$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft File: yHk93n6DuKXGasUI_NGLn1hMkng.mft (raw, json) Hash identifier: ARxVhlCyWwiTqaeYVvDu8drOe52c7/5Y+eQgufWyHmQ= Subject key identifier: 67:D0:EC:2C:23:DB:72:F7:19:15:14:F0:D9:5C:B5:F7:CA:7B:5B:9E Authority key identifier: C8:79:3D:DE:7E:83:B8:A5:C6:6A:C5:08:FC:D1:8B:9F:58:4C:92:78 Certificate issuer: /CN=C8793DDE7E83B8A5C66AC508FCD18B9F584C9278 Certificate serial: 43 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft Manifest number: 43 Signing time: Sun 20 Jul 2025 07:39:37 +0000 Manifest this update: Sun 20 Jul 2025 07:39:37 +0000 Manifest next update: Sun 20 Jul 2025 13:39:37 +0000 Files and hashes: 1: yHk93n6DuKXGasUI_NGLn1hMkng.crl (hash: pAc5/QDCH8RM02ynweH0ZT4HObParMXsG9PnQl6JixQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8793DDE7E83B8A5C66AC508FCD18B9F584C9278 Validity Not Before: Jul 20 07:39:37 2025 GMT Not After : Jul 7 07:16:16 2026 GMT Subject: CN=67D0EC2C23DB72F7191514F0D95CB5F7CA7B5B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:8b:ee:7c:97:9f:21:3e:06:47:9a:65:f4: 61:7d:f8:b9:50:54:ab:37:b6:87:b2:01:be:cf:59: 8d:4f:5c:86:9b:53:01:73:53:5a:16:49:2e:f8:a2: fe:63:4d:45:8a:fd:6a:ac:f1:44:12:13:41:30:83: e3:92:ef:5c:cb:7d:62:81:a9:d9:a3:c3:c1:61:6e: 5f:f2:90:60:38:6e:70:0b:d7:ea:dc:72:03:eb:ab: ee:e9:85:0c:9b:d3:c5:02:c3:a1:a7:09:40:62:f2: 1d:b8:df:00:b3:d3:cc:2b:f9:56:85:83:c3:51:ed: 62:55:00:06:de:75:8a:5f:3a:48:a8:c1:90:8c:83: 37:3f:50:d4:b1:9b:49:98:7f:24:72:a8:2c:e6:f7: d9:33:13:1e:f8:06:0f:85:26:58:3b:4c:1e:d2:04: bd:19:6f:49:14:4c:4d:f4:49:92:80:f4:a8:20:7e: e8:1a:67:cf:74:52:e8:61:fc:c8:58:19:65:42:ee: 22:23:aa:3e:ae:26:1a:25:95:d1:47:52:3e:d3:ed: 3a:1c:d5:45:bb:16:42:ff:95:71:e9:63:3f:63:aa: e8:4e:5f:85:8e:bb:b1:c2:ab:49:28:4a:b7:59:61: e9:0a:d4:0e:e6:8c:6f:e4:9a:4c:b1:2e:48:65:60: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D0:EC:2C:23:DB:72:F7:19:15:14:F0:D9:5C:B5:F7:CA:7B:5B:9E X509v3 Authority Key Identifier: keyid:C8:79:3D:DE:7E:83:B8:A5:C6:6A:C5:08:FC:D1:8B:9F:58:4C:92:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yHk93n6DuKXGasUI_NGLn1hMkng.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3381/yHk93n6DuKXGasUI_NGLn1hMkng.