$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft File: b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft (raw, json) Hash identifier: hQI9050yGc3FJ/YTqyCgCX2XxuA0B5maGE1DrzLKt1E= Subject key identifier: 48:F8:71:02:E1:75:17:F8:0A:22:91:31:DF:61:A4:BB:EF:C4:7D:59 Authority key identifier: 6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD Certificate issuer: /CN=6FD02344CB34551B75AD04B41C641A24098145AD Certificate serial: 08B5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft Manifest number: 08B5 Signing time: Fri 04 Jul 2025 05:12:21 +0000 Manifest this update: Fri 04 Jul 2025 05:12:21 +0000 Manifest next update: Fri 04 Jul 2025 11:12:21 +0000 Files and hashes: 1: b9AjRMs0VRt1rQS0HGQaJAmBRa0.crl (hash: sV0Dnk6vUjCq/QKY4bk9WD1NY5Q7wFm5qKs9v/YllBs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FD02344CB34551B75AD04B41C641A24098145AD Validity Not Before: Jul 4 05:12:21 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=48F87102E17517F80A229131DF61A4BBEFC47D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:85:be:6d:64:ec:e8:6d:9a:24:fb:25:17: a3:1e:c3:bd:be:d3:e2:48:9e:74:57:7b:31:8a:97: 8a:2c:e8:ba:87:c5:a2:04:0d:49:92:19:57:10:01: 72:6e:5b:d2:77:40:75:ba:34:a9:4a:84:98:13:0d: 52:b8:1b:f5:d5:8b:8a:de:a7:99:a3:80:60:ef:f9: d7:c0:af:cb:11:fb:e5:6b:4e:2a:d6:df:bf:e3:b9: cb:83:0a:25:65:24:7c:b2:5c:ef:78:93:6c:79:6a: 1e:26:84:ad:dd:8b:0b:19:75:1d:a7:3f:1c:bc:0c: b6:31:bd:b1:84:19:1b:2a:dc:39:ae:73:b2:a5:e6: 1c:fd:a6:9c:fd:a1:81:79:d7:1b:35:d2:00:7b:c4: cb:7c:c2:eb:48:1a:86:d9:76:89:3d:6a:5c:4d:67: 51:8b:6d:d3:51:32:c1:21:7e:da:33:57:e7:dd:aa: a7:9b:a1:d0:12:ec:39:3c:de:bc:e3:ea:23:cf:be: f5:a3:f4:88:48:e6:39:28:8b:a3:b9:e5:61:31:33: 63:5c:98:38:12:f9:59:cf:2f:e0:80:22:b5:38:eb: 1c:3f:e0:ba:8d:d2:e4:17:b1:09:0b:ae:fd:e3:b5: 4b:e9:f6:b2:02:b7:47:23:bc:c8:9d:88:99:bb:66: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F8:71:02:E1:75:17:F8:0A:22:91:31:DF:61:A4:BB:EF:C4:7D:59 X509v3 Authority Key Identifier: keyid:6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:cc:bc:04:9c:8a:2b:9a:5f:32:ce:36:b4:2b:45:73:bf:a9: 99:c8:94:e4:37:3c:bf:1a:fa:98:c8:0d:95:e5:79:ab:47:a0: 53:5e:06:0a:d4:42:c7:e4:b4:0e:65:4b:66:56:88:1e:ae:53: 00:6c:0c:98:14:87:7d:90:00:2e:9a:9a:4e:d1:08:5c:17:fc: 55:6d:a7:69:7a:80:5b:31:9c:a6:a2:80:60:6c:87:69:26:e3: 9c:a2:f7:81:06:a8:18:86:f5:bc:52:28:cb:ab:09:17:3c:21: 2a:ca:d5:78:1c:ef:95:36:38:84:3b:f9:36:99:92:e9:cd:75: 6d:4f:20:49:a6:e1:6f:0f:83:7a:6a:07:43:d6:97:41:96:9f: 71:6d:9d:9c:ea:39:8b:fa:0a:8a:e0:49:ba:21:47:9f:9e:7e: 26:f2:02:1b:d7:31:44:f5:75:f5:ee:f4:90:87:bf:72:80:f5: 9c:95:ca:bc:0f:6d:f8:b3:72:1d:3c:84:b0:0e:c3:25:d6:98: c1:df:75:08:87:30:05:76:89:49:30:0a:2c:3e:54:36:3e:de: 08:ff:9c:9a:06:e7:a7:89:ac:6b:67:71:48:fe:a4:95:53:a0: 53:81:8d:37:2a:ab:9c:46:1a:4e:cb:43:aa:a3:ee:a0:68:52: 04:17:3c:af -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE MDIzNDRDQjM0NTUxQjc1QUQwNEI0MUM2NDFBMjQwOTgxNDVBRDAeFw0yNTA3MDQw NTEyMjFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ4Rjg3MTAyRTE3NTE3 RjgwQTIyOTEzMURGNjFBNEJCRUZDNDdENTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3uoW+bWTs6G2aJPslF6Mew72+0+JInnRXezGKl4os6LqHxaIE DUmSGVcQAXJuW9J3QHW6NKlKhJgTDVK4G/XVi4rep5mjgGDv+dfAr8sR++VrTirW 37/jucuDCiVlJHyyXO94k2x5ah4mhK3diwsZdR2nPxy8DLYxvbGEGRsq3Dmuc7Kl 5hz9ppz9oYF51xs10gB7xMt8wutIGobZdok9alxNZ1GLbdNRMsEhftozV+fdqqeb odAS7Dk83rzj6iPPvvWj9IhI5jkoi6O55WExM2NcmDgS+VnPL+CAIrU46xw/4LqN 0uQXsQkLrv3jtUvp9rICt0cjvMidiJm7Zo65AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUSPhxAuF1F/gKIpEx32Gku+/EfVkwHwYDVR0jBBgwFoAUb9AjRMs0VRt1rQS0 HGQaJAmBRa0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Ny9iOUFqUk1zMFZSdDFyUVMwSEdRYUpBbUJSYTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2I5QWpSTXMwVlJ0MXJRUzBIR1FhSkFtQlJhMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzcvYjlBalJNczBWUnQx clFTMEhHUWFKQW1CUmEwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAPMvASciiuaXzLONrQrRXO/qZnIlOQ3PL8a+pjIDZXleatHoFNeBgrUQsfk tA5lS2ZWiB6uUwBsDJgUh32QAC6amk7RCFwX/FVtp2l6gFsxnKaigGBsh2km45yi 94EGqBiG9bxSKMurCRc8ISrK1Xgc75U2OIQ7+TaZkunNdW1PIEmm4W8Pg3pqB0PW l0GWn3FtnZzqOYv6CorgSbohR5+efibyAhvXMUT1dfXu9JCHv3KA9ZyVyrwPbfiz ch08hLAOwyXWmMHfdQiHMAV2iUkwCiw+VDY+3gj/nJoG56eJrGtncUj+pJVToFOB jTcqq5xGGk7LQ6qj7qBoUgQXPK8= -----END CERTIFICATE-----Generated at Fri Jul 4 07:52:53 2025 by rpki-client