$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft File: c9IR1bIQ47GWBU23GJLY44pOCe8.mft (raw, json) Hash identifier: 5bZLP7/SVkWX95Juw3mGxAchcrt2jfdvXyQaoKrPSx4= Subject key identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: 39 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft Manifest number: 30 Signing time: Thu 03 Jul 2025 22:42:11 +0000 Manifest this update: Thu 03 Jul 2025 22:42:11 +0000 Manifest next update: Fri 04 Jul 2025 04:42:11 +0000 Files and hashes: 1: 2c8Ulmpg6h1-MFjrqABEjkKAqfk.roa (hash: +kI1cDnssN4lE1X8EXDRL1ogPni9K7woXWF/ZULOyqM=) 2: JT72N6S_EYA3mmlM2ip-AjzM4RI.roa (hash: 4tl/25+uQxAUAN0qFimxxmltHs1PvKl6ZgGgmRH6bP0=) 3: KrPweUb8poxWQmE7_awOEyT67Gc.roa (hash: s3dVFoe3qVPclEdRNZFKTj1ouy/vges/T+hgAPxNUYc=) 4: YM-3CpnHniKHloIYaw4EhJh26JQ.roa (hash: zLTJKj3i9QyPCjkxaEyJvq9y6L9d8J+Gq7CWrgrwhPE=) 5: bICgxX9gzfqagwtHn3C-XCZ5K_o.roa (hash: qOLH/4wbzxEHmnkgVYOHGh5jcKt7pnSrYyFM+SuxjZo=) 6: c9IR1bIQ47GWBU23GJLY44pOCe8.crl (hash: wmBUE2YYWq3NPbaWo2yU7OoDlgMQoe/jh4ugVPcE71Q=) 7: dTvljnE8RaQon284MBGb3Pze_DA.roa (hash: rOC1jntUoYQjRXyheD/+ucwXVMndIoLBOPirat2mn5s=) 8: gQErA5MB_7h7AxGFEG_GkVWZuys.roa (hash: crx71MUM6CDetZbao3ZxwpQsri4Flgng7CvbadpjmzM=) 9: o9c-0vAFreiP5dn3zxHpzRYAHXQ.roa (hash: +cwYJdZm3O7MmEFthMOEswTzqEavVmdybhhfTKCcWXY=) 10: rNKBTWQo7UWNzVh2mXv8YwCgAB0.roa (hash: nllRU1a+VNXHaqGR2zHZ5J+GQLKd57tDgPZdCt4stLs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Jul 3 22:42:11 2025 GMT Not After : Jun 25 02:35:12 2026 GMT Subject: CN=245F389C074E2E211CFC170EF02A4FB0A3DAA765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:21:1c:84:74:0e:11:02:c5:71:87:ab:85: 4b:71:84:5f:fa:2f:28:8a:82:21:cf:01:d4:4a:b3: 68:4c:24:24:75:11:af:a7:bf:8d:a8:22:86:9e:5b: a9:ed:dd:51:57:bd:cf:78:12:b0:78:e7:62:ba:34: f5:04:da:a8:17:c5:25:21:f6:d0:3d:f6:19:9a:c2: ae:5e:50:b3:ca:67:23:9d:f6:0b:c3:30:af:49:ee: 89:43:e0:1a:aa:b7:64:4a:eb:6f:de:a1:8a:26:35: 0a:1a:74:53:7f:7b:bd:34:ce:ef:24:d8:13:aa:37: 54:80:0b:5f:ac:e7:e9:de:7f:d7:e0:bb:5b:e1:d0: ef:f9:bb:0f:8c:c3:ee:37:db:27:11:4b:66:47:d7: 0d:af:42:b0:6d:a0:c4:53:6f:dd:9f:73:4c:38:0c: 5b:96:50:0d:cc:67:3b:35:93:be:cc:d1:60:fa:4d: c1:dd:13:cd:4d:d3:de:e1:c0:cf:9d:6d:b8:aa:db: f0:76:34:32:76:7e:fa:f9:9e:4e:97:8b:2f:f4:0f: 18:b6:b1:be:3c:fb:1d:b8:7b:be:e2:e7:3b:bb:46: 98:7b:4d:59:b9:a7:58:02:5c:74:12:2c:85:fa:c9: 