$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json) Hash identifier: s471R1bLoBm5znwe+3tmrjw4/pFOV9TzwCO1LVJooi0= Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985 Certificate serial: 098D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft Manifest number: 097F Signing time: Fri 04 Jul 2025 15:14:59 +0000 Manifest this update: Fri 04 Jul 2025 15:14:59 +0000 Manifest next update: Fri 04 Jul 2025 21:14:59 +0000 Files and hashes: 1: NeekGFR5NIVtajaJ5HdjX8R8fNo.roa (hash: AQAjAJlgu+LEfO1yH586ESbhoVxFXl/P5tNzJvUMOEY=) 2: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: olzHrs25nV3YJoSHwuYwLldNhKqAMHQS1jk21dXoT9U=) 3: yDAVP8H_i8ah3EyHDhnWJS6tjLU.roa (hash: CIzjhzifWM6nzfG8hoac4C+5WTIAXYEvq69J+GVoSuE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 21:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2445 (0x98d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985 Validity Not Before: Jul 4 15:14:59 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39: 6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29: 57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f: b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc: 69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4: a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90: c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de: 7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72: bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7: 32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3: 88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f: 13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad: 74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94: 5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c: 91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a: 00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15: a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B X509v3 Authority Key Identifier: keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:8f:65:1b:96:60:0b:76:84:25:ad:66:e8:fb:71:b2:30:8d: 5e:ac:d2:6a:9f:d0:f6:40:a4:43:a1:98:c7:ea:e0:af:23:09: 2f:db:0f:1b:43:11:8a:1b:c2:6d:92:07:0b:5c:51:20:d7:44: 38:67:ad:ae:12:fc:4f:c3:da:f4:83:50:77:79:ba:09:21:db: 4c:bc:71:82:ee:e4:97:46:fb:0d:0c:f5:8c:a7:85:f3:5d:a1: c2:13:67:2d:72:7f:95:c4:47:b4:5f:e5:56:10:ec:12:d4:70: a8:4b:8c:f6:25:7a:33:b2:37:ab:61:ab:6d:32:52:46:68:b4: b5:27:f0:50:30:c3:44:fa:89:c7:7c:2e:9f:bd:7b:d7:1d:16: 2b:db:5e:80:4c:2b:d9:02:1f:df:27:ca:e0:aa:78:da:24:01: e0:ac:fb:67:45:4f:64:8f:43:45:ae:2e:c9:db:89:f1:f1:3d: f7:99:3a:36:eb:f3:c1:67:3a:81:39:73:1c:f5:47:67:d4:54: 31:c8:6a:df:f1:3a:a1:bf:eb:c3:51:2d:c4:a8:ff:51:ed:31: a6:a3:5c:71:45:ad:1d:2c:e5:ad:49:0c:de:24:de:18:b7:3f: 15:2c:32:ad:b0:06:a5:4d:b0:f8:88:5f:6b:dc:5c:8f:1c:0f: 12:c5:35:fd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEUy NTkzNEZFOEQ4OTk1OTQyNUQxMDE4RUIxMjE5ODFEQTI1MDk4NTAeFw0yNTA3MDQx NTE0NTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEE0QjJCODg5NTFBODQy OEZFNzM0QzAxMjNFQjREOUY5OUI1RTlCM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDICvL5gGfdurRC8af6OW9wV6RY5UjADwR39mmwKVdqZ/w5JcbH LkR8bditT7G/zWPJlBqBkwMIqosYzGn7SHH2bR9pLrNdLkrJ5KhxlAL71B0r8pCw 8t/pkMYoE9oJX5AF1vKAjBda3nsONc7r46x4ENZE8bHscrxC3YoyeZ2auCuMxf/X pzL/0KI1LP8mQmK3QjNjs4gi4PI8de52SsRt7yDUnxNZcba7ZTV3/EhTZubXrXTH lGX2gQa29tcll/xFlFwWwB7rAGOtT7vnuNOLXJEYJE9Wk1lvNb9sORAmGgDqets+ H51tmgr9XHB2FaKjmFd5zcPgve9hbzjB9LXTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUpLK4iVGoQo/nNMASPrTZ+ZtemzswHwYDVR0jBBgwFoAUTiWTT+jYmVlCXRAY 6xIZgdolCYUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA0 OC9UaVdUVC1qWW1WbENYUkFZNnhJWmdkb2xDWVUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RpV1RULWpZbVZsQ1hSQVk2eElaZ2RvbENZVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNDgvVGlXVFQtalltVmxD WFJBWTZ4SVpnZG9sQ1lVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKuPZRuWYAt2hCWtZuj7cbIwjV6s0mqf0PZApEOhmMfq4K8jCS/bDxtDEYob wm2SBwtcUSDXRDhnra4S/E/D2vSDUHd5ugkh20y8cYLu5JdG+w0M9YynhfNdocIT Zy1yf5XER7Rf5VYQ7BLUcKhLjPYlejOyN6thq20yUkZotLUn8FAww0T6icd8Lp+9 e9cdFivbXoBMK9kCH98nyuCqeNokAeCs+2dFT2SPQ0WuLsnbifHxPfeZOjbr88Fn OoE5cxz1R2fUVDHIat/xOqG/68NRLcSo/1HtMaajXHFFrR0s5a1JDN4k3hi3PxUs Mq2wBqVNsPiIX2vcXI8cDxLFNf0= -----END CERTIFICATE-----Generated at Fri Jul 4 19:32:17 2025 by rpki-client