$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft File: c_jFHpB2aR787kYX7QQw9Xy8gB0.mft (raw, json) Hash identifier: 8ij1H8ovB9N/AcAseOgGuVqZYsJ7W4WKBdd2FZgO8WY= Subject key identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 Authority key identifier: 73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D Certificate issuer: /CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Certificate serial: 082B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft Manifest number: 082B Signing time: Fri 04 Jul 2025 03:41:41 +0000 Manifest this update: Fri 04 Jul 2025 03:41:41 +0000 Manifest next update: Fri 04 Jul 2025 09:41:41 +0000 Files and hashes: 1: c_jFHpB2aR787kYX7QQw9Xy8gB0.crl (hash: 71Lz1VRm+98QavB4OjvViAUWwi1v9WZRbQRamfXsfKM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Validity Not Before: Jul 4 03:41:41 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1A96673E80786404FE296B91E5825FA196604F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:78:3d:60:00:57:d1:46:10:20:61:9e:95: b0:49:1e:0d:5c:52:0b:c8:7a:1c:81:d0:ed:72:56: ee:19:51:41:e0:24:b0:4d:06:1a:5d:3b:2c:8c:fb: 3d:11:d0:0c:29:ef:27:77:69:b8:2b:11:aa:83:4a: a1:2b:ad:60:3b:f0:c1:4b:77:9c:38:cb:c6:39:9d: 80:df:69:73:ae:95:5e:ba:25:2d:b2:5d:27:67:74: 3a:d9:ec:52:fe:af:0b:9c:5f:9b:dd:00:ca:95:5d: dc:5f:ad:55:3a:07:58:79:a2:39:2e:61:35:3b:80: 69:6c:60:58:d7:6a:11:2a:5e:86:a3:c5:1d:e6:08: 09:f7:5e:cb:6c:37:a0:c7:db:43:07:8e:40:b0:f5: af:5d:89:94:f4:99:d8:ad:a3:4f:e6:94:9a:6d:36: 71:00:29:8e:2e:a4:3b:3e:04:a7:9f:57:16:e8:0b: 4a:6d:56:61:3f:85:74:d0:1a:4d:75:87:34:24:81: 3d:82:dc:41:54:70:cb:fa:58:69:2d:c9:fd:b4:94: 06:71:fe:be:99:8e:74:40:10:ab:98:00:cb:83:d9: 23:24:b9:23:b9:51:d8:51:6c:fd:14:59:7b:a4:37: 2a:54:8d:96:54:08:95:f7:8b:75:9e:40:9f:eb:5a: 8b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 X509v3 Authority Key Identifier: keyid:73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e9:d4:a0:1a:3a:f1:79:f6:48:d1:35:13:27:ca:10:a0:6c: 4a:b4:66:34:3f:f5:88:5b:9d:eb:23:89:52:5d:a5:c8:fe:27: d0:1d:74:f9:fc:74:60:d7:da:21:ad:e2:98:ba:84:4a:f0:7a: 91:cf:5e:37:63:13:a9:a4:68:92:48:26:56:57:b0:33:44:46: 01:41:f2:70:61:16:86:f1:9a:b3:21:43:c4:b5:96:c0:1b:00: 11:91:32:4b:46:e3:b6:18:a1:8f:85:bc:82:65:cb:6a:b4:ff: 05:1b:ae:ac:ae:44:15:7e:28:b5:96:19:cf:84:50:15:f4:03: 15:ff:68:56:8b:57:35:f6:96:45:74:21:f5:b2:d5:9b:03:21: b6:c4:ca:99:c6:a5:88:84:39:e1:84:a2:98:fb:79:9c:c5:41: ae:61:db:5a:d4:e6:73:bb:16:45:08:bd:b6:55:6e:a3:f5:7e: dd:54:65:5d:d1:37:b2:d5:a2:bf:52:66:fc:6f:34:e2:55:14: f2:cb:b6:8a:4b:cd:51:3b:ff:95:3c:0a:fa:90:53:05:8f:12: 8d:b8:83:8f:9e:f3:cb:61:28:de:3c:2f:63:e3:92:30:3a:26: 44:b2:d7:b9:4d:70:10:28:9b:40:22:1a:59:6c:8f:58:d8:d6: a7:20:88:f4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNG OEM1MUU5MDc2NjkxRUZDRUU0NjE3RUQwNDMwRjU3Q0JDODAxRDAeFw0yNTA3MDQw MzQxNDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBOTY2NzNFODA3ODY0 MDRGRTI5NkI5MUU1ODI1RkExOTY2MDRGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIGng9YABX0UYQIGGelbBJHg1cUgvIehyB0O1yVu4ZUUHgJLBN BhpdOyyM+z0R0Awp7yd3abgrEaqDSqErrWA78MFLd5w4y8Y5nYDfaXOulV66JS2y XSdndDrZ7FL+rwucX5vdAMqVXdxfrVU6B1h5ojkuYTU7gGlsYFjXahEqXoajxR3m CAn3XstsN6DH20MHjkCw9a9diZT0mdito0/mlJptNnEAKY4upDs+BKefVxboC0pt VmE/hXTQGk11hzQkgT2C3EFUcMv6WGktyf20lAZx/r6ZjnRAEKuYAMuD2SMkuSO5 UdhRbP0UWXukNypUjZZUCJX3i3WeQJ/rWourAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGpZnPoB4ZAT+KWuR5YJfoZZgTxcwHwYDVR0jBBgwFoAUc/jFHpB2aR787kYX 7QQw9Xy8gB0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 MS9jX2pGSHBCMmFSNzg3a1lYN1FRdzlYeThnQjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NfakZIcEIyYVI3ODdrWVg3UVF3OVh5OGdCMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODEvY19qRkhwQjJhUjc4 N2tZWDdRUXc5WHk4Z0IwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGfp1KAaOvF59kjRNRMnyhCgbEq0ZjQ/9YhbnesjiVJdpcj+J9AddPn8dGDX 2iGt4pi6hErwepHPXjdjE6mkaJJIJlZXsDNERgFB8nBhFobxmrMhQ8S1lsAbABGR MktG47YYoY+FvIJly2q0/wUbrqyuRBV+KLWWGc+EUBX0AxX/aFaLVzX2lkV0IfWy 1ZsDIbbEypnGpYiEOeGEopj7eZzFQa5h21rU5nO7FkUIvbZVbqP1ft1UZV3RN7LV or9SZvxvNOJVFPLLtopLzVE7/5U8CvqQUwWPEo24g4+e88thKN48L2PjkjA6JkSy 17lNcBAom0AiGllsj1jY1qcgiPQ= -----END CERTIFICATE-----Generated at Fri Jul 4 08:23:02 2025 by rpki-client