$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft File: XSMqeS0E-zeXTqWu-6sefwyOAhM.mft (raw, json) Hash identifier: D2tTIMNeip5/ymBXkM5A8b0DNkbXXB6VmIEhXTXwoao= Subject key identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A Authority key identifier: 5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 Certificate issuer: /CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Certificate serial: 15DC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft Manifest number: 15DC Signing time: Sat 05 Jul 2025 00:45:52 +0000 Manifest this update: Sat 05 Jul 2025 00:45:52 +0000 Manifest next update: Sat 05 Jul 2025 06:45:52 +0000 Files and hashes: 1: XSMqeS0E-zeXTqWu-6sefwyOAhM.crl (hash: m9AaoI5LE8TQJX80g+BtkTU0Z0MByVF9IBwni1lVG9Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 06:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5596 (0x15dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Validity Not Before: Jul 5 00:45:52 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=06E2B852F326A714D630B7C7935E37BC5C65664A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:fa:bb:af:be:84:b6:9c:3f:4a:be:50:e5: fc:08:5b:ff:b1:fb:ee:f3:d9:06:8c:bb:b0:6a:db: 8a:52:2f:92:60:39:6a:77:ce:f7:16:41:e6:fb:ea: 7e:a9:2a:dd:c3:91:53:26:3e:62:d2:0e:a3:23:e4: f2:3f:6d:ff:3b:51:42:c1:ea:d6:d7:02:86:c7:cc: 9e:e2:a0:c0:bc:e0:56:e7:27:81:e0:53:81:41:ab: 0e:aa:e6:9d:25:1a:d1:c8:16:96:78:33:f4:a9:fb: 38:4c:a5:fd:2d:ef:63:d6:48:8b:eb:37:7a:77:ae: e3:2f:20:d3:c2:79:1d:16:7b:9b:5d:80:79:01:ea: 5c:18:6f:ce:e4:ff:04:f8:aa:d1:77:e8:15:d6:86: 04:5b:09:02:50:ba:68:31:36:b3:ce:62:17:8a:c4: 37:b2:84:bc:6a:c4:eb:ea:9c:5c:08:0a:5f:a3:4c: da:2d:29:fe:6b:13:23:b4:54:c1:8d:58:fb:d2:d9: 00:78:bf:9d:fc:89:31:a6:e8:67:b3:74:e9:67:54: 7d:66:b6:cb:a1:2d:19:c5:34:72:67:a5:04:ae:ca: 5e:1a:c2:da:e4:6b:7e:47:e1:d0:ed:94:5b:cd:f2: 89:ad:b5:96:d7:56:b9:b7:99:20:92:ad:49:fc:84: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A X509v3 Authority Key Identifier: keyid:5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:da:16:f6:a5:9c:ec:49:4e:f7:1e:a0:55:ed:92:73:c5:24: 1f:df:5e:28:ef:b2:99:f8:a5:a5:23:28:8c:94:53:cc:ef:3f: 73:42:4a:48:8c:da:3d:5a:96:8e:31:ca:45:4f:23:18:fc:73: 63:68:0f:41:9c:1e:1f:bd:1e:a7:29:79:0d:ca:5b:5c:2a:32: bb:f6:80:7e:e3:0f:99:13:fb:4a:b5:10:56:b4:ed:4a:ed:6e: 98:fd:9e:1a:59:88:cd:fb:dd:56:67:4e:01:4c:24:38:b3:93: 5c:96:90:e1:98:d3:97:f5:aa:3c:27:52:20:7b:a8:16:85:7f: ea:4f:95:b5:6d:9c:2c:86:39:2c:7f:e8:47:3b:a3:fd:c5:e8: c2:34:61:14:a7:3e:2e:09:b1:a7:7b:2b:31:07:1d:fc:fe:dc: 38:60:23:e1:ee:e2:e7:d4:56:5d:e1:dc:c7:5b:90:5b:bf:7e: aa:d6:11:78:8b:7f:73:bd:40:9c:2c:2b:ef:e8:b8:3c:13:99: ad:65:42:9e:48:df:6f:ed:7a:ca:0e:aa:7a:36:df:fd:af:f1: be:fd:fc:57:08:e4:54:ae:ad:fb:a9:9d:37:33:ec:65:01:2d: a5:bf:9e:b0:e3:52:33:54:04:92:51:61:80:9b:6a:ec:bf:34: d4:60:b9:53 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQy MzJBNzkyRDA0RkIzNzk3NEVBNUFFRkJBQjFFN0YwQzhFMDIxMzAeFw0yNTA3MDUw MDQ1NTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA2RTJCODUyRjMyNkE3 MTRENjMwQjdDNzkzNUUzN0JDNUM2NTY2NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIo/q7r76Etpw/Sr5Q5fwIW/+x++7z2QaMu7Bq24pSL5JgOWp3 zvcWQeb76n6pKt3DkVMmPmLSDqMj5PI/bf87UULB6tbXAobHzJ7ioMC84FbnJ4Hg U4FBqw6q5p0lGtHIFpZ4M/Sp+zhMpf0t72PWSIvrN3p3ruMvINPCeR0We5tdgHkB 6lwYb87k/wT4qtF36BXWhgRbCQJQumgxNrPOYheKxDeyhLxqxOvqnFwICl+jTNot Kf5rEyO0VMGNWPvS2QB4v538iTGm6GezdOlnVH1mtsuhLRnFNHJnpQSuyl4awtrk a35H4dDtlFvN8omttZbXVrm3mSCSrUn8hPKrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUBuK4UvMmpxTWMLfHk143vFxlZkowHwYDVR0jBBgwFoAUXSMqeS0E+zeXTqWu +6sefwyOAhMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU1 Ni9YU01xZVMwRS16ZVhUcVd1LTZzZWZ3eU9BaE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1hTTXFlUzBFLXplWFRxV3UtNnNlZnd5T0FoTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NTYvWFNNcWVTMEUtemVY VHFXdS02c2Vmd3lPQWhNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH7aFvalnOxJTvceoFXtknPFJB/fXijvspn4paUjKIyUU8zvP3NCSkiM2j1a lo4xykVPIxj8c2NoD0GcHh+9HqcpeQ3KW1wqMrv2gH7jD5kT+0q1EFa07Urtbpj9 nhpZiM373VZnTgFMJDizk1yWkOGY05f1qjwnUiB7qBaFf+pPlbVtnCyGOSx/6Ec7 o/3F6MI0YRSnPi4Jsad7KzEHHfz+3DhgI+Hu4ufUVl3h3MdbkFu/fqrWEXiLf3O9 QJwsK+/ouDwTma1lQp5I32/tesoOqno23/2v8b79/FcI5FSurfupnTcz7GUBLaW/ nrDjUjNUBJJRYYCbauy/NNRguVM= -----END CERTIFICATE-----Generated at Sat Jul 5 03:52:24 2025 by rpki-client