$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft File: kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft (raw, json) Hash identifier: roOx1uYVTCrg+VYzFc3mSwOFQwwZ6cKclHXuprjs46c= Subject key identifier: 04:57:EF:8E:16:C8:3E:2C:54:5F:D9:1D:F3:16:A2:6E:AC:F9:1C:E4 Authority key identifier: 91:B3:CF:BF:06:D0:F4:F0:61:0D:21:72:0A:B8:C7:69:FA:7F:02:85 Certificate issuer: /CN=91B3CFBF06D0F4F0610D21720AB8C769FA7F0285 Certificate serial: 37 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft Manifest number: 37 Signing time: Sun 20 Jul 2025 17:39:45 +0000 Manifest this update: Sun 20 Jul 2025 17:39:45 +0000 Manifest next update: Sun 20 Jul 2025 23:39:45 +0000 Files and hashes: 1: kbPPvwbQ9PBhDSFyCrjHafp_AoU.crl (hash: Fcpz7XrKucG79u0XyBcRbn2VJ4vuzDym6OFa1P1DcFc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 23:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91B3CFBF06D0F4F0610D21720AB8C769FA7F0285 Validity Not Before: Jul 20 17:39:45 2025 GMT Not After : Jul 10 08:04:30 2026 GMT Subject: CN=0457EF8E16C83E2C545FD91DF316A26EACF91CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d0:04:69:84:03:1a:59:2d:5c:ce:2a:a8:07: 2b:12:d0:20:53:ea:0f:88:f3:a2:21:7d:08:1b:a1: dd:1f:52:78:4f:f7:aa:19:59:5f:5d:4b:4f:bd:2c: 8b:36:a5:68:a6:f5:4c:0d:86:4f:09:ed:66:0e:a8: b4:27:14:f1:02:cd:45:88:20:c4:7e:72:c4:ca:6c: 2e:7f:aa:d8:4c:f2:7c:50:13:2d:de:05:99:37:f3: 12:e7:c3:3b:2e:8c:37:73:3a:5b:c0:c8:22:8a:b3: b0:af:43:d5:b7:29:bb:ee:0d:ee:21:e1:0c:66:86: c7:b6:1e:bc:21:ee:11:27:68:70:fc:31:43:8d:e4: 71:3e:74:27:cf:3a:76:a7:7f:d2:1a:75:95:6c:a5: 5a:7f:5a:02:17:e2:50:52:1c:17:5c:6f:d5:1f:2d: 46:63:65:88:85:09:6f:45:5e:f4:af:47:e4:12:4b: 12:58:f9:36:09:dd:55:0d:2a:d5:30:a4:b8:f0:9e: 3b:05:0e:91:35:66:a2:e2:46:b7:96:b0:85:fd:1a: 10:fc:44:1a:2f:c2:aa:18:6e:8f:e4:06:33:52:ba: 9b:40:6a:8f:b1:3d:39:10:b5:ee:cc:2c:e8:aa:db: 12:54:49:68:e8:44:9a:10:ce:0f:72:d3:ce:1c:00: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:57:EF:8E:16:C8:3E:2C:54:5F:D9:1D:F3:16:A2:6E:AC:F9:1C:E4 X509v3 Authority Key Identifier: keyid:91:B3:CF:BF:06:D0:F4:F0:61:0D:21:72:0A:B8:C7:69:FA:7F:02:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:09:66:cb:d2:dc:dc:bf:71:a7:84:7a:82:48:b7:a4:3e:62: ec:8c:e3:83:6d:87:22:0b:e2:73:7d:e8:e3:2b:f7:9d:96:9e: 58:89:c4:32:41:1e:4f:e3:88:61:1b:8a:50:b4:9a:31:fb:c8: 8d:85:6e:8f:89:6b:54:02:1c:b7:0d:69:c6:64:ed:6e:79:a6: cc:34:95:4a:16:77:25:19:22:c8:1c:d2:15:5d:52:d9:e1:6f: 36:01:81:d6:08:96:0d:94:a5:a3:b1:c0:cc:d1:7e:f7:65:8e: 9c:86:77:4b:f1:d7:26:07:9f:00:81:c3:11:50:69:0d:d1:fc: 95:f4:7e:69:7a:7d:35:8b:86:3e:55:74:ed:e0:40:7d:97:2e: f9:7a:33:0c:ad:4d:fc:0c:6c:c0:00:13:fd:39:21:7a:6a:26: 27:73:d6:0c:c1:9e:20:6f:0f:24:38:a2:c1:32:51:27:01:8e: 2d:bf:a0:1e:6c:79:ff:a5:ca:df:1d:b4:c5:cb:de:cd:42:ca: 71:84:b0:44:a8:67:48:48:9c:91:fa:6c:a7:44:34:eb:cc:f9: a6:f9:ee:d7:20:66:40:1b:9a:9d:cb:ee:2c:6c:7c:3a:34:6e: 82:fb:ce:8d:8e:1c:24:7b:7c:81:20:94:90:0e:e9:64:0a:41: 47:e1:6d:65 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUIz Q0ZCRjA2RDBGNEYwNjEwRDIxNzIwQUI4Qzc2OUZBN0YwMjg1MB4XDTI1MDcyMDE3 Mzk0NVoXDTI2MDcxMDA4MDQzMFowMzExMC8GA1UEAxMoMDQ1N0VGOEUxNkM4M0Uy QzU0NUZEOTFERjMxNkEyNkVBQ0Y5MUNFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOXQBGmEAxpZLVzOKqgHKxLQIFPqD4jzoiF9CBuh3R9SeE/3qhlZ X11LT70sizalaKb1TA2GTwntZg6otCcU8QLNRYggxH5yxMpsLn+q2EzyfFATLd4F mTfzEufDOy6MN3M6W8DIIoqzsK9D1bcpu+4N7iHhDGaGx7YevCHuESdocPwxQ43k cT50J886dqd/0hp1lWylWn9aAhfiUFIcF1xv1R8tRmNliIUJb0Ve9K9H5BJLElj5 NgndVQ0q1TCkuPCeOwUOkTVmouJGt5awhf0aEPxEGi/Cqhhuj+QGM1K6m0Bqj7E9 ORC17sws6KrbElRJaOhEmhDOD3LTzhwANV8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQEV++OFsg+LFRf2R3zFqJurPkc5DAfBgNVHSMEGDAWgBSRs8+/BtD08GENIXIK uMdp+n8ChTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzgy L2tiUFB2d2JROVBCaERTRnlDcmpIYWZwX0FvVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAva2JQUHZ3YlE5UEJoRFNGeUNyakhhZnBfQW9VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4Mi9rYlBQdndiUTlQQmhE U0Z5Q3JqSGFmcF9Bb1UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmwlmy9Lc3L9xp4R6gki3pD5i7Izjg22HIgvic33o4yv3nZaeWInEMkEeT+OI YRuKULSaMfvIjYVuj4lrVAIctw1pxmTtbnmmzDSVShZ3JRkiyBzSFV1S2eFvNgGB 1giWDZSlo7HAzNF+92WOnIZ3S/HXJgefAIHDEVBpDdH8lfR+aXp9NYuGPlV07eBA fZcu+XozDK1N/AxswAAT/TkhemomJ3PWDMGeIG8PJDiiwTJRJwGOLb+gHmx5/6XK 3x20xcvezULKcYSwRKhnSEickfpsp0Q068z5pvnu1yBmQBuancvuLGx8OjRugvvO jY4cJHt8gSCUkA7pZApBR+FtZQ== -----END CERTIFICATE-----Generated at Sun Jul 20 21:20:59 2025 by rpki-client