$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft File: yBaRp6Fgd_PQnd6P2rl55b19wAg.mft (raw, json) Hash identifier: pDSkDKdpV2oRfGTG8GGHqw3tLqaMX5IC/fWYR/sC1cg= Subject key identifier: 59:9D:CD:3B:00:C6:3C:1D:1B:FF:EA:DB:5E:77:53:30:93:79:5E:D2 Authority key identifier: C8:16:91:A7:A1:60:77:F3:D0:9D:DE:8F:DA:B9:79:E5:BD:7D:C0:08 Certificate issuer: /CN=C81691A7A16077F3D09DDE8FDAB979E5BD7DC008 Certificate serial: 32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBaRp6Fgd_PQnd6P2rl55b19wAg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft Manifest number: 32 Signing time: Sat 19 Jul 2025 22:10:06 +0000 Manifest this update: Sat 19 Jul 2025 22:10:06 +0000 Manifest next update: Sun 20 Jul 2025 04:10:06 +0000 Files and hashes: 1: yBaRp6Fgd_PQnd6P2rl55b19wAg.crl (hash: tt3TjbfpdJggadlcnZHZLCoHfRvAfuysnXjOSTmLAIs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBaRp6Fgd_PQnd6P2rl55b19wAg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 04:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C81691A7A16077F3D09DDE8FDAB979E5BD7DC008 Validity Not Before: Jul 19 22:10:06 2025 GMT Not After : Jul 10 08:04:30 2026 GMT Subject: CN=599DCD3B00C63C1D1BFFEADB5E77533093795ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:29:87:6b:e6:d0:cd:83:79:e8:82:ae:2b: 22:08:3a:db:17:5b:fb:7d:82:ac:92:41:65:b6:de: 8d:8c:9d:75:0a:ee:88:89:c0:e7:9d:10:9c:df:82: 0d:f9:29:6e:bb:d6:0d:65:27:01:a2:c4:5c:dd:e3: fb:27:1f:c6:34:eb:0e:8e:00:a2:e5:11:77:88:2f: 96:df:30:43:f8:5d:2c:5e:07:66:8a:89:b6:c6:31: b4:62:23:b1:03:b7:0f:05:42:41:d7:f9:b1:9e:11: a4:45:40:ba:0e:a9:50:72:3e:0e:ae:ae:ce:a6:24: 67:27:57:ba:0b:37:15:d7:7b:a6:90:88:8b:8e:42: 08:7b:7a:b7:c8:ca:67:4a:c7:d6:50:d4:7a:b0:cf: 06:af:dc:e6:01:ce:8d:ca:78:df:7e:f7:e8:8a:80: 54:47:f1:9b:fa:ef:ef:db:ef:01:cb:5e:86:e5:10: a3:fb:79:99:d4:b9:95:82:cf:58:35:6f:cc:8a:73: 92:ab:08:20:8d:d3:26:23:b2:c7:b9:bb:b8:bd:c2: 56:18:d8:60:93:b7:1f:e0:ee:99:8a:f5:0b:92:f6: 26:0c:33:f3:16:5f:a1:b9:e2:21:5e:51:ff:c7:02: 8b:58:8f:2f:82:5f:7b:bc:05:fa:7d:b5:9f:df:01: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9D:CD:3B:00:C6:3C:1D:1B:FF:EA:DB:5E:77:53:30:93:79:5E:D2 X509v3 Authority Key Identifier: keyid:C8:16:91:A7:A1:60:77:F3:D0:9D:DE:8F:DA:B9:79:E5:BD:7D:C0:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBaRp6Fgd_PQnd6P2rl55b19wAg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/yBaRp6Fgd_PQnd6P2rl55b19wAg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d5:a3:93:57:ce:16:04:c3:13:f4:4f:cd:ba:2c:da:26:f7: 