82:f0:75:e9:92:49:bd:25:74:5d:f8:47:5c:fa:1b: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:45:00:10:e1:3e:cd:bf:57:a9:61:38:d4:20:bf:18:f1:84: 65:88:43:2e:d5:c0:c5:f7:c9:41:8a:48:52:26:9a:f0:31:7d: 4b:52:b0:14:0b:32:37:77:8a:e4:4c:a9:a0:a5:c4:23:75:f7: d5:f9:cc:e2:96:9e:ce:1f:a5:a7:30:59:85:fa:8e:b5:e8:c6: 14:c5:8d:b8:14:f0:db:28:4c:94:60:6f:74:ac:de:79:73:0c: 77:3c:8e:c4:89:7a:9a:88:e5:5b:23:8b:fb:52:4b:ab:d0:ac: 64:22:8c:c4:56:42:27:f5:3c:40:2d:e0:80:23:f9:a6:bd:ed: 6e:55:b9:83:b8:d6:45:c2:21:a4:27:74:ef:29:a9:f5:c0:6c: 9c:af:9f:ee:d6:17:db:63:b9:78:d5:2d:6c:cf:dc:cc:b9:78: 3e:58:85:1c:14:81:ff:fe:1e:a9:4a:71:00:3b:d4:34:c6:0a: 3a:c9:4c:59:62:b4:1b:ea:c8:c1:91:35:67:7c:44:e5:be:a0: 28:36:93:c2:90:9a:41:79:a5:d2:c3:b4:82:12:2b:aa:a3:66: 9b:b0:e6:52:db:61:6f:fe:4e:54:5f:2d:66:50:32:eb:bd:92: 48:6b:68:0b:bd:d2:1c:3b:28:b8:82:11:e4:ae:22:80:d3:7c: 97:70:be:36 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3M0Qy MTFENUIyMTBFM0IxOTYwNTREQjcxODkyRDhFMzhBNEUwOUVGMB4XDTI1MDcwMzIy NDIxMVoXDTI2MDYyNTAyMzUxMlowMzExMC8GA1UEAxMoMjQ1RjM4OUMwNzRFMkUy MTFDRkMxNzBFRjAyQTRGQjBBM0RBQTc2NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN0OIRyEdA4RAsVxh6uFS3GEX/ovKIqCIc8B1EqzaEwkJHURr6e/ jagihp5bqe3dUVe9z3gSsHjnYro09QTaqBfFJSH20D32GZrCrl5Qs8pnI532C8Mw r0nuiUPgGqq3ZErrb96hiiY1Chp0U397vTTO7yTYE6o3VIALX6zn6d5/1+C7W+HQ 7/m7D4zD7jfbJxFLZkfXDa9CsG2gxFNv3Z9zTDgMW5ZQDcxnOzWTvszRYPpNwd0T zU3T3uHAz51tuKrb8HY0MnZ++vmeTpeLL/QPGLaxvjz7Hbh7vuLnO7tGmHtNWbmn WAJcdBIshfrJgvB16ZJJvSV0XfhHXPobF9MCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQkXzicB04uIRz8Fw7wKk+wo9qnZTAfBgNVHSMEGDAWgBRz0hHVshDjsZYFTbcY ktjjik4J7zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yOTI3 L2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvYzlJUjFiSVE0N0dXQlUyM0dKTFk0NHBPQ2U4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjkyNy9jOUlSMWJJUTQ3R1dC VTIzR0pMWTQ0cE9DZTgubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT0UAEOE+zb9XqWE41CC/GPGEZYhDLtXAxffJQYpIUiaa8DF9S1KwFAsyN3eK 5EypoKXEI3X31fnM4paezh+lpzBZhfqOtejGFMWNuBTw2yhMlGBvdKzeeXMMdzyO xIl6mojlWyOL+1JLq9CsZCKMxFZCJ/U8QC3ggCP5pr3tblW5g7jWRcIhpCd07ymp 9cBsnK+f7tYX22O5eNUtbM/czLl4PliFHBSB//4eqUpxADvUNMYKOslMWWK0G+rI wZE1Z3xE5b6gKDaTwpCaQXml0sO0ghIrqqNmm7DmUtthb/5OVF8tZlAy672SSGto C73SHDsouIIR5K4igNN8l3C+Ng== -----END CERTIFICATE-----Generated at Fri Jul 4 04:05:07 2025 by rpki-client