$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft File: 2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft (raw, json) Hash identifier: tqn6Qb8xhgW/2PxBxqcZrgYnUSY+KMmq6p5BRAkavX0= Subject key identifier: DB:95:FB:87:37:A8:81:A6:96:B5:CD:C7:2C:C2:88:90:8B:E4:1D:50 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 03B6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft Manifest number: 03B4 Signing time: Fri 04 Jul 2025 05:17:07 +0000 Manifest this update: Fri 04 Jul 2025 05:17:07 +0000 Manifest next update: Fri 04 Jul 2025 11:17:07 +0000 Files and hashes: 1: 2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl (hash: MqrzGfOwIJoER7/fyP2nt4Mg4Wzf2bA1aVLNjIoH5k4=) 2: 4rIKi71cnPKiZ6le-I8T__5k1N4.roa (hash: tNGI77V6KgBy/gmuuKH73UZZqJT4nL9iHPvyEDnpdTU=) 3: NENwW-YjXqfqZoRO7e6IVtyfJno.roa (hash: shhp8XTqqPaxGVCmML4kyHBJcfox3b9DaUPiLypqy38=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Jul 4 05:17:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DB95FB8737A881A696B5CDC72CC288908BE41D50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:7d:c0:59:21:5f:82:8b:b4:e8:c7:3a:d8: ad:f4:27:ab:b2:5e:43:7d:45:18:3d:70:51:e1:fc: 6c:0e:7d:48:91:30:42:39:d5:ce:a6:ff:f9:8f:60: b1:49:8d:39:1e:f1:4e:54:f5:2c:ee:3c:bb:8d:11: 17:af:8f:ce:09:4c:47:59:d5:a6:35:73:48:c7:5e: 33:39:dc:c0:64:58:a1:eb:5f:d5:67:6a:58:9e:37: 34:57:4d:d8:ec:a3:a4:51:85:f4:ba:18:f6:0d:98: bf:0e:d3:2a:22:ed:ce:5d:ee:71:18:80:ae:9d:a2: 9c:dc:58:bc:a9:2f:83:e5:b6:b7:3e:aa:ad:db:85: 2a:c2:f6:a6:b7:98:11:91:e4:6e:9b:ea:02:52:10: e7:f8:4a:cd:91:9b:47:0f:3c:aa:88:25:be:d2:12: 90:3f:ce:f8:a1:cd:d4:0c:a0:54:0b:71:59:1b:88: b3:91:84:2c:2a:67:68:5d:7b:4f:dd:5f:05:bc:74: 42:b9:73:00:90:c5:44:0e:c9:66:4b:90:75:50:6c: d2:29:c5:48:85:ff:bf:87:81:fb:6f:ac:61:cc:e1: b4:5e:a4:1d:a4:d6:57:55:9b:68:0b:67:8a:05:e6: ac:19:ec:7d:9b:51:c9:52:1d:aa:e3:54:71:23:61: 49:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:95:FB:87:37:A8:81:A6:96:B5:CD:C7:2C:C2:88:90:8B:E4:1D:50 X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ff:25:bf:03:3d:2b:bf:46:00:02:ea:d5:53:6a:64:99:49: 78:e9:32:ee:7f:4b:ae:e7:be:0b:b8:64:9a:ff:8a:b5:7e:26: 88:51:2b:79:06:6e:a2:61:2e:c7:aa:a0:78:a4:fc:99:67:1a: 01:43:1c:ab:91:4b:11:b3:ad:c4:99:3f:94:aa:96:d9:88:f4: 9f:7c:48:06:7d:d8:c5:05:58:09:2f:fa:2a:27:a4:b8:6e:d9: c3:2d:0f:09:91:4a:ca:cb:52:c6:02:a2:1a:e4:59:c0:b4:a8: 43:02:a1:fe:8c:0b:43:a2:42:fe:73:06:a7:c6:84:d4:63:2f: 9e:e7:86:19:6b:07:4d:8c:25:00:28:2d:4e:79:48:1c:b1:a6: 92:33:f4:4a:a2:a1:99:aa:dc:76:1e:7f:b2:2c:4f:0c:ce:86: 79:ad:5b:d9:b9:a9:51:2c:16:8c:3f:de:3e:0a:4f:26:83:dc: 45:5e:33:df:2d:7a:fa:3c:8d:8b:ed:d9:18:08:bc:bb:fd:7e: aa:56:41:3a:50:06:b6:01:75:92:2d:9a:38:b4:5b:ef:67:3a: ac:57:67:95:a9:f9:04:6c:d8:39:20:ed:8c:0d:f2:90:8a:88: 12:d7:5d:0e:31:42:c8:bf:1c:70:8d:dd:ff:35:ee:6f:f0:e4: 27:21:0f:5e -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTA3MDQw NTE3MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERCOTVGQjg3MzdBODgx QTY5NkI1Q0RDNzJDQzI4ODkwOEJFNDFENTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH6X3AWSFfgou06Mc62K30J6uyXkN9RRg9cFHh/GwOfUiRMEI5 1c6m//mPYLFJjTke8U5U9SzuPLuNERevj84JTEdZ1aY1c0jHXjM53MBkWKHrX9Vn alieNzRXTdjso6RRhfS6GPYNmL8O0yoi7c5d7nEYgK6dopzcWLypL4Pltrc+qq3b hSrC9qa3mBGR5G6b6gJSEOf4Ss2Rm0cPPKqIJb7SEpA/zvihzdQMoFQLcVkbiLOR hCwqZ2hde0/dXwW8dEK5cwCQxUQOyWZLkHVQbNIpxUiF/7+HgftvrGHM4bRepB2k 1ldVm2gLZ4oF5qwZ7H2bUclSHarjVHEjYUm7AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQU25X7hzeogaaWtc3HLMKIkIvkHVAwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi8yaDJyN1BHVVhmOVR0aURn dHNRUTZSNUVjYkUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA KP8lvwM9K79GAALq1VNqZJlJeOky7n9Lrue+C7hkmv+KtX4miFEreQZuomEux6qg eKT8mWcaAUMcq5FLEbOtxJk/lKqW2Yj0n3xIBn3YxQVYCS/6KiekuG7Zwy0PCZFK ystSxgKiGuRZwLSoQwKh/owLQ6JC/nMGp8aE1GMvnueGGWsHTYwlACgtTnlIHLGm kjP0SqKhmarcdh5/sixPDM6Gea1b2bmpUSwWjD/ePgpPJoPcRV4z3y16+jyNi+3Z GAi8u/1+qlZBOlAGtgF1ki2aOLRb72c6rFdnlan5BGzYOSDtjA3ykIqIEtddDjFC yL8ccI3d/zXub/DkJyEPXg== -----END CERTIFICATE-----Generated at Fri Jul 4 07:26:26 2025 by rpki-client