$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft File: hPLNDLUaQjf34fOuhRnjzCZEi38.mft (raw, json) Hash identifier: WC9HY0UxYk4P/3cwmCPCZlwW3bFOGNpihVxtJWI2Mzo= Subject key identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 Authority key identifier: 84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F Certificate issuer: /CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Certificate serial: 1634 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft Manifest number: 1634 Signing time: Sun 20 Jul 2025 06:44:43 +0000 Manifest this update: Sun 20 Jul 2025 06:44:43 +0000 Manifest next update: Sun 20 Jul 2025 12:44:43 +0000 Files and hashes: 1: hPLNDLUaQjf34fOuhRnjzCZEi38.crl (hash: L78D40u4CfucDoBq8XCs7TotMZUCVIWU5ymyaOF9joE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 12:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5684 (0x1634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Validity Not Before: Jul 20 06:44:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=45D7AFE026C8570C156C22E7C7BB2BA905E91F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:81:29:9b:33:04:d8:e0:06:be:7b:f6:7f: c6:b1:b8:45:75:d2:d8:ba:d8:83:ce:d8:e2:f7:e9: 30:9b:ba:8e:82:1a:4b:6c:f3:c2:11:24:d1:0a:d4: 42:b5:91:00:a8:ff:1c:0d:26:a7:74:21:dc:50:3e: 7b:5c:fe:01:d6:32:15:54:12:e5:08:02:19:4c:c1: b2:04:ad:76:0a:35:04:a3:9d:37:f7:7e:66:a0:9b: b5:08:a5:6d:66:65:97:57:3f:47:8c:03:59:db:55: da:14:e5:84:43:00:91:be:e2:44:b5:cc:a9:30:7f: 5e:e6:25:fb:7d:89:ec:2d:b6:f1:f9:c1:dc:9b:b7: da:d7:81:e5:d9:2e:a9:54:2f:8d:3d:bf:39:b6:e3: a1:b7:4b:85:57:f4:87:ba:79:21:0d:62:9e:60:d0: 9e:fe:a6:8a:c2:04:22:aa:2b:8a:fc:41:dc:c9:48: f5:74:fe:d8:25:73:d3:40:d9:f0:a1:1a:6a:7d:54: f1:04:53:ea:bd:a2:48:4d:a8:3d:ad:bd:d4:1f:7d: 89:3d:51:70:7c:3e:ef:ef:b2:90:86:55:07:37:66: f2:a8:17:9c:1d:93:41:5e:e4:1b:40:84:6a:87:fe: 68:02:df:a0:40:10:47:6d:39:c4:44:ce:53:2d:0e: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 X509v3 Authority Key Identifier: keyid:84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3a:24:5f:1d:82:8f:5b:87:09:b5:69:4e:f8:08:cd:a1:0a: 75:e5:c3:9d:73:eb:e1:3b:f6:e9:01:78:6b:00:8d:11:bb:b7: 5b:ed:ef:ee:a9:62:19:85:9d:10:f6:94:aa:c1:a3:48:b7:20: d7:69:a3:1d:53:c7:1f:fa:77:58:a4:20:71:cd:b7:f4:17:45: 64:e2:6c:10:e5:55:2b:5b:a1:c5:05:76:68:e4:96:49:5f:46: b3:4b:49:1d:20:a6:00:ab:0b:4e:5c:b8:85:f0:47:d0:7f:e1: 25:8f:65:52:71:b9:d0:2b:10:f6:52:7c:91:22:2c:34:93:8d: ce:02:7e:c1:14:e0:f8:a5:40:a2:18:c5:96:a3:34:bb:71:de: 2b:37:98:0a:ca:27:57:6a:af:11:48:2a:c6:88:f9:ba:95:59: 62:78:e6:53:4c:65:bd:c7:fd:fb:df:79:7a:e6:b2:d0:c1:1f: 14:3d:16:3c:74:c6:7c:74:ab:6f:52:f2:1e:d3:f4:77:15:63: 3e:20:73:1b:da:7c:b7:52:06:60:b3:24:7b:94:9e:1c:a7:c8: df:d0:ca:4a:0b:18:49:c4:aa:f4:3c:3d:49:19:bf:4a:b4:8d: 9c:1f:dc:9c:39:42:2e:22:81:4d:4a:80:c2:e7:50:34:81:db: 16:a5:22:6a -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRG MkNEMENCNTFBNDIzN0Y3RTFGM0FFODUxOUUzQ0MyNjQ0OEI3RjAeFw0yNTA3MjAw NjQ0NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ1RDdBRkUwMjZDODU3 MEMxNTZDMjJFN0M3QkIyQkE5MDVFOTFGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+ZIEpmzME2OAGvnv2f8axuEV10ti62IPO2OL36TCbuo6CGkts 88IRJNEK1EK1kQCo/xwNJqd0IdxQPntc/gHWMhVUEuUIAhlMwbIErXYKNQSjnTf3 fmagm7UIpW1mZZdXP0eMA1nbVdoU5YRDAJG+4kS1zKkwf17mJft9iewttvH5wdyb t9rXgeXZLqlUL409vzm246G3S4VX9Ie6eSENYp5g0J7+porCBCKqK4r8QdzJSPV0 /tglc9NA2fChGmp9VPEEU+q9okhNqD2tvdQffYk9UXB8Pu/vspCGVQc3ZvKoF5wd k0Fe5BtAhGqH/mgC36BAEEdtOcREzlMtDsjJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURdev4CbIVwwVbCLnx7srqQXpHxQwHwYDVR0jBBgwFoAUhPLNDLUaQjf34fOu hRnjzCZEi38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1 L2hQTE5ETFVhUWpmMzRmT3VoUm5qekNaRWkzOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFBMTkRMVWFRamYzNGZPdWhSbmp6Q1pFaTM4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1L2hQTE5ETFVhUWpmMzRm T3VoUm5qekNaRWkzOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqOiRfHYKPW4cJtWlO+AjNoQp15cOdc+vhO/bpAXhrAI0Ru7db7e/uqWIZhZ0Q 9pSqwaNItyDXaaMdU8cf+ndYpCBxzbf0F0Vk4mwQ5VUrW6HFBXZo5JZJX0azS0kd IKYAqwtOXLiF8EfQf+Elj2VScbnQKxD2UnyRIiw0k43OAn7BFOD4pUCiGMWWozS7 cd4rN5gKyidXaq8RSCrGiPm6lVlieOZTTGW9x/3733l65rLQwR8UPRY8dMZ8dKtv UvIe0/R3FWM+IHMb2ny3UgZgsyR7lJ4cp8jf0MpKCxhJxKr0PD1JGb9KtI2cH9yc OUIuIoFNSoDC51A0gdsWpSJq -----END CERTIFICATE-----Generated at Sun Jul 20 12:42:18 2025 by rpki-client