48:61:e0:86:3d:2b:1b:44:f4:5b:b0:67:15:0a:a9:b4:18:44: 8f:be:82:ec:ad:43:ae:2e:ce:1f:b9:22:21:db:d1:12:9c:8b: 18:f7:97:54:e7:c0:75:3b:80:9d:f8:eb:6a:f0:d1:ec:7c:04: 31:7b:cd:ce:eb:9b:04:91:90:1e:b6:5d:01:e6:e9:af:40:fe: f3:53:f3:6f:98:cc:90:d6:51:fb:45:24:13:de:7e:08:80:58: f5:72:05:fb:65:ab:83:94:d1:bd:6c:02:5a:ad:14:00:e3:ad: 69:6d:d3:04:83:cc:d7:3f:13:cc:f5:bc:cb:8d:ba:a6:75:d2: c4:fd:07:96:73:12:0d:71:0d:f0:65:60:0e:d1:c0:26:d6:64: 30:e4:f3:4c:32:a7:94:d9:23:a1:fa:57:31:ab:45:ea:b6:08: f0:6d:5e:00:e7:79:9b:4c:ec:62:e5:94:af:ce:78:ad:b5:f9: a6:fa:8f:23:31:26:58:80:71:82:b0:88:93:79:41:2e:5c:93: e8:61:87:64:68:04:81:76:cb:d6:77:00:d9:cd:45:83:9a:a4: 5f:77:de:a2:66:54:3d:06:7f:fd:98:57:36:ed:80:94:3f:73: f6:bc:c1:db -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODE2 OTFBN0ExNjA3N0YzRDA5RERFOEZEQUI5NzlFNUJEN0RDMDA4MB4XDTI1MDcxOTIy MTAwNloXDTI2MDcxMDA4MDQzMFowMzExMC8GA1UEAxMoNTk5RENEM0IwMEM2M0Mx RDFCRkZFQURCNUU3NzUzMzA5Mzc5NUVEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMeAKYdr5tDNg3nogq4rIgg62xdb+32CrJJBZbbejYyddQruiInA 550QnN+CDfkpbrvWDWUnAaLEXN3j+ycfxjTrDo4AouURd4gvlt8wQ/hdLF4HZoqJ tsYxtGIjsQO3DwVCQdf5sZ4RpEVAug6pUHI+Dq6uzqYkZydXugs3Fdd7ppCIi45C CHt6t8jKZ0rH1lDUerDPBq/c5gHOjcp433736IqAVEfxm/rv79vvActehuUQo/t5 mdS5lYLPWDVvzIpzkqsIII3TJiOyx7m7uL3CVhjYYJO3H+DumYr1C5L2Jgwz8xZf obniIV5R/8cCi1iPL4Jfe7wF+n21n98BcesCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRZnc07AMY8HRv/6tted1Mwk3le0jAfBgNVHSMEGDAWgBTIFpGnoWB389Cd3o/a uXnlvX3ACDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzgy L3lCYVJwNkZnZF9QUW5kNlAycmw1NWIxOXdBZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveUJhUnA2RmdkX1BRbmQ2UDJybDU1YjE5d0FnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4Mi95QmFScDZGZ2RfUFFu ZDZQMnJsNTViMTl3QWcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW9Wjk1fOFgTDE/RPzbos2ib3SGHghj0rG0T0W7BnFQqptBhEj76C7K1Dri7O H7kiIdvREpyLGPeXVOfAdTuAnfjravDR7HwEMXvNzuubBJGQHrZdAebpr0D+81Pz b5jMkNZR+0UkE95+CIBY9XIF+2Wrg5TRvWwCWq0UAOOtaW3TBIPM1z8TzPW8y426 pnXSxP0HlnMSDXEN8GVgDtHAJtZkMOTzTDKnlNkjofpXMatF6rYI8G1eAOd5m0zs YuWUr854rbX5pvqPIzEmWIBxgrCIk3lBLlyT6GGHZGgEgXbL1ncA2c1Fg5qkX3fe omZUPQZ//ZhXNu2AlD9z9rzB2w== -----END CERTIFICATE-----Generated at Sat Jul 19 23:21:09 2025 by rpki-client