$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft File: OpXd7iyMGeRxgIou20cqqm_g9Jg.mft (raw, json) Hash identifier: sxJ936x1sb7pZYs02K03LzAxxZcYbF9o9JwFfuHiWCc= Subject key identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 Authority key identifier: 3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 Certificate issuer: /CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Certificate serial: 074E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft Manifest number: 074E Signing time: Sat 05 Jul 2025 19:41:48 +0000 Manifest this update: Sat 05 Jul 2025 19:41:48 +0000 Manifest next update: Sun 06 Jul 2025 01:41:48 +0000 Files and hashes: 1: OpXd7iyMGeRxgIou20cqqm_g9Jg.crl (hash: 6FTaNuFTkyAQ+gdCXbZSTUOkjF24eMyjfQ1lZuATNNU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Validity Not Before: Jul 5 19:41:48 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=024B9897BA27D76C6D9B8F9C57C997D19875C2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9a:fb:3f:3b:ce:94:d2:81:30:cb:cc:a5:ce: e3:ad:a8:f0:a2:da:6f:11:37:7a:4b:db:83:6e:5b: b2:87:05:0a:37:9b:0d:12:08:f1:cf:a6:99:d7:3d: 13:cc:9e:48:88:0b:43:5e:7c:0f:b3:d3:11:b3:65: ea:db:89:23:e3:79:1f:2a:05:2e:d3:d1:37:d9:30: 6d:1d:ab:a2:2b:fc:7b:93:72:42:42:e2:24:30:ee: 3d:4e:27:fe:90:f8:d1:1b:81:17:1a:56:5a:55:50: e8:ec:ff:93:aa:4a:2f:f0:ad:25:96:3e:83:9d:bd: 66:17:0b:5b:03:ee:92:f3:08:71:44:c1:b5:0b:59: 56:81:b4:e3:de:b6:a7:36:0a:8c:d3:97:2b:ef:aa: 72:5a:bb:d4:47:d3:ed:c1:e5:14:b6:b8:3d:3d:36: 46:06:63:a9:4a:0c:74:c2:25:f9:fd:90:a1:83:24: db:f9:69:2f:61:1d:dc:f7:c5:46:38:ff:96:98:97: 4f:3f:a4:00:f7:db:1d:57:95:b1:3b:90:29:36:7a: e2:bb:99:09:85:89:d2:ad:05:6a:78:a2:7f:5f:ea: 83:8d:cf:c3:46:9f:39:87:39:de:00:46:9f:12:a8: 4e:3a:7d:66:49:5e:98:ba:ef:1d:55:9c:6d:c5:cb: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 X509v3 Authority Key Identifier: keyid:3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:54:da:27:47:bb:bd:2e:3b:e0:54:0e:85:a1:e0:2e:11:38: 57:76:d9:6d:c9:6f:a1:3c:6e:7b:83:21:0e:a0:4a:ef:ef:73: 87:90:08:77:bb:a4:06:83:a0:09:a8:d0:c4:76:97:a9:f1:6b: fc:91:2d:ca:12:95:21:50:11:38:26:be:52:0c:75:c9:84:1a: 39:44:ec:9a:d6:f7:0e:da:3f:6f:5f:29:45:e1:65:24:c9:1d: 06:b9:ee:f0:48:72:1f:a9:b9:a9:81:87:cf:2a:3a:89:7c:28: 4f:6c:31:c6:81:62:f2:bd:29:cf:c9:14:71:80:8f:11:ac:74: b7:c0:e6:de:da:38:aa:60:54:9b:8e:52:57:78:a4:63:5c:b4: 7a:70:7b:c9:c2:c3:7c:09:8e:bf:82:6e:2c:40:6f:e4:8c:87: 74:bc:9a:ce:91:9d:95:bd:fb:95:31:0e:d2:78:2e:31:a1:0a: 2a:9b:e9:4b:17:67:71:4f:c1:5d:06:fe:23:18:24:4d:a7:d2: b5:1f:c6:28:ea:be:46:78:9e:72:8f:18:ce:6a:1c:3e:12:1d: 01:88:a1:46:8d:03:f0:35:49:3f:d6:9c:c1:51:9f:51:ce:f0: 94:13:e6:31:76:c1:bf:18:e6:88:9c:3d:64:45:de:86:fe:4f: 60:d2:64:69 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E5 NURERUUyQzhDMTlFNDcxODA4QTJFREI0NzJBQUE2RkUwRjQ5ODAeFw0yNTA3MDUx OTQxNDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAyNEI5ODk3QkEyN0Q3 NkM2RDlCOEY5QzU3Qzk5N0QxOTg3NUMyRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpmvs/O86U0oEwy8ylzuOtqPCi2m8RN3pL24NuW7KHBQo3mw0S CPHPppnXPRPMnkiIC0NefA+z0xGzZerbiSPjeR8qBS7T0TfZMG0dq6Ir/HuTckJC 4iQw7j1OJ/6Q+NEbgRcaVlpVUOjs/5OqSi/wrSWWPoOdvWYXC1sD7pLzCHFEwbUL WVaBtOPetqc2CozTlyvvqnJau9RH0+3B5RS2uD09NkYGY6lKDHTCJfn9kKGDJNv5 aS9hHdz3xUY4/5aYl08/pAD32x1XlbE7kCk2euK7mQmFidKtBWp4on9f6oONz8NG nzmHOd4ARp8SqE46fWZJXpi67x1VnG3FyzHfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAkuYl7on12xtm4+cV8mX0Zh1wvAwHwYDVR0jBBgwFoAUOpXd7iyMGeRxgIou 20cqqm/g9JgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9PcFhkN2l5TUdlUnhnSW91MjBjcXFtX2c5SmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09wWGQ3aXlNR2VSeGdJb3UyMGNxcW1fZzlKZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvT3BYZDdpeU1HZVJ4 Z0lvdTIwY3FxbV9nOUpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABFU2idHu70uO+BUDoWh4C4ROFd22W3Jb6E8bnuDIQ6gSu/vc4eQCHe7pAaD oAmo0MR2l6nxa/yRLcoSlSFQETgmvlIMdcmEGjlE7JrW9w7aP29fKUXhZSTJHQa5 7vBIch+puamBh88qOol8KE9sMcaBYvK9Kc/JFHGAjxGsdLfA5t7aOKpgVJuOUld4 pGNctHpwe8nCw3wJjr+CbixAb+SMh3S8ms6RnZW9+5UxDtJ4LjGhCiqb6UsXZ3FP wV0G/iMYJE2n0rUfxijqvkZ4nnKPGM5qHD4SHQGIoUaNA/A1ST/WnMFRn1HO8JQT 5jF2wb8Y5oicPWRF3ob+T2DSZGk= -----END CERTIFICATE-----Generated at Sun Jul 6 01:13:46 2025 by rpki-client