$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft File: T04zJwO54ZxdoBGkjEsnbpsp11w.mft (raw, json) Hash identifier: 8jgAtSHtDWw2Xc7JeJi+eD/U0vlI2z7jHAA4SD3H0MQ= Subject key identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 Authority key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C Certificate issuer: /CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Certificate serial: 3604 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft Manifest number: 3604 Signing time: Sun 22 Jun 2025 09:44:24 +0000 Manifest this update: Sun 22 Jun 2025 09:44:24 +0000 Manifest next update: Sun 22 Jun 2025 15:44:24 +0000 Files and hashes: 1: T04zJwO54ZxdoBGkjEsnbpsp11w.crl (hash: F/b30+b8EbnpckE4Jajeqoib9/+3QDT8jFAnHcVH1hQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 14:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13828 (0x3604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Validity Not Before: Jun 22 09:44:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=470D131A7541923CA9A1A4C76A5788ADFD240CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:41:3b:cc:83:cc:71:a2:fc:27:62:37:91: ee:ce:92:88:cc:36:35:05:5d:e9:49:34:1a:8d:c0: 55:1f:c3:63:38:e4:56:b7:80:7a:b8:e4:0f:d7:00: 60:61:32:c1:b4:27:22:0d:3c:c4:4b:99:32:17:12: 56:19:47:d1:11:01:8a:98:c5:db:9f:b6:b9:b4:fb: 45:68:aa:4b:32:4b:e9:f8:a2:3f:79:86:ad:19:15: 73:3f:42:7e:99:5a:e3:ea:e4:9e:cb:30:17:dc:ef: 3f:41:52:03:b1:bc:c5:4e:27:7e:1e:53:80:9b:6f: a8:2f:13:4c:b7:52:16:a6:cf:8f:06:9c:50:b3:07: a3:b9:10:33:1c:69:53:51:39:93:25:8b:89:63:32: 34:c9:2e:ed:f1:04:87:0f:5c:d6:7e:fd:9d:1a:f8: 0b:cb:7d:7b:5b:7b:74:17:c5:c6:9a:0c:91:af:3d: 4a:49:12:7b:f0:7b:81:fe:8d:d0:c1:84:9b:c9:ae: f5:61:5d:16:ab:73:48:03:32:39:34:eb:7a:54:a0: 68:73:1b:59:33:20:28:c2:70:d6:0c:aa:6d:b0:98: 02:cd:eb:f5:17:cc:cc:28:c9:7b:a2:32:39:fb:b5: 32:d9:7a:07:cd:53:91:88:41:f2:00:e6:a6:85:28: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 X509v3 Authority Key Identifier: keyid:4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:20:72:df:8f:27:0e:14:19:a0:cb:e9:89:8b:e0:98:5e:e8: a6:6b:cf:53:6a:8c:fe:b4:95:69:d8:e6:5a:41:49:63:22:a8: 1c:b0:83:2b:3f:d4:23:fe:12:58:45:d0:d6:5f:70:7e:37:d5: aa:3f:e8:4c:78:02:60:d8:10:90:00:be:ab:97:04:f1:bb:0e: bc:e7:31:9f:9c:8f:3e:fb:c5:03:c4:a0:9e:72:e7:20:16:d7: 70:6e:8d:b7:ee:ef:0d:8c:46:91:12:cc:45:b7:61:54:3f:a6: cd:79:69:91:91:d6:7a:ef:13:62:a1:3c:d8:22:fe:04:96:99: e4:5f:5a:cb:a9:31:19:9e:02:c7:4d:84:88:d5:a5:2e:79:9f: ae:e6:36:29:47:eb:8c:f3:09:9e:c4:86:14:7d:2c:71:e4:63: f1:5d:c1:44:33:22:df:56:1b:fe:78:d0:27:6f:ff:59:92:0c: 41:94:b5:de:54:2b:3a:99:ca:f4:49:b4:e0:e5:87:c2:9f:b6: b4:5d:1d:51:7d:c1:2c:41:14:2b:11:57:06:8a:3f:bb:6b:9c: 65:20:b8:84:4a:1e:b3:d9:a6:47:fb:ef:c1:df:2f:d2:4a:a1: 77:41:ed:06:48:4f:e4:e8:88:43:6f:95:9c:bd:8b:02:60:22: 14:04:1b:16 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICNgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEY0 RTMzMjcwM0I5RTE5QzVEQTAxMUE0OEM0QjI3NkU5QjI5RDc1QzAeFw0yNTA2MjIw OTQ0MjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ3MEQxMzFBNzU0MTky M0NBOUExQTRDNzZBNTc4OEFERkQyNDBDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQbEE7zIPMcaL8J2I3ke7OkojMNjUFXelJNBqNwFUfw2M45Fa3 gHq45A/XAGBhMsG0JyINPMRLmTIXElYZR9ERAYqYxduftrm0+0VoqksyS+n4oj95 hq0ZFXM/Qn6ZWuPq5J7LMBfc7z9BUgOxvMVOJ34eU4Cbb6gvE0y3Uhamz48GnFCz B6O5EDMcaVNROZMli4ljMjTJLu3xBIcPXNZ+/Z0a+AvLfXtbe3QXxcaaDJGvPUpJ Envwe4H+jdDBhJvJrvVhXRarc0gDMjk063pUoGhzG1kzICjCcNYMqm2wmALN6/UX zMwoyXuiMjn7tTLZegfNU5GIQfIA5qaFKJYdAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURw0TGnVBkjypoaTHaleIrf0kDKcwHwYDVR0jBBgwFoAUT04zJwO54ZxdoBGk jEsnbpsp11wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4 L1QwNHpKd081NFp4ZG9CR2tqRXNuYnBzcDExdy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVDA0ekp3TzU0Wnhkb0JHa2pFc25icHNwMTF3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4L1QwNHpKd081NFp4ZG9C R2tqRXNuYnBzcDExdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/IHLfjycOFBmgy+mJi+CYXuima89Taoz+tJVp2OZaQUljIqgcsIMrP9Qj/hJY RdDWX3B+N9WqP+hMeAJg2BCQAL6rlwTxuw685zGfnI8++8UDxKCecucgFtdwbo23 7u8NjEaREsxFt2FUP6bNeWmRkdZ67xNioTzYIv4ElpnkX1rLqTEZngLHTYSI1aUu eZ+u5jYpR+uM8wmexIYUfSxx5GPxXcFEMyLfVhv+eNAnb/9ZkgxBlLXeVCs6mcr0 SbTg5YfCn7a0XR1RfcEsQRQrEVcGij+7a5xlILiESh6z2aZH++/B3y/SSqF3Qe0G SE/k6IhDb5WcvYsCYCIUBBsW -----END CERTIFICATE-----Generated at Sun Jun 22 12:11:44 2025 by rpki-client