$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft File: gZQTSW-NG4qcKpMSrCzZAljzOwY.mft (raw, json) Hash identifier: UVmg4o3119GTMcRco19tcsE/jUttjeln52Y652hDDTA= Subject key identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 Authority key identifier: 81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 Certificate issuer: /CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Certificate serial: 08BD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft Manifest number: 08BD Signing time: Sat 05 Jul 2025 08:12:38 +0000 Manifest this update: Sat 05 Jul 2025 08:12:38 +0000 Manifest next update: Sat 05 Jul 2025 14:12:38 +0000 Files and hashes: 1: gZQTSW-NG4qcKpMSrCzZAljzOwY.crl (hash: Z2ACOlt2zZR8bUxVpns+qiIEXwR8+cS98P9AAgLUdI0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 10:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Validity Not Before: Jul 5 08:12:38 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F2C73B6A70D55B1DCC1B9C1A49EC30072DE52F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:33:cf:4b:fb:56:6e:ed:e3:50:6f:3b:53: 3c:bb:0b:40:dc:1c:90:08:49:23:e6:ce:50:45:7f: ff:23:c6:2b:58:ae:5a:0d:3f:47:dc:5b:8c:4d:93: 7f:6c:19:c2:d5:1d:d8:79:2f:45:20:67:86:c3:cd: 9b:f5:0a:27:d9:8d:82:23:4a:de:4e:47:39:e1:80: 00:72:05:d9:18:64:98:cc:e7:39:03:f7:38:e4:b6: 0f:6d:6a:f5:25:bb:2a:ac:d6:c1:4c:dc:fa:14:ee: 12:68:09:3b:35:e1:99:1d:35:c7:92:c8:ab:6a:f0: c1:2d:c0:74:9e:3e:15:69:5a:6a:f5:4c:82:49:70: 62:73:b4:80:d7:d7:1d:62:b5:e6:cc:a0:fb:fb:60: 9f:de:64:cf:d0:57:c7:c2:a9:ee:1f:1e:0c:16:23: d3:91:cc:14:eb:63:79:5c:ef:a5:bf:96:dc:2d:e4: 0a:2c:fa:06:44:e2:95:9b:2e:f2:8e:c0:7e:54:88: 49:ce:58:b5:b5:35:72:e6:a2:a7:7c:e4:ae:2f:4b: 9e:ff:e4:44:0e:d7:1f:8d:77:f2:f1:b8:87:a1:f4: 8e:b9:ae:07:8f:e5:cc:b5:d3:ed:e0:dd:0d:21:1f: 20:c3:2b:cc:10:4e:d6:78:68:65:14:62:a3:d0:c5: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 X509v3 Authority Key Identifier: keyid:81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a5:c1:32:6f:9a:4c:29:62:79:c1:01:94:0d:f1:de:33:c6: b6:46:ae:ad:37:5a:89:07:f5:22:1c:9c:34:db:e4:74:3b:35: 61:df:1d:8c:e9:36:49:cb:17:f1:05:69:c4:2e:1a:49:d4:be: d2:76:ae:34:39:2d:7f:c0:6a:7a:0f:43:bb:43:37:57:66:a2: ea:d7:9e:1f:6e:6e:63:63:95:3b:a3:cb:18:00:4a:2b:0c:53: 9d:c5:39:42:bc:16:1d:52:cb:46:c5:2c:17:8a:72:d2:32:2f: f9:3c:03:92:e6:aa:8d:21:00:bc:21:ff:63:0b:94:26:79:41: 97:b4:ce:e4:1a:8a:2e:5c:94:aa:e7:14:62:c2:cd:8c:0f:3c: 7a:2b:ac:64:cd:03:c0:35:e4:25:88:b9:f9:b8:d8:cd:e2:4c: 69:56:a0:ba:ba:39:69:33:a7:58:eb:9a:ba:10:4a:ec:57:aa: 44:15:a9:6f:fa:3c:f7:a6:9d:00:24:ab:79:b0:4c:fe:55:e2: 24:d6:94:6b:5c:20:28:ab:e1:82:75:57:7a:20:b3:c5:6f:70: 59:e5:61:1d:15:72:85:a6:a6:eb:11:c1:52:d8:96:7c:4d:3e: bd:f2:5f:56:16:4b:ad:c5:9b:5e:d4:e2:22:62:77:82:cb:92: a3:34:72:52 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODE5 NDEzNDk2RjhEMUI4QTlDMkE5MzEyQUMyQ0Q5MDI1OEYzM0IwNjAeFw0yNTA3MDUw ODEyMzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYyQzczQjZBNzBENTVC MURDQzFCOUMxQTQ5RUMzMDA3MkRFNTJGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNFzPPS/tWbu3jUG87Uzy7C0DcHJAISSPmzlBFf/8jxitYrloN P0fcW4xNk39sGcLVHdh5L0UgZ4bDzZv1CifZjYIjSt5ORznhgAByBdkYZJjM5zkD 9zjktg9tavUluyqs1sFM3PoU7hJoCTs14ZkdNceSyKtq8MEtwHSePhVpWmr1TIJJ cGJztIDX1x1itebMoPv7YJ/eZM/QV8fCqe4fHgwWI9ORzBTrY3lc76W/ltwt5Aos +gZE4pWbLvKOwH5UiEnOWLW1NXLmoqd85K4vS57/5EQO1x+Nd/LxuIeh9I65rgeP 5cy10+3g3Q0hHyDDK8wQTtZ4aGUUYqPQxebtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8sc7anDVWx3MG5waSewwBy3lL1EwHwYDVR0jBBgwFoAUgZQTSW+NG4qcKpMS rCzZAljzOwYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 NC9nWlFUU1ctTkc0cWNLcE1TckN6WkFsanpPd1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2daUVRTVy1ORzRxY0twTVNyQ3paQWxqek93WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzQvZ1pRVFNXLU5HNHFj S3BNU3JDelpBbGp6T3dZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHylwTJvmkwpYnnBAZQN8d4zxrZGrq03WokH9SIcnDTb5HQ7NWHfHYzpNknL F/EFacQuGknUvtJ2rjQ5LX/AanoPQ7tDN1dmourXnh9ubmNjlTujyxgASisMU53F OUK8Fh1Sy0bFLBeKctIyL/k8A5Lmqo0hALwh/2MLlCZ5QZe0zuQaii5clKrnFGLC zYwPPHorrGTNA8A15CWIufm42M3iTGlWoLq6OWkzp1jrmroQSuxXqkQVqW/6PPem nQAkq3mwTP5V4iTWlGtcICir4YJ1V3ogs8VvcFnlYR0VcoWmpusRwVLYlnxNPr3y X1YWS63Fm17U4iJid4LLkqM0clI= -----END CERTIFICATE-----Generated at Sat Jul 5 09:55:00 2025 by rpki-client