$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft File: 2XvHH8m9pBkR8fuAruokHEj-jmI.mft (raw, json) Hash identifier: assy7vwyIdjOtI4a8DEedi0+VMVCpojKHYohoumOESQ= Subject key identifier: 3D:14:2B:1D:11:16:8C:09:9D:11:82:C8:5A:C7:1E:F0:69:25:BA:E6 Authority key identifier: D9:7B:C7:1F:C9:BD:A4:19:11:F1:FB:80:AE:EA:24:1C:48:FE:8E:62 Certificate issuer: /CN=D97BC71FC9BDA41911F1FB80AEEA241C48FE8E62 Certificate serial: 18 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2XvHH8m9pBkR8fuAruokHEj-jmI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft Manifest number: 18 Signing time: Sat 19 Jul 2025 18:39:03 +0000 Manifest this update: Sat 19 Jul 2025 18:39:03 +0000 Manifest next update: Sun 20 Jul 2025 00:39:03 +0000 Files and hashes: 1: 2XvHH8m9pBkR8fuAruokHEj-jmI.crl (hash: TwGm6k3Z8bt5DhwKycFCp6ZzVwIUjNygJb/bTtwk0R0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2XvHH8m9pBkR8fuAruokHEj-jmI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Jul 2025 23:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D97BC71FC9BDA41911F1FB80AEEA241C48FE8E62 Validity Not Before: Jul 19 18:39:03 2025 GMT Not After : Jul 15 06:38:59 2026 GMT Subject: CN=3D142B1D11168C099D1182C85AC71EF06925BAE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:d0:9b:24:5e:2b:e8:e7:90:1b:7e:6f:13: 63:8d:46:2e:46:56:06:1b:7d:fc:75:1b:14:da:8d: b4:b0:15:2c:26:7d:ed:90:d5:d0:01:56:f6:28:ad: 1f:2f:9d:08:39:e9:04:cf:5c:9d:9a:3b:33:9b:a2: 85:51:ba:d3:60:c9:53:27:34:23:67:94:33:af:b3: 20:8b:bf:b6:1b:e4:e5:85:ed:e0:b4:14:63:ff:79: 28:ad:0f:dd:3f:01:f3:18:73:64:7e:62:7c:60:02: e0:83:06:3f:a5:73:c9:97:93:cc:20:ef:a3:11:3e: 84:40:db:f0:fc:5e:0d:fb:93:8b:ff:3a:f6:7a:ea: 25:aa:7e:8e:29:92:be:56:bf:42:0f:1e:fe:4f:14: e3:f9:73:4b:04:60:5b:e2:c2:da:78:ae:5c:fa:0f: cc:09:b5:42:57:60:ce:9e:a6:1b:20:97:0e:b4:2f: 3b:89:7f:e5:26:b7:df:3e:89:61:db:c9:de:27:3f: dd:dc:16:3c:e3:32:c9:0c:85:cd:18:09:9d:0c:3f: f9:9e:bf:3b:d0:78:ad:b1:da:d9:45:df:b3:36:ff: 95:35:72:bd:46:75:1f:03:03:13:29:18:59:ce:d0: f0:86:07:5a:6b:96:78:95:2a:d0:74:9e:88:ba:e6: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:14:2B:1D:11:16:8C:09:9D:11:82:C8:5A:C7:1E:F0:69:25:BA:E6 X509v3 Authority Key Identifier: keyid:D9:7B:C7:1F:C9:BD:A4:19:11:F1:FB:80:AE:EA:24:1C:48:FE:8E:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2XvHH8m9pBkR8fuAruokHEj-jmI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/2XvHH8m9pBkR8fuAruokHEj-jmI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:29:3a:42:5c:5b:4a:85:9c:15:19:d2:aa:e8:b4:b8:a9:e7: 