$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft File: rvnRXVUWBDHU9wnoqjo61bzM1uU.mft (raw, json) Hash identifier: CJz3UTlOvuKQkW69f4wh9gg7wV5XJhsGUMvHtvgOOW8= Subject key identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 Authority key identifier: AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 Certificate issuer: /CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Certificate serial: 15ED Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft Manifest number: 15EC Signing time: Sat 05 Jul 2025 05:45:04 +0000 Manifest this update: Sat 05 Jul 2025 05:45:04 +0000 Manifest next update: Sat 05 Jul 2025 11:45:04 +0000 Files and hashes: 1: rvnRXVUWBDHU9wnoqjo61bzM1uU.crl (hash: zaRDXQpus4AqOFx5obgVDPpngHqUf1K8EvDflfH3U+M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 11:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5613 (0x15ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Validity Not Before: Jul 5 05:45:04 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=0B8E0425F3DFB4FC5ADADEF1A84A31CC41970B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:4b:56:fa:21:51:7e:b9:ed:95:52:ab:dd: 85:90:94:18:ef:68:f7:fd:2e:8f:8c:93:ac:71:fa: 95:e7:7b:21:d5:3d:3f:3d:5f:af:f9:5a:04:d4:c4: 0e:4b:f8:b4:73:5d:cb:49:71:70:20:75:7d:a6:37: f6:9c:c8:2d:2c:dc:75:40:20:71:a0:f9:08:73:62: 46:bb:f7:c8:2a:e9:45:46:52:4d:20:bb:a5:fa:af: 78:48:b6:5c:73:a7:89:7f:7a:da:51:5f:c4:e7:60: 2a:74:2b:74:cd:88:8e:6b:4d:75:98:ad:24:22:75: 09:27:8d:70:18:ab:e3:58:31:7f:8a:c0:bb:49:68: 0d:e1:32:fd:29:2f:33:f9:0b:31:36:db:67:93:cc: 00:07:3b:07:6d:42:52:b0:63:e5:a1:c3:58:f2:59: ea:ed:f5:51:1f:86:b1:bf:e3:1d:25:9a:a0:2a:29: 33:8f:41:b0:19:63:29:69:a8:24:13:08:34:8f:41: 35:8f:65:ad:93:3a:77:7d:83:22:93:7f:64:d8:15: ac:35:25:fe:b9:04:2a:c7:9f:c8:ea:3f:e5:d0:0e: 7d:92:9c:2e:97:bf:1d:f6:07:de:f1:ae:33:63:7e: 45:4c:cd:60:a9:48:a7:8e:42:58:01:e9:a2:37:d9: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 X509v3 Authority Key Identifier: keyid:AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:38:7c:bd:0c:50:cd:8d:b9:33:a7:d8:4a:5e:c9:2f:fb:cc: df:78:c8:e3:b1:c0:33:cf:dc:b5:e7:39:6b:df:62:75:e8:64: 03:2d:bc:23:36:3f:d2:e0:d8:ce:bb:09:47:0a:af:81:75:74: 16:be:7d:ac:01:cb:b1:7d:de:eb:ab:53:85:74:47:7f:00:57: bb:ec:d0:87:f3:d2:18:5c:9e:4e:af:3d:d4:79:bc:d9:b0:51: fa:3a:5e:9b:d6:7c:2f:31:3f:ea:20:e9:06:50:b2:af:46:ed: 64:72:05:c5:65:24:9c:51:21:d3:b4:e6:1c:1e:13:46:c1:bd: 9d:d2:e5:0e:14:19:69:ff:40:b7:3c:56:f8:cf:01:06:cd:5f: bf:a7:f5:94:2a:44:43:43:a8:4d:72:80:a1:d7:37:bc:84:95: 33:55:b4:a6:f9:b7:7c:ab:e0:27:73:43:a3:fd:aa:48:92:4b: 18:79:28:ec:fb:ad:9c:7b:d8:69:86:2f:8d:0a:5d:cf:6d:b0: 14:18:6f:e1:92:a3:e5:04:cb:ce:ed:20:d5:01:4d:a7:83:0c: 7c:91:9c:3c:e5:04:2d:f3:99:7a:55:e4:93:10:f5:cb:66:7f: 9d:0c:f4:98:df:f1:62:20:49:cb:69:7e:60:f1:eb:1c:ab:e3: 81:6e:b4:c7 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVG OUQxNUQ1NTE2MDQzMUQ0RjcwOUU4QUEzQTNBRDVCQ0NDRDZFNTAeFw0yNTA3MDUw NTQ1MDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBCOEUwNDI1RjNERkI0 RkM1QURBREVGMUE4NEEzMUNDNDE5NzBCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfqktW+iFRfrntlVKr3YWQlBjvaPf9Lo+Mk6xx+pXneyHVPT89 X6/5WgTUxA5L+LRzXctJcXAgdX2mN/acyC0s3HVAIHGg+QhzYka798gq6UVGUk0g u6X6r3hItlxzp4l/etpRX8TnYCp0K3TNiI5rTXWYrSQidQknjXAYq+NYMX+KwLtJ aA3hMv0pLzP5CzE222eTzAAHOwdtQlKwY+Whw1jyWert9VEfhrG/4x0lmqAqKTOP QbAZYylpqCQTCDSPQTWPZa2TOnd9gyKTf2TYFaw1Jf65BCrHn8jqP+XQDn2SnC6X vx32B97xrjNjfkVMzWCpSKeOQlgB6aI32VlTAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUC44EJfPftPxa2t7xqEoxzEGXC2AwHwYDVR0jBBgwFoAUrvnRXVUWBDHU9wno qjo61bzM1uUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEw L3J2blJYVlVXQkRIVTl3bm9xam82MWJ6TTF1VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcnZuUlhWVVdCREhVOXdub3FqbzYxYnpNMXVVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEwL3J2blJYVlVXQkRIVTl3 bm9xam82MWJ6TTF1VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGOHy9DFDNjbkzp9hKXskv+8zfeMjjscAzz9y15zlr32J16GQDLbwjNj/S4NjO uwlHCq+BdXQWvn2sAcuxfd7rq1OFdEd/AFe77NCH89IYXJ5Orz3UebzZsFH6Ol6b 1nwvMT/qIOkGULKvRu1kcgXFZSScUSHTtOYcHhNGwb2d0uUOFBlp/0C3PFb4zwEG zV+/p/WUKkRDQ6hNcoCh1ze8hJUzVbSm+bd8q+Anc0Oj/apIkksYeSjs+62ce9hp hi+NCl3PbbAUGG/hkqPlBMvO7SDVAU2ngwx8kZw85QQt85l6VeSTEPXLZn+dDPSY 3/FiIEnLaX5g8escq+OBbrTH -----END CERTIFICATE-----Generated at Sat Jul 5 08:48:25 2025 by rpki-client