$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft (raw, json) Hash identifier: CPQ7jTwIRFv4g9cuFh1rk8SogVfJRkErphZgZ3FMkEE= Subject key identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 Authority key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 Certificate issuer: /CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Certificate serial: 0440 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft Manifest number: 0440 Signing time: Fri 04 Jul 2025 15:18:18 +0000 Manifest this update: Fri 04 Jul 2025 15:18:18 +0000 Manifest next update: Fri 04 Jul 2025 21:18:18 +0000 Files and hashes: 1: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl (hash: OQIeMPlYvzP91hEKP54Kz9ys0vBhg2GebdHn0pH1f7k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 20:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Validity Not Before: Jul 4 15:18:18 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A9C96D2CD7FF73A24D41602735A73A35A0695009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:d1:dd:7d:8d:3f:3f:cc:2b:5d:b7:4b:22: 98:52:25:29:58:7e:98:42:d4:70:0f:27:ed:8e:77: 8d:4d:36:96:c0:4c:60:f1:93:56:45:e4:12:33:e0: a3:45:1e:21:a4:f3:aa:81:04:cd:e3:8f:da:1c:f1: c6:5e:d0:38:98:b1:74:e9:2d:10:b0:f5:c4:25:2b: 8e:34:9f:77:dd:16:76:e5:54:7c:5b:84:a2:d1:5d: 28:5d:50:b6:46:2e:24:5c:63:6d:c2:e5:94:90:c9: 11:d1:61:fd:28:3f:f4:0d:cb:72:74:d2:80:ad:50: de:ee:8e:e0:ba:f3:92:4d:be:ba:cd:c4:2a:0f:6c: d8:0a:d3:b5:90:43:90:ff:d1:8b:6b:74:7f:cd:d1: a0:ac:33:30:9b:96:5e:6b:3a:4d:8b:b8:8d:c7:2c: e1:3e:2e:b5:5b:5e:35:48:08:eb:75:b9:24:7a:d3: d7:89:70:b9:87:fd:9d:45:3e:95:ce:bf:a3:96:c5: a0:31:c0:56:f9:76:ed:12:8f:dd:e9:54:26:cb:32: bb:dd:ba:79:af:ac:58:61:a1:87:09:a3:87:86:f0: 47:3a:d6:49:c5:df:3a:4b:e3:96:ac:0b:22:8b:c6: a8:fe:41:2d:02:7e:df:2a:b0:85:34:bf:21:47:f9: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 X509v3 Authority Key Identifier: keyid:7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:77:8a:d9:64:43:c5:c2:e8:ab:22:49:e9:da:a8:b5:12:26: bf:06:9e:b8:c6:b9:48:87:05:fa:d4:21:6e:c4:b1:b4:a8:fc: 24:b2:f2:3d:02:91:7b:14:5a:3c:65:8c:bd:52:41:20:7f:ee: d4:73:3f:c9:fa:b8:61:09:33:f7:86:5a:07:05:6c:46:61:74: c4:57:85:a3:84:b5:00:85:48:09:85:7d:28:e5:2b:07:69:4f: 44:38:5a:74:f3:c7:76:98:ec:2e:9e:40:98:42:41:5d:e1:ca: 5a:50:1d:b4:0c:ee:6f:01:a7:e1:8b:13:65:c2:f8:13:1b:c5: 55:77:9f:f0:de:e6:a9:d7:0d:0b:3d:31:f5:25:a7:98:b0:e4: ab:c2:eb:cb:fd:0e:16:e5:71:07:56:ad:8b:57:a8:91:4e:d5: 76:dc:cb:01:8a:9f:76:36:7a:ba:c3:d7:83:d5:51:7d:c1:bb: d2:2f:77:17:a7:3c:81:7e:b6:19:ac:50:e0:af:ee:ef:35:e4: a9:1d:7b:c9:fc:fd:64:08:53:1b:6b:ca:2a:b0:cc:50:87:36: d3:12:dd:ff:b3:dd:99:12:20:80:7a:5a:a9:2f:78:13:87:fa: e7:7d:6f:e9:01:66:92:5a:d3:49:18:2d:e2:58:35:42:c0:34: b9:84:07:5d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U0 MDNCOTUyMEI0MjQ2NDQzRDNFQjg3RkYxQUNDNjk5RTA0REZCNjAeFw0yNTA3MDQx NTE4MThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEE5Qzk2RDJDRDdGRjcz QTI0RDQxNjAyNzM1QTczQTM1QTA2OTUwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrJ9HdfY0/P8wrXbdLIphSJSlYfphC1HAPJ+2Od41NNpbATGDx k1ZF5BIz4KNFHiGk86qBBM3jj9oc8cZe0DiYsXTpLRCw9cQlK440n3fdFnblVHxb hKLRXShdULZGLiRcY23C5ZSQyRHRYf0oP/QNy3J00oCtUN7ujuC685JNvrrNxCoP bNgK07WQQ5D/0YtrdH/N0aCsMzCbll5rOk2LuI3HLOE+LrVbXjVICOt1uSR609eJ cLmH/Z1FPpXOv6OWxaAxwFb5du0Sj93pVCbLMrvdunmvrFhhoYcJo4eG8Ec61knF 3zpL45asCyKLxqj+QS0Cft8qsIU0vyFH+VOxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUqcltLNf/c6JNQWAnNac6NaBpUAkwHwYDVR0jBBgwFoAUfkA7lSC0JGRD0+uH /xrMaZ4E37YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi9ma0E3bFNDMEpHUkQwLXVIX3hyTWFaNEUzN1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZrQTdsU0MwSkdSRDAtdUhfeHJNYVo0RTM3WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzIvZmtBN2xTQzBKR1JE MC11SF94ck1hWjRFMzdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHR3itlkQ8XC6KsiSenaqLUSJr8GnrjGuUiHBfrUIW7EsbSo/CSy8j0CkXsU WjxljL1SQSB/7tRzP8n6uGEJM/eGWgcFbEZhdMRXhaOEtQCFSAmFfSjlKwdpT0Q4 WnTzx3aY7C6eQJhCQV3hylpQHbQM7m8Bp+GLE2XC+BMbxVV3n/De5qnXDQs9MfUl p5iw5KvC68v9DhblcQdWrYtXqJFO1XbcywGKn3Y2errD14PVUX3Bu9IvdxenPIF+ thmsUOCv7u815Kkde8n8/WQIUxtryiqwzFCHNtMS3f+z3ZkSIIB6WqkveBOH+ud9 b+kBZpJa00kYLeJYNULANLmEB10= -----END CERTIFICATE-----Generated at Fri Jul 4 19:36:53 2025 by rpki-client