$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.mft File: NZjKnSE-sM2NFTb0CZkDGllEiMM.mft (raw, json) Hash identifier: vyeJNIbnRfrfSeigLKhbEx5gN35MxGouN4aNVGfyDe0= Subject key identifier: 45:D2:FF:88:BF:B9:15:73:4B:17:A1:E3:D7:C7:5A:A1:17:69:15:42 Authority key identifier: 35:98:CA:9D:21:3E:B0:CD:8D:15:36:F4:09:99:03:1A:59:44:88:C3 Certificate issuer: /CN=3598CA9D213EB0CD8D1536F40999031A594488C3 Certificate serial: 4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NZjKnSE-sM2NFTb0CZkDGllEiMM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.mft Manifest number: 4D Signing time: Fri 04 Jul 2025 10:14:14 +0000 Manifest this update: Fri 04 Jul 2025 10:14:14 +0000 Manifest next update: Fri 04 Jul 2025 16:14:14 +0000 Files and hashes: 1: NZjKnSE-sM2NFTb0CZkDGllEiMM.crl (hash: pvp2szXhRnzqgUesIvZIKRijhrUzQRcFCXs670IiGN4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NZjKnSE-sM2NFTb0CZkDGllEiMM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3598CA9D213EB0CD8D1536F40999031A594488C3 Validity Not Before: Jul 4 10:14:14 2025 GMT Not After : Jun 19 07:00:03 2026 GMT Subject: CN=45D2FF88BFB915734B17A1E3D7C75AA117691542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:34:ec:93:9c:17:7c:c5:4e:61:fb:23:32: bd:c1:bc:65:b3:36:eb:0f:90:3e:3c:73:54:5f:97: 44:00:21:a2:37:49:8b:e1:9a:e8:97:14:95:0e:19: f9:ed:0b:7f:8a:19:6c:f6:de:f4:2e:01:69:87:e6: 6e:1d:c5:53:c4:35:ae:af:49:3f:07:ba:45:42:2b: 24:8d:5d:ba:ca:75:be:a6:e9:8f:f1:9e:aa:6d:56: e5:65:d0:19:1b:5a:87:10:30:d8:15:18:99:eb:ad: 33:79:ed:e5:d4:0e:67:46:b3:ee:10:63:b0:60:09: 20:eb:f6:7c:4c:d9:8b:c3:68:7b:a7:17:52:5b:e5: 5b:ae:1a:9f:19:87:21:56:36:4e:29:33:24:eb:6b: 4c:e7:52:af:5e:22:6d:e9:8b:f5:49:0c:df:28:10: e8:fd:97:eb:fc:1b:cf:af:31:61:8e:3a:c9:b6:05: ea:30:e8:a4:8c:22:84:00:a3:f7:46:66:13:a6:4e: c3:92:8e:89:7d:17:2b:4d:bc:0f:60:e0:66:67:26: db:67:5f:d1:d7:40:9d:49:f6:9c:46:3f:67:eb:9b: f1:a4:f6:12:1e:73:14:f5:0d:d7:8d:e8:50:88:66: 56:01:08:5e:77:79:87:bd:14:b1:fd:4b:ec:ed:76: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D2:FF:88:BF:B9:15:73:4B:17:A1:E3:D7:C7:5A:A1:17:69:15:42 X509v3 Authority Key Identifier: keyid:35:98:CA:9D:21:3E:B0:CD:8D:15:36:F4:09:99:03:1A:59:44:88:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NZjKnSE-sM2NFTb0CZkDGllEiMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/NZjKnSE-sM2NFTb0CZkDGllEiMM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:29:82:7e:e5:b0:70:c2:b5:54:57:ab:c1:46:9c:12:f4:83: