$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft File: mrrecAs2LxliBhrdcaRLR6WWdCI.mft (raw, json) Hash identifier: qnpsIQtg9/Iunb4mltRz1gqKe52CH6knzFDBboGBk5E= Subject key identifier: 23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B Authority key identifier: 9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22 Certificate issuer: /CN=9ABADE700B362F1962061ADD71A44B47A5967422 Certificate serial: 0D4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft Manifest number: 0D4B Signing time: Fri 04 Jul 2025 00:18:28 +0000 Manifest this update: Fri 04 Jul 2025 00:18:27 +0000 Manifest next update: Fri 04 Jul 2025 06:18:27 +0000 Files and hashes: 1: mrrecAs2LxliBhrdcaRLR6WWdCI.crl (hash: XV0SZvbgDc9mzFqdkQXXFhhlnWToWtOYjUXs4Y99DzY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3403 (0xd4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ABADE700B362F1962061ADD71A44B47A5967422 Validity Not Before: Jul 4 00:18:27 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=236CA93F1D5B9BC23F52190F2875A25D0BEAD53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:43:18:04:af:03:61:6d:a6:62:30:e1:8b:fd: 57:73:5b:df:6c:8b:d4:94:40:0f:00:21:6f:76:c1: 06:a7:fa:b0:8e:16:44:bf:13:41:15:85:80:45:62: 44:c6:be:db:f9:4b:43:98:db:59:c5:47:34:4d:a9: 94:fd:d3:4b:02:c5:e2:7f:5e:06:b2:9b:a2:95:11: 1a:f9:74:c9:2d:e8:39:6d:46:40:6a:71:29:f4:1e: 21:8f:71:30:09:2a:62:5b:2e:a4:e9:d7:57:c9:c6: 3a:ba:6f:32:95:c0:ea:c7:45:3c:ac:91:20:43:f2: 03:17:4a:5c:c9:9e:a2:70:75:35:9f:6f:40:f6:f4: 0b:66:7b:68:c6:bb:77:f3:56:49:a1:ad:8f:50:de: df:c1:e5:1f:32:7c:c6:4f:8b:e5:4a:f4:e6:c7:c4: 5e:92:2d:53:02:e0:e3:47:65:63:31:9d:c9:7d:ce: 9c:d2:13:fc:4c:40:b2:7b:7b:b6:d3:32:f4:98:2b: 68:bd:c0:b1:95:7c:b4:f6:43:8a:89:2e:b2:33:f5: fd:9e:59:54:6a:8e:65:7e:40:d2:c8:fc:d3:9a:db: 05:4c:13:1b:7a:48:1e:52:de:8d:5a:e8:0c:29:f6: 97:c3:30:85:d5:95:23:b0:7d:df:80:ef:8b:d4:5a: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6C:A9:3F:1D:5B:9B:C2:3F:52:19:0F:28:75:A2:5D:0B:EA:D5:3B X509v3 Authority Key Identifier: keyid:9A:BA:DE:70:0B:36:2F:19:62:06:1A:DD:71:A4:4B:47:A5:96:74:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mrrecAs2LxliBhrdcaRLR6WWdCI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3235/mrrecAs2LxliBhrdcaRLR6WWdCI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:fe:96:6f:32:22:e8:bc:97:48:8c:af:71:4f:23:30:97:5d: 43:d0:72:64:78:a8:82:ec:85:dd:26:11:be:3a:62:0d:5f:a1: 65:cf:3d:b1:19:49:8b:b7:e3:6e:b6:3e:ab:fb:38:69:97:d4: e4:ac:0f:cf:ed:d1:e6:5c:27:3c:ff:ac:ab:53:95:c9:3b:b6: cc:df:7e:2a:95:98:ba:ca:d4:0c:d1:fb:70:7a:fe:83:12:20: e3:13:30:54:f3:65:fa:d9:03:a2:57:9b:1e:1a:d5:e5:2e:63: 35:32:0f:4d:61:04:ec:30:13:b0:d1:e0:9c:b8:63:43:d9:24: b9:c7:55:32:17:70:cc:0f:a1:bc:e2:71:11:7c:d1:29:0a:42: d7:0c:5c:ce:99:e2:4e:0b:14:2d:76:b9:59:70:88:e4:a1:05: 0d:10:20:2e:f9:ad:d2:97:00:8a:26:e0:7e:6a:dd:6c:3e:d1: ba:b4:72:cb:06:35:4c:94:89:5a:6e:36:fe:0e:54:6c:b3:29: 65:fd:6b:00:82:c4:73:10:73:79:54:0c:f2:66:30:d9:8c:7c: 46:fa:c7:18:9d:08:06:76:11:72:26:59:f1:b6:d0:fa:c3:45: bd:a3:54:11:b6:2c:b0:bc:cc:64:35:6e:5c:59:5e:c7:2b:77: 8a:e1:98:f1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUFC QURFNzAwQjM2MkYxOTYyMDYxQURENzFBNDRCNDdBNTk2NzQyMjAeFw0yNTA3MDQw MDE4MjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIzNkNBOTNGMUQ1QjlC QzIzRjUyMTkwRjI4NzVBMjVEMEJFQUQ1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjQxgErwNhbaZiMOGL/VdzW99si9SUQA8AIW92wQan+rCOFkS/ E0EVhYBFYkTGvtv5S0OY21nFRzRNqZT900sCxeJ/Xgaym6KVERr5dMkt6DltRkBq cSn0HiGPcTAJKmJbLqTp11fJxjq6bzKVwOrHRTyskSBD8gMXSlzJnqJwdTWfb0D2 9Atme2jGu3fzVkmhrY9Q3t/B5R8yfMZPi+VK9ObHxF6SLVMC4ONHZWMxncl9zpzS E/xMQLJ7e7bTMvSYK2i9wLGVfLT2Q4qJLrIz9f2eWVRqjmV+QNLI/NOa2wVMExt6 SB5S3o1a6Awp9pfDMIXVlSOwfd+A74vUWtzHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUI2ypPx1bm8I/UhkPKHWiXQvq1TswHwYDVR0jBBgwFoAUmrrecAs2LxliBhrd caRLR6WWdCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz NS9tcnJlY0FzMkx4bGlCaHJkY2FSTFI2V1dkQ0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL21ycmVjQXMyTHhsaUJocmRjYVJMUjZXV2RDSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzUvbXJyZWNBczJMeGxp QmhyZGNhUkxSNldXZENJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAb+lm8yIui8l0iMr3FPIzCXXUPQcmR4qILshd0mEb46Yg1foWXPPbEZSYu3 4262Pqv7OGmX1OSsD8/t0eZcJzz/rKtTlck7tszffiqVmLrK1AzR+3B6/oMSIOMT MFTzZfrZA6JXmx4a1eUuYzUyD01hBOwwE7DR4Jy4Y0PZJLnHVTIXcMwPobzicRF8 0SkKQtcMXM6Z4k4LFC12uVlwiOShBQ0QIC75rdKXAIom4H5q3Ww+0bq0cssGNUyU iVpuNv4OVGyzKWX9awCCxHMQc3lUDPJmMNmMfEb6xxidCAZ2EXImWfG20PrDRb2j VBG2LLC8zGQ1blxZXscrd4rhmPE= -----END CERTIFICATE-----Generated at Fri Jul 4 03:34:11 2025 by rpki-client