$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft File: zfv2KGSEFu4dmdMuX5yWhae-K7w.mft (raw, json) Hash identifier: O74BHkQR73TqJvHTA15jjFUs/CP+WFS9JVHBwE2PWpo= Subject key identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B Authority key identifier: CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC Certificate issuer: /CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Certificate serial: 1E3C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft Manifest number: 1E3C Signing time: Fri 04 Jul 2025 05:16:46 +0000 Manifest this update: Fri 04 Jul 2025 05:16:46 +0000 Manifest next update: Fri 04 Jul 2025 11:16:46 +0000 Files and hashes: 1: zfv2KGSEFu4dmdMuX5yWhae-K7w.crl (hash: 1l9s9nuMttk/iw3sIp2QBXGstdIHJBXcYxpuV3p+c0k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7740 (0x1e3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Validity Not Before: Jul 4 05:16:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3C66EB21CE741247CB2A9320E25E8CEF324D467B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:49:8e:33:ee:b4:d8:a8:76:b4:9d:5b:cc:42: 2f:9f:47:62:a7:e1:8e:d7:07:e1:e0:5d:02:81:a9: d0:22:bd:24:a3:6e:9b:de:62:be:2a:40:6e:38:19: d3:66:28:57:3b:99:53:71:f2:5c:d4:ea:c3:bd:6c: 63:37:85:6b:ef:18:36:68:30:95:90:1a:8b:ee:0e: 89:8c:5e:43:ee:c6:df:15:16:3c:34:7e:46:5f:06: ec:d9:86:c9:7c:a8:28:9c:34:56:48:c9:b3:e5:a2: 6c:90:33:29:c8:8c:e9:57:34:c6:f6:45:37:f6:71: 00:2f:1b:b8:9e:8b:f3:92:5f:88:93:ed:a9:3d:ef: 3b:61:74:ad:7b:bf:e7:3e:27:63:a2:88:49:0a:a3: 1f:63:11:40:d4:86:24:0f:5a:73:f0:17:3d:33:25: 61:42:8f:5f:6e:85:46:f6:90:98:fd:ae:43:2b:02: e5:09:fd:c9:44:df:58:94:36:c2:a7:05:a9:60:18: 20:49:44:c6:b4:5a:20:a1:24:05:fa:5a:7e:e4:47: fe:e9:51:73:9b:c1:59:2e:be:3e:9a:84:64:52:8f: c3:c7:31:32:1f:f0:53:4d:4e:9c:81:0a:f0:13:99: d8:61:bf:3b:c8:1d:59:92:30:46:36:2a:ab:87:d8: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B X509v3 Authority Key Identifier: keyid:CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5e:1b:87:cb:9d:a1:26:c6:af:b0:0f:ce:09:d2:bd:bc:fc: d3:09:fd:44:67:40:ed:9a:e5:7e:7e:fd:a8:fc:0c:0f:50:6b: 91:35:a2:33:35:f7:7c:0a:a9:64:4d:8a:94:91:a1:93:cd:fb: ac:d1:28:0b:78:7c:58:6e:29:36:f3:2d:48:e9:ef:52:c1:ec: c1:d4:09:66:97:e7:42:49:27:6a:09:55:a5:ff:84:9a:33:fb: d6:2c:b9:67:36:5f:6c:04:df:d0:d8:ee:05:aa:24:9b:ee:f5: 76:7c:0a:5c:2d:8a:63:f0:15:bb:3a:f4:9d:7f:7a:e0:d6:03: d7:b1:6c:ae:33:89:1c:6e:0c:2e:3c:56:bb:77:c1:ca:3a:95: 49:ea:20:7f:e2:d6:b2:06:96:d6:eb:83:51:74:47:62:af:d3: 2a:ca:b7:7b:84:20:43:99:72:bd:44:43:03:b6:34:8c:34:1e: de:4c:3d:f8:d4:ad:80:b1:38:3e:50:cd:d3:86:97:41:7c:61: 50:e2:fc:a0:87:81:2b:9d:21:d5:e3:a5:0a:04:41:c1:2d:1b: d7:be:06:93:7a:16:4e:9f:05:e2:91:d4:f4:d8:69:11:6d:39: 4c:a8:84:56:d6:05:16:8a:1c:fa:5a:4e:8e:9f:15:1d:1e:f1: 03:c2:dc:ff -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RG QkY2Mjg2NDg0MTZFRTFEOTlEMzJFNUY5Qzk2ODVBN0JFMkJCQzAeFw0yNTA3MDQw NTE2NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNDNjZFQjIxQ0U3NDEy NDdDQjJBOTMyMEUyNUU4Q0VGMzI0RDQ2N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtSY4z7rTYqHa0nVvMQi+fR2Kn4Y7XB+HgXQKBqdAivSSjbpve Yr4qQG44GdNmKFc7mVNx8lzU6sO9bGM3hWvvGDZoMJWQGovuDomMXkPuxt8VFjw0 fkZfBuzZhsl8qCicNFZIybPlomyQMynIjOlXNMb2RTf2cQAvG7iei/OSX4iT7ak9 7zthdK17v+c+J2OiiEkKox9jEUDUhiQPWnPwFz0zJWFCj19uhUb2kJj9rkMrAuUJ /clE31iUNsKnBalgGCBJRMa0WiChJAX6Wn7kR/7pUXObwVkuvj6ahGRSj8PHMTIf 8FNNTpyBCvATmdhhvzvIHVmSMEY2KquH2AjHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPGbrIc50EkfLKpMg4l6M7zJNRnswHwYDVR0jBBgwFoAUzfv2KGSEFu4dmdMu X5yWhae+K7wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy My96ZnYyS0dTRUZ1NGRtZE11WDV5V2hhZS1LN3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pmdjJLR1NFRnU0ZG1kTXVYNXlXaGFlLUs3dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjMvemZ2MktHU0VGdTRk bWRNdVg1eVdoYWUtSzd3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABxeG4fLnaEmxq+wD84J0r28/NMJ/URnQO2a5X5+/aj8DA9Qa5E1ojM193wK qWRNipSRoZPN+6zRKAt4fFhuKTbzLUjp71LB7MHUCWaX50JJJ2oJVaX/hJoz+9Ys uWc2X2wE39DY7gWqJJvu9XZ8ClwtimPwFbs69J1/euDWA9exbK4ziRxuDC48Vrt3 wco6lUnqIH/i1rIGltbrg1F0R2Kv0yrKt3uEIEOZcr1EQwO2NIw0Ht5MPfjUrYCx OD5QzdOGl0F8YVDi/KCHgSudIdXjpQoEQcEtG9e+BpN6Fk6fBeKR1PTYaRFtOUyo hFbWBRaKHPpaTo6fFR0e8QPC3P8= -----END CERTIFICATE-----Generated at Fri Jul 4 11:14:07 2025 by rpki-client