$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft File: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft (raw, json) Hash identifier: Pe/ngp7Na065gbMM43OLgp2JXxVu75zMFOAS6y4Cl/M= Subject key identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D Authority key identifier: 64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 Certificate issuer: /CN=64586FB3438D76154454082FF8556B3D13F171B7 Certificate serial: 15D9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft Manifest number: 15D9 Signing time: Fri 04 Jul 2025 09:11:56 +0000 Manifest this update: Fri 04 Jul 2025 09:11:56 +0000 Manifest next update: Fri 04 Jul 2025 15:11:56 +0000 Files and hashes: 1: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl (hash: 6WoAQ+uxOYcEX0bVfnSZOXQBUiI9l0p8CY+tZc7+tL0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5593 (0x15d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64586FB3438D76154454082FF8556B3D13F171B7 Validity Not Before: Jul 4 09:11:56 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=FF4F1BE7CA68092A10750FABC11F4DB6BD8F993D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:50:2d:04:51:f6:aa:bf:5f:ad:b7:5e:b3: c8:40:f7:71:65:fa:1c:81:8e:79:e0:a7:4d:52:49: 70:ee:de:c3:45:d6:e7:42:61:64:e5:8b:51:c5:50: e6:a1:61:aa:ef:a5:fc:d2:b8:37:f7:2a:b9:66:85: 61:b5:de:e7:48:8a:6d:72:c0:9e:44:3b:e1:d8:36: d1:81:16:d6:5e:bc:ae:62:e2:ed:e5:1e:35:93:70: 76:26:c4:a7:2c:80:85:fa:04:81:72:74:ce:fc:a1: 4e:a0:f3:75:4d:53:4b:a1:88:e0:69:35:9b:f1:26: 0f:7a:da:83:04:c5:81:65:c5:c6:8b:ae:7d:40:58: 1e:63:af:ac:b5:08:b0:3d:14:66:98:67:b3:2d:3c: a4:d2:4a:15:1a:33:d6:86:6d:7c:46:2f:4b:de:c0: 99:c2:99:e2:9f:72:c5:75:3f:96:f4:ae:e4:09:29: 4f:af:39:2d:c4:23:f9:e1:45:31:37:d7:f3:4c:cf: 4a:bb:07:d4:8c:da:04:b3:bc:46:6c:d4:15:be:7f: 83:bb:ad:90:55:1b:6d:db:29:8b:e2:2e:b2:6d:5b: b8:8e:fe:2a:e1:d8:9c:ce:7d:b0:fd:a4:42:62:3d: 18:7b:7c:c8:d7:57:8e:c8:67:5f:51:60:f6:20:0b: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D X509v3 Authority Key Identifier: keyid:64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:37:d4:67:86:08:e7:ac:7a:ab:23:f4:10:2a:8e:fe:35:9b: 53:76:7e:f8:47:88:78:35:f0:c9:a8:f4:7e:64:fc:43:02:02: a8:01:33:10:d9:5a:45:dc:f5:ea:48:85:88:c8:d3:bb:bd:24: 56:bb:54:00:fb:06:69:c0:a3:c1:ae:85:ed:97:24:29:53:05: 38:0a:92:f2:4c:55:2f:8f:ca:74:a5:06:34:b3:cc:83:f3:36: 82:62:09:5c:c8:2e:c5:08:5e:0f:8c:1a:43:b3:61:f3:0a:3d: 2d:2f:0a:5c:e4:e3:df:c3:80:34:81:2c:86:44:84:dd:c8:42: 2d:84:93:cf:e3:49:05:ec:17:10:70:41:51:61:08:2c:2f:aa: 26:97:9f:c4:ee:77:d1:cd:25:62:17:06:a4:bb:74:ae:cb:a3: e3:ff:c5:bd:73:be:83:0d:20:cf:49:6d:0a:ab:1a:a7:67:2b: d1:3f:9e:4c:d8:2b:55:b0:a5:81:12:07:b1:fb:f2:ec:71:02: a5:27:84:48:0b:c9:7a:ff:12:29:75:be:4f:42:51:89:cb:71: 26:74:69:aa:a1:6a:e8:5a:7c:66:05:be:7b:0d:a1:3f:80:d0: a3:89:a0:c3:27:22:aa:4d:e3:7d:29:b5:7d:8e:4d:6d:6b:93: d8:24:4a:5b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjQ1 ODZGQjM0MzhENzYxNTQ0NTQwODJGRjg1NTZCM0QxM0YxNzFCNzAeFw0yNTA3MDQw OTExNTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZGNEYxQkU3Q0E2ODA5 MkExMDc1MEZBQkMxMUY0REI2QkQ4Rjk5M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUOVAtBFH2qr9frbdes8hA93Fl+hyBjnngp01SSXDu3sNF1udC YWTli1HFUOahYarvpfzSuDf3KrlmhWG13udIim1ywJ5EO+HYNtGBFtZevK5i4u3l HjWTcHYmxKcsgIX6BIFydM78oU6g83VNU0uhiOBpNZvxJg962oMExYFlxcaLrn1A WB5jr6y1CLA9FGaYZ7MtPKTSShUaM9aGbXxGL0vewJnCmeKfcsV1P5b0ruQJKU+v OS3EI/nhRTE31/NMz0q7B9SM2gSzvEZs1BW+f4O7rZBVG23bKYviLrJtW7iO/irh 2JzOfbD9pEJiPRh7fMjXV47IZ19RYPYgC1jDAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/08b58poCSoQdQ+rwR9Ntr2PmT0wHwYDVR0jBBgwFoAUZFhvs0ONdhVEVAgv +FVrPRPxcbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMw L1pGaHZzME9OZGhWRVZBZ3YtRlZyUFJQeGNiYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWkZodnMwT05kaFZFVkFndi1GVnJQUlB4Y2JjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMwL1pGaHZzME9OZGhWRVZB Z3YtRlZyUFJQeGNiYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCuN9RnhgjnrHqrI/QQKo7+NZtTdn74R4h4NfDJqPR+ZPxDAgKoATMQ2VpF3PXq SIWIyNO7vSRWu1QA+wZpwKPBroXtlyQpUwU4CpLyTFUvj8p0pQY0s8yD8zaCYglc yC7FCF4PjBpDs2HzCj0tLwpc5OPfw4A0gSyGRITdyEIthJPP40kF7BcQcEFRYQgs L6oml5/E7nfRzSViFwaku3Suy6Pj/8W9c76DDSDPSW0KqxqnZyvRP55M2CtVsKWB Egex+/LscQKlJ4RIC8l6/xIpdb5PQlGJy3EmdGmqoWroWnxmBb57DaE/gNCjiaDD JyKqTeN9KbV9jk1ta5PYJEpb -----END CERTIFICATE-----Generated at Fri Jul 4 11:40:20 2025 by rpki-client