$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft File: u11oF9lc0Cjy8wUtxskakjFFby4.mft (raw, json) Hash identifier: algcjccxgHcLcnIaK9S3KYswVR7Bh4rMyMPO5s8ABzA= Subject key identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F Authority key identifier: BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E Certificate issuer: /CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Certificate serial: 0FA9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft Manifest number: 0FA9 Signing time: Fri 04 Jul 2025 18:42:26 +0000 Manifest this update: Fri 04 Jul 2025 18:42:26 +0000 Manifest next update: Sat 05 Jul 2025 00:42:26 +0000 Files and hashes: 1: u11oF9lc0Cjy8wUtxskakjFFby4.crl (hash: UpAKKbzz9notYbsw2FxdpM6SvuAx37+AxcbJOKb7Ws4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4009 (0xfa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Validity Not Before: Jul 4 18:42:26 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6E8FFE1636887BE4014F2452CECBF2732922939F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:75:57:1f:be:57:74:dc:b3:b8:22:16:74: 94:ec:17:a1:22:00:0d:6d:2d:91:80:b7:a3:7d:40: a3:1a:1a:f0:91:04:99:a9:fb:4a:aa:38:38:82:a6: 61:02:01:5a:68:28:fa:7d:ed:9f:6f:a9:9b:c2:81: c0:9b:2d:06:58:6c:09:9c:07:3a:29:6d:58:be:6a: 8e:98:75:23:66:29:d2:0f:3b:71:d5:01:8d:2a:08: 6b:a9:d4:b1:6d:c0:21:27:de:8d:e0:b1:69:26:09: db:88:32:6e:b0:23:0d:e8:b5:f3:2d:c0:13:71:9d: b3:17:84:a7:a9:0e:de:95:72:11:52:20:71:f5:1f: 23:1e:eb:6b:f6:a5:8a:18:15:24:81:ee:6c:76:1f: 5e:e2:6b:9f:41:88:e5:86:12:97:45:ba:4a:40:b6: 49:d8:66:5e:40:ec:b9:66:c1:11:91:89:36:8c:ce: 7b:84:5e:6d:3b:6a:a1:9b:5d:61:9c:ab:6f:35:72: 1f:7e:31:9a:8a:12:db:8c:bb:dc:2c:63:5f:1b:eb: a0:3e:60:24:20:89:ae:f2:d0:a0:51:3b:51:00:3a: 47:1d:16:9e:5a:26:d4:3d:c7:d5:f5:ab:a6:24:2f: 5b:8b:2c:5e:e5:29:48:80:91:df:33:c5:4b:c2:7e: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F X509v3 Authority Key Identifier: keyid:BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d0:3f:b5:2f:41:26:82:18:aa:93:54:f8:ef:3c:17:40:0a: 2a:91:e7:9d:74:a6:9c:89:2f:da:2a:ad:10:7f:4b:4e:fa:af: a4:af:f9:cc:63:fc:4e:e2:ba:47:2e:03:07:9a:74:03:cc:d0: 47:e7:c0:27:e1:ea:03:7f:da:92:f7:8a:78:d4:30:4a:15:07: 5d:15:73:4a:1d:e6:51:b3:9b:a6:da:02:79:3a:60:dc:f5:cd: e5:09:05:e0:e8:00:f3:6b:77:bc:cf:36:11:c3:e2:fd:23:cc: dc:65:b5:d1:83:82:48:4a:42:7c:8f:18:47:9f:f9:9a:6a:70: 46:ef:cd:38:2f:73:87:4d:7e:5c:d3:98:14:63:1e:92:08:4c: a4:c4:90:75:f1:90:bc:92:d9:bd:7e:b7:a8:ef:fe:cd:4c:51: 27:92:40:8e:63:02:45:83:0c:3c:22:15:b8:5d:d4:9c:16:15: ff:ac:22:e2:4b:e9:d8:ce:c0:8a:35:b8:df:0a:52:5c:49:3d: de:2a:d4:15:cb:9b:f9:da:53:35:cd:8f:11:e0:23:ec:31:9f: 44:48:8d:b7:d4:7e:83:d7:ca:55:ed:df:47:63:95:8f:81:3e: 65:1d:54:c6:b9:f7:14:9a:62:c2:dd:7f:19:56:05:0f:6a:04: a6:ea:ba:65 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkI1 RDY4MTdEOTVDRDAyOEYyRjMwNTJEQzZDOTFBOTIzMTQ1NkYyRTAeFw0yNTA3MDQx ODQyMjZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZFOEZGRTE2MzY4ODdC RTQwMTRGMjQ1MkNFQ0JGMjczMjkyMjkzOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuFnVXH75XdNyzuCIWdJTsF6EiAA1tLZGAt6N9QKMaGvCRBJmp +0qqODiCpmECAVpoKPp97Z9vqZvCgcCbLQZYbAmcBzopbVi+ao6YdSNmKdIPO3HV AY0qCGup1LFtwCEn3o3gsWkmCduIMm6wIw3otfMtwBNxnbMXhKepDt6VchFSIHH1 HyMe62v2pYoYFSSB7mx2H17ia59BiOWGEpdFukpAtknYZl5A7LlmwRGRiTaMznuE Xm07aqGbXWGcq281ch9+MZqKEtuMu9wsY18b66A+YCQgia7y0KBRO1EAOkcdFp5a JtQ9x9X1q6YkL1uLLF7lKUiAkd8zxUvCflSlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUbo/+FjaIe+QBTyRSzsvycykik58wHwYDVR0jBBgwFoAUu11oF9lc0Cjy8wUt xskakjFFby4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 MS91MTFvRjlsYzBDank4d1V0eHNrYWtqRkZieTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3UxMW9GOWxjMENqeTh3VXR4c2tha2pGRmJ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjEvdTExb0Y5bGMwQ2p5 OHdVdHhza2FrakZGYnk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFDQP7UvQSaCGKqTVPjvPBdACiqR5510ppyJL9oqrRB/S076r6Sv+cxj/E7i ukcuAweadAPM0EfnwCfh6gN/2pL3injUMEoVB10Vc0od5lGzm6baAnk6YNz1zeUJ BeDoAPNrd7zPNhHD4v0jzNxltdGDgkhKQnyPGEef+ZpqcEbvzTgvc4dNflzTmBRj HpIITKTEkHXxkLyS2b1+t6jv/s1MUSeSQI5jAkWDDDwiFbhd1JwWFf+sIuJL6djO wIo1uN8KUlxJPd4q1BXLm/naUzXNjxHgI+wxn0RIjbfUfoPXylXt30djlY+BPmUd VMa59xSaYsLdfxlWBQ9qBKbqumU= -----END CERTIFICATE-----Generated at Fri Jul 4 20:53:36 2025 by rpki-client