$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft File: 1QAwVnGrPHmFR9q6evmujfSpq34.mft (raw, json) Hash identifier: a20OHudiGbvtqL62/N3p0x8Hv7wxjZsqSYclqsELqJY= Subject key identifier: 51:9B:EB:12:1C:96:AD:C5:6D:A7:0E:F3:92:EE:91:5B:31:F2:0C:59 Authority key identifier: D5:00:30:56:71:AB:3C:79:85:47:DA:BA:7A:F9:AE:8D:F4:A9:AB:7E Certificate issuer: /CN=D500305671AB3C798547DABA7AF9AE8DF4A9AB7E Certificate serial: 0998 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft Manifest number: 0998 Signing time: Fri 04 Jul 2025 05:15:12 +0000 Manifest this update: Fri 04 Jul 2025 05:15:12 +0000 Manifest next update: Fri 04 Jul 2025 11:15:12 +0000 Files and hashes: 1: 1QAwVnGrPHmFR9q6evmujfSpq34.crl (hash: ilmFTnvDDYDvW8r+fBnuFcQbPKHpvq5nbKj21/QD1kk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2456 (0x998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D500305671AB3C798547DABA7AF9AE8DF4A9AB7E Validity Not Before: Jul 4 05:15:12 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=519BEB121C96ADC56DA70EF392EE915B31F20C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:5a:08:12:50:fa:ce:7c:45:93:8e:c2:f6: 34:b9:5d:99:04:ed:34:b6:83:ce:51:0e:c1:d8:8a: 14:31:34:78:ee:11:e8:2a:6d:b3:19:27:2c:cc:42: 98:88:77:8d:3b:da:71:84:e2:bf:80:38:3d:10:8b: 4e:cd:b7:89:72:95:d6:d2:e5:8e:c9:15:67:df:6e: 49:8e:49:52:59:5b:db:ee:b2:6d:b0:e8:69:f4:68: 2e:af:82:e4:b3:19:42:7f:d1:da:18:88:9c:43:26: a5:40:23:da:aa:f8:7a:13:ad:c9:75:20:cc:67:4d: 97:f4:7b:ac:01:18:52:84:28:52:24:d6:87:cd:c3: f1:bf:ab:d7:a0:f2:2c:bf:71:7f:c4:a3:96:e4:91: d1:53:27:f9:84:60:c8:9a:c0:78:e7:01:39:ec:dd: ff:27:4c:45:cb:58:48:a9:63:24:91:b5:e5:21:07: a2:f4:34:14:df:fd:6b:0f:e6:71:72:e2:a1:86:bb: a8:9f:a3:6c:8b:b0:37:d1:8e:cd:1c:40:71:bd:70: b2:12:ae:6d:24:56:16:d2:79:db:57:9e:67:54:33: c7:fc:a2:f2:42:29:c6:5d:64:b7:62:d6:7f:da:cd: 96:f1:ff:1c:ef:fa:e3:54:6f:94:dc:4a:47:f9:52: 00:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9B:EB:12:1C:96:AD:C5:6D:A7:0E:F3:92:EE:91:5B:31:F2:0C:59 X509v3 Authority Key Identifier: keyid:D5:00:30:56:71:AB:3C:79:85:47:DA:BA:7A:F9:AE:8D:F4:A9:AB:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1QAwVnGrPHmFR9q6evmujfSpq34.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3267/1QAwVnGrPHmFR9q6evmujfSpq34.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2d:7a:dd:d7:46:0e:60:c7:26:5a:dd:d6:b8:d0:95:9b:e7: 3b:02:0a:4b:92:d4:20:c8:55:51:3b:c3:3a:0f:7e:42:05:e3: 53:3d:bb:c7:02:a4:c1:1c:98:ef:f5:38:4c:8f:87:26:ed:e3: a0:68:c0:65:1a:99:22:91:07:5c:f6:b6:56:dc:05:c0:78:4b: a4:f4:79:dd:3f:d5:62:8c:7e:e3:f7:b9:2d:18:ad:d9:23:cb: 53:c5:04:c5:25:1c:08:a9:eb:51:71:19:24:6e:e4:64:7b:28: 68:9e:3e:cc:47:55:5b:16:be:de:c6:18:dd:4b:52:37:a5:12: 47:7b:47:62:b5:20:af:a1:84:b8:ad:61:bf:8c:40:37:78:92: 82:b1:2a:8a:41:29:9d:b2:eb:a3:d4:cc:5c:54:f2:51:8b:68: 53:92:e2:9f:7d:2b:e7:d6:d7:5c:b4:e5:55:b8:b3:1b:f1:09: 9c:6c:68:aa:99:6d:c9:63:2e:c1:73:16:80:40:9c:63:9e:e9: 14:9b:16:6d:28:37:1b:a8:87:d4:17:80:df:61:fb:1c:da:77: 9a:0a:6a:68:4b:f2:aa:07:09:7a:71:8a:37:25:81:12:5e:b8: 09:89:65:23:6e:d2:93:8b:73:0d:3d:9a:11:c3:97:2b:ba:67: d8:42:4f:52 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDUw MDMwNTY3MUFCM0M3OTg1NDdEQUJBN0FGOUFFOERGNEE5QUI3RTAeFw0yNTA3MDQw NTE1MTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUxOUJFQjEyMUM5NkFE QzU2REE3MEVGMzkyRUU5MTVCMzFGMjBDNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD/FoIElD6znxFk47C9jS5XZkE7TS2g85RDsHYihQxNHjuEegq bbMZJyzMQpiId4072nGE4r+AOD0Qi07Nt4lyldbS5Y7JFWffbkmOSVJZW9vusm2w 6Gn0aC6vguSzGUJ/0doYiJxDJqVAI9qq+HoTrcl1IMxnTZf0e6wBGFKEKFIk1ofN w/G/q9eg8iy/cX/Eo5bkkdFTJ/mEYMiawHjnATns3f8nTEXLWEipYySRteUhB6L0 NBTf/WsP5nFy4qGGu6ifo2yLsDfRjs0cQHG9cLISrm0kVhbSedtXnmdUM8f8ovJC KcZdZLdi1n/azZbx/xzv+uNUb5TcSkf5UgAVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUZvrEhyWrcVtpw7zku6RWzHyDFkwHwYDVR0jBBgwFoAU1QAwVnGrPHmFR9q6 evmujfSpq34wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ny8xUUF3Vm5HclBIbUZSOXE2ZXZtdWpmU3BxMzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzFRQXdWbkdyUEhtRlI5cTZldm11amZTcHEzNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjcvMVFBd1ZuR3JQSG1G UjlxNmV2bXVqZlNwcTM0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGMtet3XRg5gxyZa3da40JWb5zsCCkuS1CDIVVE7wzoPfkIF41M9u8cCpMEc mO/1OEyPhybt46BowGUamSKRB1z2tlbcBcB4S6T0ed0/1WKMfuP3uS0Yrdkjy1PF BMUlHAip61FxGSRu5GR7KGiePsxHVVsWvt7GGN1LUjelEkd7R2K1IK+hhLitYb+M QDd4koKxKopBKZ2y66PUzFxU8lGLaFOS4p99K+fW11y05VW4sxvxCZxsaKqZbclj LsFzFoBAnGOe6RSbFm0oNxuoh9QXgN9h+xzad5oKamhL8qoHCXpxijclgRJeuAmJ ZSNu0pOLcw09mhHDlyu6Z9hCT1I= -----END CERTIFICATE-----Generated at Fri Jul 4 10:35:35 2025 by rpki-client