$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft File: fCewZFm5zh-8LzSJoPxnKF1942A.mft (raw, json) Hash identifier: 0MhDT+yxarvxXR0455iBrAjQUWll4a8KwsXV5RmHsSM= Subject key identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A Authority key identifier: 7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 Certificate issuer: /CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Certificate serial: 073D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft Manifest number: 073D Signing time: Fri 04 Jul 2025 09:11:44 +0000 Manifest this update: Fri 04 Jul 2025 09:11:44 +0000 Manifest next update: Fri 04 Jul 2025 15:11:44 +0000 Files and hashes: 1: fCewZFm5zh-8LzSJoPxnKF1942A.crl (hash: 1B0GyiRoBINPhhdh9ZhTHARUN6oi/k3ynB/M7rsrCO8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1853 (0x73d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Validity Not Before: Jul 4 09:11:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7001E5871E36F731E219A480CB7C61ADFD6CCD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:90:72:05:4e:a9:49:22:a5:80:29:93:b0: a0:68:a4:6f:df:bc:f8:b7:18:cf:00:01:5d:6a:82: 16:ae:f1:d2:95:e9:79:77:92:df:fc:8f:a9:12:04: 91:60:3a:ae:f4:81:f0:ee:0d:7a:d7:48:ae:56:43: 6c:7b:d7:51:d2:cd:c3:33:43:40:31:37:67:18:9a: 17:d2:1b:e1:bc:6d:f4:29:08:8c:be:cc:52:60:96: cc:7f:f4:a8:c0:cf:6a:8a:b6:b4:7d:b2:9f:4a:fe: 0d:53:1c:b8:e8:80:ee:62:62:04:b6:12:bf:89:af: ec:3f:ea:0c:fb:a5:38:bf:af:ca:f3:b7:1a:8b:a3: 0c:67:1d:27:d8:9f:9f:3f:5a:4f:50:cd:db:4a:47: d0:c6:a6:05:b4:95:e1:a9:5b:55:04:d6:a8:da:d5: ab:9e:fd:71:ab:58:ad:8e:ee:29:13:d2:7d:1f:22: 61:78:9d:bf:d7:34:5a:0f:ef:31:8c:df:47:1d:eb: d7:bc:4f:03:d9:18:3d:a4:bd:b4:66:a4:b8:33:f9: da:79:4d:75:f4:d3:40:6e:6d:1a:26:f5:71:fc:8d: 7d:8e:26:ca:a8:bc:39:5a:40:1f:34:da:79:c1:61: 87:0d:8d:1f:f7:d3:f2:06:8b:4b:90:5a:c6:53:75: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A X509v3 Authority Key Identifier: keyid:7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:25:8a:89:80:30:36:2e:ee:0d:0f:60:26:96:b4:d7:29:5d: f6:4f:a0:ea:b5:d1:94:21:05:c9:eb:08:ae:d3:14:75:52:b8: 10:a6:42:b2:b2:83:19:c3:22:4f:6c:82:5c:95:b2:da:d5:03: f8:73:a2:10:54:ca:20:52:fa:50:ba:48:d0:42:ec:72:5c:a7: 94:f8:c6:e4:17:ec:07:b9:35:ef:a0:69:7e:f8:f7:bf:5a:eb: 95:1b:85:fd:6c:f9:ba:91:1d:b3:4b:c4:84:03:76:b2:22:32: 07:c6:e7:ae:8b:5f:1e:92:c7:4f:0c:46:dc:22:fd:c6:1d:8d: 1c:5a:42:f1:94:b0:e9:e3:af:ab:e7:82:df:04:f4:e3:1d:07: 1b:f3:83:68:bf:db:3f:46:59:ce:b4:35:2f:69:f7:5b:0b:31: 75:79:a3:93:43:cf:e5:a1:87:5d:e2:e4:db:4f:f5:20:7d:bc: b2:a6:9b:e5:6c:c6:5f:3a:e0:70:44:9e:52:5e:0b:43:ad:e2: 10:ce:aa:a1:85:79:fd:7c:5c:fe:b9:df:a4:3a:e7:51:af:c8: aa:b1:18:be:a6:95:64:cb:ce:c2:58:92:85:e4:4e:a4:e2:7e: d8:7c:c4:92:af:05:83:77:1c:7c:b9:a4:9e:cb:f2:36:d3:b7: f0:22:fe:f9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0My N0IwNjQ1OUI5Q0UxRkJDMkYzNDg5QTBGQzY3Mjg1RDdERTM2MDAeFw0yNTA3MDQw OTExNDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDcwMDFFNTg3MUUzNkY3 MzFFMjE5QTQ4MENCN0M2MUFERkQ2Q0NENkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFgJByBU6pSSKlgCmTsKBopG/fvPi3GM8AAV1qghau8dKV6Xl3 kt/8j6kSBJFgOq70gfDuDXrXSK5WQ2x711HSzcMzQ0AxN2cYmhfSG+G8bfQpCIy+ zFJglsx/9KjAz2qKtrR9sp9K/g1THLjogO5iYgS2Er+Jr+w/6gz7pTi/r8rztxqL owxnHSfYn58/Wk9QzdtKR9DGpgW0leGpW1UE1qja1aue/XGrWK2O7ikT0n0fImF4 nb/XNFoP7zGM30cd69e8TwPZGD2kvbRmpLgz+dp5TXX000BubRom9XH8jX2OJsqo vDlaQB802nnBYYcNjR/30/IGi0uQWsZTdRtXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcAHlhx429zHiGaSAy3xhrf1szWowHwYDVR0jBBgwFoAUfCewZFm5zh+8LzSJ oPxnKF1942AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 OC9mQ2V3WkZtNXpoLThMelNKb1B4bktGMTk0MkEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZDZXdaRm01emgtOEx6U0pvUHhuS0YxOTQyQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTgvZkNld1pGbTV6aC04 THpTSm9QeG5LRjE5NDJBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACEliomAMDYu7g0PYCaWtNcpXfZPoOq10ZQhBcnrCK7TFHVSuBCmQrKygxnD Ik9sglyVstrVA/hzohBUyiBS+lC6SNBC7HJcp5T4xuQX7Ae5Ne+gaX74979a65Ub hf1s+bqRHbNLxIQDdrIiMgfG566LXx6Sx08MRtwi/cYdjRxaQvGUsOnjr6vngt8E 9OMdBxvzg2i/2z9GWc60NS9p91sLMXV5o5NDz+Whh13i5NtP9SB9vLKmm+Vsxl86 4HBEnlJeC0Ot4hDOqqGFef18XP6536Q651GvyKqxGL6mlWTLzsJYkoXkTqTifth8 xJKvBYN3HHy5pJ7L8jbTt/Ai/vk= -----END CERTIFICATE-----Generated at Fri Jul 4 11:49:04 2025 by rpki-client