$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft File: nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft (raw, json) Hash identifier: YUU7MMQO/WtwK8E/yGM9Fdgn4kwTM5rWbM5z/zl7Td0= Subject key identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 Authority key identifier: 9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 Certificate issuer: /CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Certificate serial: E0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft Manifest number: E0 Signing time: Fri 04 Jul 2025 06:11:45 +0000 Manifest this update: Fri 04 Jul 2025 06:11:45 +0000 Manifest next update: Fri 04 Jul 2025 12:11:45 +0000 Files and hashes: 1: nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl (hash: JIM9QYBwxUPBejY1jt29Y3vuye3JcVFtabALB/m7peQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 12:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Validity Not Before: Jul 4 06:11:45 2025 GMT Not After : May 21 00:12:30 2026 GMT Subject: CN=C6279EA9F47099A4B320B69DB6EBFCDCFBAEA616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:b6:23:03:35:f1:e9:a2:c2:c0:d2:60:9e: 33:93:a0:b3:93:60:ed:5a:02:d8:97:10:15:23:02: 06:bc:53:bd:f8:8d:ed:29:95:fe:4d:d7:c2:d4:58: a0:7d:d0:ea:31:55:83:bf:8f:1b:f3:89:42:ef:db: 71:b7:5f:ac:c9:38:33:9a:4c:24:e8:9e:15:d0:32: d9:4b:3c:c1:17:73:89:dc:0f:35:9e:b7:b9:8a:a4: 96:34:8a:08:8e:b1:27:e2:8a:c0:df:ee:ec:3b:7e: 25:6a:02:9b:4c:5f:47:60:b7:24:92:02:e6:50:48: 46:cf:cd:51:d6:d1:94:c6:78:50:b1:22:b4:f2:ab: 0e:d2:84:2a:8a:12:05:bd:c0:1a:d0:44:35:2a:67: f5:db:9a:f7:b3:f1:fc:33:b0:77:fa:bf:cc:37:28: ab:8e:33:69:10:b9:9a:99:16:e6:67:89:1a:2b:52: 01:59:f8:6f:4d:b3:93:74:89:d5:66:59:d8:2b:b4: d5:1d:5f:b5:23:b1:2c:07:80:53:d0:22:4b:56:25: 02:da:71:d6:e5:84:1c:78:a2:7e:84:37:fc:c6:9d: a1:72:e9:b4:3a:d3:3f:4e:27:fa:97:9e:73:a2:fc: e8:9b:21:7f:df:41:e9:04:a1:a6:ec:f3:3a:ec:8b: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 X509v3 Authority Key Identifier: keyid:9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:93:4b:67:4b:4d:a1:3c:ae:77:ca:9c:d4:3c:f4:32:da:71: fe:44:b8:02:13:f3:27:98:a4:2d:9e:7b:89:9b:f0:a1:44:73: 38:69:68:cd:18:45:ef:24:55:08:e9:5a:ab:19:3e:0c:f6:35: 12:ed:5c:a8:6c:ed:7e:26:10:11:52:37:bf:b7:15:dc:5b:5e: fb:94:ee:9a:e5:05:96:f8:49:6f:85:f9:7b:12:51:48:9b:b9: 7e:d0:06:a0:fc:a8:4f:e7:19:92:9d:0b:5a:29:93:2c:2f:0b: cb:c3:3e:bb:27:96:f3:c6:d8:85:d6:d4:7e:9d:9c:83:8e:b7: 95:a6:27:ce:2c:58:52:c1:45:eb:4b:f1:7c:87:ac:a9:94:2c: 1b:34:9b:d0:81:50:10:71:23:c5:bd:8a:7b:db:24:9e:db:3a: e9:40:0c:3b:de:3e:9d:d8:26:81:45:37:cd:64:9a:c6:73:b5: 30:0d:17:09:28:1d:3b:90:0e:ca:31:b4:71:17:26:85:45:ea: 7c:59:e7:cf:e6:31:ee:8e:c5:be:9f:c7:44:42:bf:7c:06:5e: 66:44:49:f4:4a:b7:13:e8:34:7a:7d:7d:1e:83:9d:57:40:3d: dd:f7:58:2a:da:51:1d:ec:c6:06:38:95:2f:c4:82:99:32:a9: 92:40:52:6f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURG OEVGQTg4RTJBQkNFMTkzRTRFREYwRTFENkE4QUE4NEI5NUJFNDAeFw0yNTA3MDQw NjExNDVaFw0yNjA1MjEwMDEyMzBaMDMxMTAvBgNVBAMTKEM2Mjc5RUE5RjQ3MDk5 QTRCMzIwQjY5REI2RUJGQ0RDRkJBRUE2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG5LYjAzXx6aLCwNJgnjOToLOTYO1aAtiXEBUjAga8U734je0p lf5N18LUWKB90OoxVYO/jxvziULv23G3X6zJODOaTCTonhXQMtlLPMEXc4ncDzWe t7mKpJY0igiOsSfiisDf7uw7fiVqAptMX0dgtySSAuZQSEbPzVHW0ZTGeFCxIrTy qw7ShCqKEgW9wBrQRDUqZ/Xbmvez8fwzsHf6v8w3KKuOM2kQuZqZFuZniRorUgFZ +G9Ns5N0idVmWdgrtNUdX7UjsSwHgFPQIktWJQLacdblhBx4on6EN/zGnaFy6bQ6 0z9OJ/qXnnOi/OibIX/fQekEoabs8zrsi2UXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUxieeqfRwmaSzILadtuv83PuuphYwHwYDVR0jBBgwFoAUnfjvqI4qvOGT5O3w 4daoqoS5W+QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 MS9uZmp2cUk0cXZPR1Q1TzN3NGRhb3FvUzVXLVEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25manZxSTRxdk9HVDVPM3c0ZGFvcW9TNVctUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzEvbmZqdnFJNHF2T0dU NU8zdzRkYW9xb1M1Vy1RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKOTS2dLTaE8rnfKnNQ89DLacf5EuAIT8yeYpC2ee4mb8KFEczhpaM0YRe8k VQjpWqsZPgz2NRLtXKhs7X4mEBFSN7+3FdxbXvuU7prlBZb4SW+F+XsSUUibuX7Q BqD8qE/nGZKdC1opkywvC8vDPrsnlvPG2IXW1H6dnIOOt5WmJ84sWFLBRetL8XyH rKmULBs0m9CBUBBxI8W9invbJJ7bOulADDvePp3YJoFFN81kmsZztTANFwkoHTuQ DsoxtHEXJoVF6nxZ58/mMe6Oxb6fx0RCv3wGXmZESfRKtxPoNHp9fR6DnVdAPd33 WCraUR3sxgY4lS/EgpkyqZJAUm8= -----END CERTIFICATE-----Generated at Fri Jul 4 11:16:10 2025 by rpki-client