$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft File: -d70lGN6U32CKR2goZ8GrzWyJgY.mft (raw, json) Hash identifier: fLdpz1/zaqzJ7OHjdFwH7ceXOtXTKcETzH7yDjmguTk= Subject key identifier: 0C:4F:DF:E3:FC:4C:AE:51:0D:80:F4:90:B9:C1:14:97:3B:76:CB:70 Authority key identifier: F9:DE:F4:94:63:7A:53:7D:82:29:1D:A0:A1:9F:06:AF:35:B2:26:06 Certificate issuer: /CN=F9DEF494637A537D82291DA0A19F06AF35B22606 Certificate serial: 1C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-d70lGN6U32CKR2goZ8GrzWyJgY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft Manifest number: 1C Signing time: Sun 20 Jul 2025 09:09:05 +0000 Manifest this update: Sun 20 Jul 2025 09:09:05 +0000 Manifest next update: Sun 20 Jul 2025 15:09:05 +0000 Files and hashes: 1: -d70lGN6U32CKR2goZ8GrzWyJgY.crl (hash: mMG5gK/pAjNiaYRPhPZU81opN1m0owi4NSN2k5BmkBQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-d70lGN6U32CKR2goZ8GrzWyJgY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9DEF494637A537D82291DA0A19F06AF35B22606 Validity Not Before: Jul 20 09:09:05 2025 GMT Not After : Jul 15 06:38:59 2026 GMT Subject: CN=0C4FDFE3FC4CAE510D80F490B9C114973B76CB70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:5d:32:71:95:e5:38:26:e9:d8:a6:38:c1: 79:01:34:54:70:01:6a:89:a5:aa:7a:4f:b7:7a:f1: 56:63:bf:58:b6:ea:a8:6d:f8:c5:2c:0e:04:dd:93: ab:69:3e:b4:99:0e:0a:c8:4b:18:1b:3c:85:82:f6: e1:95:ea:ac:1f:cb:d1:bd:96:08:90:77:9a:64:d6: ef:e5:03:c3:db:00:a8:a8:65:08:4f:f0:b9:f2:41: 0e:42:be:c6:7f:7b:54:77:0e:59:00:4b:79:8a:9e: 32:39:23:ce:65:1c:12:16:29:5b:7c:53:8d:a5:1f: 14:08:1a:78:f6:73:e5:2a:7d:9b:cf:fb:66:83:f8: d2:9e:26:b2:1d:64:40:b5:b9:fe:3d:94:a5:a5:52: 75:2c:b8:58:fb:47:ba:7e:8f:f4:c1:11:ca:05:d5: ef:e4:a7:19:87:33:85:9b:73:10:83:a7:f7:e5:fb: fd:e7:23:0a:66:c7:97:ba:5d:f8:93:f3:9b:ea:68: a9:a5:f1:8c:a5:39:95:0b:41:f9:6a:fc:f7:8d:95: e2:ec:de:5f:e8:ff:94:fd:58:10:4b:5b:2b:6d:8d: 6c:7c:0c:92:e0:35:99:c7:df:97:27:d1:a4:9e:33: 3b:76:d1:93:71:14:b2:87:b0:ae:4b:f1:a9:fb:13: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4F:DF:E3:FC:4C:AE:51:0D:80:F4:90:B9:C1:14:97:3B:76:CB:70 X509v3 Authority Key Identifier: keyid:F9:DE:F4:94:63:7A:53:7D:82:29:1D:A0:A1:9F:06:AF:35:B2:26:06 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-d70lGN6U32CKR2goZ8GrzWyJgY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:42:f1:9f:c7:8e:16:05:25:36:9c:ff:d5:ee:bb:43:2c:a4: 