$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft File: LLI3q-GmanVdqVRXlfHdIp8OAxE.mft (raw, json) Hash identifier: 9VANEur5Zy900ZaTW3a+jSeGMqaxGYtwWiBwu84RVy8= Subject key identifier: 06:D2:52:BD:B9:4F:B7:B5:FB:AC:0A:3F:F5:81:E8:7D:DA:27:C9:0E Authority key identifier: 2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 Certificate issuer: /CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Certificate serial: 34 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft Manifest number: 32 Signing time: Fri 04 Jul 2025 17:42:16 +0000 Manifest this update: Fri 04 Jul 2025 17:42:16 +0000 Manifest next update: Fri 04 Jul 2025 23:42:16 +0000 Files and hashes: 1: LLI3q-GmanVdqVRXlfHdIp8OAxE.crl (hash: QHdRfsVGS4SsB54Ee5Nxesr/0JZ4Kr/izEtKWAFvA88=) 2: Yt1rWitTpI1LYpgB3rMqGL-AkFQ.roa (hash: TYveaS8iwd4jOZnVvcqKG063tVMkxAa8NQEz4EASG0Q=) 3: bf80vGJx1kOSgi2RVns6J-gthuM.roa (hash: fYtyeR4OpchTaBP5z19Hqq6dvcexMPu8HpmrKS3XhdQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 20:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Validity Not Before: Jul 4 17:42:16 2025 GMT Not After : Jun 25 05:55:52 2026 GMT Subject: CN=06D252BDB94FB7B5FBAC0A3FF581E87DDA27C90E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e6:1f:a6:ad:f8:5c:74:19:81:9a:ba:d9:1f: 81:2d:5a:44:33:90:50:d1:da:22:26:36:2c:1c:7a: 75:f6:77:9a:a3:aa:c6:af:13:b0:e7:de:53:75:cb: 07:f9:57:cf:31:ed:19:a5:73:97:dd:fb:38:f4:fe: 25:84:3b:0e:cf:ba:d5:c4:bd:0e:77:07:57:20:fb: 73:dd:54:ba:33:bc:48:66:e7:c4:f3:94:ef:ce:1d: 05:77:0c:ff:0a:ac:80:cf:5b:85:a2:11:e4:64:d8: 59:d3:29:e9:f5:c2:ea:07:ff:6d:cb:a1:49:5d:27: d9:dd:08:42:a6:7c:1f:10:7d:9d:d0:33:42:2f:77: 47:e7:8b:21:ab:ac:9a:e3:09:a9:cc:78:44:57:ad: 6f:5f:91:70:8d:17:d9:68:8b:e4:3c:3a:0c:46:ce: 19:ab:ef:c2:f2:89:45:f5:69:f8:04:f6:d4:2c:8e: b6:75:5a:42:6e:97:52:f0:f7:0d:6d:ab:e5:b4:4a: fa:b4:bc:e7:d2:d2:62:93:8e:80:3b:87:e7:b8:37: 88:70:c8:4f:63:7a:9a:d7:75:58:fa:c8:2c:12:9c: bb:54:ef:3c:9c:3b:7b:3d:f5:9d:d6:f0:e9:9c:d4: 13:d8:f5:2a:fc:30:d2:13:da:e8:18:aa:97:94:cc: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D2:52:BD:B9:4F:B7:B5:FB:AC:0A:3F:F5:81:E8:7D:DA:27:C9:0E X509v3 Authority Key Identifier: keyid:2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:5f:88:7c:b2:b3:d9:04:18:94:e1:7d:19:00:75:ef:11:7c: