$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft File: SMusqvPRm5kth3kQdAxjiyXwtyw.mft (raw, json) Hash identifier: TLakgmnfONCFTGNPyWuVe5eGtbzEbDmvmJJGK7mY7co= Subject key identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 Authority key identifier: 48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C Certificate issuer: /CN=48CBACAAF3D19B992D877910740C638B25F0B72C Certificate serial: 0161 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft Manifest number: 0161 Signing time: Fri 04 Jul 2025 03:12:33 +0000 Manifest this update: Fri 04 Jul 2025 03:12:33 +0000 Manifest next update: Fri 04 Jul 2025 09:12:33 +0000 Files and hashes: 1: SMusqvPRm5kth3kQdAxjiyXwtyw.crl (hash: NCyYRJC+na0pq9xqSAiqe0o5F8Tppb7UgNNiwN+xmIg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CBACAAF3D19B992D877910740C638B25F0B72C Validity Not Before: Jul 4 03:12:33 2025 GMT Not After : Apr 24 06:25:54 2026 GMT Subject: CN=E4CE9F3991E9A36B20DB985D8F15321B45E0BE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:86:c0:0b:d3:c3:80:68:3b:d0:99:9b:16: b7:ca:89:af:ca:9f:f0:3f:80:b5:91:b9:ff:73:3b: a7:db:5c:a7:9b:2e:e0:4f:7c:73:25:fa:9a:f7:f9: 31:06:f7:2d:0e:3b:2e:ef:ed:58:36:16:fc:bf:2b: 21:3b:58:6c:0b:25:5d:fd:91:98:c8:18:6d:fa:be: 6e:45:6e:8c:e8:17:17:e8:2f:08:e3:1c:54:87:2a: db:7c:7a:1b:84:10:9b:50:1d:b6:5c:25:98:e0:84: ec:89:f6:a3:82:c4:fc:59:44:a4:4c:5d:6d:a4:43: 5c:09:1a:65:01:f6:f0:c8:ea:46:04:fb:a1:92:fe: 75:a1:f4:c9:b6:67:f7:aa:09:ff:c3:ab:19:f5:d0: aa:48:c7:df:26:6a:f6:49:f3:d9:3d:f0:16:f1:b4: 53:6f:b0:6b:72:61:30:63:f2:61:7f:fb:53:06:cf: e4:6f:c7:f6:56:cc:c2:ec:04:30:3b:b5:bb:8b:89: fc:3c:c0:a7:54:ae:d5:78:24:c5:14:8b:60:a4:6a: 6b:76:b6:ef:3d:e1:1c:74:84:74:bf:e1:6d:20:4b: 94:a7:be:69:2e:0b:aa:e0:75:b1:68:1d:fd:0e:a8: 27:d9:11:49:5e:15:67:48:cf:5c:c4:93:3d:33:35: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 X509v3 Authority Key Identifier: keyid:48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:29:f4:e0:cc:50:69:41:0d:a9:0b:b0:0a:35:41:e0:fa:52: 6c:1c:3b:bb:a4:96:13:b8:cd:75:0a:68:8d:11:53:86:68:27: 94:5e:e8:41:66:da:e6:55:68:ec:b1:ad:65:a9:40:cc:37:34: d4:1a:82:80:80:7d:70:77:a2:b4:2e:1d:f2:63:ea:16:4d:9c: b0:5e:7d:86:00:d0:0c:2a:47:1f:2b:cb:83:e3:d9:3d:42:db: a5:52:9c:bf:4b:2b:cb:ec:55:9f:23:42:d5:ad:28:0c:55:e8: 0e:12:63:9b:fb:7b:35:f8:68:79:50:34:1d:27:14:d4:57:e3: 55:e1:83:30:28:10:9f:db:02:21:6d:64:aa:d9:02:5d:3d:97: fc:1d:e7:4f:92:16:ea:35:69:84:f3:73:e7:9c:f3:cc:2b:34: 5d:2c:4d:55:56:f8:06:83:c4:5e:d6:24:49:cc:71:9b:7b:ab: b1:bd:bb:c6:9a:43:cf:bd:32:51:8e:6d:f6:8b:36:87:58:b5: 11:d7:f0:ab:c8:17:34:3a:fd:35:76:15:cc:68:51:a0:90:7e: 41:2d:b4:83:63:f5:3e:e2:ba:48:de:65:e4:e5:4f:05:26:50: b2:5c:6e:09:9c:ef:07:89:88:c9:86:d0:7a:38:0b:9f:5f:d4: 58:b6:ad:52 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDhD QkFDQUFGM0QxOUI5OTJEODc3OTEwNzQwQzYzOEIyNUYwQjcyQzAeFw0yNTA3MDQw MzEyMzNaFw0yNjA0MjQwNjI1NTRaMDMxMTAvBgNVBAMTKEU0Q0U5RjM5OTFFOUEz NkIyMERCOTg1RDhGMTUzMjFCNDVFMEJFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2MIbAC9PDgGg70JmbFrfKia/Kn/A/gLWRuf9zO6fbXKebLuBP fHMl+pr3+TEG9y0OOy7v7Vg2Fvy/KyE7WGwLJV39kZjIGG36vm5FbozoFxfoLwjj HFSHKtt8ehuEEJtQHbZcJZjghOyJ9qOCxPxZRKRMXW2kQ1wJGmUB9vDI6kYE+6GS /nWh9Mm2Z/eqCf/Dqxn10KpIx98mavZJ89k98BbxtFNvsGtyYTBj8mF/+1MGz+Rv x/ZWzMLsBDA7tbuLifw8wKdUrtV4JMUUi2Ckamt2tu894Rx0hHS/4W0gS5Snvmku C6rgdbFoHf0OqCfZEUleFWdIz1zEkz0zNa7NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU5M6fOZHpo2sg25hdjxUyG0XgvmgwHwYDVR0jBBgwFoAUSMusqvPRm5kth3kQ dAxjiyXwtywwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 NS9TTXVzcXZQUm01a3RoM2tRZEF4aml5WHd0eXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NNdXNxdlBSbTVrdGgza1FkQXhqaXlYd3R5dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjUvU011c3F2UFJtNWt0 aDNrUWRBeGppeVh3dHl3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIIp9ODMUGlBDakLsAo1QeD6UmwcO7uklhO4zXUKaI0RU4ZoJ5Re6EFm2uZV aOyxrWWpQMw3NNQagoCAfXB3orQuHfJj6hZNnLBefYYA0AwqRx8ry4Pj2T1C26VS nL9LK8vsVZ8jQtWtKAxV6A4SY5v7ezX4aHlQNB0nFNRX41XhgzAoEJ/bAiFtZKrZ Al09l/wd50+SFuo1aYTzc+ec88wrNF0sTVVW+AaDxF7WJEnMcZt7q7G9u8aaQ8+9 MlGObfaLNodYtRHX8KvIFzQ6/TV2FcxoUaCQfkEttINj9T7iukjeZeTlTwUmULJc bgmc7weJiMmG0Ho4C59f1Fi2rVI= -----END CERTIFICATE-----Generated at Fri Jul 4 06:00:20 2025 by rpki-client