$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft File: Nd6o5bEoW5KyERchGKNBqy3bdrU.mft (raw, json) Hash identifier: Fh7kClWRiYlKbPdSUlrDD/HJb3bXUVkglFsGSVRKQW8= Subject key identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 Authority key identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 Certificate issuer: /CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Certificate serial: 0DBC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft Manifest number: 0DBC Signing time: Fri 04 Jul 2025 10:17:43 +0000 Manifest this update: Fri 04 Jul 2025 10:17:43 +0000 Manifest next update: Fri 04 Jul 2025 16:17:43 +0000 Files and hashes: 1: Nd6o5bEoW5KyERchGKNBqy3bdrU.crl (hash: My7IEH1PqG6DAc9/+Bzf2XpMKgTYfM4/HCHtL9F/TBs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 16:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Validity Not Before: Jul 4 10:17:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5BF91187435E01A842776355A2D3F3D0C6B75447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:4a:2e:e3:69:8c:36:a2:0f:c6:e1:ab:fa: a2:b8:c7:c6:f4:4f:0b:69:37:bd:7d:e9:b1:d2:d7: a3:24:85:7c:76:27:64:4d:ed:80:85:14:bb:3e:13: 65:f5:c8:27:33:60:41:5b:7d:61:d2:af:4a:c4:5d: f4:20:d5:b9:95:1d:43:95:d1:fd:ba:e7:ac:b9:6d: c7:8a:31:7c:c2:5a:43:2a:f4:7f:da:3a:06:61:59: 60:45:5f:ca:e3:dd:ac:ce:be:b3:ed:35:c9:6f:89: 0c:e8:2a:a0:99:f3:54:27:86:81:eb:1b:88:e5:55: 6e:b7:ef:a2:91:aa:4e:87:b5:be:43:4e:36:dc:d8: aa:30:14:03:f4:1e:2b:ae:1c:1a:26:0c:5d:39:e6: 68:eb:10:a7:ea:b1:6f:b0:b3:e9:f9:89:a2:8e:68: 0a:20:19:9a:91:27:df:a5:27:05:f8:79:1a:16:80: a1:0d:16:dc:2b:9c:ac:0f:8a:6b:cc:b3:3f:8d:00: 8e:5e:3f:3e:f5:77:80:e4:fc:9e:57:18:23:25:bf: 4b:c0:f7:23:72:90:43:d5:75:78:21:d0:87:e4:b2: b2:fb:d8:27:55:99:82:8e:68:53:18:f8:1a:88:95: 97:73:d4:5c:33:89:56:99:70:1a:bf:13:72:db:07: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 X509v3 Authority Key Identifier: keyid:35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:5a:ad:82:c4:19:14:18:be:04:96:74:94:f0:7d:52:a7:97: 7f:9a:91:23:04:9d:e3:05:20:a4:14:97:ce:9d:98:20:77:3d: 12:1f:36:dc:6f:d4:9e:89:11:f3:8b:35:0e:d4:6d:c5:af:25: dd:83:95:7f:b5:6b:47:a2:b5:94:d4:d7:04:29:1a:c0:b7:67: 1f:7c:ca:59:c6:c3:d2:77:74:80:93:af:7b:12:57:79:ba:b2: 87:f7:83:ba:4f:d6:3b:66:8c:9c:99:fa:18:4a:77:df:fb:9d: 36:59:12:a8:7e:d6:4c:e8:38:48:c6:f7:23:47:cb:95:f7:9b: 60:e0:e7:2b:71:92:7a:f3:8c:6a:e2:47:11:f8:84:b5:bd:10: c6:3d:ca:e2:66:a9:02:5e:1d:d7:a3:e3:88:3d:cd:5f:4a:2a: eb:ea:8f:98:90:2b:32:a8:15:2c:fd:93:02:db:be:09:91:25: 76:dc:e7:66:2f:80:3b:d9:cd:70:68:c4:e5:33:d7:9d:02:cd: d6:b8:d6:7c:a3:c0:be:ab:0f:9a:a6:3c:57:6e:ac:20:a8:0a: f0:7b:8e:11:cc:92:06:53:23:e8:19:9d:04:bf:7e:33:78:af: 6e:3e:4b:0f:e7:b2:8f:53:bf:97:51:83:5f:83:88:85:86:c0: f6:c4:74:56 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVE RUE4RTVCMTI4NUI5MkIyMTExNzIxMThBMzQxQUIyRERCNzZCNTAeFw0yNTA3MDQx MDE3NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVCRjkxMTg3NDM1RTAx QTg0Mjc3NjM1NUEyRDNGM0QwQzZCNzU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL1kou42mMNqIPxuGr+qK4x8b0TwtpN7196bHS16MkhXx2J2RN 7YCFFLs+E2X1yCczYEFbfWHSr0rEXfQg1bmVHUOV0f2656y5bceKMXzCWkMq9H/a OgZhWWBFX8rj3azOvrPtNclviQzoKqCZ81QnhoHrG4jlVW6376KRqk6Htb5DTjbc 2KowFAP0HiuuHBomDF055mjrEKfqsW+ws+n5iaKOaAogGZqRJ9+lJwX4eRoWgKEN FtwrnKwPimvMsz+NAI5ePz71d4Dk/J5XGCMlv0vA9yNykEPVdXgh0IfksrL72CdV mYKOaFMY+BqIlZdz1FwziVaZcBq/E3LbBxk/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUW/kRh0NeAahCd2NVotPz0Ma3VEcwHwYDVR0jBBgwFoAUNd6o5bEoW5KyERch GKNBqy3bdrUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Mi9OZDZvNWJFb1c1S3lFUmNoR0tOQnF5M2JkclUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05kNm81YkVvVzVLeUVSY2hHS05CcXkzYmRyVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzIvTmQ2bzViRW9XNUt5 RVJjaEdLTkJxeTNiZHJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKharYLEGRQYvgSWdJTwfVKnl3+akSMEneMFIKQUl86dmCB3PRIfNtxv1J6J EfOLNQ7UbcWvJd2DlX+1a0eitZTU1wQpGsC3Zx98ylnGw9J3dICTr3sSV3m6sof3 g7pP1jtmjJyZ+hhKd9/7nTZZEqh+1kzoOEjG9yNHy5X3m2Dg5ytxknrzjGriRxH4 hLW9EMY9yuJmqQJeHdej44g9zV9KKuvqj5iQKzKoFSz9kwLbvgmRJXbc52YvgDvZ zXBoxOUz150Czda41nyjwL6rD5qmPFdurCCoCvB7jhHMkgZTI+gZnQS/fjN4r24+ Sw/nso9Tv5dRg1+DiIWGwPbEdFY= -----END CERTIFICATE-----Generated at Fri Jul 4 14:41:08 2025 by rpki-client