$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.mft File: VXtsbLEjoSwu4XgmgJvlOtqpROY.mft (raw, json) Hash identifier: RQM/3awhpHOs3tLr9nqq1cOs6plTtk8td1drM6BuYhU= Subject key identifier: B5:05:35:D0:67:CC:4B:6F:E2:17:C4:84:76:67:0E:05:4A:96:E3:56 Authority key identifier: 55:7B:6C:6C:B1:23:A1:2C:2E:E1:78:26:80:9B:E5:3A:DA:A9:44:E6 Certificate issuer: /CN=557B6C6CB123A12C2EE17826809BE53ADAA944E6 Certificate serial: 72 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VXtsbLEjoSwu4XgmgJvlOtqpROY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.mft Manifest number: 72 Signing time: Sat 05 Jul 2025 02:12:27 +0000 Manifest this update: Sat 05 Jul 2025 02:12:26 +0000 Manifest next update: Sat 05 Jul 2025 08:12:26 +0000 Files and hashes: 1: VXtsbLEjoSwu4XgmgJvlOtqpROY.crl (hash: 7duGNt+j3yY8BM00hjsbpIgrtzesg6jy2h6+YSsgHPE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VXtsbLEjoSwu4XgmgJvlOtqpROY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 08:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557B6C6CB123A12C2EE17826809BE53ADAA944E6 Validity Not Before: Jul 5 02:12:26 2025 GMT Not After : Jun 12 08:37:11 2026 GMT Subject: CN=B50535D067CC4B6FE217C48476670E054A96E356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:61:75:60:6b:c8:eb:3b:90:e9:bb:bc:56: 2d:37:1e:1c:8d:8a:bc:fb:65:79:2e:9b:d1:c0:6e: f0:1c:e1:4c:57:5d:8c:f7:c8:f5:1b:cf:c9:81:5d: 93:5d:59:60:43:4e:31:81:12:e8:23:17:8a:2d:68: 10:63:6c:40:9f:54:f2:b3:0b:9a:7f:49:c3:af:01: 6d:0c:5f:45:57:28:e8:4d:23:8b:d8:94:6e:b2:8a: 9d:74:3f:3b:67:6a:db:27:2d:6f:a9:f3:8c:a5:a7: 92:e2:37:8d:a6:cc:c2:fc:7f:b9:6f:98:1c:66:12: 90:41:ce:eb:da:5c:82:37:43:8a:3b:e0:6f:7b:a0: e1:90:54:84:e1:9d:59:93:bb:ed:ad:58:55:9a:22: 2f:c8:ba:29:a7:29:34:b0:25:78:a6:6f:d8:23:2d: d2:cf:28:b8:6b:54:f0:a3:10:72:27:c0:ed:20:3f: 3c:39:d9:2c:dc:4f:b9:26:e7:c8:7b:ff:91:dd:24: 74:7d:d5:5f:9d:10:71:31:6e:ef:45:83:96:65:48: 70:0e:c3:0b:05:6a:d6:83:32:4f:13:61:9f:63:d1: bb:ef:0d:89:4d:ba:c3:74:c3:06:d9:45:dc:37:dc: 24:b0:b1:64:75:ea:5a:83:68:0f:ea:59:ec:4a:a4: 41:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:05:35:D0:67:CC:4B:6F:E2:17:C4:84:76:67:0E:05:4A:96:E3:56 X509v3 Authority Key Identifier: keyid:55:7B:6C:6C:B1:23:A1:2C:2E:E1:78:26:80:9B:E5:3A:DA:A9:44:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VXtsbLEjoSwu4XgmgJvlOtqpROY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b8:26:41:ab:b9:ec:f2:24:a2:34:0d:5f:73:93:eb:6d:1c: 