$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft File: ze9xEd6YvXVtkrNNOU2i057_m44.mft (raw, json) Hash identifier: s5TsgSRMUuadmy9joOw3hxkjcZf9jmqaOv16J1BcyO4= Subject key identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 15B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft Manifest number: 15A7 Signing time: Sat 21 Jun 2025 01:42:11 +0000 Manifest this update: Sat 21 Jun 2025 01:42:11 +0000 Manifest next update: Sat 21 Jun 2025 07:42:11 +0000 Files and hashes: 1: 3CfhItJuTD6YcZOf4dGRgLCyLnk.roa (hash: Yr2TtYz0Jmy9vk96z+H1KPmDNXvxDzY+tBB3ofIrHtI=) 2: fFW5_t7XVzLKernsExPGIFpM2JA.roa (hash: pRxq7Rip4CxMTe0waVEB0Oz3tf8WBd6skOfdjzyUrSs=) 3: f_hTmu8kp_zGg2aqVknFJuMvbnE.roa (hash: 5bVZ4ZpRFYhc00rYxxPxP83AXo11XM/TioixA6h/bRU=) 4: ze9xEd6YvXVtkrNNOU2i057_m44.crl (hash: VX3Nx7uayCufkOxcn2cTvcgJLHwpnfMy3lG9G/bbQvU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5556 (0x15b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Jun 21 01:42:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2A30BAAC6C80DCB960834B58D4E4945741F7D779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:c1:50:fb:62:2c:ae:7e:1f:1f:c5:69:be: 9f:6e:8b:51:05:a6:a8:80:48:d4:d9:8e:00:d2:b9: c3:8a:5e:7a:e9:d5:66:b5:e8:f9:4f:88:d2:09:34: a6:fa:6a:36:b9:3a:41:f4:b4:fd:81:c1:2b:51:b5: 06:3d:b0:07:02:df:6a:5e:f8:d3:91:23:6c:e1:40: 22:53:de:88:d2:52:76:1e:ef:fd:57:ef:55:9d:75: b9:25:43:38:cc:48:4b:73:69:11:37:9f:51:4f:92: 91:1c:a6:85:f0:56:8a:62:87:1b:0c:13:00:37:44: 5f:62:62:d2:3f:83:27:1d:85:1a:d6:d2:5d:9b:fd: f8:f3:14:83:47:27:32:da:2c:a7:2b:de:6b:ec:d9: 4f:e2:ec:2f:3e:e3:2a:37:24:32:af:90:8a:2c:5b: 5f:e5:8e:07:17:da:30:68:b0:05:b9:58:48:90:e7: 28:c0:d1:42:c9:96:20:37:c4:d1:49:bb:a5:0d:4b: 34:ae:b9:92:eb:11:db:ef:23:27:8c:48:d4:94:79: e0:58:af:a9:fd:50:8e:d7:81:d3:f6:05:bc:11:81: 6c:f2:7b:34:9a:d6:7f:da:16:1b:6a:ba:92:b5:c1: 30:3b:aa:f2:e8:c9:7c:fe:7d:de:c7:ec:3c:ef:2f: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:60:fa:c5:3c:a4:b3:38:0c:94:9a:aa:38:4c:f8:84:97:32: c2:1c:34:4e:93:47:0e:d5:66:94:af:59:17:c6:1e:6c:ff:7f: 3e:d9:d3:75:79:ff:f1:05:4e:31:74:4b:c2:0f:5c:9a:96:c6: f2:5f:8e:38:a7:bf:24:7c:cd:a6:4a:d7:bc:a6:bb:7b:ea:47: ac:46:a1:40:4c:74:75:77:9f:61:ef:08:5e:de:d8:12:ab:83: 3c:42:99:25:44:16:3b:d7:56:ce:d9:61:31:8a:16:30:58:af: 14:b1:6d:a4:0f:64:cb:40:e0:b9:3e:d3:0e:79:61:a4:bd:de: e4:36:33:b9:bf:67:92:9f:50:f8:3e:91:af:2c:87:7e:04:d4: 1a:5d:07:a4:8d:85:77:00:b0:bb:d5:4e:3d:32:ba:36:f2:cd: 21:a3:c0:bc:26:f7:e4:48:26:13:cb:fb:60:75:ed:eb:a3:7d: ab:75:82:3c:be:e9:c2:7b:7c:b0:7b:04:c8:98:65:f8:22:d8: 91:ae:e1:56:47:61:76:fa:03:3c:9a:ca:d9:a4:15:aa:33:15: 9c:96:fe:cd:88:9b:ad:73:0b:f7:0f:a2:35:09:11:52:44:c4: d0:b0:b8:7b:79:69:9a:ee:ef:da:fd:a7:dd:88:19:f4:d3:3c: 66:81:c5:6d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNTA2MjEw MTQyMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJBMzBCQUFDNkM4MERD Qjk2MDgzNEI1OEQ0RTQ5NDU3NDFGN0Q3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw7MFQ+2Isrn4fH8Vpvp9ui1EFpqiASNTZjgDSucOKXnrp1Wa1 6PlPiNIJNKb6aja5OkH0tP2BwStRtQY9sAcC32pe+NORI2zhQCJT3ojSUnYe7/1X 71WddbklQzjMSEtzaRE3n1FPkpEcpoXwVopihxsMEwA3RF9iYtI/gycdhRrW0l2b /fjzFINHJzLaLKcr3mvs2U/i7C8+4yo3JDKvkIosW1/ljgcX2jBosAW5WEiQ5yjA 0ULJliA3xNFJu6UNSzSuuZLrEdvvIyeMSNSUeeBYr6n9UI7XgdP2BbwRgWzyezSa 1n/aFhtqupK1wTA7qvLoyXz+fd7H7DzvL8iFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKjC6rGyA3Llgg0tY1OSUV0H313kwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvemU5eEVkNll2WFZ0 a3JOTk9VMmkwNTdfbTQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAANg+sU8pLM4DJSaqjhM+ISXMsIcNE6TRw7VZpSvWRfGHmz/fz7Z03V5//EF TjF0S8IPXJqWxvJfjjinvyR8zaZK17ymu3vqR6xGoUBMdHV3n2HvCF7e2BKrgzxC mSVEFjvXVs7ZYTGKFjBYrxSxbaQPZMtA4Lk+0w55YaS93uQ2M7m/Z5KfUPg+ka8s h34E1BpdB6SNhXcAsLvVTj0yujbyzSGjwLwm9+RIJhPL+2B17eujfat1gjy+6cJ7 fLB7BMiYZfgi2JGu4VZHYXb6AzyaytmkFaozFZyW/s2Im61zC/cPojUJEVJExNCw uHt5aZru79r9p92IGfTTPGaBxW0= -----END CERTIFICATE-----Generated at Sat Jun 21 03:27:59 2025 by rpki-client