$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft File: Abqns7epjYr5LS2VVnUO4m3D7pk.mft (raw, json) Hash identifier: bsqQnD2xkUd1BVa37dci+aQs/AjCOdElHA/JrCJOXyY= Subject key identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 Authority key identifier: 01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 Certificate issuer: /CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Certificate serial: DB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft Manifest number: DB Signing time: Fri 04 Jul 2025 09:11:48 +0000 Manifest this update: Fri 04 Jul 2025 09:11:48 +0000 Manifest next update: Fri 04 Jul 2025 15:11:48 +0000 Files and hashes: 1: Abqns7epjYr5LS2VVnUO4m3D7pk.crl (hash: 7Gx4hRYZYwFLqIOJsYvziPOtDZVbFJvAIcj/QMpJfZg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Validity Not Before: Jul 4 09:11:48 2025 GMT Not After : May 22 08:46:04 2026 GMT Subject: CN=67E18440F931EBE2EE9A7C99A430455C87EFACE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:f8:b1:c8:11:df:fb:17:31:b3:15:a1:51: dd:64:77:f7:47:83:44:72:2e:46:82:30:e5:80:1e: 3b:88:bd:16:ad:12:9f:38:0e:f8:53:3c:4c:e9:3c: 1d:9e:20:08:ed:81:15:e3:b8:1f:55:c3:e6:2c:61: 9e:2a:70:da:47:eb:ce:eb:e0:89:6a:2a:5c:51:5d: 20:b4:08:47:69:e7:0b:1f:a8:b8:d2:1c:5e:b8:05: 7c:0e:3d:92:9e:1e:89:63:53:d6:81:ca:58:5c:9f: f1:37:ce:59:eb:73:36:0e:db:8f:f1:45:29:54:d6: 8c:08:25:34:c1:88:0b:6b:d2:c0:3a:a7:7b:ba:e3: fb:ce:27:38:98:8a:6d:5f:56:89:59:5c:8e:1f:2d: 33:ed:9b:ea:ce:9c:36:fb:76:a8:c1:ea:80:4f:8f: 4e:a2:75:be:11:05:7b:91:fa:cc:14:85:b7:2d:a7: 22:8f:7d:cf:9b:fa:26:5a:48:95:8b:62:4e:a3:a6: 31:3c:0f:60:09:51:14:84:e2:21:9d:6c:7d:7d:1c: aa:42:61:e5:e2:10:11:9a:46:4b:8e:b6:e1:d6:16: 6e:39:f7:d4:64:8d:a2:fa:51:b5:45:82:1c:64:05: cb:2d:62:eb:cd:19:76:86:91:c4:8e:44:c4:6e:26: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 X509v3 Authority Key Identifier: keyid:01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:92:e2:5e:3f:90:20:c0:32:f0:9c:a7:ba:0b:0b:b0:12:a9: 6a:02:ca:0c:e4:fc:e1:f7:34:c1:85:12:65:26:4a:e8:cf:9a: 03:8f:5e:87:8c:a4:10:5f:ee:ed:41:39:1c:64:f9:48:0a:16: c4:b8:4f:c4:6d:79:60:6f:7b:24:9e:82:a6:f4:b8:5e:8f:bd: 81:08:bb:ec:6c:0f:5f:43:31:51:23:f3:16:a9:93:b1:e7:d0: 5b:bf:3a:2f:48:fb:25:c0:e1:67:5d:29:57:5c:0f:39:c9:7c: b2:1b:21:72:b1:6e:de:b6:bc:7a:7d:25:bd:83:62:8f:b7:99: 5b:11:70:9b:35:c9:79:02:f7:47:d3:fb:62:56:df:eb:8b:f0: af:28:31:0d:09:2a:1d:e3:a7:53:24:10:f3:88:e6:ac:d6:d4: dc:40:74:3c:64:0e:dd:28:8c:68:6d:af:3b:65:a1:f4:bd:58: 57:8c:7f:2a:19:80:a4:bb:49:04:fb:7f:69:4e:b3:05:35:21: 2c:7d:7e:13:54:c6:9f:1e:c6:aa:3e:8e:5d:69:86:73:b1:a8: d9:08:2c:d6:b7:92:3d:29:58:33:fb:c1:76:92:74:c2:54:a2: ea:59:e4:5c:ff:05:0f:73:84:42:de:f4:c5:ae:ea:cb:b8:4d: 3f:87:4f:15 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICANswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFC QUE3QjNCN0E5OEQ4QUY5MkQyRDk1NTY3NTBFRTI2REMzRUU5OTAeFw0yNTA3MDQw OTExNDhaFw0yNjA1MjIwODQ2MDRaMDMxMTAvBgNVBAMTKDY3RTE4NDQwRjkzMUVC RTJFRTlBN0M5OUE0MzA0NTVDODdFRkFDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRqfixyBHf+xcxsxWhUd1kd/dHg0RyLkaCMOWAHjuIvRatEp84 DvhTPEzpPB2eIAjtgRXjuB9Vw+YsYZ4qcNpH687r4IlqKlxRXSC0CEdp5wsfqLjS HF64BXwOPZKeHoljU9aBylhcn/E3zlnrczYO24/xRSlU1owIJTTBiAtr0sA6p3u6 4/vOJziYim1fVolZXI4fLTPtm+rOnDb7dqjB6oBPj06idb4RBXuR+swUhbctpyKP fc+b+iZaSJWLYk6jpjE8D2AJURSE4iGdbH19HKpCYeXiEBGaRkuOtuHWFm4599Rk jaL6UbVFghxkBcstYuvNGXaGkcSORMRuJvDrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ+GEQPkx6+LumnyZpDBFXIfvrOkwHwYDVR0jBBgwFoAUAbqns7epjYr5LS2V VnUO4m3D7pkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 Mi9BYnFuczdlcGpZcjVMUzJWVm5VTzRtM0Q3cGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FicW5zN2VwallyNUxTMlZWblVPNG0zRDdway5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzIvQWJxbnM3ZXBqWXI1 TFMyVlZuVU80bTNEN3BrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIqS4l4/kCDAMvCcp7oLC7ASqWoCygzk/OH3NMGFEmUmSujPmgOPXoeMpBBf 7u1BORxk+UgKFsS4T8RteWBveySegqb0uF6PvYEIu+xsD19DMVEj8xapk7Hn0Fu/ Oi9I+yXA4WddKVdcDznJfLIbIXKxbt62vHp9Jb2DYo+3mVsRcJs1yXkC90fT+2JW 3+uL8K8oMQ0JKh3jp1MkEPOI5qzW1NxAdDxkDt0ojGhtrztlofS9WFeMfyoZgKS7 SQT7f2lOswU1ISx9fhNUxp8exqo+jl1phnOxqNkILNa3kj0pWDP7wXaSdMJUoupZ 5Fz/BQ9zhELe9MWu6su4TT+HTxU= -----END CERTIFICATE-----Generated at Fri Jul 4 12:06:41 2025 by rpki-client