$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft File: JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft (raw, json) Hash identifier: AS7aHc1InebLWVfnTh3lkq7c/vwpZxr+LPU43TSk3iY= Subject key identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E Authority key identifier: 24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 Certificate issuer: /CN=246B8D869C83018945DF9F99009342903D076471 Certificate serial: 0E5D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft Manifest number: 0E5D Signing time: Fri 04 Jul 2025 10:14:25 +0000 Manifest this update: Fri 04 Jul 2025 10:14:25 +0000 Manifest next update: Fri 04 Jul 2025 16:14:25 +0000 Files and hashes: 1: JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl (hash: +Qxd3oUuYWmOxxPueAinOK8MMYD+hOLsCdNvNDud+9Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3677 (0xe5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246B8D869C83018945DF9F99009342903D076471 Validity Not Before: Jul 4 10:14:25 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8FDA8E1F762C3187576420B9E92948475E97BB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:41:ef:79:37:1e:c4:f8:1c:e5:0e:71:9d: c9:14:b5:45:c8:aa:4a:b6:7f:b6:64:6d:9c:c5:b4: 9d:64:a4:5d:ae:e0:ed:5a:99:90:d5:ed:c7:09:85: 0b:c6:66:ea:de:08:3b:27:c5:cf:0c:8c:3f:54:ad: 62:47:28:69:25:ab:e7:ba:5c:a2:35:85:40:00:ca: db:57:06:09:65:3d:dd:07:b0:1b:9b:da:10:2f:f3: 9a:68:b7:36:09:06:0a:4a:aa:1b:46:6f:b1:e6:45: d8:1a:ea:3f:5c:63:42:76:05:d5:24:29:3b:9b:7e: 1b:eb:34:ff:53:23:ab:6e:da:9a:59:45:35:96:30: 93:60:cb:65:9d:a8:c8:1b:e3:ab:f7:c7:ec:b0:b3: da:48:9c:79:e5:ac:6f:fc:af:ec:2b:30:f4:69:7a: 5b:07:4e:6a:5f:49:a9:b0:d5:ac:08:92:3f:c5:6e: 0a:fd:89:aa:7b:61:23:03:8e:ba:cd:f3:07:2e:54: c1:d9:42:92:6d:36:57:70:93:04:79:95:a2:d4:f7: c0:6c:c6:dd:1a:1c:88:96:b8:36:74:cf:47:aa:f9: ea:58:a5:1b:b4:05:52:37:ba:62:65:7b:4b:4f:39: a9:19:cf:aa:b3:fc:e9:18:0f:6c:f6:2f:52:2b:d1: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E X509v3 Authority Key Identifier: keyid:24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:aa:fa:56:d5:8f:c9:bb:e2:e5:41:f0:d7:17:92:f8:0d:e3: da:3e:72:4e:f5:41:f0:8c:96:69:d2:42:69:81:91:db:ec:21: 14:c5:b9:59:de:64:b5:1d:57:5c:7b:3b:9d:42:cf:47:ee:68: ff:fd:29:5c:d4:cc:cc:b3:c3:2b:5e:c9:38:d8:1c:c1:eb:58: c6:9f:b3:1d:d6:ae:d4:1d:c8:46:d9:59:b4:ff:63:ee:a0:f4: 0b:f5:e1:b8:b4:d2:6e:85:05:ac:df:7f:9e:83:13:81:c2:26: 0a:e9:68:36:e7:1e:0b:69:6c:c3:e6:2a:5c:a1:58:55:8f:c0: 42:0e:8d:bb:eb:9f:87:8d:8b:f6:ec:3e:cc:01:86:d2:05:7a: a4:72:6f:80:17:bf:34:36:46:92:de:b6:fe:c8:6a:05:6a:3c: e9:53:34:aa:d3:44:f2:9e:ea:5e:a0:4d:53:61:91:87:c9:41: 8d:28:0e:78:e7:9b:57:27:ed:06:2b:06:57:98:61:4c:37:2f: 9f:2e:0e:53:0f:d5:66:c9:1b:8a:fe:22:4f:91:d6:5e:2c:12: 98:86:af:8a:b6:e2:26:71:ac:0b:00:9d:9b:9c:b7:dc:b6:3a: a7:ed:f0:6e:a3:4a:5b:73:83:29:4f:1e:0e:41:5f:8b:f8:68: 52:b8:3f:67 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQ2 QjhEODY5QzgzMDE4OTQ1REY5Rjk5MDA5MzQyOTAzRDA3NjQ3MTAeFw0yNTA3MDQx MDE0MjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhGREE4RTFGNzYyQzMx ODc1NzY0MjBCOUU5Mjk0ODQ3NUU5N0JCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvv0HveTcexPgc5Q5xnckUtUXIqkq2f7ZkbZzFtJ1kpF2u4O1a mZDV7ccJhQvGZureCDsnxc8MjD9UrWJHKGklq+e6XKI1hUAAyttXBgllPd0HsBub 2hAv85potzYJBgpKqhtGb7HmRdga6j9cY0J2BdUkKTubfhvrNP9TI6tu2ppZRTWW MJNgy2WdqMgb46v3x+yws9pInHnlrG/8r+wrMPRpelsHTmpfSamw1awIkj/Fbgr9 iap7YSMDjrrN8wcuVMHZQpJtNldwkwR5laLU98Bsxt0aHIiWuDZ0z0eq+epYpRu0 BVI3umJle0tPOakZz6qz/OkYD2z2L1Ir0ZmXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUj9qOH3YsMYdXZCC56SlIR16Xu54wHwYDVR0jBBgwFoAUJGuNhpyDAYlF35+Z AJNCkD0HZHEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy NC9KR3VOaHB5REFZbEYzNS1aQUpOQ2tEMEhaSEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pHdU5ocHlEQVlsRjM1LVpBSk5Da0QwSFpIRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjQvSkd1TmhweURBWWxG MzUtWkFKTkNrRDBIWkhFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAECq+lbVj8m74uVB8NcXkvgN49o+ck71QfCMlmnSQmmBkdvsIRTFuVneZLUd V1x7O51Cz0fuaP/9KVzUzMyzwyteyTjYHMHrWMafsx3WrtQdyEbZWbT/Y+6g9Av1 4bi00m6FBazff56DE4HCJgrpaDbnHgtpbMPmKlyhWFWPwEIOjbvrn4eNi/bsPswB htIFeqRyb4AXvzQ2RpLetv7IagVqPOlTNKrTRPKe6l6gTVNhkYfJQY0oDnjnm1cn 7QYrBleYYUw3L58uDlMP1WbJG4r+Ik+R1l4sEpiGr4q24iZxrAsAnZuct9y2Oqft 8G6jSltzgylPHg5BX4v4aFK4P2c= -----END CERTIFICATE-----Generated at Fri Jul 4 11:35:52 2025 by rpki-client