$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft File: xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft (raw, json) Hash identifier: n2KmT+72EtaWQpID9D4rYi2SFxsMyA5s2U/HAAhcRXk= Subject key identifier: 3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16 Authority key identifier: C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2 Certificate issuer: /CN=C568390771763BB631484BB1BDDFAE48596F5CE2 Certificate serial: 079C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft Manifest number: 079C Signing time: Fri 04 Jul 2025 17:42:26 +0000 Manifest this update: Fri 04 Jul 2025 17:42:26 +0000 Manifest next update: Fri 04 Jul 2025 23:42:26 +0000 Files and hashes: 1: xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl (hash: 1G+zjCKZjfWkK9V6tkpEk0LT8M1NsIZOWAKgt9EHJgI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C568390771763BB631484BB1BDDFAE48596F5CE2 Validity Not Before: Jul 4 17:42:26 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3A6B64A2575FAD472E907F751CF018E797461F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:63:38:19:15:71:2a:01:f8:db:f8:41:8c: 70:db:35:07:d3:25:7a:d2:3b:a7:99:52:c3:81:06: 31:60:61:58:c0:40:62:21:80:8c:69:4b:1b:46:16: b5:c6:3a:86:08:84:b0:2e:74:ad:d6:9b:ce:36:8a: bb:de:8d:da:66:33:12:9a:e7:f3:a2:d0:15:8c:02: 52:26:ea:0a:c5:f0:ba:c7:ed:82:e1:20:39:67:73: 55:77:41:65:7c:73:79:77:f7:cc:c0:5d:e9:f0:c1: 00:ae:d3:4f:58:49:31:f3:3d:29:ff:c4:a5:eb:8f: ec:65:13:74:6a:81:6a:ce:9b:ec:32:d4:b9:b2:02: 9f:ed:5d:69:43:0a:1f:1b:eb:ee:46:72:f7:ed:38: 7a:be:39:64:5a:9c:96:b5:13:98:ac:25:a4:a0:07: 0a:66:63:80:be:a3:10:df:39:4d:c7:95:f9:d0:68: 6e:a2:05:f6:82:f3:6b:46:7f:2c:91:60:99:23:71: 66:79:62:df:7c:27:d9:c8:ef:7a:f4:dd:de:81:d9: 2e:29:a9:d7:e8:76:22:7d:af:3c:63:e8:b1:05:42: 48:bd:8f:85:5a:a6:32:4c:d7:49:66:dd:7c:4e:a1: 70:09:90:8a:00:ef:e7:e2:c1:ce:a3:7c:03:7f:90: 20:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6B:64:A2:57:5F:AD:47:2E:90:7F:75:1C:F0:18:E7:97:46:1F:16 X509v3 Authority Key Identifier: keyid:C5:68:39:07:71:76:3B:B6:31:48:4B:B1:BD:DF:AE:48:59:6F:5C:E2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWg5B3F2O7YxSEuxvd-uSFlvXOI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/xWg5B3F2O7YxSEuxvd-uSFlvXOI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d1:35:f2:f2:90:ff:36:79:3b:6b:0f:35:7d:d7:de:0b:83: 6d:2f:2e:29:6e:a6:c9:55:53:46:b1:22:09:9e:70:cc:38:b8: 2d:9f:04:8a:0c:85:1e:a4:3a:6f:27:87:07:de:4b:01:e9:ce: 53:89:07:e7:5b:4a:8a:a4:de:67:f8:c7:da:fd:f0:98:5c:68: 93:a1:11:02:77:0b:42:b5:b0:3a:9b:f8:1b:90:c5:bb:20:8e: 06:80:13:c4:4f:c8:6d:5d:6d:3c:21:65:5d:60:30:b8:45:b2: 6d:05:3d:f8:bd:64:bb:53:f6:6c:d2:ac:c6:0b:21:37:2b:e8: 1c:92:e9:47:db:2f:0f:75:98:3a:64:3f:bc:48:7d:91:a8:c2: 57:7e:1f:1c:8a:fc:da:a2:ff:d2:85:30:2e:4f:59:b7:51:c1: 78:ff:ab:7a:cf:c6:b7:45:b6:87:24:80:71:3e:74:a4:d6:c2: 84:e3:ac:5b:ea:ae:7e:86:f0:6d:f3:6b:af:a5:1f:92:33:fb: fe:e4:ff:51:8e:5c:e1:a0:d0:fa:11:c2:64:0b:8c:48:95:6d: e1:70:3d:51:0a:7a:a4:47:44:54:57:7a:b9:7d:38:6a:d6:4d: 64:bf:00:de:7f:f9:48:12:f2:0e:76:2a:0a:0f:a2:a5:36:4b: 8c:7e:39:2b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzU2 ODM5MDc3MTc2M0JCNjMxNDg0QkIxQkRERkFFNDg1OTZGNUNFMjAeFw0yNTA3MDQx NzQyMjZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNBNkI2NEEyNTc1RkFE NDcyRTkwN0Y3NTFDRjAxOEU3OTc0NjFGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4KmM4GRVxKgH42/hBjHDbNQfTJXrSO6eZUsOBBjFgYVjAQGIh gIxpSxtGFrXGOoYIhLAudK3Wm842irvejdpmMxKa5/Oi0BWMAlIm6grF8LrH7YLh IDlnc1V3QWV8c3l398zAXenwwQCu009YSTHzPSn/xKXrj+xlE3RqgWrOm+wy1Lmy Ap/tXWlDCh8b6+5GcvftOHq+OWRanJa1E5isJaSgBwpmY4C+oxDfOU3HlfnQaG6i BfaC82tGfyyRYJkjcWZ5Yt98J9nI73r03d6B2S4pqdfodiJ9rzxj6LEFQki9j4Va pjJM10lm3XxOoXAJkIoA7+fiwc6jfAN/kCBJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUOmtkoldfrUcukH91HPAY55dGHxYwHwYDVR0jBBgwFoAUxWg5B3F2O7YxSEux vd+uSFlvXOIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 MC94V2c1QjNGMk83WXhTRXV4dmQtdVNGbHZYT0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hXZzVCM0YyTzdZeFNFdXh2ZC11U0ZsdlhPSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTAveFdnNUIzRjJPN1l4 U0V1eHZkLXVTRmx2WE9JLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGPRNfLykP82eTtrDzV9194Lg20vLilupslVU0axIgmecMw4uC2fBIoMhR6k Om8nhwfeSwHpzlOJB+dbSoqk3mf4x9r98JhcaJOhEQJ3C0K1sDqb+BuQxbsgjgaA E8RPyG1dbTwhZV1gMLhFsm0FPfi9ZLtT9mzSrMYLITcr6ByS6UfbLw91mDpkP7xI fZGowld+HxyK/Nqi/9KFMC5PWbdRwXj/q3rPxrdFtockgHE+dKTWwoTjrFvqrn6G 8G3za6+lH5Iz+/7k/1GOXOGg0PoRwmQLjEiVbeFwPVEKeqRHRFRXerl9OGrWTWS/ AN5/+UgS8g52KgoPoqU2S4x+OSs= -----END CERTIFICATE-----Generated at Fri Jul 4 19:37:42 2025 by rpki-client