$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft File: bHGFaWGICFmFIGtbw8RT4SftD94.mft (raw, json) Hash identifier: hxi2SLasergyl6h6eEtqQD0ranz+nWMgBEQv+a3TsDI= Subject key identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D Authority key identifier: 6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE Certificate issuer: /CN=6C7185696188085985206B5BC3C453E127ED0FDE Certificate serial: 0440 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft Manifest number: 0440 Signing time: Fri 04 Jul 2025 10:16:57 +0000 Manifest this update: Fri 04 Jul 2025 10:16:57 +0000 Manifest next update: Fri 04 Jul 2025 16:16:57 +0000 Files and hashes: 1: bHGFaWGICFmFIGtbw8RT4SftD94.crl (hash: QkMYxPNh/k3atOW3SAiu+GB58ukSZ/VtUMtpsbEO0ao=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C7185696188085985206B5BC3C453E127ED0FDE Validity Not Before: Jul 4 10:16:57 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=EBD0975A7BEC6943E8DF5934276DEB7EDD3A0A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:43:31:63:6a:f6:8a:7d:c3:cf:84:c1:85: 81:04:6f:3d:bf:3a:c9:34:64:5f:2b:3f:24:76:db: 0d:dc:01:fe:7b:bc:11:e5:2d:5f:3b:de:e7:87:14: 70:a5:35:bf:7d:29:a0:b8:16:16:5d:de:ad:c3:b2: 0f:0f:39:ff:1d:32:0d:f4:c5:6f:19:9e:62:c9:d6: 90:bf:33:57:c3:60:ea:8b:06:54:6f:5f:31:7a:9d: de:68:26:c3:2c:d2:5a:e0:9e:d8:c7:b6:8f:90:e1: 97:29:7b:aa:28:8b:1d:e1:0c:4c:50:f9:cc:a0:6b: d3:a6:a3:23:63:09:e9:4f:7d:0e:de:19:0e:76:00: 4c:17:04:d5:35:3e:3e:87:20:1c:46:bf:ca:34:b4: 9d:40:af:26:97:9e:8c:24:31:54:59:8e:6c:04:59: fe:c1:05:dc:1d:d3:6e:47:8d:55:7a:d6:45:87:b1: e8:f3:84:03:47:4a:60:83:e1:d4:c4:c8:81:e5:e9: ed:b5:20:e1:03:87:7d:5d:13:89:77:3d:81:a6:14: 06:b3:c4:92:09:8a:e2:76:28:48:b9:2e:b3:61:85: c0:dd:96:22:bf:85:d3:cd:7a:9b:e0:55:c5:6c:8f: 1b:86:69:74:8e:f5:90:5a:7c:89:2e:95:76:b3:60: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D X509v3 Authority Key Identifier: keyid:6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ca:99:90:cc:34:5b:9c:2f:38:18:cf:56:c0:70:b8:f8:7e: dd:f0:8b:c2:37:d2:be:d5:33:16:29:fc:ac:93:5b:0a:0f:da: 5f:f1:aa:1f:b0:59:e6:82:f2:28:8a:0b:8d:32:4d:a3:fc:5d: fc:9c:8e:e8:35:7d:a2:3e:18:b9:37:5c:c3:5b:d9:81:9a:06: 3b:46:e0:4e:39:2d:81:97:2f:a7:c5:38:78:4e:95:31:e8:23: 28:31:2e:f9:c1:26:f8:31:44:d0:88:ce:e4:0c:da:db:6b:6a: 3b:2e:ec:c4:97:bd:6c:03:7e:e5:ad:b0:f3:5d:1c:d1:4a:92: a8:a8:a3:99:1b:26:c2:6c:69:0a:b6:93:87:32:3d:d4:71:df: 1d:46:ee:d8:a2:9e:a7:6d:2c:b5:7d:1e:68:b2:00:8e:d6:86: 07:0a:d9:eb:c9:0f:04:a6:34:77:d8:2d:46:3f:20:5d:01:e6: 83:ed:26:4b:3a:81:3d:b6:12:96:64:37:be:80:d5:1d:cf:8b: 45:51:bd:69:bc:ec:c6:fe:8d:90:27:22:37:ac:11:4a:6f:a2: 7c:9e:d8:20:e2:71:87:95:79:95:1d:75:24:1b:41:9b:72:dc: 3d:3c:48:8b:11:68:f9:68:9b:19:06:42:cf:39:96:a0:44:ff: 75:47:0f:04 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkM3 MTg1Njk2MTg4MDg1OTg1MjA2QjVCQzNDNDUzRTEyN0VEMEZERTAeFw0yNTA3MDQx MDE2NTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVCRDA5NzVBN0JFQzY5 NDNFOERGNTkzNDI3NkRFQjdFREQzQTBBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOlEMxY2r2in3Dz4TBhYEEbz2/Osk0ZF8rPyR22w3cAf57vBHl LV873ueHFHClNb99KaC4FhZd3q3Dsg8POf8dMg30xW8ZnmLJ1pC/M1fDYOqLBlRv XzF6nd5oJsMs0lrgntjHto+Q4Zcpe6ooix3hDExQ+cyga9OmoyNjCelPfQ7eGQ52 AEwXBNU1Pj6HIBxGv8o0tJ1AryaXnowkMVRZjmwEWf7BBdwd025HjVV61kWHsejz hANHSmCD4dTEyIHl6e21IOEDh31dE4l3PYGmFAazxJIJiuJ2KEi5LrNhhcDdliK/ hdPNepvgVcVsjxuGaXSO9ZBafIkulXazYGtPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU69CXWnvsaUPo31k0J23rft06Ci0wHwYDVR0jBBgwFoAUbHGFaWGICFmFIGtb w8RT4SftD94wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz My9iSEdGYVdHSUNGbUZJR3RidzhSVDRTZnREOTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2JIR0ZhV0dJQ0ZtRklHdGJ3OFJUNFNmdEQ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzMvYkhHRmFXR0lDRm1G SUd0Ync4UlQ0U2Z0RDk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIjKmZDMNFucLzgYz1bAcLj4ft3wi8I30r7VMxYp/KyTWwoP2l/xqh+wWeaC 8iiKC40yTaP8Xfycjug1faI+GLk3XMNb2YGaBjtG4E45LYGXL6fFOHhOlTHoIygx LvnBJvgxRNCIzuQM2ttrajsu7MSXvWwDfuWtsPNdHNFKkqioo5kbJsJsaQq2k4cy PdRx3x1G7tiinqdtLLV9HmiyAI7WhgcK2evJDwSmNHfYLUY/IF0B5oPtJks6gT22 EpZkN76A1R3Pi0VRvWm87Mb+jZAnIjesEUpvonye2CDicYeVeZUddSQbQZty3D08 SIsRaPlomxkGQs85lqBE/3VHDwQ= -----END CERTIFICATE-----Generated at Fri Jul 4 11:43:03 2025 by rpki-client