$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft File: iUp18p1qbq-EUdP-mXPCDuMBfko.mft (raw, json) Hash identifier: 2ejqpQaqxnEeXGrczXDiw33ExoYClq5TeC9qv7NbmI0= Subject key identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E Authority key identifier: 89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A Certificate issuer: /CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Certificate serial: 16F6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft Manifest number: 16F6 Signing time: Fri 04 Jul 2025 00:14:37 +0000 Manifest this update: Fri 04 Jul 2025 00:14:37 +0000 Manifest next update: Fri 04 Jul 2025 06:14:37 +0000 Files and hashes: 1: iUp18p1qbq-EUdP-mXPCDuMBfko.crl (hash: lYN+aZWROLiKKBNj5uOZZt8AAuTlONpvCDgeASTnzug=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5878 (0x16f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Validity Not Before: Jul 4 00:14:37 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=351FA044BC46D490B9A0AAF205332735092DFF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:32:78:01:e5:64:b2:d9:44:36:8d:90:ca: 46:14:c7:09:8f:10:d0:61:6b:ef:5d:b6:54:b6:5f: f8:12:bb:3d:58:1e:59:d3:b5:59:a6:2f:76:e8:17: 50:2b:76:d6:ca:4e:d7:bc:93:ba:01:34:0e:56:e0: 9e:37:af:eb:6d:6c:ab:41:83:30:81:02:63:78:6d: da:21:73:4b:84:da:89:bb:59:ea:50:4d:58:08:5f: 82:d3:ef:72:0c:90:94:70:4e:b0:53:5a:2c:bd:8d: b4:aa:e9:36:1e:cf:13:5d:fc:4f:05:3a:92:b4:ae: fb:ec:5e:4e:d2:0e:f1:a9:08:69:13:22:e7:e3:11: a5:1e:a9:fa:74:5e:fa:08:e2:e9:d0:df:9f:0e:3c: fc:80:a2:34:94:23:f2:e6:1a:81:1c:6f:42:5a:4d: 85:fd:e6:cf:df:dd:d7:78:4b:97:f2:6d:3e:db:61: 56:55:a6:f5:c3:be:10:ab:a8:f7:77:a5:b2:9b:7b: bb:b3:f1:0e:d0:b4:d6:13:d9:08:c9:3f:b3:c7:19: a1:b4:b7:67:eb:67:64:9f:68:b8:56:1e:03:ca:d1: 77:39:2e:10:a7:80:b7:db:09:37:b5:e5:63:51:ef: 02:8f:b6:37:07:0e:59:e1:d3:16:37:d6:f3:36:12: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E X509v3 Authority Key Identifier: keyid:89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:db:b9:63:76:76:9b:7e:a4:a4:08:d7:d5:e8:66:9b:91:2c: 76:a4:a5:ac:b9:39:60:97:de:13:12:eb:2c:ae:b0:eb:43:c4: a4:b7:5b:db:b1:82:5f:b9:c6:06:f3:7c:b7:f8:6b:6f:96:7b: b2:69:4b:c1:af:3a:c7:5c:49:c6:65:17:72:b3:5e:74:03:6e: 04:08:b7:f3:ca:00:3c:f8:cd:5b:89:3a:3a:84:31:e5:da:15: 13:84:5e:a0:1d:99:5e:53:6d:53:c4:b1:97:70:25:de:e1:50: af:fc:ca:70:74:37:a7:20:3b:91:6c:88:ed:14:e6:0b:21:18: 3e:73:e3:da:80:e5:10:98:12:58:82:b4:72:f4:52:95:eb:7d: 1c:94:f9:d9:5d:fd:3d:ad:5d:a2:42:a0:bd:c9:c5:48:66:4b: aa:af:5e:18:28:9c:99:6c:7a:3f:f9:ee:3a:44:c6:b0:4d:47: f3:56:50:92:c6:5a:71:42:a9:ac:39:f9:8d:43:fb:e3:0d:f7: 17:65:36:64:d0:58:76:e5:03:45:e7:c9:5a:5d:ee:12:85:f1: 32:ef:d6:03:e5:0c:c2:2f:a6:22:a5:25:67:12:2e:15:5e:c8: 0e:13:bb:d8:c1:b3:8a:58:74:b5:eb:4b:c6:4d:00:6a:76:5b: ee:9b:92:8a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk0 QTc1RjI5RDZBNkVBRjg0NTFEM0ZFOTk3M0MyMEVFMzAxN0U0QTAeFw0yNTA3MDQw MDE0MzdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM1MUZBMDQ0QkM0NkQ0 OTBCOUEwQUFGMjA1MzMyNzM1MDkyREZGN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEuDJ4AeVkstlENo2QykYUxwmPENBha+9dtlS2X/gSuz1YHlnT tVmmL3boF1ArdtbKTte8k7oBNA5W4J43r+ttbKtBgzCBAmN4bdohc0uE2om7WepQ TVgIX4LT73IMkJRwTrBTWiy9jbSq6TYezxNd/E8FOpK0rvvsXk7SDvGpCGkTIufj EaUeqfp0XvoI4unQ358OPPyAojSUI/LmGoEcb0JaTYX95s/f3dd4S5fybT7bYVZV pvXDvhCrqPd3pbKbe7uz8Q7QtNYT2QjJP7PHGaG0t2frZ2SfaLhWHgPK0Xc5LhCn gLfbCTe15WNR7wKPtjcHDlnh0xY31vM2ElBZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNR+gRLxG1JC5oKryBTMnNQkt/34wHwYDVR0jBBgwFoAUiUp18p1qbq+EUdP+ mXPCDuMBfkowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 My9pVXAxOHAxcWJxLUVVZFAtbVhQQ0R1TUJma28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lVcDE4cDFxYnEtRVVkUC1tWFBDRHVNQmZrby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDMvaVVwMThwMXFicS1F VWRQLW1YUENEdU1CZmtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGvbuWN2dpt+pKQI19XoZpuRLHakpay5OWCX3hMS6yyusOtDxKS3W9uxgl+5 xgbzfLf4a2+We7JpS8GvOsdcScZlF3KzXnQDbgQIt/PKADz4zVuJOjqEMeXaFROE XqAdmV5TbVPEsZdwJd7hUK/8ynB0N6cgO5FsiO0U5gshGD5z49qA5RCYEliCtHL0 UpXrfRyU+dld/T2tXaJCoL3JxUhmS6qvXhgonJlsej/57jpExrBNR/NWUJLGWnFC qaw5+Y1D++MN9xdlNmTQWHblA0XnyVpd7hKF8TLv1gPlDMIvpiKlJWcSLhVeyA4T u9jBs4pYdLXrS8ZNAGp2W+6bkoo= -----END CERTIFICATE-----Generated at Fri Jul 4 04:03:58 2025 by rpki-client