$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft File: Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft (raw, json) Hash identifier: Q3HicEByXnIG0XTJO0mENAvg59q6SBTXuiIExlJ4SEA= Subject key identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 Authority key identifier: 1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A Certificate issuer: /CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Certificate serial: 1F27 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft Manifest number: 1F27 Signing time: Fri 04 Jul 2025 05:12:44 +0000 Manifest this update: Fri 04 Jul 2025 05:12:44 +0000 Manifest next update: Fri 04 Jul 2025 11:12:44 +0000 Files and hashes: 1: Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl (hash: 2jT14sWXl11cUxgZbYzGjOb96JHVn0LlaDe4bRmbud4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7975 (0x1f27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Validity Not Before: Jul 4 05:12:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DB081190A93335A4E93878C7856B0F9DA70C2A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:29:0c:3c:46:6f:85:b2:e2:b1:63:21:68: 78:37:d6:ca:8c:b0:f4:28:08:6a:2f:b0:56:4c:b8: ab:b8:65:6a:2e:77:ca:96:2d:4f:c4:ec:5e:56:50: 2e:f2:5f:04:cf:cd:18:d3:37:83:04:9e:78:bc:82: 4d:ed:18:62:1f:54:86:e5:f8:9d:d4:b3:c9:c0:15: e2:3b:d2:85:1c:6b:0b:bb:7c:af:4b:a0:9c:61:f2: 0d:dd:13:59:77:88:64:2d:0e:96:ef:3e:77:b3:8b: 14:a2:aa:59:fc:7b:a1:0a:ad:7e:74:a6:d7:d2:8b: 0c:ce:85:db:61:dd:bf:5b:02:a0:26:2c:a1:58:dc: e0:2c:89:65:99:c5:d9:e1:7d:02:12:0f:68:46:19: 29:fe:9b:12:f2:8d:2c:02:45:01:ac:46:59:4e:80: 02:79:18:1c:f6:fc:04:c6:5e:07:56:58:ef:89:cc: 31:5d:f6:93:59:61:8c:b5:9c:ad:ea:74:d4:33:7d: b1:50:db:51:f9:3c:b5:13:d5:30:46:72:77:f3:10: 59:04:89:dd:1b:8a:d2:5c:e2:da:fb:44:59:6d:81: 86:3c:f7:7f:0e:db:6f:83:d4:b2:2d:65:37:da:b5: 21:38:b8:15:9e:a2:69:79:d6:a1:5b:3b:78:c2:00: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 X509v3 Authority Key Identifier: keyid:1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:89:71:cc:72:77:3d:29:01:df:e4:43:b7:8d:de:64:8e:ed: af:e1:72:ce:70:81:9f:fd:34:5e:c7:7d:29:21:91:54:c8:9d: 90:db:38:72:19:1c:37:ae:46:45:8c:d7:39:c1:18:96:7a:ac: 3e:e7:3d:5d:be:a2:bb:75:e2:07:e7:58:fc:14:af:90:40:70: 08:70:09:77:86:bc:4f:ba:fa:4c:67:ab:b1:94:83:c0:68:45: c8:e3:b9:26:bf:17:04:05:41:67:b6:b7:8f:a9:d7:6e:94:82: 76:8d:8a:29:32:56:91:84:51:33:04:2a:db:7b:15:a8:ac:93: bf:cd:d5:cd:4c:8f:39:50:d4:1e:43:97:28:85:66:1a:6f:64: df:5f:be:f9:c1:3c:f8:98:10:82:30:08:d8:01:45:1e:2b:59: eb:61:e5:d0:70:e8:8e:50:ce:9e:bd:0c:85:d7:1c:75:14:06: dd:f5:9e:8b:a7:99:82:17:1d:b9:62:3e:9a:a6:30:d8:a2:ae: 3c:f5:e9:1d:67:da:03:79:4f:bf:41:87:d0:b6:4b:a5:41:4c: 60:b0:04:37:d9:e9:da:d0:c9:52:1d:68:78:27:b7:53:b7:59: ea:4e:75:9b:ef:b8:fc:ae:e8:42:12:15:a0:45:63:3b:6f:a8: 46:28:b7:35 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUEz Q0I3MzI2NzBGRTVDRTVGMkI1QkMxRkE4MTI1RTk1Mzg2MzI3QTAeFw0yNTA3MDQw NTEyNDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERCMDgxMTkwQTkzMzM1 QTRFOTM4NzhDNzg1NkIwRjlEQTcwQzJBNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9sCkMPEZvhbLisWMhaHg31sqMsPQoCGovsFZMuKu4ZWoud8qW LU/E7F5WUC7yXwTPzRjTN4MEnni8gk3tGGIfVIbl+J3Us8nAFeI70oUcawu7fK9L oJxh8g3dE1l3iGQtDpbvPnezixSiqln8e6EKrX50ptfSiwzOhdth3b9bAqAmLKFY 3OAsiWWZxdnhfQISD2hGGSn+mxLyjSwCRQGsRllOgAJ5GBz2/ATGXgdWWO+JzDFd 9pNZYYy1nK3qdNQzfbFQ21H5PLUT1TBGcnfzEFkEid0bitJc4tr7RFltgYY8938O 22+D1LItZTfatSE4uBWeoml51qFbO3jCAPZlAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU2wgRkKkzNaTpOHjHhWsPnacMKlMwHwYDVR0jBBgwFoAUGjy3MmcP5c5fK1vB +oEl6VOGMnowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1 L0dqeTNNbWNQNWM1ZksxdkItb0VsNlZPR01uby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvR2p5M01tY1A1YzVmSzF2Qi1vRWw2Vk9HTW5vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1L0dqeTNNbWNQNWM1Zksx dkItb0VsNlZPR01uby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBziXHMcnc9KQHf5EO3jd5kju2v4XLOcIGf/TRex30pIZFUyJ2Q2zhyGRw3rkZF jNc5wRiWeqw+5z1dvqK7deIH51j8FK+QQHAIcAl3hrxPuvpMZ6uxlIPAaEXI47km vxcEBUFntrePqddulIJ2jYopMlaRhFEzBCrbexWorJO/zdXNTI85UNQeQ5cohWYa b2TfX775wTz4mBCCMAjYAUUeK1nrYeXQcOiOUM6evQyF1xx1FAbd9Z6Lp5mCFx25 Yj6apjDYoq489ekdZ9oDeU+/QYfQtkulQUxgsAQ32ena0MlSHWh4J7dTt1nqTnWb 77j8ruhCEhWgRWM7b6hGKLc1 -----END CERTIFICATE-----Generated at Fri Jul 4 10:54:25 2025 by rpki-client