8e:91:b6:f5:f1:de:43:f2:dc:ec:b5:f7:b3:37:28:60:a5:c0: 25:8c:06:b9:be:95:fb:3e:41:46:4f:fb:c8:83:59:13:e6:62: a1:2e:07:75:fd:26:b6:72:42:08:05:56:66:23:b2:e3:b8:e9: c7:b5:ff:20:81:3e:c5:b0:ff:1e:14:99:62:86:15:b8:d0:e8: db:85:df:ff:96:7b:48:7d:f1:0f:c1:04:27:7d:ae:b7:fc:e5: 6d:df:18:14:ab:47:bc:ec:df:5c:ec:3f:c1:12:2a:62:69:c5: df:20:cc:48:81:22:c2:53:25:40:84:c4:3f:40:3a:a1:ef:7f: 52:b4:2f:44:67:93:c2:df:d6:ce:4c:d3:e6:95:a6:ac:6d:4e: 3b:bc:36:fb:61:73:1f:ba:65:a0:72:6a:2f:7b:62:31:cb:75: 4b:dc:53:6a:7f:8e:5f:2d:04:56:6c:b6:a1:1c:4b:e3:91:44: 22:8c:4c:88:49:13:8d:28:79:63:15:fc:86:07:c5:a3:61:e3: 39:03:15:fb:3b:2e:7e:4f:98:e2:d3:83:37:11:54:81:cd:a1: 47:fe:1a:6f:a1:87:93:dd:43:e6:db:4f:90:f5:ed:82:e1:21: 41:66:21:0b -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGOURF RjQ5NDYzN0E1MzdEODIyOTFEQTBBMTlGMDZBRjM1QjIyNjA2MB4XDTI1MDcyMDA5 MDkwNVoXDTI2MDcxNTA2Mzg1OVowMzExMC8GA1UEAxMoMEM0RkRGRTNGQzRDQUU1 MTBEODBGNDkwQjlDMTE0OTczQjc2Q0I3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL7CXTJxleU4JunYpjjBeQE0VHABaomlqnpPt3rxVmO/WLbqqG34 xSwOBN2Tq2k+tJkOCshLGBs8hYL24ZXqrB/L0b2WCJB3mmTW7+UDw9sAqKhlCE/w ufJBDkK+xn97VHcOWQBLeYqeMjkjzmUcEhYpW3xTjaUfFAgaePZz5Sp9m8/7ZoP4 0p4msh1kQLW5/j2UpaVSdSy4WPtHun6P9MERygXV7+SnGYczhZtzEIOn9+X7/ecj CmbHl7pd+JPzm+poqaXxjKU5lQtB+Wr8942V4uzeX+j/lP1YEEtbK22NbHwMkuA1 mcfflyfRpJ4zO3bRk3EUsoewrkvxqfsTht8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQMT9/j/EyuUQ2A9JC5wRSXO3bLcDAfBgNVHSMEGDAWgBT53vSUY3pTfYIpHaCh nwavNbImBjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzgz Ly1kNzBsR042VTMyQ0tSMmdvWjhHcnpXeUpnWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvLWQ3MGxHTjZVMzJDS1IyZ29aOEdyeld5SmdZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4My8tZDcwbEdONlUzMkNL UjJnb1o4R3J6V3lKZ1kubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP0Lxn8eOFgUlNpz/1e67QyykjpG29fHeQ/Lc7LX3szcoYKXAJYwGub6V+z5B Rk/7yINZE+ZioS4Hdf0mtnJCCAVWZiOy47jpx7X/IIE+xbD/HhSZYoYVuNDo24Xf /5Z7SH3xD8EEJ32ut/zlbd8YFKtHvOzfXOw/wRIqYmnF3yDMSIEiwlMlQITEP0A6 oe9/UrQvRGeTwt/WzkzT5pWmrG1OO7w2+2FzH7ploHJqL3tiMct1S9xTan+OXy0E Vmy2oRxL45FEIoxMiEkTjSh5YxX8hgfFo2HjOQMV+zsufk+Y4tODNxFUgc2hR/4a b6GHk91D5ttPkPXtguEhQWYhCw== -----END CERTIFICATE-----Generated at Sun Jul 20 13:20:41 2025 by rpki-client