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5f:82:84:8d:01:74:7d:ea:1a:e2:2b:2c:01:aa:6b:87:98: 01:6e:6c:52:69:59:6c:45:ef:65:3e:1e:8b:fd:17:13:18:1a: d5:8c:4e:33:25:e3:da:19:aa:b9:4a:89:30:1e:1d:33:f2:5f: ca:c0:c2:e1:ba:0f:ed:d3:96:74:67:f2:cb:61:7c:02:1c:89: 61:31:61:a2:48:ba:60:84:27:f3:bf:86:5f:c5:9b:ff:ba:bf: ba:22:65:4c:90:d0:b8:96:6a:fb:fd:3f:8a:14:4f:62:79:1c: 8d:b0:38:4a:dc:61:0a:4a:a7:41:00:58:8d:72:60:9e:17:7b: 9a:8b:3e:c2:dd:10:42:74:e8:29:34:4d:31:04:fe:f0:7c:c6: bd:3d:f9:33:4d:04:41:ce:66:6f:ac:f5:f0:86:df:f8:22:68: df:58:94:fa:1e:85:e2:8f:45:cb:0a:0a:04:dd:3d:d9:c9:e8: f1:37:75:f6:a0:fd:aa:72:32:4e:0b:f8:ac:f4:80:87:f7:04: 2f:67:c8:30:32:8b:a0:9a:ff:15:3b:a6:10:04:bf:44:75:e2: 35:ab:3a:ed:d6:43:eb:e3:e6:99:28:f7:f1:0b:06:2b:bc:b2: e2:31:c8:5f:ef:1b:d7:04:01:2b:99:fe:78:ac:0d:32:6c:a3: a3:6e:27:21 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODc5 M0RERTdFODNCOEE1QzY2QUM1MDhGQ0QxOEI5RjU4NEM5Mjc4MB4XDTI1MDcyMDA3 MzkzN1oXDTI2MDcwNzA3MTYxNlowMzExMC8GA1UEAxMoNjdEMEVDMkMyM0RCNzJG NzE5MTUxNEYwRDk1Q0I1RjdDQTdCNUI5RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALari+58l58hPgZHmmX0YX34uVBUqze2h7IBvs9ZjU9chptTAXNT WhZJLvii/mNNRYr9aqzxRBITQTCD45LvXMt9YoGp2aPDwWFuX/KQYDhucAvX6txy A+ur7umFDJvTxQLDoacJQGLyHbjfALPTzCv5VoWDw1HtYlUABt51il86SKjBkIyD Nz9Q1LGbSZh/JHKoLOb32TMTHvgGD4UmWDtMHtIEvRlvSRRMTfRJkoD0qCB+6Bpn z3RS6GH8yFgZZULuIiOqPq4mGiWV0UdSPtPtOhzVRbsWQv+VceljP2Oq6E5fhY67 scKrSShKt1lh6QrUDuaMb+SaTLEuSGVglAECAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRn0OwsI9ty9xkVFPDZXLX3yntbnjAfBgNVHSMEGDAWgBTIeT3efoO4pcZqxQj8 0YufWEySeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzgx L3lIazkzbjZEdUtYR2FzVUlfTkdMbjFoTWtuZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveUhrOTNuNkR1S1hHYXNVSV9OR0xuMWhNa25nLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4MS95SGs5M242RHVLWEdh c1VJX05HTG4xaE1rbmcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1+ChI0BdH3qGuIrLAGqa4eYAW5sUmlZbEXvZT4ei/0XExga1YxOMyXj2hmq uUqJMB4dM/JfysDC4boP7dOWdGfyy2F8AhyJYTFhoki6YIQn87+GX8Wb/7q/uiJl TJDQuJZq+/0/ihRPYnkcjbA4StxhCkqnQQBYjXJgnhd7mos+wt0QQnToKTRNMQT+ 8HzGvT35M00EQc5mb6z18Ibf+CJo31iU+h6F4o9FywoKBN092cno8Td19qD9qnIy Tgv4rPSAh/cEL2fIMDKLoJr/FTumEAS/RHXiNas67dZD6+PmmSj38QsGK7yy4jHI X+8b1wQBK5n+eKwNMmyjo24nIQ== -----END CERTIFICATE-----Generated at Sun Jul 20 12:34:21 2025 by rpki-client