$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft File: 5cbO_IeC-JcxoscpZu3Bgdq1riI.mft (raw, json) Hash identifier: XQ8iOvTMaamDxJvh5IcRwqeFuqG+JEbaHlJixQvW/rE= Subject key identifier: 98:43:5C:DE:99:E9:3B:E3:3B:BA:E9:56:49:44:67:F0:A8:EE:4A:49 Authority key identifier: E5:C6:CE:FC:87:82:F8:97:31:A2:C7:29:66:ED:C1:81:DA:B5:AE:22 Certificate issuer: /CN=E5C6CEFC8782F89731A2C72966EDC181DAB5AE22 Certificate serial: 0A1E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft Manifest number: 0A1E Signing time: Fri 04 Jul 2025 09:42:18 +0000 Manifest this update: Fri 04 Jul 2025 09:42:18 +0000 Manifest next update: Fri 04 Jul 2025 15:42:18 +0000 Files and hashes: 1: 5cbO_IeC-JcxoscpZu3Bgdq1riI.crl (hash: mDYF7dDFaq8jzgqfa957duGWrUTIlY6X8ZvkvKw6u4k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5C6CEFC8782F89731A2C72966EDC181DAB5AE22 Validity Not Before: Jul 4 09:42:18 2025 GMT Not After : Apr 9 06:27:19 2026 GMT Subject: CN=98435CDE99E93BE33BBAE956494467F0A8EE4A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:24:c2:19:52:91:06:da:f7:c7:99:b5:3c: a8:f6:0f:db:ed:2f:53:05:88:13:a2:3f:72:93:bb: 2d:03:67:5b:c9:bd:85:47:38:2e:3f:e9:34:1e:96: f2:80:87:b2:c7:9a:10:7d:db:e7:f3:6c:42:bf:f2: 83:b5:38:cf:9d:91:6d:43:21:ef:44:10:d1:d3:56: 31:4d:8b:1b:3a:7c:c8:09:14:44:dc:90:d0:1b:0d: d0:89:f0:60:f2:c2:9c:50:4f:5d:7f:a0:72:d0:f3: 96:db:e9:67:34:58:c8:d5:1e:2e:67:61:ae:80:f3: 92:23:88:a3:d7:2b:b9:93:78:f1:3b:9a:5d:83:ed: 50:ca:90:46:64:f1:a1:48:ac:ca:fc:01:39:fc:ab: d4:2a:d7:f8:6a:fe:14:cd:ab:7d:c9:b8:c5:72:10: 75:b1:4b:f6:13:08:16:65:03:1b:7d:ab:a7:2f:35: 4d:45:b3:6d:0e:5c:a8:09:43:9e:50:c8:57:6e:50: 32:95:c2:54:f0:3e:a2:77:ae:9e:0b:ff:40:a3:2c: 24:cf:01:66:39:76:01:6a:9b:5f:9b:36:6f:f1:a6: f7:57:46:52:5c:b2:b6:b1:75:a6:a1:6a:56:da:94: 40:20:33:59:8a:10:ec:98:4a:f7:fe:11:36:30:f4: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:43:5C:DE:99:E9:3B:E3:3B:BA:E9:56:49:44:67:F0:A8:EE:4A:49 X509v3 Authority Key Identifier: keyid:E5:C6:CE:FC:87:82:F8:97:31:A2:C7:29:66:ED:C1:81:DA:B5:AE:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:56:bb:c2:4e:45:a8:b7:6d:42:91:54:47:a2:1c:d6:13:01: c7:0b:79:27:12:b0:62:35:35:e9:89:cc:f2:13:44:cb:ee:b0: a8:f1:09:94:28:8d:11:40:f7:8c:ff:d9:51:00:bc:97:d9:a8: 8c:56:e2:45:66:15:4e:2f:c5:8b:89:dc:3c:54:87:ab:f1:66: 92:be:06:ef:43:2a:b6:13:86:01:03:d1:57:99:69:27:91:f7: 0a:f2:6e:0c:7b:8c:84:32:18:cf:d2:2f:8f:5a:bf:4a:15:12: 7c:25:54:7e:84:f0:a6:f1:63:66:94:9b:ea:d9:c7:7b:d5:c0: 6d:f1:e2:1e:59:ff:75:88:07:28:c6:12:a2:08:dc:37:88:5d: e4:bc:66:0f:0b:8b:58:89:13:b6:ad:99:e5:c3:c6:97:56:6b: 31:06:3a:1e:ce:0e:6d:28:29:b1:6a:ae:59:15:0a:fa:52:b1: d5:91:99:e9:91:22:21:be:ff:79:ba:89:76:77:b4:4a:e5:9e: 4c:35:38:39:b8:cc:11:a0:0e:dd:87:cd:ef:64:ff:05:25:cc: e5:62:fa:5a:05:0b:8e:55:00:88:66:7e:16:7d:e2:da:60:52: 1c:08:2d:00:32:c5:32:69:1a:5a:91:1a:86:88:52:b0:86:07: 1c:fd:af:f8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTVD NkNFRkM4NzgyRjg5NzMxQTJDNzI5NjZFREMxODFEQUI1QUUyMjAeFw0yNTA3MDQw OTQyMThaFw0yNjA0MDkwNjI3MTlaMDMxMTAvBgNVBAMTKDk4NDM1Q0RFOTlFOTNC RTMzQkJBRTk1NjQ5NDQ2N0YwQThFRTRBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjfSTCGVKRBtr3x5m1PKj2D9vtL1MFiBOiP3KTuy0DZ1vJvYVH OC4/6TQelvKAh7LHmhB92+fzbEK/8oO1OM+dkW1DIe9EENHTVjFNixs6fMgJFETc kNAbDdCJ8GDywpxQT11/oHLQ85bb6Wc0WMjVHi5nYa6A85IjiKPXK7mTePE7ml2D 7VDKkEZk8aFIrMr8ATn8q9Qq1/hq/hTNq33JuMVyEHWxS/YTCBZlAxt9q6cvNU1F s20OXKgJQ55QyFduUDKVwlTwPqJ3rp4L/0CjLCTPAWY5dgFqm1+bNm/xpvdXRlJc sraxdaahalbalEAgM1mKEOyYSvf+ETYw9PQHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmENc3pnpO+M7uulWSURn8KjuSkkwHwYDVR0jBBgwFoAU5cbO/IeC+Jcxoscp Zu3Bgdq1riIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Mi81Y2JPX0llQy1KY3hvc2NwWnUzQmdkcTFyaUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVjYk9fSWVDLUpjeG9zY3BadTNCZ2RxMXJpSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjIvNWNiT19JZUMtSmN4 b3NjcFp1M0JnZHExcmlJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGlWu8JORai3bUKRVEeiHNYTAccLeScSsGI1NemJzPITRMvusKjxCZQojRFA 94z/2VEAvJfZqIxW4kVmFU4vxYuJ3DxUh6vxZpK+Bu9DKrYThgED0VeZaSeR9wry bgx7jIQyGM/SL49av0oVEnwlVH6E8KbxY2aUm+rZx3vVwG3x4h5Z/3WIByjGEqII 3DeIXeS8Zg8Li1iJE7atmeXDxpdWazEGOh7ODm0oKbFqrlkVCvpSsdWRmemRIiG+ /3m6iXZ3tErlnkw1ODm4zBGgDt2Hze9k/wUlzOVi+loFC45VAIhmfhZ94tpgUhwI LQAyxTJpGlqRGoaIUrCGBxz9r/g= -----END CERTIFICATE-----Generated at Fri Jul 4 13:53:26 2025 by rpki-client