$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft File: f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft (raw, json) Hash identifier: j+nd7IRmded70+vdqrhvw24frFGvga8AwRHxqJn8zno= Subject key identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C Authority key identifier: 7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 Certificate issuer: /CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Certificate serial: 0A64 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft Manifest number: 0A64 Signing time: Fri 04 Jul 2025 10:13:25 +0000 Manifest this update: Fri 04 Jul 2025 10:13:25 +0000 Manifest next update: Fri 04 Jul 2025 16:13:25 +0000 Files and hashes: 1: f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl (hash: 0d+k79rFdxWFET5BJhNOIf2qbtGD69EZUNPHFjgOJ+k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 16:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2660 (0xa64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Validity Not Before: Jul 4 10:13:25 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=229A4488A06AE99167E29F0F5A53BEC21DE1AF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:be:bb:ac:d1:89:8b:e9:9a:bd:0b:83:83: 9c:a1:61:ea:25:ae:7c:c1:ca:6d:8b:87:e0:26:fd: c1:96:8f:48:ce:ef:af:d8:a8:d4:7f:d1:60:3d:53: 7e:5c:f8:19:fb:bc:08:e2:9b:aa:84:76:cc:8f:d1: ff:37:07:44:cd:5f:44:d8:94:2b:8e:47:8e:ee:b6: 26:a5:83:8d:22:a9:b6:b3:2e:83:84:0c:a4:1a:b3: e7:43:ab:32:25:a3:7a:d1:7e:52:6c:6c:63:d5:e3: c7:34:37:4b:81:10:bd:cf:c5:4f:be:90:ea:27:fa: 9b:52:ae:60:00:63:e1:4e:d0:3c:99:d3:e2:59:b4: b6:b3:1b:c1:0a:e2:46:e7:5a:73:f3:b7:86:c7:fc: 5c:fe:0c:29:61:b8:4d:fa:b1:fa:d5:a5:ca:2f:4e: 25:06:03:4c:89:c1:53:ff:18:2c:19:3b:74:b3:76: 1b:75:22:7e:04:00:7d:8d:60:d1:f2:33:df:ec:54: bc:2b:30:4f:8f:d7:11:21:7e:d5:32:5a:74:81:dc: 6c:68:72:4b:32:68:55:4f:6a:1c:1b:0e:7a:86:32: 8e:32:ce:2f:96:03:00:e8:f2:49:45:83:78:8a:51: e5:27:23:8d:c2:1f:b5:7f:8c:e3:eb:7b:e4:24:b1: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C X509v3 Authority Key Identifier: keyid:7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e9:29:a5:de:e8:05:33:c7:dd:a2:75:ca:ae:a6:49:06:18: d0:7b:c7:ab:7c:dc:4f:c7:f2:bc:ee:57:bc:28:17:99:0c:9c: 84:9b:3b:99:0e:64:79:30:8d:9b:e6:cd:b9:4e:fe:45:ac:64: 1d:f0:32:20:e7:fc:5d:3c:49:52:cc:05:34:bc:ca:fb:f5:d5: f4:84:d7:53:2d:6b:56:d8:09:53:0d:89:6c:68:16:82:22:68: f7:14:31:6b:57:f1:f2:91:4b:8f:cd:bc:c2:b3:90:6b:55:90: f4:e2:58:98:a6:cd:18:ab:08:25:a9:50:22:93:f2:1a:a1:7f: 2f:fa:a5:11:2d:ca:61:d7:f3:20:ae:b3:ed:f1:32:ea:86:e9: 70:16:99:f6:cc:85:d4:48:3b:13:38:88:46:58:5e:d6:f3:55: 56:28:18:09:77:4f:2e:fd:56:a5:36:51:56:67:0a:2e:a1:9c: 1a:58:0e:e3:27:4b:e3:5a:79:1c:d1:d1:c0:b3:e2:a5:19:2d: 22:d0:78:2f:9f:71:6d:d9:db:b9:ad:79:b4:0c:44:86:08:f0: e0:c5:6b:4d:a8:34:0b:6e:85:1f:ba:5a:2b:24:9f:02:31:a3: f1:60:e1:5d:b3:0c:7f:43:2c:7b:a2:29:fb:94:e6:e2:bd:37: 76:fb:17:c2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Y5 MThDRjI2NTAzRDFGOUJDRkE3N0RDMEFBNTkyQTU3RERGODI0NTAeFw0yNTA3MDQx MDEzMjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIyOUE0NDg4QTA2QUU5 OTE2N0UyOUYwRjVBNTNCRUMyMURFMUFGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHhb67rNGJi+mavQuDg5yhYeolrnzBym2Lh+Am/cGWj0jO76/Y qNR/0WA9U35c+Bn7vAjim6qEdsyP0f83B0TNX0TYlCuOR47utialg40iqbazLoOE DKQas+dDqzIlo3rRflJsbGPV48c0N0uBEL3PxU++kOon+ptSrmAAY+FO0DyZ0+JZ tLazG8EK4kbnWnPzt4bH/Fz+DClhuE36sfrVpcovTiUGA0yJwVP/GCwZO3Szdht1 In4EAH2NYNHyM9/sVLwrME+P1xEhftUyWnSB3GxocksyaFVPahwbDnqGMo4yzi+W AwDo8klFg3iKUeUnI43CH7V/jOPre+QksWjNAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIppEiKBq6ZFn4p8PWlO+wh3hrywwHwYDVR0jBBgwFoAUf5GM8mUD0fm8+nfc CqWSpX3fgkUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 NS9mNUdNOG1VRDBmbTgtbmZjQ3FXU3BYM2Zna1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2Y1R004bVVEMGZtOC1uZmNDcVdTcFgzZmdrVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTUvZjVHTThtVUQwZm04 LW5mY0NxV1NwWDNmZ2tVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADrpKaXe6AUzx92idcqupkkGGNB7x6t83E/H8rzuV7woF5kMnISbO5kOZHkw jZvmzblO/kWsZB3wMiDn/F08SVLMBTS8yvv11fSE11Mta1bYCVMNiWxoFoIiaPcU MWtX8fKRS4/NvMKzkGtVkPTiWJimzRirCCWpUCKT8hqhfy/6pREtymHX8yCus+3x MuqG6XAWmfbMhdRIOxM4iEZYXtbzVVYoGAl3Ty79VqU2UVZnCi6hnBpYDuMnS+Na eRzR0cCz4qUZLSLQeC+fcW3Z27mtebQMRIYI8ODFa02oNAtuhR+6WisknwIxo/Fg 4V2zDH9DLHuiKfuU5uK9N3b7F8I= -----END CERTIFICATE-----Generated at Fri Jul 4 15:40:48 2025 by rpki-client