$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft File: 7JfpAsM6EGVBKiW96FhrxCFuOWI.mft (raw, json) Hash identifier: 05HWQsI898GGVGhMtERugno5iZlTbO9ReeA/W7HJX3g= Subject key identifier: 63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA Authority key identifier: EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62 Certificate issuer: /CN=EC97E902C33A1065412A25BDE8586BC4216E3962 Certificate serial: 1E19 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft Manifest number: 1E19 Signing time: Sat 17 May 2025 17:43:18 +0000 Manifest this update: Sat 17 May 2025 17:43:18 +0000 Manifest next update: Sat 17 May 2025 23:43:18 +0000 Files and hashes: 1: 7JfpAsM6EGVBKiW96FhrxCFuOWI.crl (hash: eyaVzuQ5odz/AWE4QX68DW6o6xmzieK1kHkTpdG9BhY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7705 (0x1e19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC97E902C33A1065412A25BDE8586BC4216E3962 Validity Not Before: May 17 17:43:18 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=638B1FB2B0BC8DC785A1671871613554C07EF8EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:20:45:39:7a:52:f6:52:e2:42:7e:07:38: 42:f0:e3:50:25:dd:4c:90:03:c5:0a:86:eb:b5:3e: 0f:64:5e:f2:01:28:8c:79:da:4e:36:e1:e5:07:f7: da:ba:7b:b3:0e:85:16:95:44:d9:f6:91:ef:6b:1e: f6:4a:88:d6:5b:f9:f4:8d:d3:dc:02:51:15:c6:a7: 39:83:47:d2:6e:86:d8:56:03:43:d2:e9:4b:4c:c5: 64:92:4c:56:e4:3d:5a:25:e4:71:12:41:e9:fc:ba: 75:6c:b6:ca:e5:fa:22:23:e9:62:a6:40:c1:44:de: 0d:64:d6:fd:c6:4d:20:dc:60:8c:fb:d4:ba:d4:be: 34:e1:20:dd:73:47:8e:ca:14:30:01:d5:ed:af:0f: b4:4f:e7:26:c3:b5:ad:b3:45:8b:f6:94:47:ec:5f: 52:d1:0f:72:61:56:40:94:a2:a2:70:aa:3b:ba:3b: 4a:33:79:0f:47:fe:56:6a:e4:aa:d3:25:94:34:24: 81:19:67:dc:27:f7:01:b3:0d:9b:0e:db:9f:7b:7a: 04:be:27:99:d7:eb:c1:a4:0c:4e:81:84:72:50:d5: 80:23:cc:08:32:57:d6:9e:ef:0f:e8:5a:90:06:43: 2a:9f:cc:77:d0:41:98:d1:52:9c:6b:35:59:93:02: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA X509v3 Authority Key Identifier: keyid:EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:1e:ad:30:bf:49:c8:55:ac:e1:f1:58:6b:fe:d6:68:60:6e: 77:97:08:f0:19:97:7d:2f:8a:27:ae:8b:80:b4:cc:27:d5:84: 62:59:1c:53:8d:e0:f4:e9:c5:3a:0b:a7:13:b2:02:d2:f9:d4: 03:d6:6e:5f:2f:56:21:43:49:45:7b:e3:81:a8:cb:ec:82:89: 74:13:2b:29:f8:e4:e9:44:6e:3e:71:b0:67:e2:7f:bd:f9:f6: 56:38:a8:f1:2c:f2:96:81:30:ad:75:4c:ab:00:1d:37:5e:c0: 54:a3:58:30:c0:f5:da:c0:7d:0c:3e:f4:1a:14:f9:4f:ef:d8: e3:8d:65:98:4f:c5:33:dc:23:04:8b:40:27:71:3f:cc:0d:6e: bd:fb:0e:d9:2c:81:a9:f8:54:10:71:2e:16:01:ed:f2:d6:48: 04:29:69:ef:0c:1e:94:6f:0b:e7:60:22:7f:0a:72:8a:d1:b6: 40:93:52:d0:6a:14:fd:81:0e:e6:f5:98:d0:ba:36:54:4e:fb: 9c:43:d2:39:85:ec:7b:22:c3:28:67:59:ea:df:a4:89:7f:8a: 02:6d:85:ae:dc:95:a2:90:f9:15:03:11:a3:25:38:b1:90:93: 85:97:f7:9a:64:9e:5a:62:a3:56:ce:d4:b1:bc:35:dc:29:b3: 7b:b7:75:68 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUM5 N0U5MDJDMzNBMTA2NTQxMkEyNUJERTg1ODZCQzQyMTZFMzk2MjAeFw0yNTA1MTcx NzQzMThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYzOEIxRkIyQjBCQzhE Qzc4NUExNjcxODcxNjEzNTU0QzA3RUY4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFRCBFOXpS9lLiQn4HOELw41Al3UyQA8UKhuu1Pg9kXvIBKIx5 2k424eUH99q6e7MOhRaVRNn2ke9rHvZKiNZb+fSN09wCURXGpzmDR9JuhthWA0PS 6UtMxWSSTFbkPVol5HESQen8unVstsrl+iIj6WKmQMFE3g1k1v3GTSDcYIz71LrU vjThIN1zR47KFDAB1e2vD7RP5ybDta2zRYv2lEfsX1LRD3JhVkCUoqJwqju6O0oz eQ9H/lZq5KrTJZQ0JIEZZ9wn9wGzDZsO2597egS+J5nX68GkDE6BhHJQ1YAjzAgy V9ae7w/oWpAGQyqfzHfQQZjRUpxrNVmTAo6TAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUY4sfsrC8jceFoWcYcWE1VMB++OowHwYDVR0jBBgwFoAU7JfpAsM6EGVBKiW9 6FhrxCFuOWIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTEw OS83SmZwQXNNNkVHVkJLaVc5NkZocnhDRnVPV0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdKZnBBc002RUdWQktpVzk2RmhyeENGdU9XSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzExMDkvN0pmcEFzTTZFR1ZC S2lXOTZGaHJ4Q0Z1T1dJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKQerTC/SchVrOHxWGv+1mhgbneXCPAZl30viieui4C0zCfVhGJZHFON4PTp xToLpxOyAtL51APWbl8vViFDSUV744Goy+yCiXQTKyn45OlEbj5xsGfif7359lY4 qPEs8paBMK11TKsAHTdewFSjWDDA9drAfQw+9BoU+U/v2OONZZhPxTPcIwSLQCdx P8wNbr37Dtksgan4VBBxLhYB7fLWSAQpae8MHpRvC+dgIn8KcorRtkCTUtBqFP2B Dub1mNC6NlRO+5xD0jmF7HsiwyhnWerfpIl/igJtha7claKQ+RUDEaMlOLGQk4WX 95pknlpio1bO1LG8Ndwps3u3dWg= -----END CERTIFICATE-----Generated at Sat May 17 22:38:17 2025 by rpki-client