$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft File: REpvrwhyRfumTIvW5EyRKvs9IGY.mft (raw, json) Hash identifier: KrnBRg2QnrjDPluRc50/HzwOH3KblPKAIeWSa4oF2Y8= Subject key identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 Authority key identifier: 44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 Certificate issuer: /CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Certificate serial: 04EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft Manifest number: 04EB Signing time: Sat 05 Jul 2025 05:44:15 +0000 Manifest this update: Sat 05 Jul 2025 05:44:15 +0000 Manifest next update: Sat 05 Jul 2025 11:44:15 +0000 Files and hashes: 1: REpvrwhyRfumTIvW5EyRKvs9IGY.crl (hash: 83RKur6jrcsZda7tltV84lxykQenoB722s493t+Vppw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 11:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Validity Not Before: Jul 5 05:44:15 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1AB861E2929A89AC6582D35AAD01A279CA426392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:79:8f:a0:8b:63:12:f9:e5:9d:c1:55:0a: 09:d9:71:50:88:eb:61:0a:93:7b:74:0e:80:b1:46: 0e:7a:1a:a5:2f:0b:0b:51:b7:6d:82:d7:3b:a1:1f: 8f:ce:71:78:39:27:2d:1a:42:61:ff:95:30:a5:d1: f7:44:a2:ed:fc:cb:27:33:46:f1:b0:2f:b3:86:7c: 67:66:1d:d7:63:38:b0:51:25:b3:ba:d6:e0:42:43: 07:6e:68:b8:6c:b3:17:df:1c:ec:37:21:24:db:9d: 43:2e:91:ed:73:a6:8d:b2:85:dc:c1:74:cd:ea:ef: 77:2e:b6:30:94:85:c0:37:29:1d:b4:82:27:d5:9c: 63:c6:5c:2c:72:0a:e1:9c:51:d0:9a:69:ea:c3:3c: 44:9e:fc:b0:cf:25:c1:0d:dd:82:f2:67:a8:97:9e: 00:b0:83:1e:17:ac:2a:d0:c1:56:13:b0:d7:15:68: 17:9b:96:05:69:b6:ee:d6:48:56:ad:82:f1:0a:8f: 9b:27:c4:05:fa:5e:6e:95:26:f5:95:02:b1:73:19: af:97:e7:8f:b0:63:69:9c:de:4e:8f:b3:fd:af:ec: e4:5e:22:31:f3:fd:50:e7:6b:26:7a:16:a1:9c:06: 6d:b1:69:52:1d:6b:14:f6:3c:e9:17:bc:55:44:3e: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 X509v3 Authority Key Identifier: keyid:44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:70:56:b7:cb:b5:81:5f:b7:22:17:81:3b:95:74:0d:48:3d: ee:c6:1c:4e:9e:cd:d4:e5:45:07:14:f6:14:16:61:fc:91:c2: 3e:d8:41:11:6d:4d:7f:9f:d7:48:98:f9:e2:f1:e0:83:bd:f2: 12:51:51:56:48:95:a8:4d:21:2c:2e:97:bd:f0:97:bc:d9:17: df:ae:12:ab:b8:49:11:9f:e6:c2:39:8d:77:49:ea:cf:eb:79: 23:1d:85:91:f4:be:97:05:60:30:8e:7b:2e:17:1e:6e:5f:2d: c0:66:18:eb:23:62:9b:dd:07:88:da:c6:3d:6f:45:74:89:5d: fa:19:39:45:ba:62:f3:3b:28:f0:c8:c7:7a:f9:9c:3a:10:12: 09:92:d2:e2:cf:99:b6:10:3c:7a:02:a9:2e:34:a1:51:18:4a: 4c:2c:9a:ce:d9:44:fb:65:1c:8c:af:1f:e9:8b:db:88:af:f7: ae:e2:9b:60:93:5d:0f:a1:8a:55:70:6f:ab:79:2a:dd:02:a5: 5d:e8:ef:fd:bd:ac:f2:3f:56:56:d6:62:2b:d3:b1:04:ae:d0: 8b:d7:26:a7:9a:26:0d:e2:54:94:42:c9:b7:04:a2:2f:d6:47: b6:a8:c2:2f:8b:25:38:28:3d:51:7b:e7:ca:f9:90:78:3e:9c: 09:3c:fc:f6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ0 QTZGQUYwODcyNDVGQkE2NEM4QkQ2RTQ0QzkxMkFGQjNEMjA2NjAeFw0yNTA3MDUw NTQ0MTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBQjg2MUUyOTI5QTg5 QUM2NTgyRDM1QUFEMDFBMjc5Q0E0MjYzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDATXmPoItjEvnlncFVCgnZcVCI62EKk3t0DoCxRg56GqUvCwtR t22C1zuhH4/OcXg5Jy0aQmH/lTCl0fdEou38yyczRvGwL7OGfGdmHddjOLBRJbO6 1uBCQwduaLhssxffHOw3ISTbnUMuke1zpo2yhdzBdM3q73cutjCUhcA3KR20gifV nGPGXCxyCuGcUdCaaerDPESe/LDPJcEN3YLyZ6iXngCwgx4XrCrQwVYTsNcVaBeb lgVptu7WSFatgvEKj5snxAX6Xm6VJvWVArFzGa+X54+wY2mc3k6Ps/2v7OReIjHz /VDnayZ6FqGcBm2xaVIdaxT2POkXvFVEPmZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGrhh4pKaiaxlgtNarQGiecpCY5IwHwYDVR0jBBgwFoAUREpvrwhyRfumTIvW 5EyRKvs9IGYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9SRXB2cndoeVJmdW1USXZXNUV5Ukt2czlJR1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JFcHZyd2h5UmZ1bVRJdlc1RXlSS3ZzOUlHWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvUkVwdnJ3aHlSZnVt VEl2VzVFeVJLdnM5SUdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACNwVrfLtYFftyIXgTuVdA1IPe7GHE6ezdTlRQcU9hQWYfyRwj7YQRFtTX+f 10iY+eLx4IO98hJRUVZIlahNISwul73wl7zZF9+uEqu4SRGf5sI5jXdJ6s/reSMd hZH0vpcFYDCOey4XHm5fLcBmGOsjYpvdB4jaxj1vRXSJXfoZOUW6YvM7KPDIx3r5 nDoQEgmS0uLPmbYQPHoCqS40oVEYSkwsms7ZRPtlHIyvH+mL24iv967im2CTXQ+h ilVwb6t5Kt0CpV3o7/29rPI/VlbWYivTsQSu0IvXJqeaJg3iVJRCybcEoi/WR7ao wi+LJTgoPVF758r5kHg+nAk8/PY= -----END CERTIFICATE-----Generated at Sat Jul 5 08:59:48 2025 by rpki-client