$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft File: dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft (raw, json) Hash identifier: NADjGckm/IpGH1Wz2+21aq3fpAXwkATbXVcDW+iieZ4= Subject key identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 Certificate issuer: /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Certificate serial: 1F1A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft Manifest number: 1F15 Signing time: Fri 04 Jul 2025 13:41:51 +0000 Manifest this update: Fri 04 Jul 2025 13:41:51 +0000 Manifest next update: Fri 04 Jul 2025 19:41:51 +0000 Files and hashes: 1: Chccgovtr4Jxu9Y1IiEwZLNPEww.roa (hash: 4ivezYEeXqevm8aBYlTI2iZFxUZ10Xr3aU92Qwnct7Y=) 2: dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl (hash: HdXRRJHWNniCdDotssosl4o46N2BsyAgtngiUKdU65g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7962 (0x1f1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Validity Not Before: Jul 4 13:41:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=83288CB51AD8489392646BFC3F9BEF4C7A18CD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:88:f8:df:ca:bf:f9:ae:84:b1:d5:3d:50: 3a:f4:7e:f5:fc:03:71:95:8a:65:1c:a1:4a:6f:0a: cd:b1:59:a2:69:70:cf:8d:8a:53:42:ff:3d:ab:7b: 24:8a:48:9f:8e:7f:c5:6e:c1:a9:1e:de:13:09:7e: b2:8e:7d:78:21:aa:d2:05:e1:1c:1c:ca:02:6b:60: 80:b7:fd:ca:97:72:cd:c6:e7:de:b4:d0:39:fa:8e: 29:8d:f9:05:72:99:e7:2d:f8:52:5f:93:af:34:d3: 44:93:70:fd:ac:70:22:0a:9c:2b:e2:cd:3b:33:20: 1a:b7:fe:fe:be:50:b6:57:7f:fb:0f:59:1c:e6:f1: 8a:ca:44:13:3d:22:92:4b:84:a4:11:ac:8e:89:30: bf:c7:4e:9e:ce:45:be:3b:c6:c6:c8:a8:a3:e7:02: 34:54:2c:ea:0b:85:c9:18:8c:be:a1:59:4e:f9:fb: 41:d1:a1:c8:be:6b:49:47:c6:5e:49:a3:64:9f:33: 23:ce:fe:15:da:df:45:3c:e2:a6:78:e5:a0:55:0e: 23:9c:54:94:da:77:56:47:61:5e:88:34:91:c9:b2: d6:85:17:cc:65:88:9c:47:05:e8:4d:fc:6b:f2:bd: 82:58:2f:87:2e:22:61:bb:c2:af:d5:3e:1a:b2:da: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 X509v3 Authority Key Identifier: keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:64:06:54:22:e5:02:d7:cb:b7:c8:95:a7:49:e3:b6:e2:52: 72:97:b0:be:00:fa:cf:84:f1:6f:f9:67:81:ea:aa:13:c9:c5: 5e:be:4a:31:26:dd:c9:c4:30:d8:26:5b:47:ad:9f:91:20:69: 55:41:c5:13:81:71:ff:a9:cf:7c:48:b5:0f:35:66:81:d4:50: 20:e6:c7:12:3a:af:22:e2:92:58:76:38:2f:aa:ec:7d:5c:57: 36:6f:9f:67:94:ac:0a:62:4b:de:5f:2c:2f:ae:fd:5c:62:c3: 9f:30:10:6a:1f:24:77:17:80:6f:5e:ff:4c:4b:55:93:6e:9a: ea:b1:3c:7a:37:2e:f4:0a:ab:db:fc:74:84:4d:13:87:15:c5: 92:76:de:2c:87:75:f3:cd:23:4c:ad:d6:4b:b0:33:d4:02:16: 2f:a5:22:2d:1f:8a:6c:d4:eb:07:19:bc:57:c4:bd:42:4f:7b: a1:b2:5c:cd:ce:4e:2b:e8:b7:46:ec:5e:77:50:97:88:43:7e: 59:2e:72:b7:da:ac:88:14:1d:44:2f:9e:1b:d7:f8:cd:02:68: ce:f7:a3:d0:27:00:94:4b:f6:5d:18:c2:8f:f1:6b:56:49:4c: 2c:7c:47:e1:0e:65:4b:52:32:3a:a9:c0:12:f1:80:8f:d0:3e: cb:b1:11:21 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU2 MzdCQUREODM3QjY3MTUwRTgwRjlDOEUyRjBDNUFFNTUxQjc5MTAeFw0yNTA3MDQx MzQxNTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDgzMjg4Q0I1MUFEODQ4 OTM5MjY0NkJGQzNGOUJFRjRDN0ExOENEMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYPYj438q/+a6EsdU9UDr0fvX8A3GVimUcoUpvCs2xWaJpcM+N ilNC/z2reySKSJ+Of8Vuwake3hMJfrKOfXghqtIF4RwcygJrYIC3/cqXcs3G5960 0Dn6jimN+QVymect+FJfk68000STcP2scCIKnCvizTszIBq3/v6+ULZXf/sPWRzm 8YrKRBM9IpJLhKQRrI6JML/HTp7ORb47xsbIqKPnAjRULOoLhckYjL6hWU75+0HR oci+a0lHxl5Jo2SfMyPO/hXa30U84qZ45aBVDiOcVJTad1ZHYV6INJHJstaFF8xl iJxHBehN/GvyvYJYL4cuImG7wq/VPhqy2uajAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUgyiMtRrYSJOSZGv8P5vvTHoYzTMwHwYDVR0jBBgwFoAUdWN7rdg3tnFQ6A+c ji8MWuVRt5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy Mi9kV043cmRnM3RuRlE2QS1jamk4TVd1VlJ0NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RXTjdyZGczdG5GUTZBLWNqaThNV3VWUnQ1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjIvZFdON3JkZzN0bkZR NkEtY2ppOE1XdVZSdDVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEZkBlQi5QLXy7fIladJ47biUnKXsL4A+s+E8W/5Z4HqqhPJxV6+SjEm3cnE MNgmW0etn5EgaVVBxROBcf+pz3xItQ81ZoHUUCDmxxI6ryLiklh2OC+q7H1cVzZv n2eUrApiS95fLC+u/Vxiw58wEGofJHcXgG9e/0xLVZNumuqxPHo3LvQKq9v8dIRN E4cVxZJ23iyHdfPNI0yt1kuwM9QCFi+lIi0fimzU6wcZvFfEvUJPe6GyXM3OTivo t0bsXndQl4hDflkucrfarIgUHUQvnhvX+M0CaM73o9AnAJRL9l0Ywo/xa1ZJTCx8 R+EOZUtSMjqpwBLxgI/QPsuxESE= -----END CERTIFICATE-----Generated at Fri Jul 4 17:40:17 2025 by rpki-client