$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft File: 4G9RPYtETnmh9YTzwpOWosJuXzk.mft (raw, json) Hash identifier: PevfCwm79JNrYQXk40WEoB0840yjYxknCPluRKZlfFo= Subject key identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 Certificate issuer: /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Certificate serial: 1599 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft Manifest number: 1596 Signing time: Sat 21 Jun 2025 06:43:42 +0000 Manifest this update: Sat 21 Jun 2025 06:43:42 +0000 Manifest next update: Sat 21 Jun 2025 12:43:42 +0000 Files and hashes: 1: 4G9RPYtETnmh9YTzwpOWosJuXzk.crl (hash: 9bJpgoq0pl2j4jhzbSVDuf4ycc1ojScGIw5V1hJm3Gw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5529 (0x1599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Validity Not Before: Jun 21 06:43:42 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5101FBA0CB07E8ABD26F6410038F6590E71DDDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:c3:bc:90:87:ae:6d:03:db:f8:21:62:72: 42:61:4b:66:d0:a5:e5:0a:ee:e9:d2:36:94:ba:b8: 13:a8:4e:7a:5f:ff:e8:96:d6:7f:04:10:af:ea:de: f2:c2:49:35:dc:b0:69:c6:7e:1a:36:f8:59:f7:e9: 59:97:d1:60:23:78:df:84:fc:83:13:f0:da:4e:75: 6f:b2:bb:07:c9:0d:0b:d1:2d:d3:06:38:83:c6:13: 26:d7:7a:08:43:8f:d7:58:52:43:67:46:a7:84:bc: a1:db:e6:e2:6c:02:ee:9e:a6:28:86:88:43:4a:66: 3c:ec:f6:b7:90:bb:71:ed:b0:16:d7:ed:f5:d2:69: 48:d3:b5:24:c6:a4:30:62:c9:a9:c6:db:8d:39:14: 8a:4d:05:14:b0:4d:75:f1:17:95:d6:ec:79:5d:7e: 22:d6:9e:28:ff:19:72:ba:ce:46:aa:ae:4a:72:64: 0b:3d:9c:d2:f4:00:6a:7c:f6:f9:e9:e0:52:29:ee: 9a:f3:9d:79:04:a5:e7:75:34:5c:d9:93:1f:e3:83: ca:a6:d8:6f:07:43:59:ca:70:5f:e8:33:99:78:cb: c3:9c:5b:dc:36:14:2f:99:af:b4:ea:3c:fa:df:99: a5:8e:68:91:fb:fc:ae:80:58:56:04:4d:d7:d6:05: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 X509v3 Authority Key Identifier: keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2c:25:dc:b7:be:0f:67:29:16:56:36:cf:62:90:67:83:10: 31:a8:da:6c:18:8d:04:a7:d7:56:d3:c0:59:f1:1c:a6:b6:a9: e5:bf:30:15:db:9f:cb:db:f2:e9:cb:9d:81:52:88:b5:6a:57: 3e:8f:00:0b:95:ed:19:8a:f5:2b:9e:9e:58:0f:0c:56:28:a1: 48:9c:bf:ef:20:59:7e:b9:85:96:5f:ac:ee:da:86:01:41:d3: b5:83:87:28:2b:9d:e2:49:f4:62:22:66:73:30:b9:b3:13:c8: 8a:86:64:59:b6:a8:90:90:7a:99:de:2c:e4:b6:01:e4:fc:b5: 4e:61:69:7f:ba:24:63:a9:88:c7:a7:d3:23:40:55:86:81:60: 4c:b0:c9:96:48:72:04:c6:fa:a6:b6:dd:ae:dd:9a:6d:0f:dd: 46:12:02:fd:0f:1d:6a:4d:ee:b5:e1:69:ab:4f:09:52:3d:dd: 6d:14:0e:dc:06:36:ab:87:ce:bf:12:32:53:9e:2b:94:30:45: ce:a7:65:fc:26:a9:89:9e:53:62:21:d9:25:b6:68:7d:3a:4b: bf:eb:02:be:f1:51:a4:6a:95:4b:b9:14:d7:39:fc:72:66:9c: 9d:0c:fb:67:f5:56:9a:00:7d:6c:b9:c4:26:81:a6:dd:62:b4: 3c:cc:49:da -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFZkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTA2 RjUxM0Q4QjQ0NEU3OUExRjU4NEYzQzI5Mzk2QTJDMjZFNUYzOTAeFw0yNTA2MjEw NjQzNDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUxMDFGQkEwQ0IwN0U4 QUJEMjZGNjQxMDAzOEY2NTkwRTcxRERERDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0sMO8kIeubQPb+CFickJhS2bQpeUK7unSNpS6uBOoTnpf/+iW 1n8EEK/q3vLCSTXcsGnGfho2+Fn36VmX0WAjeN+E/IMT8NpOdW+yuwfJDQvRLdMG OIPGEybXeghDj9dYUkNnRqeEvKHb5uJsAu6epiiGiENKZjzs9reQu3HtsBbX7fXS aUjTtSTGpDBiyanG2405FIpNBRSwTXXxF5XW7HldfiLWnij/GXK6zkaqrkpyZAs9 nNL0AGp89vnp4FIp7prznXkEped1NFzZkx/jg8qm2G8HQ1nKcF/oM5l4y8OcW9w2 FC+Zr7TqPPrfmaWOaJH7/K6AWFYETdfWBRsxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUQH7oMsH6KvSb2QQA49lkOcd3dAwHwYDVR0jBBgwFoAU4G9RPYtETnmh9YTz wpOWosJuXzkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY3 Mi80RzlSUFl0RVRubWg5WVR6d3BPV29zSnVYemsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRHOVJQWXRFVG5taDlZVHp3cE9Xb3NKdVh6ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NzIvNEc5UlBZdEVUbm1o OVlUendwT1dvc0p1WHprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACssJdy3vg9nKRZWNs9ikGeDEDGo2mwYjQSn11bTwFnxHKa2qeW/MBXbn8vb 8unLnYFSiLVqVz6PAAuV7RmK9SuenlgPDFYooUicv+8gWX65hZZfrO7ahgFB07WD hygrneJJ9GIiZnMwubMTyIqGZFm2qJCQepneLOS2AeT8tU5haX+6JGOpiMen0yNA VYaBYEywyZZIcgTG+qa23a7dmm0P3UYSAv0PHWpN7rXhaatPCVI93W0UDtwGNquH zr8SMlOeK5QwRc6nZfwmqYmeU2Ih2SW2aH06S7/rAr7xUaRqlUu5FNc5/HJmnJ0M +2f1VpoAfWy5xCaBpt1itDzMSdo= -----END CERTIFICATE-----Generated at Sat Jun 21 12:00:32 2025 by rpki-client