$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft File: 4slCx2IRPXOTmcfzC8gfLWJqobc.mft (raw, json) Hash identifier: KDW0PvNSYklaDpXR4weeABN2yWg6wNwd83jZMGZ0/Jo= Subject key identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC Authority key identifier: E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 Certificate issuer: /CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Certificate serial: 08D0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft Manifest number: 08D0 Signing time: Fri 04 Jul 2025 15:41:58 +0000 Manifest this update: Fri 04 Jul 2025 15:41:58 +0000 Manifest next update: Fri 04 Jul 2025 21:41:58 +0000 Files and hashes: 1: 4slCx2IRPXOTmcfzC8gfLWJqobc.crl (hash: li9+zeLgXslBm5BgOCPd4FJEL5ZVAtl5jHMQItT7fEs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 20:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2256 (0x8d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Validity Not Before: Jul 4 15:41:58 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=ECD0886A534F8BE060B89A2D32AB5AB101692BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:aa:25:ff:2a:95:f7:42:70:b9:92:28:4f: 59:4f:af:85:d1:d3:ec:1b:97:11:2a:33:9b:99:50: 5a:48:e3:ff:41:72:78:0e:8d:6a:0d:09:6a:e7:dd: ad:8b:09:08:95:b6:80:02:8a:11:ff:f1:da:44:0b: 03:4e:cf:a9:ec:21:0c:33:02:45:9d:eb:47:a6:42: b2:33:33:ae:c8:8d:16:7a:1e:b0:58:7a:de:98:51: f7:37:00:6c:91:70:f6:9b:77:0d:30:20:e9:20:da: 92:1f:98:39:6d:f8:8f:ff:cb:fb:cd:4a:55:11:6c: b9:92:dc:18:e1:8e:f0:76:97:51:ad:bc:0a:69:db: 7b:20:9f:3d:1c:4b:54:e1:a9:f6:db:0f:70:d8:f7: 89:5d:b7:14:d9:75:d1:12:21:0d:1a:30:3b:2c:5f: ab:e9:1e:7a:1f:b8:58:83:74:99:f8:ec:9e:85:be: c3:cc:05:ae:02:41:6a:be:b5:f8:42:71:a5:df:dc: 66:c8:10:2b:24:fc:0c:81:36:9c:37:44:e6:93:54: 7f:6b:59:6f:87:12:53:3e:7f:b1:36:c7:14:5a:7f: e2:94:66:da:81:dc:e6:90:a9:ed:6b:93:d3:23:57: 39:53:d9:ab:5b:39:94:c9:97:a8:66:c3:be:31:ce: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC X509v3 Authority Key Identifier: keyid:E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:7b:72:23:cb:71:81:b2:fc:36:58:72:0d:7a:fc:f9:73:a1: 74:f7:38:83:35:2b:d3:bd:8a:a5:9f:d4:c5:12:33:df:28:e9: 19:91:b3:fa:19:d7:80:2c:f0:07:46:5e:e0:9e:3c:fa:65:f2: 68:9b:02:ec:46:f8:af:be:49:a3:33:49:72:eb:e8:ee:a3:d1: 8e:ca:8f:56:ca:25:c3:8d:d9:25:1a:83:00:a8:2e:40:2d:02: dd:7d:80:68:d1:38:aa:1b:28:e3:cc:fd:33:b9:b7:f3:28:cc: 0d:7f:3a:05:1a:1a:f6:b1:3a:ae:4d:19:be:c0:68:2e:24:4e: 03:b0:c2:8d:2f:fa:f1:7d:4e:da:6b:13:2b:bc:40:44:aa:41: f6:76:8e:9f:d5:09:ac:53:a2:b9:0a:38:ae:d7:ea:2a:84:e1: ff:e2:c6:e2:1f:aa:b2:03:f8:52:d0:25:1f:f5:2c:e6:ba:d6: b1:d7:66:f6:15:5d:86:ca:00:4a:65:c3:8f:3f:bb:a8:70:0d: dd:07:aa:c1:cf:23:8e:82:3c:3a:14:04:de:bc:42:ec:82:3e: 70:9d:27:4d:08:1e:cb:5c:26:11:d3:d9:4a:ec:2f:0f:9f:53: b0:85:6c:81:de:86:05:4f:ac:b8:65:f1:be:7a:78:91:30:32: 16:52:b5:fd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTJD OTQyQzc2MjExM0Q3MzkzOTlDN0YzMEJDODFGMkQ2MjZBQTFCNzAeFw0yNTA3MDQx NTQxNThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVDRDA4ODZBNTM0RjhC RTA2MEI4OUEyRDMyQUI1QUIxMDE2OTJCRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Wqol/yqV90JwuZIoT1lPr4XR0+wblxEqM5uZUFpI4/9BcngO jWoNCWrn3a2LCQiVtoACihH/8dpECwNOz6nsIQwzAkWd60emQrIzM67IjRZ6HrBY et6YUfc3AGyRcPabdw0wIOkg2pIfmDlt+I//y/vNSlURbLmS3BjhjvB2l1GtvApp 23sgnz0cS1ThqfbbD3DY94ldtxTZddESIQ0aMDssX6vpHnofuFiDdJn47J6FvsPM Ba4CQWq+tfhCcaXf3GbIECsk/AyBNpw3ROaTVH9rWW+HElM+f7E2xxRaf+KUZtqB 3OaQqe1rk9MjVzlT2atbOZTJl6hmw74xzphRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7NCIalNPi+BguJotMqtasQFpK/wwHwYDVR0jBBgwFoAU4slCx2IRPXOTmcfz C8gfLWJqobcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My80c2xDeDJJUlBYT1RtY2Z6QzhnZkxXSnFvYmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRzbEN4MklSUFhPVG1jZnpDOGdmTFdKcW9iYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvNHNsQ3gySVJQWE9U bWNmekM4Z2ZMV0pxb2JjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALp7ciPLcYGy/DZYcg16/PlzoXT3OIM1K9O9iqWf1MUSM98o6RmRs/oZ14As 8AdGXuCePPpl8mibAuxG+K++SaMzSXLr6O6j0Y7Kj1bKJcON2SUagwCoLkAtAt19 gGjROKobKOPM/TO5t/MozA1/OgUaGvaxOq5NGb7AaC4kTgOwwo0v+vF9TtprEyu8 QESqQfZ2jp/VCaxTorkKOK7X6iqE4f/ixuIfqrID+FLQJR/1LOa61rHXZvYVXYbK AEplw48/u6hwDd0HqsHPI46CPDoUBN68QuyCPnCdJ00IHstcJhHT2UrsLw+fU7CF bIHehgVPrLhl8b56eJEwMhZStf0= -----END CERTIFICATE-----Generated at Fri Jul 4 18:52:12 2025 by rpki-client