$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft File: ehQ2ihcE3eKwKNJtVNg718g0fOM.mft (raw, json) Hash identifier: t/JPFpvD8zYNZRviZS79k+5XtPYu31C0/us3BsGaFOA= Subject key identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C Authority key identifier: 7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 Certificate issuer: /CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Certificate serial: 0110 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft Manifest number: 010D Signing time: Fri 04 Jul 2025 06:41:54 +0000 Manifest this update: Fri 04 Jul 2025 06:41:54 +0000 Manifest next update: Fri 04 Jul 2025 12:41:54 +0000 Files and hashes: 1: HfBEtTqWTSkAtipWavXVR-y9-jo.roa (hash: 3hFDbCdIfL+OLtSS0OXYLw7zBn+k/fXqDRXMxteGY5E=) 2: OURKKMBERp6fhyznG4QUV7I1fU8.roa (hash: tEDAKCve4qFLWqxZlyva9GdzhXGBXId4jj4unjkX/zM=) 3: ehQ2ihcE3eKwKNJtVNg718g0fOM.crl (hash: JYoDjKTiEvu4T9kFo/Urbnt9ZGxSTNaTsPZbye/w74g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 12:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Validity Not Before: Jul 4 06:41:54 2025 GMT Not After : May 12 12:19:28 2026 GMT Subject: CN=4BEF53D0EA53374A1D5CA734258AB7819575AE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:c6:32:b6:77:89:30:3d:05:9e:c2:db:5d: 45:51:28:85:3d:87:d8:4f:bc:c4:91:ab:1e:22:5b: 7d:3a:77:2d:fc:42:da:d3:d4:44:38:0d:4a:a6:08: 35:c9:d7:ca:04:4e:61:04:1b:a8:78:c5:e9:a2:d1: 5a:c5:a3:a4:82:a3:1b:83:18:bc:6d:45:bd:ac:46: 86:4c:bb:f1:9a:83:3c:ce:7c:55:9b:2e:e3:77:1c: c1:11:eb:48:ad:7d:89:39:0c:8e:1e:34:08:fe:c8: 1c:e9:1e:fc:c9:e0:64:af:1d:23:6c:78:4b:9e:1d: b3:32:0d:37:66:e5:97:ea:9b:05:38:23:9b:48:d6: 6e:9c:ee:9e:a2:0e:fc:ed:89:c7:9b:76:25:42:31: 7c:f3:b5:84:0e:72:a3:e3:9d:cc:50:86:1b:a8:07: 01:94:66:83:44:8c:23:07:b8:72:77:2b:40:a5:31: 15:7d:70:84:d9:6c:c5:76:dd:2d:96:69:b0:75:76: d1:45:75:f4:47:3a:c2:1b:e2:51:ad:e3:a5:e1:e5: c6:79:0e:97:62:2a:f1:c8:46:7b:de:97:1b:8c:41: 77:9f:8b:f0:4d:3b:00:f3:15:6d:27:5c:3f:f7:d4: f6:ad:e9:da:1c:c8:af:37:46:cf:60:1d:14:34:82: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C X509v3 Authority Key Identifier: keyid:7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:4a:10:92:20:de:63:81:bb:6a:e7:35:66:70:25:17:8e:b5: c1:f8:a8:27:94:e5:62:dc:de:1c:1e:a4:d8:43:eb:df:f2:5a: 13:26:2e:b4:3a:c0:d5:a0:eb:13:1d:cb:1a:db:35:d0:4b:bb: 4d:83:c5:90:0b:94:d9:79:01:ca:b0:7f:d0:08:d9:5b:51:9e: 83:3f:b9:04:34:29:75:fd:db:51:fc:c1:82:5c:ba:77:d7:a4: 18:31:ef:dc:fe:2f:cd:2c:a1:e1:19:18:91:85:ae:76:db:eb: 8c:31:0a:41:2d:4a:e2:a4:f3:18:34:5e:72:d3:29:f1:17:7c: a5:58:10:a7:a8:3f:64:c2:34:d8:95:0c:9b:65:2a:5e:69:73: e6:17:51:db:55:58:01:11:9d:f6:b1:52:cc:d7:e2:26:e2:42: 49:68:a5:54:1e:f0:69:c5:c0:2e:23:ae:0a:4a:8e:36:21:e5: ec:30:a8:d4:0a:55:9e:41:da:03:27:34:7e:3b:b9:6d:ce:21: f8:c1:ba:9e:6f:d0:8b:d3:50:d5:03:e9:d5:a8:40:e5:59:e4: 56:c7:e3:3d:8b:6f:a8:8a:ce:f6:02:b5:3f:eb:b5:9e:a9:aa: d7:41:ca:5a:1e:ed:a4:e4:00:66:e6:c9:31:5a:da:83:6d:5d: 2c:36:ab:31 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICARAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Ex NDM2OEExNzA0RERFMkIwMjhEMjZENTREODNCRDdDODM0N0NFMzAeFw0yNTA3MDQw NjQxNTRaFw0yNjA1MTIxMjE5MjhaMDMxMTAvBgNVBAMTKDRCRUY1M0QwRUE1MzM3 NEExRDVDQTczNDI1OEFCNzgxOTU3NUFFNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJC8YytneJMD0FnsLbXUVRKIU9h9hPvMSRqx4iW306dy38QtrT 1EQ4DUqmCDXJ18oETmEEG6h4xemi0VrFo6SCoxuDGLxtRb2sRoZMu/GagzzOfFWb LuN3HMER60itfYk5DI4eNAj+yBzpHvzJ4GSvHSNseEueHbMyDTdm5ZfqmwU4I5tI 1m6c7p6iDvzticebdiVCMXzztYQOcqPjncxQhhuoBwGUZoNEjCMHuHJ3K0ClMRV9 cITZbMV23S2WabB1dtFFdfRHOsIb4lGt46Xh5cZ5DpdiKvHIRnvelxuMQXefi/BN OwDzFW0nXD/31Pat6docyK83Rs9gHRQ0ggpjAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUS+9T0OpTN0odXKc0JYq3gZV1rlwwHwYDVR0jBBgwFoAUehQ2ihcE3eKwKNJt VNg718g0fOMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzE1 L2VoUTJpaGNFM2VLd0tOSnRWTmc3MThnMGZPTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZWhRMmloY0UzZUt3S05KdFZOZzcxOGcwZk9NLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzE1L2VoUTJpaGNFM2VLd0tO SnRWTmc3MThnMGZPTS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADShCSIN5jgbtq5zVmcCUXjrXB+KgnlOVi3N4cHqTYQ+vf8loTJi60OsDVoOsT Hcsa2zXQS7tNg8WQC5TZeQHKsH/QCNlbUZ6DP7kENCl1/dtR/MGCXLp316QYMe/c /i/NLKHhGRiRha522+uMMQpBLUripPMYNF5y0ynxF3ylWBCnqD9kwjTYlQybZSpe aXPmF1HbVVgBEZ32sVLM1+Im4kJJaKVUHvBpxcAuI64KSo42IeXsMKjUClWeQdoD JzR+O7ltziH4wbqeb9CL01DVA+nVqEDlWeRWx+M9i2+ois72ArU/67WeqarXQcpa Hu2k5ABm5skxWtqDbV0sNqsx -----END CERTIFICATE-----Generated at Fri Jul 4 11:06:01 2025 by rpki-client