$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft File: GubvWysCBd1fK0KBGsYIANaP1KA.mft (raw, json) Hash identifier: IxK81vKblBQivGCtAqz3OjyhHahEXT3O+SidPR9k2tA= Subject key identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 Authority key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 Certificate issuer: /CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Certificate serial: 2E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft Manifest number: 2E Signing time: Fri 04 Jul 2025 02:12:04 +0000 Manifest this update: Fri 04 Jul 2025 02:12:04 +0000 Manifest next update: Fri 04 Jul 2025 08:12:04 +0000 Files and hashes: 1: GubvWysCBd1fK0KBGsYIANaP1KA.crl (hash: P9/RyJRyFAwBJBw+CPiMA7czhFkQV37WLgLbGbP6sVg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Validity Not Before: Jul 4 02:12:04 2025 GMT Not After : Jun 25 05:55:52 2026 GMT Subject: CN=418CE576B99D09444358380CFC60C020975464F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:40:9a:f8:12:e4:af:91:de:39:48:7c:61: 59:4a:26:ff:1c:35:d9:00:a7:47:dd:46:4c:c1:e0: 99:69:4e:e8:b1:ed:eb:8e:38:f5:09:9c:19:02:86: 90:ed:13:8c:09:75:46:c7:47:09:d3:93:c7:02:a8: 9b:58:c3:52:09:40:0d:28:22:58:8f:26:8a:ae:b3: 49:61:7c:ed:2e:31:d2:e5:0e:0c:c2:34:27:9c:7e: ea:de:93:30:70:30:24:ab:25:fd:86:24:b3:44:1b: eb:dc:bd:73:ef:41:5a:d9:82:5e:44:c9:10:52:60: 76:4e:43:e2:be:88:68:48:e5:85:07:3b:4b:37:fc: ed:1e:d4:55:48:40:8d:f1:d2:e7:1f:76:01:2a:ae: 82:d4:dc:bb:3e:68:c0:a7:c9:46:72:4f:76:bb:07: b1:a4:75:19:85:0c:a9:ea:cc:22:53:c8:be:34:bb: 1f:e7:1c:5c:1d:54:6d:a3:d2:68:03:cb:cb:76:2d: 44:e5:04:88:13:e7:f8:55:b7:fb:00:db:94:49:e2: 1b:23:48:0d:61:67:0c:8c:8a:2a:f9:73:cd:a2:24: 0a:e1:f1:94:bd:40:be:f9:21:25:fa:aa:9f:8d:9d: a0:7e:65:79:02:d1:25:2d:88:af:5b:cf:37:cf:ca: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 X509v3 Authority Key Identifier: keyid:1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:04:ef:bc:e9:c5:25:21:0d:87:7c:4b:56:53:fe:49:cd:a5: bc:0f:10:8c:09:1b:a8:aa:00:f3:f6:96:1a:cf:ae:42:ac:4d: 55:14:32:c4:7b:b8:54:bf:c6:5e:ae:c9:15:e2:98:59:76:ca: 04:50:f8:a2:53:32:ca:a8:6d:b2:48:a4:c7:1e:de:9c:9e:94: 12:cb:60:b3:e7:8a:af:bc:4d:44:ab:28:08:54:33:4d:48:4e: 65:44:65:e6:a2:35:41:94:d1:8b:48:6e:5d:af:ec:17:de:86: 0d:33:aa:0a:0c:d5:13:cf:6c:48:05:f2:25:d1:66:a7:9d:0d: 1f:78:54:33:76:12:da:75:64:dc:8c:16:12:c3:7d:e4:3d:9d: d8:e2:65:27:16:37:ff:27:e6:cf:2d:68:0f:2f:b7:b3:72:5d: ac:01:42:d2:80:42:96:1b:76:41:20:9f:9f:cd:d0:81:94:de: 9f:8a:64:ac:07:f2:bc:e2:8a:7a:d2:ba:47:35:30:cc:0f:5a: 6b:12:a6:8d:65:c3:ef:70:bd:44:92:c4:3b:9c:b4:57:74:e6: e7:54:9a:96:17:2b:24:4f:bc:c5:7e:8a:65:54:9b:ed:95:74: 8f:e3:54:11:a0:38:df:7b:13:8e:fa:cc:07:a3:c9:e4:d3:5e: 6a:ed:ef:fb -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQUU2 RUY1QjJCMDIwNURENUYyQjQyODExQUM2MDgwMEQ2OEZENEEwMB4XDTI1MDcwNDAy MTIwNFoXDTI2MDYyNTA1NTU1MlowMzExMC8GA1UEAxMoNDE4Q0U1NzZCOTlEMDk0 NDQzNTgzODBDRkM2MEMwMjA5NzU0NjRGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALniQJr4EuSvkd45SHxhWUom/xw12QCnR91GTMHgmWlO6LHt6444 9QmcGQKGkO0TjAl1RsdHCdOTxwKom1jDUglADSgiWI8miq6zSWF87S4x0uUODMI0 J5x+6t6TMHAwJKsl/YYks0Qb69y9c+9BWtmCXkTJEFJgdk5D4r6IaEjlhQc7Szf8 7R7UVUhAjfHS5x92ASqugtTcuz5owKfJRnJPdrsHsaR1GYUMqerMIlPIvjS7H+cc XB1UbaPSaAPLy3YtROUEiBPn+FW3+wDblEniGyNIDWFnDIyKKvlzzaIkCuHxlL1A vvkhJfqqn42doH5leQLRJS2Ir1vPN8/K/1UCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRBjOV2uZ0JRENYOAz8YMAgl1Rk9jAfBgNVHSMEGDAWgBQa5u9bKwIF3V8rQoEa xggA1o/UoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzc5 L0d1YnZXeXNDQmQxZkswS0JHc1lJQU5hUDFLQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvR3Vidld5c0NCZDFmSzBLQkdzWUlBTmFQMUtBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3OS9HdWJ2V3lzQ0JkMWZL MEtCR3NZSUFOYVAxS0EubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuATvvOnFJSENh3xLVlP+Sc2lvA8QjAkbqKoA8/aWGs+uQqxNVRQyxHu4VL/G Xq7JFeKYWXbKBFD4olMyyqhtskikxx7enJ6UEstgs+eKr7xNRKsoCFQzTUhOZURl 5qI1QZTRi0huXa/sF96GDTOqCgzVE89sSAXyJdFmp50NH3hUM3YS2nVk3IwWEsN9 5D2d2OJlJxY3/yfmzy1oDy+3s3JdrAFC0oBClht2QSCfn83QgZTen4pkrAfyvOKK etK6RzUwzA9aaxKmjWXD73C9RJLEO5y0V3Tm51SalhcrJE+8xX6KZVSb7ZV0j+NU EaA433sTjvrMB6PJ5NNeau3v+w== -----END CERTIFICATE-----Generated at Fri Jul 4 07:47:28 2025 by rpki-client