$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.mft File: 6PdURXXY8wfmGErHKodebODZc4s.mft (raw, json) Hash identifier: ZKI230bif33lfAoRR+ooR4YabGUvhMLYwvG3pSziw0g= Subject key identifier: 82:68:3D:54:8D:DB:D0:9C:E3:B0:B2:15:7F:7C:03:FC:95:3F:5E:BF Authority key identifier: E8:F7:54:45:75:D8:F3:07:E6:18:4A:C7:2A:87:5E:6C:E0:D9:73:8B Certificate issuer: /CN=E8F7544575D8F307E6184AC72A875E6CE0D9738B Certificate serial: 54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6PdURXXY8wfmGErHKodebODZc4s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.mft Manifest number: 54 Signing time: Sat 05 Jul 2025 00:43:09 +0000 Manifest this update: Sat 05 Jul 2025 00:43:09 +0000 Manifest next update: Sat 05 Jul 2025 06:43:09 +0000 Files and hashes: 1: 6PdURXXY8wfmGErHKodebODZc4s.crl (hash: 9bU3f8HoG/NgZTa1xD9DhLEz/Px/wCbb2ZmzRhqo8hs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6PdURXXY8wfmGErHKodebODZc4s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 06:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8F7544575D8F307E6184AC72A875E6CE0D9738B Validity Not Before: Jul 5 00:43:09 2025 GMT Not After : Jun 18 07:13:49 2026 GMT Subject: CN=82683D548DDBD09CE3B0B2157F7C03FC953F5EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:7c:07:21:9d:17:42:3a:7a:23:a2:45:77: a6:61:6a:66:1d:25:7e:9d:61:c8:0d:25:db:42:ba: 27:23:89:08:5e:7c:20:0f:15:15:33:31:99:f4:cd: 0f:13:9c:d5:87:96:6c:bf:cc:b8:79:d7:76:d8:8a: cc:00:c8:86:e6:b6:7e:be:ff:3d:d9:f8:ae:f9:36: 09:81:10:fa:bf:00:53:f9:fc:be:60:c0:72:e3:26: 86:e6:96:47:b3:50:61:59:ad:4d:9b:27:37:d1:7e: a8:b5:b6:60:80:b5:fd:58:90:98:f7:99:5d:f2:18: 04:b5:bf:55:36:59:1c:56:2f:86:0a:46:c2:af:ce: e3:78:f4:07:5d:de:f6:e5:fd:32:1c:15:24:6c:05: 2e:b2:b3:46:04:b9:5c:ae:f2:1a:0b:fd:dd:79:52: ea:b1:7e:ab:61:85:af:e9:7d:a6:0e:5b:79:9e:f6: 57:ff:b5:01:85:88:f6:8e:81:06:5e:10:b1:5f:3d: e1:ac:6c:7d:d4:d6:1d:88:49:6d:3d:94:2b:16:ee: 88:37:80:5f:9e:5d:ee:67:23:cc:8a:e3:9f:4b:ec: 64:85:84:46:44:dc:df:fe:2f:4b:a1:73:a4:a9:6b: 33:db:d0:d9:da:92:fa:54:5f:2e:6b:63:34:72:60: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:68:3D:54:8D:DB:D0:9C:E3:B0:B2:15:7F:7C:03:FC:95:3F:5E:BF X509v3 Authority Key Identifier: keyid:E8:F7:54:45:75:D8:F3:07:E6:18:4A:C7:2A:87:5E:6C:E0:D9:73:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6PdURXXY8wfmGErHKodebODZc4s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3376/6PdURXXY8wfmGErHKodebODZc4s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:78:5e:a3:c1:27:7d:bc:c1:14:6e:33:2c:54:49:e9:0a:3a: 