$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft File: 3-pN9aKB625y06MUKkU2QAzMSM0.mft (raw, json) Hash identifier: TVVcIx/G5jFiIxaZt/qpr/AV/qUOd/van4WtFsm/fak= Subject key identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E Authority key identifier: DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD Certificate issuer: /CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Certificate serial: 08CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft Manifest number: 08CC Signing time: Fri 04 Jul 2025 12:41:54 +0000 Manifest this update: Fri 04 Jul 2025 12:41:54 +0000 Manifest next update: Fri 04 Jul 2025 18:41:54 +0000 Files and hashes: 1: 3-pN9aKB625y06MUKkU2QAzMSM0.crl (hash: 1rBKmMeofGIC9FrK3WXf6uCuPO0QqFBL+zqusvYedKk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2252 (0x8cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Validity Not Before: Jul 4 12:41:54 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=32E7383A6FE497B476EE736359087E501952A06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:18:54:3e:fb:1f:c3:7e:42:12:df:f3:83: 9d:b3:44:25:05:bd:a8:ab:bd:0c:cf:dc:94:de:fd: 7b:8c:e9:64:f0:1b:eb:4f:2b:f2:76:d5:d6:dd:d2: 7d:24:2e:86:41:06:a2:9e:e7:71:08:c6:d2:53:7d: 39:bd:71:79:7d:98:21:bd:48:8f:c6:f3:8c:79:cf: 00:ed:1b:b3:00:db:93:68:bb:b1:1b:e4:7e:db:0a: f7:3c:74:37:29:0d:a0:7c:73:ba:36:4b:08:89:2b: a1:73:b5:f5:08:7e:06:b1:f8:be:6c:59:d6:58:9f: 9b:e4:b8:c7:49:87:72:52:02:16:ed:e8:cc:11:ff: bd:e2:b6:89:f8:71:cf:d1:56:90:89:58:9a:bc:8a: a5:0d:49:26:97:a8:ef:ff:c8:8d:40:a6:23:5e:37: b3:30:21:7c:9c:9e:64:21:44:66:fa:b4:88:d5:36: d5:e8:d9:f2:9e:58:29:7d:61:fa:aa:ee:ca:3b:32: 71:6a:51:c6:d6:15:db:a3:16:3a:9d:7d:d1:10:0d: d4:7a:dd:fc:cc:46:87:89:fb:40:9b:49:ce:93:18: b4:1b:6e:ae:07:23:8a:27:80:09:44:af:5e:4c:ec: b7:d6:2e:26:9a:0d:39:a7:59:46:75:74:40:c4:05: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E X509v3 Authority Key Identifier: keyid:DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:82:e4:7c:8c:de:06:dd:34:3e:f5:22:77:99:21:92:b0:9e: cf:79:a7:b1:6a:bf:67:63:42:1d:d5:13:1b:f6:5d:94:37:69: 36:98:15:fb:fd:64:03:14:99:f5:04:34:30:ae:31:55:4d:f0: c8:25:01:5a:c1:14:61:b4:39:4d:0f:11:58:3a:0d:9c:0f:e8: 7e:e5:95:b4:f7:12:79:ec:bb:ca:ba:0b:96:26:b7:ab:13:15: aa:78:95:cd:61:7a:2c:0f:d7:9f:cb:5b:2e:ce:43:ac:3f:9b: 24:93:ef:bb:7c:95:7d:37:c3:57:2d:f2:53:aa:47:f2:0a:86: 0a:fe:15:7f:fd:e7:e7:1c:20:21:e7:6b:ac:7f:ed:3e:77:4e: 0b:f4:4e:a0:b4:31:07:66:81:5d:30:c3:b9:5d:bc:49:a5:65: 05:cb:28:14:aa:d9:28:4e:65:3d:a9:65:02:7f:60:f5:54:e4: 59:00:74:ee:04:4d:4e:9d:d3:fa:8f:dc:d8:1f:d7:0d:e3:2e: 6a:90:99:c0:26:5e:05:89:a2:e1:02:51:26:f7:5e:fd:fe:78: 02:77:4a:0a:03:01:16:5e:9c:38:be:a6:d2:6a:3d:fd:43:20: dd:f2:9f:91:f8:56:b3:f6:2a:1b:f4:21:6f:2b:c2:9d:b9:df: 0c:81:34:e2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZF QTRERjVBMjgxRUI2RTcyRDNBMzE0MkE0NTM2NDAwQ0NDNDhDRDAeFw0yNTA3MDQx MjQxNTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDMyRTczODNBNkZFNDk3 QjQ3NkVFNzM2MzU5MDg3RTUwMTk1MkEwNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2khhUPvsfw35CEt/zg52zRCUFvairvQzP3JTe/XuM6WTwG+tP K/J21dbd0n0kLoZBBqKe53EIxtJTfTm9cXl9mCG9SI/G84x5zwDtG7MA25Nou7Eb 5H7bCvc8dDcpDaB8c7o2SwiJK6FztfUIfgax+L5sWdZYn5vkuMdJh3JSAhbt6MwR /73iton4cc/RVpCJWJq8iqUNSSaXqO//yI1ApiNeN7MwIXycnmQhRGb6tIjVNtXo 2fKeWCl9Yfqq7so7MnFqUcbWFdujFjqdfdEQDdR63fzMRoeJ+0CbSc6TGLQbbq4H I4ongAlEr15M7LfWLiaaDTmnWUZ1dEDEBRlZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMuc4Om/kl7R27nNjWQh+UBlSoG4wHwYDVR0jBBgwFoAU3+pN9aKB625y06MU KkU2QAzMSM0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My8zLXBOOWFLQjYyNXkwNk1VS2tVMlFBek1TTTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzMtcE45YUtCNjI1eTA2TVVLa1UyUUF6TVNNMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvMy1wTjlhS0I2MjV5 MDZNVUtrVTJRQXpNU00wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHWC5HyM3gbdND71IneZIZKwns95p7Fqv2djQh3VExv2XZQ3aTaYFfv9ZAMU mfUENDCuMVVN8MglAVrBFGG0OU0PEVg6DZwP6H7llbT3Ennsu8q6C5Ymt6sTFap4 lc1heiwP15/LWy7OQ6w/myST77t8lX03w1ct8lOqR/IKhgr+FX/95+ccICHna6x/ 7T53Tgv0TqC0MQdmgV0ww7ldvEmlZQXLKBSq2ShOZT2pZQJ/YPVU5FkAdO4ETU6d 0/qP3Ngf1w3jLmqQmcAmXgWJouECUSb3Xv3+eAJ3SgoDARZenDi+ptJqPf1DIN3y n5H4VrP2Khv0IW8rwp253wyBNOI= -----END CERTIFICATE-----Generated at Fri Jul 4 14:50:02 2025 by rpki-client