$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft File: cpzUo3V_UkXEbNX7sK1MjtG73Us.mft (raw, json) Hash identifier: zcsK2zepfNmqeOkchJtGL+figz+aJJQVz95W7P2HafU= Subject key identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 Authority key identifier: 72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B Certificate issuer: /CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Certificate serial: 15F1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft Manifest number: 15F1 Signing time: Sat 05 Jul 2025 06:11:53 +0000 Manifest this update: Sat 05 Jul 2025 06:11:53 +0000 Manifest next update: Sat 05 Jul 2025 12:11:53 +0000 Files and hashes: 1: cpzUo3V_UkXEbNX7sK1MjtG73Us.crl (hash: DVskUfUCxD++h9ArZ0qeBrKiKAHxA5fXJ2zgf/oOSdc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 12:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5617 (0x15f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Validity Not Before: Jul 5 06:11:53 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B2C580BE6C0A90D2887CAE55DD0C71A81BE1C6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:4b:a7:ea:0e:54:b0:74:1f:43:82:e2:d6: 23:41:e9:9f:b0:d1:09:31:5e:92:73:75:78:c5:27: d9:92:38:ab:4f:90:68:4b:94:8f:5c:5f:75:81:3c: 2e:2e:01:00:c1:3c:a9:99:d4:b3:5f:8a:f5:23:1d: 9c:47:a5:d0:d5:6c:25:77:b8:c5:6b:87:fd:83:f8: d2:98:a7:3d:04:bf:8b:f6:2d:d1:2b:34:51:eb:8d: 8a:7e:12:88:e3:2a:99:08:13:30:a9:ca:d8:2e:30: cf:8d:fc:22:7a:a9:c1:21:af:03:b0:e1:5d:ee:74: 41:74:c3:ae:80:ae:8a:71:2c:a1:f9:f4:ee:5e:78: 87:3b:67:26:77:ee:60:78:32:e4:10:b7:bc:6e:bc: 86:dd:5b:61:74:e8:78:cc:a4:0c:7e:99:6a:cc:b5: 36:70:ab:48:4f:11:38:a2:a4:16:dd:c9:f6:aa:29: e6:07:e4:b9:f6:68:56:b6:b8:c8:a9:0d:55:0d:b7: 68:0a:07:92:06:23:51:f7:2a:c0:30:b7:78:57:75: 10:0d:96:65:44:60:af:e9:ac:42:3a:37:6f:da:1f: 4d:ea:d6:e8:41:ee:7d:e3:63:7e:9a:58:81:5f:9a: dc:31:35:d1:20:de:3e:b3:88:01:fe:e0:7d:0b:0c: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 X509v3 Authority Key Identifier: keyid:72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9a:51:c8:48:c6:21:ef:ba:23:a7:f5:3d:b3:ef:76:3e:2a: 69:88:4f:ef:fc:16:32:61:09:64:13:08:71:0e:3d:4f:cf:36: 8c:1a:f9:3f:31:7d:f5:1b:11:a9:05:ba:98:f1:37:4c:ba:25: 18:17:cc:c1:b4:3a:9a:cf:28:2f:fc:ff:17:5c:93:89:16:1b: 5f:73:6e:aa:20:6b:e3:17:b7:a9:8c:5e:06:96:42:62:b7:46: 8b:e8:c8:c0:f0:6c:ba:35:04:48:90:3a:be:47:d0:c0:27:d8: c4:20:cc:4b:b3:fa:43:5a:18:68:17:23:8b:57:9d:78:64:53: 18:cd:9a:82:18:e0:0c:85:3c:8d:df:64:13:4d:c7:e7:21:f2: 1d:fe:6d:3b:9f:ee:56:8a:c7:f7:24:62:8f:5a:c6:c4:43:31: f1:27:8d:26:74:12:40:25:dc:b0:35:97:b9:51:ff:5a:0c:26: a1:c2:4f:a1:9a:e7:68:4d:8c:8c:e3:92:5d:e6:54:49:3c:eb: b9:50:30:17:8c:94:63:d9:99:8d:03:fc:09:de:17:d4:fb:2e: ce:f4:0a:56:d9:d0:49:3f:bb:55:58:bd:f1:9e:02:ae:bc:e0: c3:25:63:57:09:6d:6e:85:45:cc:83:86:0f:79:b9:dc:bd:a7: 66:ed:9c:b7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzI5 Q0Q0QTM3NTdGNTI0NUM0NkNENUZCQjBBRDRDOEVEMUJCREQ0QjAeFw0yNTA3MDUw NjExNTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIyQzU4MEJFNkMwQTkw RDI4ODdDQUU1NUREMEM3MUE4MUJFMUM2QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsZ0un6g5UsHQfQ4Li1iNB6Z+w0QkxXpJzdXjFJ9mSOKtPkGhL lI9cX3WBPC4uAQDBPKmZ1LNfivUjHZxHpdDVbCV3uMVrh/2D+NKYpz0Ev4v2LdEr NFHrjYp+EojjKpkIEzCpytguMM+N/CJ6qcEhrwOw4V3udEF0w66AropxLKH59O5e eIc7ZyZ37mB4MuQQt7xuvIbdW2F06HjMpAx+mWrMtTZwq0hPETiipBbdyfaqKeYH 5Ln2aFa2uMipDVUNt2gKB5IGI1H3KsAwt3hXdRANlmVEYK/prEI6N2/aH03q1uhB 7n3jY36aWIFfmtwxNdEg3j6ziAH+4H0LDE7FAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUssWAvmwKkNKIfK5V3QxxqBvhxqUwHwYDVR0jBBgwFoAUcpzUo3V/UkXEbNX7 sK1MjtG73UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 Ny9jcHpVbzNWX1VrWEViTlg3c0sxTWp0RzczVXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NwelVvM1ZfVWtYRWJOWDdzSzFNanRHNzNVcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODcvY3B6VW8zVl9Va1hF Yk5YN3NLMU1qdEc3M1VzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGOaUchIxiHvuiOn9T2z73Y+KmmIT+/8FjJhCWQTCHEOPU/PNowa+T8xffUb EakFupjxN0y6JRgXzMG0OprPKC/8/xdck4kWG19zbqoga+MXt6mMXgaWQmK3Rovo yMDwbLo1BEiQOr5H0MAn2MQgzEuz+kNaGGgXI4tXnXhkUxjNmoIY4AyFPI3fZBNN x+ch8h3+bTuf7laKx/ckYo9axsRDMfEnjSZ0EkAl3LA1l7lR/1oMJqHCT6Ga52hN jIzjkl3mVEk867lQMBeMlGPZmY0D/AneF9T7Ls70ClbZ0Ek/u1VYvfGeAq684MMl Y1cJbW6FRcyDhg95udy9p2btnLc= -----END CERTIFICATE-----Generated at Sat Jul 5 09:24:47 2025 by rpki-client