$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft File: -7JZNquvAsZtbrsyhSU9KZuXQFk.mft (raw, json) Hash identifier: t0kH25ZO785oxFmsDnHMgnIEWonp0+zjD45pFOcMNaM= Subject key identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD Authority key identifier: FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 Certificate issuer: /CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Certificate serial: 4B21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft Manifest number: 4B21 Signing time: Sun 22 Jun 2025 11:17:04 +0000 Manifest this update: Sun 22 Jun 2025 11:17:04 +0000 Manifest next update: Sun 22 Jun 2025 17:17:04 +0000 Files and hashes: 1: -7JZNquvAsZtbrsyhSU9KZuXQFk.crl (hash: UJA9COa/ymoRDSdiGsbKfTDJCuY9GB9Bm5dJLQ4KIS4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 17:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19233 (0x4b21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Validity Not Before: Jun 22 11:17:04 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B468794992F37BADE13F31D88901F83D053D70FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:3e:c7:56:4d:10:09:46:e5:3d:42:bb:6e: 0c:b6:4c:30:39:58:09:b5:98:14:4b:c0:cb:f4:f7: 19:b1:d9:ac:34:d9:20:61:68:2b:d4:67:bd:ca:56: 00:6a:57:c0:76:7b:7b:62:ea:17:fa:8d:c8:79:25: a4:94:58:fc:cd:a4:91:c2:f3:fd:f5:19:43:cc:fb: 01:80:84:46:64:75:1d:ce:ff:c7:f6:d6:4a:0a:fa: 52:02:52:14:b7:b1:bb:52:08:93:5a:52:11:ef:fc: 43:42:62:07:e4:83:fd:35:a5:36:6f:5b:7b:32:24: 5b:72:2e:20:3b:a6:88:b6:3e:5f:b1:2c:5b:ae:35: 27:cc:b7:d3:64:74:9f:ca:08:7f:41:e4:40:d4:4e: be:83:02:b7:96:7a:b4:fc:35:14:a0:da:bc:41:ec: 6a:d9:59:34:81:f8:fc:b0:1a:e3:b7:28:de:9f:65: fa:1e:96:16:19:1f:e6:2b:b7:73:68:e2:ae:a7:19: ba:32:32:57:ec:a5:4e:bc:8d:ea:d1:1a:13:b0:fd: d0:06:04:70:4d:50:75:3c:6f:be:81:d4:ed:6e:90: 50:93:4d:9c:7b:ae:55:d2:4b:fc:2b:2c:c7:f9:ac: 8c:b7:14:4b:be:0f:91:79:4d:c8:24:f5:42:c0:e1: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD X509v3 Authority Key Identifier: keyid:FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:fb:a5:64:64:c3:8b:cb:47:6b:a0:a9:f2:49:48:14:3f:5b: db:57:77:1e:59:7c:a6:de:c7:a2:b2:e6:24:d4:23:3b:a0:9b: 28:01:0f:b0:ba:a5:d9:7d:33:12:87:47:3c:4a:f9:6a:1f:74: 8f:fb:0f:52:74:05:cb:7c:22:2b:14:1c:92:59:e6:bc:2d:2e: 4b:51:41:86:f9:08:35:5d:29:22:74:93:23:8e:bb:2e:ab:b4: 28:79:0f:fc:22:93:12:72:23:67:e4:1f:b0:11:2a:cf:82:55: d9:f8:2d:30:3e:c6:71:30:79:e9:0f:dc:fa:91:6f:35:c3:3d: 9d:b5:66:22:43:f6:60:f1:0f:5f:45:e5:f8:ca:08:d3:8c:bb: b4:f2:ef:8b:5f:63:39:79:80:24:4c:b1:5c:88:43:1a:c5:04: 8a:e5:9a:84:7f:5c:32:54:f3:49:9f:f2:1c:38:51:75:6e:54: ed:e5:31:37:e1:13:7c:0c:51:19:e8:0c:21:ae:47:7c:39:1f: 07:5c:0b:ee:fc:93:99:7b:0a:02:11:04:c3:fe:33:2f:7c:17: d0:28:1d:8d:3a:87:a9:38:5d:04:fb:f2:ae:d6:22:71:2a:bd: d6:12:d9:9b:f8:45:8e:03:99:93:a2:04:ff:52:b2:0f:ad:8e: e5:88:69:51 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICSyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJC MjU5MzZBQkFGMDJDNjZENkVCQjMyODUyNTNEMjk5Qjk3NDA1OTAeFw0yNTA2MjIx MTE3MDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEI0Njg3OTQ5OTJGMzdC QURFMTNGMzFEODg5MDFGODNEMDUzRDcwRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCBD7HVk0QCUblPUK7bgy2TDA5WAm1mBRLwMv09xmx2aw02SBh aCvUZ73KVgBqV8B2e3ti6hf6jch5JaSUWPzNpJHC8/31GUPM+wGAhEZkdR3O/8f2 1koK+lICUhS3sbtSCJNaUhHv/ENCYgfkg/01pTZvW3syJFtyLiA7poi2Pl+xLFuu NSfMt9NkdJ/KCH9B5EDUTr6DAreWerT8NRSg2rxB7GrZWTSB+PywGuO3KN6fZfoe lhYZH+Yrt3No4q6nGboyMlfspU68jerRGhOw/dAGBHBNUHU8b76B1O1ukFCTTZx7 rlXSS/wrLMf5rIy3FEu+D5F5Tcgk9ULA4XtvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUtGh5SZLze63hPzHYiQH4PQU9cP0wHwYDVR0jBBgwFoAU+7JZNquvAsZtbrsy hSU9KZuXQFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx MC8tN0paTnF1dkFzWnRicnN5aFNVOUtadVhRRmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy03SlpOcXV2QXNadGJyc3loU1U5S1p1WFFGay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTAvLTdKWk5xdXZBc1p0 YnJzeWhTVTlLWnVYUUZrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAT7pWRkw4vLR2ugqfJJSBQ/W9tXdx5ZfKbex6Ky5iTUIzugmygBD7C6pdl9 MxKHRzxK+WofdI/7D1J0Bct8IisUHJJZ5rwtLktRQYb5CDVdKSJ0kyOOuy6rtCh5 D/wikxJyI2fkH7ARKs+CVdn4LTA+xnEweekP3PqRbzXDPZ21ZiJD9mDxD19F5fjK CNOMu7Ty74tfYzl5gCRMsVyIQxrFBIrlmoR/XDJU80mf8hw4UXVuVO3lMTfhE3wM URnoDCGuR3w5HwdcC+78k5l7CgIRBMP+My98F9AoHY06h6k4XQT78q7WInEqvdYS 2Zv4RY4DmZOiBP9Ssg+tjuWIaVE= -----END CERTIFICATE-----Generated at Sun Jun 22 15:10:31 2025 by rpki-client