$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft File: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft (raw, json) Hash identifier: h24Ym1HOHT0FirgFiQQz15no2yoNyaL7vMe5oP2sOQQ= Subject key identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 Authority key identifier: 66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF Certificate issuer: /CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Certificate serial: 0446 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft Manifest number: 0446 Signing time: Fri 04 Jul 2025 20:15:39 +0000 Manifest this update: Fri 04 Jul 2025 20:15:39 +0000 Manifest next update: Sat 05 Jul 2025 02:15:39 +0000 Files and hashes: 1: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl (hash: oSuYT79VOKeom5srK6v1WFtNaf1g6UtKKl1Bmk5b7Ho=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 00:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Validity Not Before: Jul 4 20:15:39 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F0DCD3E56B07333F5EAD5D479ED734FE6D5AB0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f2:74:a3:57:8d:a7:30:b6:5d:54:f2:76:3c: 75:bc:97:b6:8e:5d:b3:36:fd:e9:56:18:78:96:73: d8:ff:17:78:38:2d:df:e3:72:28:58:4a:da:e9:ea: 9a:95:a1:b3:92:d1:35:e8:3f:13:90:b8:5f:b4:ca: 48:5a:e8:9d:51:8b:d6:93:fc:7a:50:db:32:4a:ed: cf:6b:64:ff:80:3c:35:c0:18:c4:0a:8f:89:ed:c9: c3:48:f2:9c:e1:fc:da:ff:83:2d:fc:2a:fd:c1:44: 18:e1:88:a5:33:ff:cb:89:e7:0e:24:d0:28:f9:89: 4b:6d:10:f6:7e:10:b8:e6:c1:fe:15:cb:e0:d8:ee: 9c:c1:95:47:af:6a:b5:5a:6f:60:3d:c7:02:c0:d0: f1:df:6b:c8:4f:02:f9:17:d4:ee:e5:d4:1b:45:0c: 28:35:38:d9:18:79:63:13:d0:5c:c5:bf:0e:df:4b: 15:1f:71:fb:68:43:dc:77:6b:e1:c8:f2:e9:a3:cf: ea:4b:40:da:e0:c4:d5:37:3a:36:c0:c5:cd:b1:e5: 79:30:6e:94:b3:86:33:e0:f5:cb:74:28:3c:07:24: d6:49:c5:cc:ec:51:b5:e2:98:6e:12:e0:24:ed:3d: 46:93:41:37:88:14:aa:c9:09:cd:72:f1:5f:7c:ae: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 X509v3 Authority Key Identifier: keyid:66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:09:bf:b1:ad:81:01:7d:4b:cb:c5:98:cf:85:d5:48:01:fd: 79:25:f4:23:85:5b:b7:e9:72:89:a5:62:74:ae:c4:fe:3a:73: 16:da:6c:38:d1:37:f5:8a:1e:5d:1f:9b:7c:2b:bc:0a:97:80: 47:8d:00:a7:aa:9b:37:36:13:71:33:bd:33:dd:dd:9b:d9:d0: 34:ac:5e:18:98:46:29:ff:dc:4e:a5:c5:ed:86:c0:3f:2b:6f: 2b:b9:7e:fd:e8:d6:aa:7d:f5:82:88:9a:9e:7c:4d:64:06:28: 6a:d2:51:1d:ca:e3:db:17:47:6d:d3:cf:6a:d9:22:51:40:fb: d5:dc:7c:38:4b:35:92:62:5b:09:f6:b6:1b:01:e2:3e:d5:9f: 98:9f:f0:f8:b3:c6:cf:ac:b3:0e:bf:0f:cc:80:fd:b6:fe:bd: 6b:3a:80:c6:d7:55:98:56:a1:1c:b9:4f:48:f6:ad:15:d4:5e: 8b:61:36:16:12:66:ae:ce:3b:5c:cb:20:a3:fb:80:47:be:42: 65:01:81:5c:7b:cf:cd:22:30:f8:fb:86:04:08:10:22:e7:52: 54:10:b7:ca:68:d9:cf:91:88:18:dc:59:53:4f:43:87:1a:55: 47:a1:4d:24:86:36:cb:e4:e9:8d:0e:a6:c5:84:2c:9f:a1:84: 7c:73:73:dc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY3 NkE2NjQyQTRGNjAxNkJDMDcxREY2MjZCMkJFQkNCNDNCNUVDRjAeFw0yNTA3MDQy MDE1MzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYwRENEM0U1NkIwNzMz M0Y1RUFENUQ0NzlFRDczNEZFNkQ1QUIwQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD08nSjV42nMLZdVPJ2PHW8l7aOXbM2/elWGHiWc9j/F3g4Ld/j cihYStrp6pqVobOS0TXoPxOQuF+0ykha6J1Ri9aT/HpQ2zJK7c9rZP+APDXAGMQK j4ntycNI8pzh/Nr/gy38Kv3BRBjhiKUz/8uJ5w4k0Cj5iUttEPZ+ELjmwf4Vy+DY 7pzBlUevarVab2A9xwLA0PHfa8hPAvkX1O7l1BtFDCg1ONkYeWMT0FzFvw7fSxUf cftoQ9x3a+HI8umjz+pLQNrgxNU3OjbAxc2x5XkwbpSzhjPg9ct0KDwHJNZJxczs UbXimG4S4CTtPUaTQTeIFKrJCc1y8V98rimxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8NzT5WsHMz9erV1Hntc0/m1asLMwHwYDVR0jBBgwFoAUZnamZCpPYBa8Bx32 JrK+vLQ7Xs8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MS9abmFtWkNwUFlCYThCeDMySnJLLXZMUTdYczguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1puYW1aQ3BQWUJhOEJ4MzJKckstdkxRN1hzOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvWm5hbVpDcFBZQmE4 QngzMkpySy12TFE3WHM4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFQJv7GtgQF9S8vFmM+F1UgB/Xkl9COFW7fpcomlYnSuxP46cxbabDjRN/WK Hl0fm3wrvAqXgEeNAKeqmzc2E3EzvTPd3ZvZ0DSsXhiYRin/3E6lxe2GwD8rbyu5 fv3o1qp99YKImp58TWQGKGrSUR3K49sXR23Tz2rZIlFA+9XcfDhLNZJiWwn2thsB 4j7Vn5if8Pizxs+ssw6/D8yA/bb+vWs6gMbXVZhWoRy5T0j2rRXUXothNhYSZq7O O1zLIKP7gEe+QmUBgVx7z80iMPj7hgQIECLnUlQQt8po2c+RiBjcWVNPQ4caVUeh TSSGNsvk6Y0OpsWELJ+hhHxzc9w= -----END CERTIFICATE-----Generated at Fri Jul 4 22:41:12 2025 by rpki-client