$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft File: wrEFUbAKIe7r4enJQLSZntFcIfM.mft (raw, json) Hash identifier: W50wduEqDJ+25cDJG/FFjAhJO9UuMrf0ZRU4mryQaUk= Subject key identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A Authority key identifier: C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 Certificate issuer: /CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Certificate serial: 2754 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft Manifest number: 2754 Signing time: Fri 04 Jul 2025 07:41:50 +0000 Manifest this update: Fri 04 Jul 2025 07:41:50 +0000 Manifest next update: Fri 04 Jul 2025 13:41:50 +0000 Files and hashes: 1: wrEFUbAKIe7r4enJQLSZntFcIfM.crl (hash: lyxBegB8ZR4fUXW0fPobfEN+IZRbZN9B3/8xwBS9nF4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10068 (0x2754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Validity Not Before: Jul 4 07:41:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=74C6E5BCFCAD2046F375D2A8B10240F7DCCAF44A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:25:a7:70:ec:92:88:a7:f5:83:b7:60:f5: e2:e1:8b:dd:20:b0:fe:13:2f:66:4c:3f:65:f2:25: 16:b7:98:d6:07:9b:6b:03:e9:67:0b:53:cd:0a:ad: 05:36:29:bb:39:d9:82:6a:0f:c1:8d:61:7f:30:d8: 8a:b1:f0:1b:ec:ff:a0:6c:ff:61:d9:12:50:fa:e0: af:0d:32:88:e1:23:85:86:f8:66:29:00:0b:2f:b5: 9d:aa:d1:17:7e:3f:81:df:47:9c:29:0e:3e:ab:5e: 50:d6:a3:36:c1:16:16:4b:f8:d3:b4:5a:0a:21:20: 1a:60:e8:56:8f:04:64:8d:e8:59:28:2c:f6:54:d5: 0a:56:b8:dd:23:ec:c1:2b:8f:5f:8f:24:6b:4a:74: 3e:65:09:c7:d0:95:5b:db:07:15:57:d0:52:a1:4c: 69:a9:02:42:e1:95:a4:0c:a1:1e:ec:b6:92:71:7f: 73:83:ed:80:07:33:10:9c:8d:93:ce:f3:e4:e1:ac: 45:5c:ed:80:70:4e:ca:0b:bd:97:ad:28:93:d6:68: bc:2e:85:38:2f:57:89:58:88:9d:5e:ec:79:fe:32: 3c:79:a9:62:aa:b6:9d:1e:1f:27:db:5f:fe:b5:54: e0:b9:1c:bf:58:20:d3:87:d7:eb:9e:5f:8b:f0:c2: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A X509v3 Authority Key Identifier: keyid:C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8d:c2:d5:74:43:26:af:13:f1:f1:2b:aa:52:91:27:80:6a: aa:ec:55:3f:95:bc:62:41:b5:37:f9:1e:af:dc:51:9c:b1:6c: 5e:8c:c3:09:c2:cc:73:c2:7f:8f:04:09:0e:3b:0d:ea:cc:49: 4e:b3:3a:26:b6:f4:d3:75:37:bf:5a:65:ae:8b:84:9a:de:e3: 24:64:9a:82:7c:58:b9:6e:ba:29:fd:90:5f:d7:57:13:f2:47: c8:ed:06:39:93:00:94:5e:26:1e:12:e7:91:44:30:73:f7:bf: 6d:ee:d7:ae:a8:84:15:74:b6:b0:a4:74:9f:25:a5:4e:a6:b1: 3d:3d:5a:31:23:5c:2d:99:60:d3:0d:99:70:4a:06:5e:1c:1d: d0:9a:40:3a:f0:ce:ac:6a:18:a5:da:59:19:42:cf:77:43:28: 86:2a:99:df:de:c1:5d:1f:63:44:c2:41:eb:80:6b:f0:ae:1c: 34:e3:29:01:f5:73:4b:7c:4b:f7:50:62:61:8e:30:08:9f:c8: 1b:41:04:d8:7f:35:eb:e4:96:55:f3:92:18:ae:5f:ef:0d:32: 0d:f5:3a:ed:31:50:c1:00:ae:15:5d:18:aa:ee:51:07:0c:3d: 85:48:70:1a:9e:3c:99:f0:d5:06:26:ff:af:d5:67:9c:c7:f1: dc:26:ca:b2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICJ1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzJC MTA1NTFCMDBBMjFFRUVCRTFFOUM5NDBCNDk5OUVEMTVDMjFGMzAeFw0yNTA3MDQw NzQxNTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0QzZFNUJDRkNBRDIw NDZGMzc1RDJBOEIxMDI0MEY3RENDQUY0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJyWncOySiKf1g7dg9eLhi90gsP4TL2ZMP2XyJRa3mNYHm2sD 6WcLU80KrQU2Kbs52YJqD8GNYX8w2Iqx8Bvs/6Bs/2HZElD64K8NMojhI4WG+GYp AAsvtZ2q0Rd+P4HfR5wpDj6rXlDWozbBFhZL+NO0WgohIBpg6FaPBGSN6FkoLPZU 1QpWuN0j7MErj1+PJGtKdD5lCcfQlVvbBxVX0FKhTGmpAkLhlaQMoR7stpJxf3OD 7YAHMxCcjZPO8+ThrEVc7YBwTsoLvZetKJPWaLwuhTgvV4lYiJ1e7Hn+Mjx5qWKq tp0eHyfbX/61VOC5HL9YINOH1+ueX4vwwgsZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdMblvPytIEbzddKosQJA99zK9EowHwYDVR0jBBgwFoAUwrEFUbAKIe7r4enJ QLSZntFcIfMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 Ny93ckVGVWJBS0llN3I0ZW5KUUxTWm50RmNJZk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dyRUZVYkFLSWU3cjRlbkpRTFNabnRGY0lmTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTcvd3JFRlViQUtJZTdy NGVuSlFMU1pudEZjSWZNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGSNwtV0QyavE/HxK6pSkSeAaqrsVT+VvGJBtTf5Hq/cUZyxbF6MwwnCzHPC f48ECQ47DerMSU6zOia29NN1N79aZa6LhJre4yRkmoJ8WLluuin9kF/XVxPyR8jt BjmTAJReJh4S55FEMHP3v23u166ohBV0trCkdJ8lpU6msT09WjEjXC2ZYNMNmXBK Bl4cHdCaQDrwzqxqGKXaWRlCz3dDKIYqmd/ewV0fY0TCQeuAa/CuHDTjKQH1c0t8 S/dQYmGOMAifyBtBBNh/NevkllXzkhiuX+8NMg31Ou0xUMEArhVdGKruUQcMPYVI cBqePJnw1QYm/6/VZ5zH8dwmyrI= -----END CERTIFICATE-----Generated at Fri Jul 4 10:59:39 2025 by rpki-client