$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft File: cWgV4hPhAadE_JLy-1sSReSx0m8.mft (raw, json) Hash identifier: KgJOMcqVKvlc/z/R5kbBITWuuAyqE0cBwYPk32holkg= Subject key identifier: 6A:90:33:A4:80:17:51:A3:A5:82:D7:9D:A3:E3:DB:9F:BA:68:C2:14 Authority key identifier: 71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F Certificate issuer: /CN=716815E213E101A744FC92F2FB5B1245E4B1D26F Certificate serial: 15D5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft Manifest number: 15D5 Signing time: Fri 04 Jul 2025 15:16:58 +0000 Manifest this update: Fri 04 Jul 2025 15:16:58 +0000 Manifest next update: Fri 04 Jul 2025 21:16:58 +0000 Files and hashes: 1: cWgV4hPhAadE_JLy-1sSReSx0m8.crl (hash: vjjKM3empzBl56W5wmROJU2ZdHPZGETMu+1/OE8NAVU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 21:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5589 (0x15d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716815E213E101A744FC92F2FB5B1245E4B1D26F Validity Not Before: Jul 4 15:16:58 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6A9033A4801751A3A582D79DA3E3DB9FBA68C214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:c6:ff:5d:0c:7e:5f:74:a7:23:4e:af:3e: 50:55:5d:39:60:5c:ce:68:a9:c7:15:33:25:20:e3: 96:b8:ff:9c:6b:57:45:6d:f5:51:ce:d8:d5:1c:9e: 19:e1:c8:bc:5d:ba:1d:81:e3:7a:8b:13:a7:c1:79: 20:06:89:58:29:bf:a5:74:b2:a0:b7:20:0f:95:b7: 4c:51:2b:b4:7a:a9:7e:6a:46:27:57:84:b3:e2:14: 9c:e2:b4:d7:03:f3:4d:0b:56:fd:c3:0d:3a:ae:c3: 07:34:d9:12:9e:5d:b3:3b:75:c7:1f:e3:b6:c2:62: fd:29:8c:b1:dd:44:8c:e1:86:c0:41:d7:38:87:d3: 82:d7:fc:9b:77:6f:b8:ea:64:79:25:f4:08:e1:ee: 82:07:d0:23:8b:27:63:df:10:60:71:4a:8b:df:48: bb:08:5a:35:b8:02:d8:f0:d0:cd:da:c9:78:2d:92: ea:cc:c8:93:21:1c:83:5f:53:3b:79:7e:41:2a:54: d1:6b:b0:87:1b:5b:73:d3:2c:de:00:da:00:fe:46: 04:be:87:e5:14:2d:04:ba:d9:50:6d:56:1e:d7:47: d5:b7:60:de:f4:c6:03:d7:be:2e:f7:19:cf:1a:82: c3:fe:02:a1:19:01:fe:3e:c1:25:14:33:c9:2b:90: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:90:33:A4:80:17:51:A3:A5:82:D7:9D:A3:E3:DB:9F:BA:68:C2:14 X509v3 Authority Key Identifier: keyid:71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a1:4c:56:83:bd:e5:8a:ac:e4:7b:2d:f4:8c:be:48:22:b7: cb:5b:13:39:b1:a9:65:87:ce:94:50:47:67:ab:9b:4d:a0:f5: 3e:d4:dd:ad:96:c8:d1:4c:ee:6e:b3:6b:9b:f0:b1:56:6b:a6: 34:c0:68:0a:78:c3:c8:87:1a:d5:7e:b7:09:1a:b2:82:32:cc: 64:bb:1c:25:90:84:b4:44:15:92:6c:64:49:84:59:80:a7:f7: 48:31:2e:eb:93:07:de:62:29:57:fd:be:0f:6c:db:03:ca:12: 19:d1:0a:9b:8c:9a:24:d5:86:2b:8e:76:6a:da:18:50:ec:a6: 4f:88:b1:a5:f3:83:aa:f2:5f:cf:0b:49:08:d8:49:5d:b9:77: 11:37:2c:d7:97:42:ae:7d:42:6e:a8:69:5d:3f:00:cd:37:bf: 61:11:9d:7a:12:89:50:1d:3d:d2:1f:ff:88:69:25:ad:f9:1a: 2e:1d:f2:52:99:0a:3e:46:ab:0a:a5:eb:06:d4:36:58:56:7a: 47:ed:78:18:d3:99:e4:42:9f:51:25:f5:99:29:82:b3:43:1c: 54:c7:ea:d9:5a:da:ba:97:04:67:8c:71:09:3f:44:3f:91:a7: 42:55:ef:4d:cf:56:47:06:5d:f1:b3:b0:8c:b3:9e:c1:49:6d: af:7f:9f:98 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzE2 ODE1RTIxM0UxMDFBNzQ0RkM5MkYyRkI1QjEyNDVFNEIxRDI2RjAeFw0yNTA3MDQx NTE2NThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZBOTAzM0E0ODAxNzUx QTNBNTgyRDc5REEzRTNEQjlGQkE2OEMyMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCypsb/XQx+X3SnI06vPlBVXTlgXM5oqccVMyUg45a4/5xrV0Vt 9VHO2NUcnhnhyLxduh2B43qLE6fBeSAGiVgpv6V0sqC3IA+Vt0xRK7R6qX5qRidX hLPiFJzitNcD800LVv3DDTquwwc02RKeXbM7dccf47bCYv0pjLHdRIzhhsBB1ziH 04LX/Jt3b7jqZHkl9Ajh7oIH0COLJ2PfEGBxSovfSLsIWjW4Atjw0M3ayXgtkurM yJMhHINfUzt5fkEqVNFrsIcbW3PTLN4A2gD+RgS+h+UULQS62VBtVh7XR9W3YN70 xgPXvi73Gc8agsP+AqEZAf4+wSUUM8krkCgpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUapAzpIAXUaOlgtedo+Pbn7powhQwHwYDVR0jBBgwFoAUcWgV4hPhAadE/JLy +1sSReSx0m8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU5 MC9jV2dWNGhQaEFhZEVfSkx5LTFzU1JlU3gwbTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NXZ1Y0aFBoQWFkRV9KTHktMXNTUmVTeDBtOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1OTAvY1dnVjRoUGhBYWRF X0pMeS0xc1NSZVN4MG04Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIGhTFaDveWKrOR7LfSMvkgit8tbEzmxqWWHzpRQR2erm02g9T7U3a2WyNFM 7m6za5vwsVZrpjTAaAp4w8iHGtV+twkasoIyzGS7HCWQhLREFZJsZEmEWYCn90gx LuuTB95iKVf9vg9s2wPKEhnRCpuMmiTVhiuOdmraGFDspk+IsaXzg6ryX88LSQjY SV25dxE3LNeXQq59Qm6oaV0/AM03v2ERnXoSiVAdPdIf/4hpJa35Gi4d8lKZCj5G qwql6wbUNlhWekfteBjTmeRCn1El9ZkpgrNDHFTH6tla2rqXBGeMcQk/RD+Rp0JV 703PVkcGXfGzsIyznsFJba9/n5g= -----END CERTIFICATE-----Generated at Fri Jul 4 19:22:06 2025 by rpki-client