2f:68:fd:1a:5f:47:fc:30:a4:aa:6d:4a:37:64:80:aa:4b:5d: d2:5e:05:dc:e6:35:dd:eb:bb:47:84:1a:fb:9f:64:81:47:e6: 68:be:92:e5:fe:04:09:80:79:ea:be:ea:86:75:c2:d9:e7:fe: ca:5d:46:76:2b:83:43:9d:ae:c4:f8:84:a3:9c:8e:89:01:1b: 9f:07:fe:5e:fb:a6:6a:bf:7d:fd:87:71:2b:7b:78:0b:e6:84: a6:da:6f:9f:a8:47:4e:eb:a3:70:e6:54:f1:81:51:cd:bf:de: ca:28:0f:24:4d:67:3b:1d:e7:9a:a6:fb:91:2f:e9:53:53:ee: 8b:38:c1:47:4f:20:9a:11:4d:2b:48:f0:9c:e4:06:3d:d9:49: ac:1f:e1:66:96:f3:9b:e0:f8:be:2d:26:a7:45:87:8d:3b:41: b6:f7:dd:85:3b:63:e8:4c:d0:42:65:5d:3f:e8:4c:de:cb:01: bf:f9:ef:f8:f2:77:67:e7:69:53:62:25:54:e0:dd:a7:f8:35: 0f:58:53:09:f2:6c:86:94:25:76:c5:ec:f5:19:c4:de:96:6b: ff:a0:46:1e:e2:57:0b:be:8a:03:73:47:ed:6e:da:53:10:b4: ac:54:38:e4 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEOTdC QzcxRkM5QkRBNDE5MTFGMUZCODBBRUVBMjQxQzQ4RkU4RTYyMB4XDTI1MDcxOTE4 MzkwM1oXDTI2MDcxNTA2Mzg1OVowMzExMC8GA1UEAxMoM0QxNDJCMUQxMTE2OEMw OTlEMTE4MkM4NUFDNzFFRjA2OTI1QkFFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALm40JskXivo55Abfm8TY41GLkZWBht9/HUbFNqNtLAVLCZ97ZDV 0AFW9iitHy+dCDnpBM9cnZo7M5uihVG602DJUyc0I2eUM6+zIIu/thvk5YXt4LQU Y/95KK0P3T8B8xhzZH5ifGAC4IMGP6VzyZeTzCDvoxE+hEDb8PxeDfuTi/869nrq Jap+jimSvla/Qg8e/k8U4/lzSwRgW+LC2niuXPoPzAm1Qldgzp6mGyCXDrQvO4l/ 5Sa33z6JYdvJ3ic/3dwWPOMyyQyFzRgJnQw/+Z6/O9B4rbHa2UXfszb/lTVyvUZ1 HwMDEykYWc7Q8IYHWmuWeJUq0HSeiLrmhzMCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQ9FCsdERaMCZ0Rgshaxx7waSW65jAfBgNVHSMEGDAWgBTZe8cfyb2kGRHx+4Cu 6iQcSP6OYjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzgz LzJYdkhIOG05cEJrUjhmdUFydW9rSEVqLWptSS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMlh2SEg4bTlwQmtSOGZ1QXJ1b2tIRWotam1JLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4My8yWHZISDhtOXBCa1I4 ZnVBcnVva0hFai1qbUkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAryk6QlxbSoWcFRnSqui0uKnnL2j9Gl9H/DCkqm1KN2SAqktd0l4F3OY13eu7 R4Qa+59kgUfmaL6S5f4ECYB56r7qhnXC2ef+yl1GdiuDQ52uxPiEo5yOiQEbnwf+ Xvumar99/YdxK3t4C+aEptpvn6hHTuujcOZU8YFRzb/eyigPJE1nOx3nmqb7kS/p U1PuizjBR08gmhFNK0jwnOQGPdlJrB/hZpbzm+D4vi0mp0WHjTtBtvfdhTtj6EzQ QmVdP+hM3ssBv/nv+PJ3Z+dpU2IlVODdp/g1D1hTCfJshpQldsXs9RnE3pZr/6BG HuJXC76KA3NH7W7aUxC0rFQ45A== -----END CERTIFICATE-----Generated at Sat Jul 19 23:07:17 2025 by rpki-client