$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft File: OhKB4chqonCKPXLu7o4bJCP-wqg.mft (raw, json) Hash identifier: H9T9AqW78pBJy5OVax4i1s8xTqVsQ2ofgJ9wfj87aL8= Subject key identifier: 31:2E:03:04:17:5F:24:1D:4E:06:AB:52:54:60:00:65:58:4A:93:4A Authority key identifier: 3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 Certificate issuer: /CN=3A1281E1C86AA2708A3D72EEEE8E1B2423FEC2A8 Certificate serial: 32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OhKB4chqonCKPXLu7o4bJCP-wqg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft Manifest number: 32 Signing time: Fri 04 Jul 2025 17:42:14 +0000 Manifest this update: Fri 04 Jul 2025 17:42:14 +0000 Manifest next update: Fri 04 Jul 2025 23:42:14 +0000 Files and hashes: 1: OhKB4chqonCKPXLu7o4bJCP-wqg.crl (hash: ZoGHk0nMjdC2Am3bQarRbEHeM0JPxQ5qODrvQlp5oWQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OhKB4chqonCKPXLu7o4bJCP-wqg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A1281E1C86AA2708A3D72EEEE8E1B2423FEC2A8 Validity Not Before: Jul 4 17:42:14 2025 GMT Not After : Jun 25 01:38:52 2026 GMT Subject: CN=312E0304175F241D4E06AB5254600065584A934A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:86:7c:0e:9c:db:c4:c9:ea:d2:c2:e8:ba: ba:ce:56:0b:14:6b:b7:36:08:4b:ed:d0:ee:b3:d5: dd:71:1b:bb:98:7b:4e:0c:4c:40:b3:85:a6:61:4a: cb:bf:02:51:3a:2f:4d:2b:45:f0:e4:27:3e:c6:5f: 3b:d4:fd:67:bd:28:7b:36:01:12:09:f1:09:08:17: 24:84:b4:12:d9:f4:9e:c0:8b:ec:10:5a:81:77:b1: ad:21:d6:16:f9:35:4b:27:75:d6:3b:e4:1d:6c:cf: 98:2b:a3:6a:a0:15:33:c2:d4:3d:b8:06:4b:0f:28: 24:6c:75:c7:ae:1c:39:f1:b9:ce:97:fa:8d:47:4c: 62:fa:9b:22:83:8c:80:0a:86:49:04:20:5d:13:89: b6:10:65:cf:3e:2e:cd:77:db:2b:e4:c2:da:13:9c: 6d:67:fa:22:19:2b:ec:16:3c:e6:d5:b0:55:14:9f: 78:b6:c8:e7:c7:56:69:bf:03:f2:be:68:c5:8c:0b: 67:2e:3b:d9:14:c2:ed:99:28:b4:02:94:dd:1e:b6: 93:e8:bf:9c:ee:af:b1:8d:f5:cd:8d:ac:68:48:1e: 3c:9f:00:d1:ed:d5:f4:d5:07:0b:60:e3:03:21:d6: 0d:f5:94:1b:c8:37:ba:9a:0e:8d:d4:3a:4a:ed:1f: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2E:03:04:17:5F:24:1D:4E:06:AB:52:54:60:00:65:58:4A:93:4A X509v3 Authority Key Identifier: keyid:3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OhKB4chqonCKPXLu7o4bJCP-wqg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9b:d4:3a:3b:22:ad:92:22:aa:23:92:9d:f2:4e:2f:72:f9: 25:59:e0:73:ca:e2:f7:d0:13:d5:8e:19:9e:ea:3e:e0:10:66: 5a:2f:75:31:aa:b0:56:e5:f3:42:c0:0f:93:39:e7:6a:33:34: cd:e5:36:ee:4c:02:79:95:bf:48:74:a6:2c:61:61:83:1e:43: 2c:27:c8:cd:03:c5:7e:9d:ab:cc:47:3c:02:e6:32:82:b7:4e: f2:b3:f4:2e:8c:0e:d6:5b:cb:b8:42:ee:8a:f2:dc:ea:13:c6: 60:75:ca:2c:a3:84:20:59:ec:12:92:97:b0:b0:4c:47:0e:7c: 5f:1e:78:a8:22:8e:b4:52:87:a2:a0:35:3e:33:e9:91:5d:68: a2:f9:d0:09:6c:82:85:f2:62:b4:42:99:5b:b6:6c:0d:e7:77: 55:13:cc:15:9f:de:bf:dd:a9:23:d4:a8:72:2e:a8:a8:e4:ec: 8a:47:e7:81:a8:da:f8:e1:71:76:38:63:6f:84:4c:a9:b6:cd: 1c:a7:e4:f2:6f:41:c3:24:7d:73:11:16:09:07:fd:dc:d4:6e: 75:0c:ac:ac:18:f4:3d:e9:fa:73:db:54:99:e6:37:6b:89:cc: be:11:a8:ba:7c:99:af:a1:5b:9f:e9:3a:b0:19:99:fe:0a:aa: e9:fc:61:fe -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQTEy ODFFMUM4NkFBMjcwOEEzRDcyRUVFRThFMUIyNDIzRkVDMkE4MB4XDTI1MDcwNDE3 NDIxNFoXDTI2MDYyNTAxMzg1MlowMzExMC8GA1UEAxMoMzEyRTAzMDQxNzVGMjQx RDRFMDZBQjUyNTQ2MDAwNjU1ODRBOTM0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOOVhnwOnNvEyerSwui6us5WCxRrtzYIS+3Q7rPV3XEbu5h7TgxM QLOFpmFKy78CUTovTStF8OQnPsZfO9T9Z70oezYBEgnxCQgXJIS0Etn0nsCL7BBa gXexrSHWFvk1Syd11jvkHWzPmCujaqAVM8LUPbgGSw8oJGx1x64cOfG5zpf6jUdM YvqbIoOMgAqGSQQgXROJthBlzz4uzXfbK+TC2hOcbWf6Ihkr7BY85tWwVRSfeLbI 58dWab8D8r5oxYwLZy472RTC7ZkotAKU3R62k+i/nO6vsY31zY2saEgePJ8A0e3V 9NUHC2DjAyHWDfWUG8g3upoOjdQ6Su0fSocCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQxLgMEF18kHU4Gq1JUYABlWEqTSjAfBgNVHSMEGDAWgBQ6EoHhyGqicIo9cu7u jhskI/7CqDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzc4 L09oS0I0Y2hxb25DS1BYTHU3bzRiSkNQLXdxZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2hLQjRjaHFvbkNLUFhMdTdvNGJKQ1Atd3FnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3OC9PaEtCNGNocW9uQ0tQ WEx1N280YkpDUC13cWcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAipvUOjsirZIiqiOSnfJOL3L5JVngc8ri99AT1Y4Znuo+4BBmWi91MaqwVuXz QsAPkznnajM0zeU27kwCeZW/SHSmLGFhgx5DLCfIzQPFfp2rzEc8AuYygrdO8rP0 LowO1lvLuELuivLc6hPGYHXKLKOEIFnsEpKXsLBMRw58Xx54qCKOtFKHoqA1PjPp kV1oovnQCWyChfJitEKZW7ZsDed3VRPMFZ/ev92pI9Soci6oqOTsikfngaja+OFx djhjb4RMqbbNHKfk8m9BwyR9cxEWCQf93NRudQysrBj0Pen6c9tUmeY3a4nMvhGo unyZr6Fbn+k6sBmZ/gqq6fxh/g== -----END CERTIFICATE-----Generated at Fri Jul 4 19:40:31 2025 by rpki-client