4a:b3:92:8f:db:f0:d6:96:5c:f9:85:74:a0:d6:f1:15:cf:7b: 6a:d5:64:dd:51:7c:6f:2e:02:5d:53:84:9a:1b:f2:71:a0:0a: 2f:a5:98:fd:51:90:a9:17:1d:56:45:6b:43:eb:60:2b:5b:32: 9c:92:eb:ff:c3:0c:47:63:c3:1b:77:4d:60:2c:6d:13:e6:07: 91:81:e5:46:12:6c:7e:a5:71:0e:5f:ee:68:f2:af:44:29:b5: 8d:d1:81:55:16:db:33:d9:03:06:3e:5d:e9:74:dd:ed:1a:6e: 45:d6:b0:b3:32:e8:d7:6f:66:76:b0:85:6e:27:f7:48:36:91: 4e:06:69:ba:33:42:3b:77:f7:85:48:dd:92:fd:c5:c1:4c:b6: 3f:3b:bb:6e:05:6a:e9:63:47:3c:2f:d2:77:bd:e7:f8:9d:2f: 00:39:19:fd:3f:73:9e:12:c5:33:19:f3:5f:75:e4:5b:d4:7c: 8b:4f:85:22:2e:71:cb:f8:ea:09:a2:c6:11:7d:cf:fd:b1:34: 1d:96:90:d3:8d:6c:2f:36:fd:23:b5:12:cb:ff:d8:f9:4f:61: 02:d7:1d:4c:b7:bc:3f:ee:f9:3a:bc:c3:8f:53:d5:9c:8c:68: d1:d3:0e:60 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFOEY3 NTQ0NTc1RDhGMzA3RTYxODRBQzcyQTg3NUU2Q0UwRDk3MzhCMB4XDTI1MDcwNTAw NDMwOVoXDTI2MDYxODA3MTM0OVowMzExMC8GA1UEAxMoODI2ODNENTQ4RERCRDA5 Q0UzQjBCMjE1N0Y3QzAzRkM5NTNGNUVCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK2ZfAchnRdCOnojokV3pmFqZh0lfp1hyA0l20K6JyOJCF58IA8V FTMxmfTNDxOc1YeWbL/MuHnXdtiKzADIhua2fr7/Pdn4rvk2CYEQ+r8AU/n8vmDA cuMmhuaWR7NQYVmtTZsnN9F+qLW2YIC1/ViQmPeZXfIYBLW/VTZZHFYvhgpGwq/O 43j0B13e9uX9MhwVJGwFLrKzRgS5XK7yGgv93XlS6rF+q2GFr+l9pg5beZ72V/+1 AYWI9o6BBl4QsV894axsfdTWHYhJbT2UKxbuiDeAX55d7mcjzIrjn0vsZIWERkTc 3/4vS6FzpKlrM9vQ2dqS+lRfLmtjNHJgV9UCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSCaD1UjdvQnOOwshV/fAP8lT9evzAfBgNVHSMEGDAWgBTo91RFddjzB+YYSscq h15s4NlzizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzc2 LzZQZFVSWFhZOHdmbUdFckhLb2RlYk9EWmM0cy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNlBkVVJYWFk4d2ZtR0VySEtvZGViT0RaYzRzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3Ni82UGRVUlhYWTh3Zm1H RXJIS29kZWJPRFpjNHMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApXheo8EnfbzBFG4zLFRJ6Qo6SrOSj9vw1pZc+YV0oNbxFc97atVk3VF8by4C XVOEmhvycaAKL6WY/VGQqRcdVkVrQ+tgK1synJLr/8MMR2PDG3dNYCxtE+YHkYHl RhJsfqVxDl/uaPKvRCm1jdGBVRbbM9kDBj5d6XTd7RpuRdawszLo129mdrCFbif3 SDaRTgZpujNCO3f3hUjdkv3FwUy2Pzu7bgVq6WNHPC/Sd73n+J0vADkZ/T9znhLF MxnzX3XkW9R8i0+FIi5xy/jqCaLGEX3P/bE0HZaQ041sLzb9I7USy//Y+U9hAtcd TLe8P+75OrzDj1PVnIxo0dMOYA== -----END CERTIFICATE-----Generated at Sat Jul 5 04:05:32 2025 by rpki-client