$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft File: WRxbA8l84P4-x44jxoVveSwg1AQ.mft (raw, json) Hash identifier: 10kscAsFileQsWXn5YGxPmJXG7QNh874W9LGKSSANak= Subject key identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Certificate serial: 1613 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft Manifest number: 160A Signing time: Sat 05 Jul 2025 05:42:59 +0000 Manifest this update: Sat 05 Jul 2025 05:42:59 +0000 Manifest next update: Sat 05 Jul 2025 11:42:59 +0000 Files and hashes: 1: Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa (hash: m4W5sYfutDIBGUa1Xlob/CH9YeApB50kyDS7XSN9X8k=) 2: WRxbA8l84P4-x44jxoVveSwg1AQ.crl (hash: p5xysLvbQz5GsVIVV+b7W3ZBWJkRSo9VMzXhKM3wYZ4=) 3: dhzeY3_OxcHAtiIl3zszftT0K6M.roa (hash: Bh1vZMx8G1lOICwP2E+cHe0uEMRdbBxn1G0CwSCXWF0=) 4: hSA0GN3vrBMOwEnZYiQXH6DYuc8.roa (hash: 2Vn8f0lm4bXJ6phvRt7XoC++jp3dCf7kzB9LVXj1jVc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 11:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5651 (0x1613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Validity Not Before: Jul 5 05:42:59 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=060B73E0178A24DA932755B1B93C3A654C8743F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:43:1f:96:d4:be:91:b4:92:bf:46:af:95: 9c:5a:b7:f7:c0:3f:1f:ba:fb:2e:7f:55:20:41:8c: 12:de:18:be:a7:e8:86:a8:6b:ae:dd:e9:09:84:5a: fb:f9:6d:84:cb:0f:26:69:59:b8:6a:4c:ae:43:72: dc:84:60:1f:09:b1:40:e9:64:8a:25:60:fa:f6:db: 6a:aa:13:57:5e:96:39:f3:23:2d:79:ac:81:f7:e5: 76:54:53:e3:64:56:5e:f1:5a:50:d5:6e:1d:19:78: ad:b6:0f:64:de:2c:63:5f:a7:18:20:1b:41:ae:92: f5:42:e1:63:4e:66:83:fb:c2:ad:d6:69:b9:d5:0e: e5:b4:87:b9:27:75:7d:29:51:d3:cc:2b:3a:0d:79: 96:cb:3a:00:67:a0:68:59:56:f9:66:61:34:3b:26: db:45:e0:15:61:2b:03:68:dd:33:6f:4d:a9:02:87: 5d:2c:f7:51:5e:cf:52:3a:27:56:2d:46:af:44:a3: 1d:ac:98:b0:94:50:a9:57:b6:d7:e4:27:a5:a7:4b: df:23:23:6b:b3:d4:08:21:51:e2:47:cb:67:3d:48: 1a:3c:4f:20:2c:f1:75:63:ec:7d:01:94:c0:ac:df: 45:c2:90:44:9f:f9:22:cc:e7:15:55:dc:d7:83:a8: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 X509v3 Authority Key Identifier: keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:23:dc:27:7c:89:b4:1a:1a:cc:0a:38:e2:d4:30:b2:aa:5b: 0a:f3:b7:4b:1f:c8:c9:fd:1a:1c:45:3a:53:b3:52:50:94:63: fd:4b:37:ed:a2:ca:fd:0d:28:6e:a1:86:05:80:2b:39:56:10: ed:56:f3:c9:ab:5f:82:40:46:e4:66:c6:2c:58:b0:6a:3c:6c: bb:c6:c5:84:da:79:93:34:8a:22:4b:7c:0f:0f:30:b1:83:32: 9a:7a:e5:ea:7d:a5:b1:62:ac:ea:0c:11:fd:0b:d8:d8:e7:2b: 9e:73:df:7c:9f:a9:31:31:66:60:90:3f:2a:29:c4:55:91:80: 43:46:f6:e1:29:9e:b3:3f:b1:9f:f7:67:68:d8:19:97:65:92: 21:c3:ab:cd:c6:89:70:21:35:ad:e3:c1:66:ef:63:a8:66:b3: 3c:8d:34:b5:58:82:57:ec:bd:43:c0:5b:16:5e:a8:5f:3e:ba: 2b:f9:c1:7d:c6:a9:c2:5d:de:7a:d6:78:72:2c:f5:4c:14:4e: 81:c6:05:a2:bb:ea:58:33:04:79:fe:69:db:7e:50:45:33:4c: 48:fe:b1:fa:82:c4:ff:13:13:20:01:69:ff:b4:87:3b:69:e3: 16:28:eb:7b:6a:58:8f:aa:07:26:03:2b:83:a8:8e:b8:ef:66: 6f:9e:e4:14 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkx QzVCMDNDOTdDRTBGRTNFQzc4RTIzQzY4NTZGNzkyQzIwRDQwNDAeFw0yNTA3MDUw NTQyNTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA2MEI3M0UwMTc4QTI0 REE5MzI3NTVCMUI5M0MzQTY1NEM4NzQzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOxEMfltS+kbSSv0avlZxat/fAPx+6+y5/VSBBjBLeGL6n6Iao a67d6QmEWvv5bYTLDyZpWbhqTK5DctyEYB8JsUDpZIolYPr222qqE1deljnzIy15 rIH35XZUU+NkVl7xWlDVbh0ZeK22D2TeLGNfpxggG0GukvVC4WNOZoP7wq3WabnV DuW0h7kndX0pUdPMKzoNeZbLOgBnoGhZVvlmYTQ7JttF4BVhKwNo3TNvTakCh10s 91Fez1I6J1YtRq9Eox2smLCUUKlXttfkJ6WnS98jI2uz1AghUeJHy2c9SBo8TyAs 8XVj7H0BlMCs30XCkESf+SLM5xVV3NeDqH2fAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUBgtz4BeKJNqTJ1WxuTw6ZUyHQ/QwHwYDVR0jBBgwFoAUWRxbA8l84P4+x44j xoVveSwg1AQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2 L1dSeGJBOGw4NFA0LXg0NGp4b1Z2ZVN3ZzFBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2L1dSeGJBOGw4NFA0LXg0 NGp4b1Z2ZVN3ZzFBUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBbI9wnfIm0GhrMCjji1DCyqlsK87dLH8jJ/RocRTpTs1JQlGP9Szftosr9DShu oYYFgCs5VhDtVvPJq1+CQEbkZsYsWLBqPGy7xsWE2nmTNIoiS3wPDzCxgzKaeuXq faWxYqzqDBH9C9jY5yuec998n6kxMWZgkD8qKcRVkYBDRvbhKZ6zP7Gf92do2BmX ZZIhw6vNxolwITWt48Fm72OoZrM8jTS1WIJX7L1DwFsWXqhfPror+cF9xqnCXd56 1nhyLPVMFE6BxgWiu+pYMwR5/mnbflBFM0xI/rH6gsT/ExMgAWn/tIc7aeMWKOt7 aliPqgcmAyuDqI6472ZvnuQU -----END CERTIFICATE-----Generated at Sat Jul 5 08:49:23 2025 by rpki-client