$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft File: YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft (raw, json) Hash identifier: NkDrYgHG4FW6SvEaCeLOjgYNaP3rM8jtxs1ZyI56lcg= Subject key identifier: ED:23:7B:79:59:A2:7F:5B:DF:B8:CE:97:8E:E2:B5:50:34:03:80:39 Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E Certificate issuer: /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Certificate serial: 1720 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft Manifest number: 1718 Signing time: Sun 20 Jul 2025 07:40:39 +0000 Manifest this update: Sun 20 Jul 2025 07:40:39 +0000 Manifest next update: Sun 20 Jul 2025 13:40:39 +0000 Files and hashes: 1: KtkKTWtPNj5wHFjwBkJUsLLPtIY.roa (hash: VueTaTS6ACWPKbz+D/qnweeOLK3EFD2lyW+Z38+Z/7Q=) 2: YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl (hash: 0aSdtOJL8Ksf1qvRBn3RhlDGzehXA/bGTblZfkUHJzc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5920 (0x1720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Validity Not Before: Jul 20 07:40:39 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=ED237B7959A27F5BDFB8CE978EE2B55034038039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:a0:22:5a:c4:f8:55:eb:26:40:78:97:1a: 25:53:eb:52:1f:70:45:64:cd:44:4d:14:15:83:e3: 8b:d3:48:e9:a9:e1:dd:2c:7b:d5:ae:6e:2f:9d:09: 4c:45:f1:7f:45:fd:89:62:a4:11:52:c5:cc:87:28: f6:50:9a:a8:67:87:90:c5:11:d7:05:b2:49:4f:cd: 70:52:63:4b:d3:88:b6:71:56:18:0d:eb:2b:ad:62: 49:00:2e:95:8d:99:37:16:bd:fb:71:ad:db:f4:0b: ca:80:ae:7e:15:0e:82:b5:0d:f9:ce:e2:3d:81:aa: a1:f4:10:f1:b9:2b:1c:cd:bc:a0:22:6a:65:2a:66: 82:86:09:85:2c:83:3d:a4:ce:57:49:c4:26:5e:25: dc:13:c9:08:6d:af:c8:6a:e5:41:55:57:1e:32:c2: 47:db:5b:1d:36:f4:8a:90:5f:86:b6:63:44:60:cd: 4f:5e:3a:00:6b:c3:8c:8d:98:5a:ae:5b:ad:82:6d: b2:99:32:3e:04:28:4a:d9:0c:3f:97:c2:0d:43:9e: 61:dc:c6:c0:71:82:5a:d7:b1:bc:6f:a1:46:08:b5: b1:c8:06:f9:1f:6c:48:32:d2:0b:d7:1b:96:39:62: 91:70:8b:00:10:2d:0e:e9:de:de:b1:e7:a0:b9:8b: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:23:7B:79:59:A2:7F:5B:DF:B8:CE:97:8E:E2:B5:50:34:03:80:39 X509v3 Authority Key Identifier: keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:93:0a:eb:91:06:16:46:2f:4d:80:40:e7:26:b7:19:53:94: cc:f5:df:4e:c2:8b:55:0a:09:f6:d2:5d:a3:49:5b:82:8f:40: 2c:a7:15:9a:6c:8f:56:c3:41:cb:f1:d2:f4:f4:a7:88:28:4c: 74:c3:c8:d6:02:3b:37:56:e5:57:05:e4:60:6d:1f:db:c5:0d: 2c:62:dd:3b:ab:c7:47:07:1b:84:d4:43:cf:1d:13:08:ee:d9: e6:38:ee:b3:aa:fe:aa:99:d0:a7:9a:8a:6a:81:d8:8e:5a:36: b7:66:ff:b2:28:16:14:2b:c7:7c:ce:bb:98:f8:f2:1c:48:eb: 01:ab:14:18:01:90:6f:db:1c:5e:b9:19:db:77:0f:29:67:5d: a4:94:d3:92:63:8b:94:09:9b:74:ac:5b:f9:16:49:95:62:7b: 25:0b:62:00:d1:38:0c:c7:b4:8e:8d:f7:18:a9:2b:34:3f:28: da:da:c6:a7:4f:19:f9:dd:7a:9e:2f:9b:5f:28:0a:cc:29:01: 99:68:9a:4b:05:87:0d:7a:1a:21:54:c0:8a:e6:27:39:71:f5: 8d:fc:c0:f6:a8:80:a4:2e:4e:ce:46:df:d9:73:a5:a1:d4:f3: d8:34:70:ab:c7:30:9f:82:9c:cb:f7:44:71:bc:63:cb:1c:9f: e9:9b:45:f2 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 QkNFOEY3RjhBODNEQjkzOUFFMEY0MkZBMDU0MTNCMjg1MTgxRTAeFw0yNTA3MjAw NzQwMzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVEMjM3Qjc5NTlBMjdG NUJERkI4Q0U5NzhFRTJCNTUwMzQwMzgwMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSbqAiWsT4VesmQHiXGiVT61IfcEVkzURNFBWD44vTSOmp4d0s e9Wubi+dCUxF8X9F/YlipBFSxcyHKPZQmqhnh5DFEdcFsklPzXBSY0vTiLZxVhgN 6yutYkkALpWNmTcWvftxrdv0C8qArn4VDoK1DfnO4j2BqqH0EPG5KxzNvKAiamUq ZoKGCYUsgz2kzldJxCZeJdwTyQhtr8hq5UFVVx4ywkfbWx029IqQX4a2Y0RgzU9e OgBrw4yNmFquW62CbbKZMj4EKErZDD+Xwg1DnmHcxsBxglrXsbxvoUYItbHIBvkf bEgy0gvXG5Y5YpFwiwAQLQ7p3t6x56C5izFbAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU7SN7eVmif1vfuM6XjuK1UDQDgDkwHwYDVR0jBBgwFoAUYVvOj3+Kg9uTmuD0 L6BUE7KFGB4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYx L1lWdk9qMy1LZzl1VG11RDBMNkJVRTdLRkdCNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWVZ2T2ozLUtnOXVUbXVEMEw2QlVFN0tGR0I0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYxL1lWdk9qMy1LZzl1VG11 RDBMNkJVRTdLRkdCNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBYkwrrkQYWRi9NgEDnJrcZU5TM9d9OwotVCgn20l2jSVuCj0AspxWabI9Ww0HL 8dL09KeIKEx0w8jWAjs3VuVXBeRgbR/bxQ0sYt07q8dHBxuE1EPPHRMI7tnmOO6z qv6qmdCnmopqgdiOWja3Zv+yKBYUK8d8zruY+PIcSOsBqxQYAZBv2xxeuRnbdw8p Z12klNOSY4uUCZt0rFv5FkmVYnslC2IA0TgMx7SOjfcYqSs0Pyja2sanTxn53Xqe L5tfKArMKQGZaJpLBYcNehohVMCK5ic5cfWN/MD2qICkLk7ORt/Zc6Wh1PPYNHCr xzCfgpzL90RxvGPLHJ/pm0Xy -----END CERTIFICATE-----Generated at Sun Jul 20 12:55:37 2025 by rpki-client