ZjqH6voZ0LexG5svfIQR8c5gFPzPtma1ccx RZOT7iUTl7uHChUgi6eHSfFDF08GS0QpEhRpF3iDojuUVHcqoPCGPVBSBnzjTEwu uok0ukjXKoeSzGXg60yLXO+mMETy3qJ7HjG92HmWBB90yGpCYP9Nb2M2kt/zVd2Q 4mUBP+KIkRpaY3THseOo2JpNq+IkuHdY8tslU6YiquXSKTJUPCsMU77cMRTb7MEA bmS4O4f39jq/wQ1QcSuG5j69txICmIRt4ULqCPIVR0pVmi5cAj+szN45UucN0Hgi trGzE6dfcye0l+iPC7KfsKYbTFDiVgUJCwNRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUVNglaRl1g+6JsPQEuPVTOXifhZgwHwYDVR0jBBgwFoAUtw+ay/EAFGtabH5N DOLP3/sXgA0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NS90dy1heV9FQUZHdGFiSDVORE9MUDNfc1hnQTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3R3LWF5X0VBRkd0YWJINU5ET0xQM19zWGdBMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDUvdHctYXlfRUFGR3Rh Ykg1TkRPTFAzX3NYZ0EwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB6udr183wS2ApSKvpG8Job1o1Oak6ttIBkLzvJ65H4gHY1Mb4owgirjLC/c uWmb2PLXRlW8T/5JuY3rXvSVY3Q6Gl514nWa5pBBT1OQX1Z1J0S7LrN4pM/vuX20 /kowVYCiBSNqAvBRMXQfnA0OApAIadxXPqp54S3M0VCA//JcOXx6S+k6Fa4VYB9z OKwPYcaYNAhchpBDpP/bApyg1vHmXS3Xiovfa67q90+j6/vwn3iwDM3Q/Xzjoh6O C43oGJVUulxeayw0uP+dWG2sfwbH4j5C+vCY+KnX1MWFY5ThjVerWJBUf7OZuF5Q TNooa2/xIutpGbXh2V8/Pw233jA= -----END CERTIFICATE-----Generated at Sun Jul 20 12:33:50 2025 by rpki-client