fe:2b:34:7e:16:fb:cd:5e:b9:5f:6b:c0:6f:91:91:2b:51:f3: 2c:04:15:55:f4:fe:4a:76:0f:74:8a:37:f9:5d:c1:d3:ce:fa: a9:a8:1a:d3:09:22:6d:68:1d:8d:67:9a:e6:1f:5b:45:8f:bc: 56:e1:99:ea:fd:eb:75:f3:a2:92:1b:0f:8a:a3:a4:db:72:fe: 1a:6d:f5:f5:4f:ea:5d:36:6d:01:9f:96:f2:9b:b1:73:f1:a7: bf:d3:1d:77:30:01:a9:56:92:ec:da:26:6c:32:a3:e5:93:83: da:27:b9:0e:3d:bd:7b:b5:fc:1d:07:ff:9f:50:6a:b9:4e:7f: 51:68:f0:9f:23:9a:f4:5d:4e:ca:77:95:c3:69:6b:43:70:85: ad:2b:ea:3a:e2:bd:ef:f0:45:39:0c:2e:65:42:ce:e6:2c:dd: f7:28:b2:1c:44:a9:14:e4:20:a1:55:c2:c9:8f:5c:fa:34:19: 2c:84:80:88:64:80:e4:dd:34:1d:0e:bd:e9:46:40:b6:94:60: f1:a1:d1:92:7b:5f:3e:e8:03:ae:80:d5:75:1d:6d:8d:64:06: f0:05:c6:f2:c9:81:2e:f9:84:e1:c6:64:99:b6:82:47:b5:97: f8:9a:02:84 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNTk4 Q0E5RDIxM0VCMENEOEQxNTM2RjQwOTk5MDMxQTU5NDQ4OEMzMB4XDTI1MDcwNDEw MTQxNFoXDTI2MDYxOTA3MDAwM1owMzExMC8GA1UEAxMoNDVEMkZGODhCRkI5MTU3 MzRCMTdBMUUzRDdDNzVBQTExNzY5MTU0MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALhSNOyTnBd8xU5h+yMyvcG8ZbM26w+QPjxzVF+XRAAhojdJi+Ga 6JcUlQ4Z+e0Lf4oZbPbe9C4BaYfmbh3FU8Q1rq9JPwe6RUIrJI1dusp1vqbpj/Ge qm1W5WXQGRtahxAw2BUYmeutM3nt5dQOZ0az7hBjsGAJIOv2fEzZi8Noe6cXUlvl W64anxmHIVY2TikzJOtrTOdSr14ibemL9UkM3ygQ6P2X6/wbz68xYY46ybYF6jDo pIwihACj90ZmE6ZOw5KOiX0XK028D2DgZmcm22df0ddAnUn2nEY/Z+ub8aT2Eh5z FPUN143oUIhmVgEIXnd5h70Usf1L7O12HDsCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRF0v+Iv7kVc0sXoePXx1qhF2kVQjAfBgNVHSMEGDAWgBQ1mMqdIT6wzY0VNvQJ mQMaWUSIwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzc3 L05aaktuU0Utc00yTkZUYjBDWmtER2xsRWlNTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTlpqS25TRS1zTTJORlRiMENaa0RHbGxFaU1NLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3Ny9OWmpLblNFLXNNMk5G VGIwQ1prREdsbEVpTU0ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJSmCfuWwcMK1VFerwUacEvSD/is0fhb7zV65X2vAb5GRK1HzLAQVVfT+SnYP dIo3+V3B0876qaga0wkibWgdjWea5h9bRY+8VuGZ6v3rdfOikhsPiqOk23L+Gm31 9U/qXTZtAZ+W8puxc/Gnv9MddzABqVaS7NombDKj5ZOD2ie5Dj29e7X8HQf/n1Bq uU5/UWjwnyOa9F1OyneVw2lrQ3CFrSvqOuK97/BFOQwuZULO5izd9yiyHESpFOQg oVXCyY9c+jQZLISAiGSA5N00HQ696UZAtpRg8aHRkntfPugDroDVdR1tjWQG8AXG 8smBLvmE4cZkmbaCR7WX+JoChA== -----END CERTIFICATE-----Generated at Fri Jul 4 11:40:27 2025 by rpki-client