34:13:67:98:7e:52:bb:76:83:52:64:bd:a2:33:2f:ee:27:85: 92:c7:fe:fc:db:f5:46:95:c7:70:f0:89:a4:ab:9d:39:88:89: da:43:88:54:7d:db:89:7f:09:63:c8:e7:a7:08:84:8a:05:81: e8:56:0c:a1:b2:60:38:30:9c:4b:6f:d8:da:7a:12:87:d0:f7: a0:18:55:f5:67:22:29:b8:db:6d:95:0c:1d:5a:a1:07:71:7f: 67:7e:c2:4c:d0:e4:88:bc:40:7a:6a:70:47:3e:0c:ed:d0:8c: a9:da:46:d4:e1:cb:6c:ad:66:db:ae:1a:2c:6e:f0:76:bc:f5: 39:fd:e4:5f:43:d4:55:fc:97:2b:5c:16:07:77:aa:79:c7:20: b9:1b:0d:fc:fa:3e:43:3e:43:34:0e:07:ae:87:da:a1:ed:64: 20:a2:72:f4:cc:57:1d:10:8d:ea:d7:6a:c5:4c:20:ed:cb:19: 51:3d:22:14:9c:37:8b:f5:ba:40:bb:0e:62:a2:ec:c9:bc:30: 52:70:09:86:f0:55:a2:84:0a:9b:19:72:a6:16:5c:e7:f5:7e: d7:c8:e8:6b:8e:17:64:d6:a1:bc:66:c5:37:52:0d:ff:fa:a8: 99:3f:45:44 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NTdC NkM2Q0IxMjNBMTJDMkVFMTc4MjY4MDlCRTUzQURBQTk0NEU2MB4XDTI1MDcwNTAy MTIyNloXDTI2MDYxMjA4MzcxMVowMzExMC8GA1UEAxMoQjUwNTM1RDA2N0NDNEI2 RkUyMTdDNDg0NzY2NzBFMDU0QTk2RTM1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALD/YXVga8jrO5Dpu7xWLTceHI2KvPtleS6b0cBu8BzhTFddjPfI 9RvPyYFdk11ZYENOMYES6CMXii1oEGNsQJ9U8rMLmn9Jw68BbQxfRVco6E0ji9iU brKKnXQ/O2dq2yctb6nzjKWnkuI3jabMwvx/uW+YHGYSkEHO69pcgjdDijvgb3ug 4ZBUhOGdWZO77a1YVZoiL8i6KacpNLAleKZv2CMt0s8ouGtU8KMQcifA7SA/PDnZ LNxPuSbnyHv/kd0kdH3VX50QcTFu70WDlmVIcA7DCwVq1oMyTxNhn2PRu+8NiU26 w3TDBtlF3DfcJLCxZHXqWoNoD+pZ7EqkQVMCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBS1BTXQZ8xLb+IXxIR2Zw4FSpbjVjAfBgNVHSMEGDAWgBRVe2xssSOhLC7heCaA m+U62qlE5jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzc1 L1ZYdHNiTEVqb1N3dTRYZ21nSnZsT3RxcFJPWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVlh0c2JMRWpvU3d1NFhnbWdKdmxPdHFwUk9ZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3NS9WWHRzYkxFam9Td3U0 WGdtZ0p2bE90cXBST1kubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnLgmQau57PIkojQNX3OT620cNBNnmH5Su3aDUmS9ojMv7ieFksf+/Nv1RpXH cPCJpKudOYiJ2kOIVH3biX8JY8jnpwiEigWB6FYMobJgODCcS2/Y2noSh9D3oBhV 9WciKbjbbZUMHVqhB3F/Z37CTNDkiLxAempwRz4M7dCMqdpG1OHLbK1m264aLG7w drz1Of3kX0PUVfyXK1wWB3eqeccguRsN/Po+Qz5DNA4Hrofaoe1kIKJy9MxXHRCN 6tdqxUwg7csZUT0iFJw3i/W6QLsOYqLsybwwUnAJhvBVooQKmxlyphZc5/V+18jo a44XZNahvGbFN1IN//qomT9FRA== -----END CERTIFICATE-----Generated at Sat Jul 5 06:25:38 2025 by rpki-client