$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft File: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft (raw, json) Hash identifier: cKVJryB7ly8lZMjS0mnFTabsN4uCPi/RLUlOXrIkhBw= Subject key identifier: 07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 1360 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft Manifest number: 134C Signing time: Fri 04 Jul 2025 12:42:30 +0000 Manifest this update: Fri 04 Jul 2025 12:42:30 +0000 Manifest next update: Fri 04 Jul 2025 18:42:30 +0000 Files and hashes: 1: 3ANA68llOiqAK9kzJqoDW4NPtfI.roa (hash: uiS2HxQNB0LmVZpVD+63G59hOl/pd6GststSwA1a7yI=) 2: FdrWyT1YrzA6KtI60aLydyXlpW4.roa (hash: AfdUtKvB7ygfZlLYVJPryTZpg0dREpJlAwQes5Y9L8w=) 3: Hid9TSxvy611Z8cDtqNMLtc4760.roa (hash: 5G/Adrd2lTvVPhN1xnfJeUTCdkxClmLK6htDh4mHOlI=) 4: NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa (hash: Y+tSg/LbrZHtVLaNMJYRvOXDF9n+5BI9LZsRPd5h1io=) 5: UPxeLp83esL6XFwzWB7AGfxYl-o.roa (hash: fS8fV6qCGL62t+Pg2mrdH3cOLpC1KHGgnynYm2XXBxc=) 6: Yd08QO7W-AxZurlCKIepKzXGzvM.roa (hash: 4nTlGE6xoILJr1VUFcY+6+u1iJj1s/aTdUG4JMjUHWw=) 7: _q0jKny6k09xunXEwO2Tsd1dMCY.roa (hash: +RjE4kwqaLBdcY93Kj6OprQHmCwvgIYCXZr6qCaeFvA=) 8: aL4HWAHr_bKNmQck76hMpkZ7qPo.roa (hash: FGSeA6OfcSbWxLLxBnr4u2gfPQofYtPYJMSWKRn7NoI=) 9: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl (hash: +mre5PSRituzIh06D762e3+vqpW+M9W5b4+eHX4ReUQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4960 (0x1360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Jul 4 12:42:30 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=07E61D6C5758A96D685164DDA7175C941FDFCCBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f6:09:a7:61:3c:ed:69:9d:df:a6:dd:97:48: 0e:e6:cd:45:7a:e8:76:03:a2:14:0f:ba:3e:5e:fa: e9:2f:a1:90:de:5b:79:ee:c5:1b:1b:fa:45:4b:5f: 6c:ba:98:35:17:89:f7:04:2f:b5:0c:8e:ec:cc:d0: 38:bd:de:2c:25:ff:1b:88:e8:70:d8:ba:7d:82:1d: e9:64:cd:f1:c7:5a:bf:29:a4:8d:a7:ae:07:65:a8: c3:39:16:09:f9:d5:ed:be:ad:7a:2c:c8:8a:2a:05: b4:0c:ab:ca:64:42:73:72:29:45:b0:25:c7:4f:28: a6:03:d5:c2:a5:ee:8b:80:19:87:dd:74:00:ee:17: e1:55:74:51:3b:1d:3c:e8:55:1e:a8:da:ff:51:98: be:0c:04:9f:50:81:91:65:97:cc:76:f2:e3:08:09: 4d:de:67:5d:ed:7b:86:ad:e7:68:29:41:88:58:01: 35:af:6e:2d:7e:8b:c5:33:ce:0d:2f:53:fe:61:66: 89:ce:eb:17:8f:54:67:0c:ad:9d:5d:f8:91:04:a8: 04:a4:2b:09:85:d6:21:ef:16:16:fe:4c:af:94:d0: 1e:98:8a:fe:bf:14:be:e2:0d:b8:f3:32:bb:3f:6e: 03:a2:c8:7a:32:e5:9e:85:fc:4e:8a:b9:41:6b:aa: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:95:ca:b9:5d:d0:3c:67:c7:d9:4c:9d:46:c2:17:d2:d1:e8: cc:f2:03:36:cd:88:e8:09:ca:f6:02:71:95:cd:c5:b0:a3:de: 73:e1:a1:a4:ee:7e:63:f0:b4:fc:93:4a:ec:14:56:2c:a5:75: 97:7a:f2:fe:80:85:fd:14:81:db:57:6b:56:86:b8:6a:51:0f: 01:3f:1c:e4:39:9e:41:10:e9:76:d1:c0:3d:5e:d3:cc:eb:67: 09:47:fa:5d:8a:34:64:30:d0:56:34:85:d8:89:fc:53:0f:54: 14:b1:52:20:96:27:f4:60:a4:0d:19:a1:d2:28:d1:6b:a7:d3: 62:6c:83:9d:d7:7f:11:46:d9:3a:b5:60:04:ac:4d:89:6f:83: 4b:26:69:da:e0:26:bd:f6:7e:bc:27:a6:f5:65:af:03:86:43: ae:b6:cc:ff:d9:07:b9:ff:15:e8:09:6c:7e:8a:39:b9:55:d3: 99:eb:27:90:bc:b8:e8:4d:7a:d4:13:54:52:70:be:42:46:0f: 03:10:3d:03:f2:8e:8e:5e:e1:68:b7:66:3d:e4:01:d5:e2:49: 4a:a4:7d:11:04:5a:d4:10:d8:d9:fc:af:f5:34:31:54:9f:23: 81:aa:65:41:e8:af:7f:2c:66:b0:02:e5:f1:70:94:02:24:67: c8:1a:47:7a -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICE2AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA3MDQx MjQyMzBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA3RTYxRDZDNTc1OEE5 NkQ2ODUxNjREREE3MTc1Qzk0MUZERkNDQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDu9gmnYTztaZ3fpt2XSA7mzUV66HYDohQPuj5e+ukvoZDeW3nu xRsb+kVLX2y6mDUXifcEL7UMjuzM0Di93iwl/xuI6HDYun2CHelkzfHHWr8ppI2n rgdlqMM5Fgn51e2+rXosyIoqBbQMq8pkQnNyKUWwJcdPKKYD1cKl7ouAGYfddADu F+FVdFE7HTzoVR6o2v9RmL4MBJ9QgZFll8x28uMICU3eZ13te4at52gpQYhYATWv bi1+i8Uzzg0vU/5hZonO6xePVGcMrZ1d+JEEqASkKwmF1iHvFhb+TK+U0B6Yiv6/ FL7iDbjzMrs/bgOiyHoy5Z6F/E6KuUFrqijfAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUB+YdbFdYqW1oUWTdpxdclB/fzLwwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9tQ1RGVlNLTEtMYVkzZWQ3 d2EzUTRvQjdocmsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA VZXKuV3QPGfH2UydRsIX0tHozPIDNs2I6AnK9gJxlc3FsKPec+GhpO5+Y/C0/JNK 7BRWLKV1l3ry/oCF/RSB21drVoa4alEPAT8c5DmeQRDpdtHAPV7TzOtnCUf6XYo0 ZDDQVjSF2In8Uw9UFLFSIJYn9GCkDRmh0ijRa6fTYmyDndd/EUbZOrVgBKxNiW+D SyZp2uAmvfZ+vCem9WWvA4ZDrrbM/9kHuf8V6Alsfoo5uVXTmesnkLy46E161BNU UnC+QkYPAxA9A/KOjl7haLdmPeQB1eJJSqR9EQRa1BDY2fyv9TQxVJ8jgaplQeiv fyxmsALl8XCUAiRnyBpHeg== -----END CERTIFICATE-----Generated at Fri Jul 4 14:40:58 2025 by rpki-client