ff:01:81:e0:db:3f:ad:ff:ef:93:05:13:46:41:51:68:e6:a4: 1e:92:18:6c:35:ad:bb:74:a1:a1:1f:08:44:c2:ab:30:08:52: af:62:99:0d:c7:5c:ce:a8:d0:8a:57:10:ae:ab:13:9a:b5:a7: a6:7c:2f:0c:1b:a8:ce:e0:dd:b0:1c:56:d4:65:0e:a3:0d:02: d2:1a:ea:cd:a2:90:88:4a:6d:81:42:96:f6:04:89:8b:41:23: 11:f0:3d:06:67:31:4d:81:75:99:19:dd:91:3a:6c:17:b6:c1: 37:72:2f:a8:6c:7e:06:c3:b7:01:d6:24:88:01:cd:e7:37:da: 15:1f:08:2c:fd:d4:2e:49:38:5b:54:21:cb:78:54:27:35:03: ed:13:e2:34:6d:ec:39:4c:d3:9f:95:cf:d7:b8:29:75:d2:0d: 02:4c:3e:65:0e:0f:9d:56:d9:87:70:ef:cb:96:0f:47:b3:dc: 24:8b:db:40:e2:18:99:ae:02:5e:06:a2:16:dd:41:cb:4c:66: 2c:a5:19:16:0b:26:c5:89:90:99:28:22:35:3f:8f:cf:28:39: 30:6a:38:ea:d5:97:27:2a:95:47:3e:53:2c:3d:63:83:0c:54: 1a:0b:91:0a -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQ0Iy MzdBQkUxQTY2QTc1NURBOTU0NTc5NUYxREQyMjlGMEUwMzExMB4XDTI1MDcwNDE3 NDIxNloXDTI2MDYyNTA1NTU1MlowMzExMC8GA1UEAxMoMDZEMjUyQkRCOTRGQjdC NUZCQUMwQTNGRjU4MUU4N0REQTI3QzkwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAODmH6at+Fx0GYGautkfgS1aRDOQUNHaIiY2LBx6dfZ3mqOqxq8T sOfeU3XLB/lXzzHtGaVzl937OPT+JYQ7Ds+61cS9DncHVyD7c91UujO8SGbnxPOU 784dBXcM/wqsgM9bhaIR5GTYWdMp6fXC6gf/bcuhSV0n2d0IQqZ8HxB9ndAzQi93 R+eLIausmuMJqcx4RFetb1+RcI0X2WiL5Dw6DEbOGavvwvKJRfVp+AT21CyOtnVa Qm6XUvD3DW2r5bRK+rS859LSYpOOgDuH57g3iHDIT2N6mtd1WPrILBKcu1TvPJw7 ez31ndbw6ZzUE9j1Kvww0hPa6Biql5TM4S8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQG0lK9uU+3tfusCj/1geh92ifJDjAfBgNVHSMEGDAWgBQssjer4aZqdV2pVFeV 8d0inw4DETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzc5 L0xMSTNxLUdtYW5WZHFWUlhsZkhkSXA4T0F4RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTExJM3EtR21hblZkcVZSWGxmSGRJcDhPQXhFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3OS9MTEkzcS1HbWFuVmRx VlJYbGZIZElwOE9BeEUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUF+IfLKz2QQYlOF9GQB17xF8/wGB4Ns/rf/vkwUTRkFRaOakHpIYbDWtu3Sh oR8IRMKrMAhSr2KZDcdczqjQilcQrqsTmrWnpnwvDBuozuDdsBxW1GUOow0C0hrq zaKQiEptgUKW9gSJi0EjEfA9BmcxTYF1mRndkTpsF7bBN3IvqGx+BsO3AdYkiAHN 5zfaFR8ILP3ULkk4W1Qhy3hUJzUD7RPiNG3sOUzTn5XP17gpddINAkw+ZQ4PnVbZ h3Dvy5YPR7PcJIvbQOIYma4CXgaiFt1By0xmLKUZFgsmxYmQmSgiNT+Pzyg5MGo4 6tWXJyqVRz5TLD1jgwxUGguRCg== -----END CERTIFICATE-----Generated at Fri Jul 4 19:37:45 2025 by rpki-client