$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft File: LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft (raw, json) Hash identifier: d51lzR7aFJNUYo83Atc0lP0YRlc5qcAIPdRGE3tBUME= Subject key identifier: 73:AB:90:37:A3:23:67:0C:D3:0F:4B:63:5F:AE:4D:A5:67:4C:51:E8 Authority key identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB Certificate issuer: /CN=2CA390E2780550E44EC03598082E1995474DF2FB Certificate serial: 1D60 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft Manifest number: 1D5B Signing time: Sat 05 Jul 2025 00:44:57 +0000 Manifest this update: Sat 05 Jul 2025 00:44:56 +0000 Manifest next update: Sat 05 Jul 2025 06:44:56 +0000 Files and hashes: 1: KXC0qgIn72LRVsWM0i_L6lscO8g.roa (hash: GSnatx02n+iXry7WlwPh8UpObPD3/2LSBscAoZQxmeI=) 2: LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl (hash: qCkMuPufU/BskI1M1z3F2rZfM/yEcNd/v7jweMEJWmc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 05:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7520 (0x1d60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA390E2780550E44EC03598082E1995474DF2FB Validity Not Before: Jul 5 00:44:56 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=73AB9037A323670CD30F4B635FAE4DA5674C51E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:ec:36:7c:4a:d8:c8:ac:26:fe:38:08:41: b5:dc:8e:d4:79:55:1e:ba:fd:15:27:54:b7:40:5a: 7a:4b:0a:be:80:87:ad:6f:06:22:23:c4:8b:52:7e: 53:1c:79:31:14:22:38:0d:cd:68:c4:33:fc:e4:7b: 42:45:b2:d1:b7:65:a3:96:5e:b9:4c:41:25:60:ee: 45:eb:df:24:91:4e:7d:db:33:d3:73:2f:3f:72:a8: 92:5d:58:75:25:de:43:06:a7:06:3b:6b:06:39:61: b8:01:a0:9e:9b:be:e7:5b:a0:15:6c:97:ac:09:3f: a9:6f:b8:31:f1:4c:24:39:5b:af:16:89:6a:9d:b0: 08:59:46:d4:d3:b1:b1:45:5f:46:a2:1c:82:11:eb: ec:aa:53:06:7e:7e:27:93:30:f2:9b:9d:c0:5b:f3: 28:b9:3e:e5:ff:3e:57:12:f2:ec:d9:3b:94:b6:9d: ea:97:03:02:f8:37:fb:d0:80:99:21:2f:b3:d6:5a: d9:de:ab:a2:25:19:c3:4e:98:15:7b:0f:c4:d9:af: b5:9f:39:d6:0d:c5:b2:1a:e2:5c:52:4e:03:02:08: 79:36:21:97:81:f3:7e:53:59:df:d2:79:f9:11:8f: 57:60:87:64:14:75:8e:ea:f0:c1:3d:e8:c8:49:7b: fd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AB:90:37:A3:23:67:0C:D3:0F:4B:63:5F:AE:4D:A5:67:4C:51:E8 X509v3 Authority Key Identifier: keyid:2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d6:34:a2:9c:ca:b1:9b:cc:72:1f:ca:97:87:46:b4:22:0e: 7b:95:0f:4d:3e:62:57:37:4b:0c:bd:5d:10:6b:ae:c2:64:82: ee:27:2b:ec:89:57:d5:04:29:8b:be:1c:a1:f9:f6:5c:cb:76: 4a:0e:0e:83:1e:26:05:02:b9:c1:dd:d1:88:4b:7d:5f:4d:81: 0a:04:c2:a2:e3:59:96:53:21:7b:a9:c2:c7:ef:cb:21:da:26: c7:25:b1:6e:4b:e2:2d:b5:ce:30:92:58:0d:40:eb:11:81:ad: 65:02:4b:cc:36:0c:93:77:67:df:0e:36:05:8c:be:01:b0:2e: 98:c3:2b:9e:31:64:b3:a7:3c:f8:cc:cb:fe:6e:ad:cc:79:dc: 62:5f:e1:91:bc:5f:cd:b4:9d:e3:83:17:3b:aa:2c:62:52:9d: b5:bb:fe:47:eb:0b:14:b4:62:76:c2:05:5c:18:7f:95:54:23: 65:a1:37:fe:c5:d6:8b:12:e9:21:12:84:6c:5d:cb:ba:d5:b6: f9:0e:8f:98:e7:e2:9d:8f:db:e4:b7:c4:d1:c7:02:6d:d7:35: fd:50:d4:ca:b3:d9:0d:1c:99:41:9f:78:cf:08:25:c7:5d:8c: 9a:07:56:c7:be:c7:d0:93:8e:94:d0:d7:5e:7d:8d:29:23:97: 30:db:92:6c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNB MzkwRTI3ODA1NTBFNDRFQzAzNTk4MDgyRTE5OTU0NzRERjJGQjAeFw0yNTA3MDUw MDQ0NTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDczQUI5MDM3QTMyMzY3 MENEMzBGNEI2MzVGQUU0REE1Njc0QzUxRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb6Ow2fErYyKwm/jgIQbXcjtR5VR66/RUnVLdAWnpLCr6Ah61v BiIjxItSflMceTEUIjgNzWjEM/zke0JFstG3ZaOWXrlMQSVg7kXr3ySRTn3bM9Nz Lz9yqJJdWHUl3kMGpwY7awY5YbgBoJ6bvudboBVsl6wJP6lvuDHxTCQ5W68WiWqd sAhZRtTTsbFFX0aiHIIR6+yqUwZ+fieTMPKbncBb8yi5PuX/PlcS8uzZO5S2neqX AwL4N/vQgJkhL7PWWtneq6IlGcNOmBV7D8TZr7WfOdYNxbIa4lxSTgMCCHk2IZeB 835TWd/SefkRj1dgh2QUdY7q8ME96MhJe/3ZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUc6uQN6MjZwzTD0tjX65NpWdMUegwHwYDVR0jBBgwFoAULKOQ4ngFUOROwDWY CC4ZlUdN8vswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk1 L0xLT1E0bmdGVU9ST3dEV1lDQzRabFVkTjh2cy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTEtPUTRuZ0ZVT1JPd0RXWUNDNFpsVWROOHZzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk1L0xLT1E0bmdGVU9ST3dE V1lDQzRabFVkTjh2cy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZ1jSinMqxm8xyH8qXh0a0Ig57lQ9NPmJXN0sMvV0Qa67CZILuJyvsiVfVBCmL vhyh+fZcy3ZKDg6DHiYFArnB3dGIS31fTYEKBMKi41mWUyF7qcLH78sh2ibHJbFu S+Ittc4wklgNQOsRga1lAkvMNgyTd2ffDjYFjL4BsC6YwyueMWSzpzz4zMv+bq3M edxiX+GRvF/NtJ3jgxc7qixiUp21u/5H6wsUtGJ2wgVcGH+VVCNloTf+xdaLEukh EoRsXcu61bb5Do+Y5+Kdj9vkt8TRxwJt1zX9UNTKs9kNHJlBn3jPCCXHXYyaB1bH vsfQk46U0NdefY0pI5cw25Js -----END CERTIFICATE-----Generated at Sat Jul 5 03:42:55 2025 by rpki-client