$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft File: dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft (raw, json) Hash identifier: gwjV+AvgZ1M+8NlW/m9oqPP2XsKQsj00S+1zpBd90Jc= Subject key identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 Certificate issuer: /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Certificate serial: 1EB9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft Manifest number: 1EB4 Signing time: Sun 15 Jun 2025 06:39:16 +0000 Manifest this update: Sun 15 Jun 2025 06:39:16 +0000 Manifest next update: Sun 15 Jun 2025 12:39:16 +0000 Files and hashes: 1: Chccgovtr4Jxu9Y1IiEwZLNPEww.roa (hash: 4ivezYEeXqevm8aBYlTI2iZFxUZ10Xr3aU92Qwnct7Y=) 2: dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl (hash: bxTfhcq9qYbLn9J/WoEFFs+0NcL8ID82IG/kLOUXwx0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 09:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7865 (0x1eb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Validity Not Before: Jun 15 06:39:16 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=83288CB51AD8489392646BFC3F9BEF4C7A18CD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:88:f8:df:ca:bf:f9:ae:84:b1:d5:3d:50: 3a:f4:7e:f5:fc:03:71:95:8a:65:1c:a1:4a:6f:0a: cd:b1:59:a2:69:70:cf:8d:8a:53:42:ff:3d:ab:7b: 24:8a:48:9f:8e:7f:c5:6e:c1:a9:1e:de:13:09:7e: b2:8e:7d:78:21:aa:d2:05:e1:1c:1c:ca:02:6b:60: 80:b7:fd:ca:97:72:cd:c6:e7:de:b4:d0:39:fa:8e: 29:8d:f9:05:72:99:e7:2d:f8:52:5f:93:af:34:d3: 44:93:70:fd:ac:70:22:0a:9c:2b:e2:cd:3b:33:20: 1a:b7:fe:fe:be:50:b6:57:7f:fb:0f:59:1c:e6:f1: 8a:ca:44:13:3d:22:92:4b:84:a4:11:ac:8e:89:30: bf:c7:4e:9e:ce:45:be:3b:c6:c6:c8:a8:a3:e7:02: 34:54:2c:ea:0b:85:c9:18:8c:be:a1:59:4e:f9:fb: 41:d1:a1:c8:be:6b:49:47:c6:5e:49:a3:64:9f:33: 23:ce:fe:15:da:df:45:3c:e2:a6:78:e5:a0:55:0e: 23:9c:54:94:da:77:56:47:61:5e:88:34:91:c9:b2: d6:85:17:cc:65:88:9c:47:05:e8:4d:fc:6b:f2:bd: 82:58:2f:87:2e:22:61:bb:c2:af:d5:3e:1a:b2:da: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 X509v3 Authority Key Identifier: keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:49:52:1a:5a:96:ac:29:e0:a2:d6:02:14:76:eb:b2:ef:c1: 01:a0:a2:b5:24:ed:f1:eb:1f:18:66:7c:33:bc:48:9c:a8:5b: 5d:59:7e:66:1c:2f:48:56:d5:67:f6:30:bc:a7:89:cd:b7:00: a2:34:76:23:06:23:65:21:be:2f:4e:b4:ac:58:a8:fd:6f:bf: 7a:e8:a2:4c:78:4f:c2:f9:35:5b:d4:1c:a8:a7:13:d2:45:b5: bb:66:3f:f8:b9:83:ae:14:c4:b8:8f:27:15:ae:23:d6:19:f4: 0d:ef:df:3d:48:93:be:58:eb:6b:f9:68:2b:93:b9:68:5f:90: 6d:71:8f:d4:d3:cf:6d:ef:02:bf:b3:53:b6:44:9c:3b:3c:46: 58:7c:8a:7f:f9:39:fe:ef:5f:d3:1b:d6:d7:ed:27:e9:9d:31: 9a:79:df:06:b9:aa:70:ee:62:14:a0:49:47:ee:58:fb:51:c7: d5:c4:bd:94:9d:f3:0f:2f:86:7a:20:50:15:63:f3:02:3d:02: 64:28:f4:c1:d2:23:b3:c2:14:e1:c0:23:61:6b:27:f8:28:e4: bf:b1:91:18:44:53:cb:f4:88:d0:12:5d:30:9c:78:f6:e3:46: 28:c9:54:49:8a:54:0a:88:09:ca:68:61:4b:19:ef:4d:c2:8b: 3c:97:8e:c6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHrkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU2 MzdCQUREODM3QjY3MTUwRTgwRjlDOEUyRjBDNUFFNTUxQjc5MTAeFw0yNTA2MTUw NjM5MTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDgzMjg4Q0I1MUFEODQ4 OTM5MjY0NkJGQzNGOUJFRjRDN0ExOENEMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYPYj438q/+a6EsdU9UDr0fvX8A3GVimUcoUpvCs2xWaJpcM+N ilNC/z2reySKSJ+Of8Vuwake3hMJfrKOfXghqtIF4RwcygJrYIC3/cqXcs3G5960 0Dn6jimN+QVymect+FJfk68000STcP2scCIKnCvizTszIBq3/v6+ULZXf/sPWRzm 8YrKRBM9IpJLhKQRrI6JML/HTp7ORb47xsbIqKPnAjRULOoLhckYjL6hWU75+0HR oci+a0lHxl5Jo2SfMyPO/hXa30U84qZ45aBVDiOcVJTad1ZHYV6INJHJstaFF8xl iJxHBehN/GvyvYJYL4cuImG7wq/VPhqy2uajAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUgyiMtRrYSJOSZGv8P5vvTHoYzTMwHwYDVR0jBBgwFoAUdWN7rdg3tnFQ6A+c ji8MWuVRt5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy Mi9kV043cmRnM3RuRlE2QS1jamk4TVd1VlJ0NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RXTjdyZGczdG5GUTZBLWNqaThNV3VWUnQ1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjIvZFdON3JkZzN0bkZR NkEtY2ppOE1XdVZSdDVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEdJUhpalqwp4KLWAhR267LvwQGgorUk7fHrHxhmfDO8SJyoW11ZfmYcL0hW 1Wf2MLynic23AKI0diMGI2Uhvi9OtKxYqP1vv3rookx4T8L5NVvUHKinE9JFtbtm P/i5g64UxLiPJxWuI9YZ9A3v3z1Ik75Y62v5aCuTuWhfkG1xj9TTz23vAr+zU7ZE nDs8Rlh8in/5Of7vX9Mb1tftJ+mdMZp53wa5qnDuYhSgSUfuWPtRx9XEvZSd8w8v hnogUBVj8wI9AmQo9MHSI7PCFOHAI2FrJ/go5L+xkRhEU8v0iNASXTCcePbjRijJ VEmKVAqICcpoYUsZ703CizyXjsY= -----END CERTIFICATE-----Generated at Sun Jun 15 09:25:17 2025 by rpki-client