$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft File: 0qtsm24WUzTAMtBR1fx9FUfk41M.mft (raw, json) Hash identifier: 9bk+WL1pzr7hgla4hYDrOiz3/4MBVUz01H9MS/3OhKI= Subject key identifier: 5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 2A9D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft Manifest number: 20B9 Signing time: Sat 21 Jun 2025 22:41:11 +0000 Manifest this update: Sat 21 Jun 2025 22:41:11 +0000 Manifest next update: Sun 22 Jun 2025 04:41:11 +0000 Files and hashes: 1: 0qtsm24WUzTAMtBR1fx9FUfk41M.crl (hash: 6+MbE0Mo744eUlttauZmkGopSN5slsHOH0k+43vGE4U=) 2: 2HOU41wf-RNx3ns6fUrUfDuRc6U.roa (hash: b3lr36MN4jCPuHOJb0pCCMEylOVXJG558DXiQogiClM=) 3: 3owvKKLqsQb0inHjgu-L46_sC1A.roa (hash: qr3eU5r6DFp7wJTrl/lr7jehZc1mkfFLhWMzbMGcHZY=) 4: hClPUnKZuAxsWwfQLw22FkUyHeM.roa (hash: 3jlVgVH+FCbudtpl6tLV+UmB6U3EaSEXQMSz/+0UPtI=) 5: iB41MJdYlkhxKoygfPh2K-psLS4.roa (hash: ny9uA6XuM68AFBi/PkyYeBIUWB4F6UJ1sjiBh2GnLLU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10909 (0x2a9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jun 21 22:41:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5C886375A6AB13626F4544945D738712057FDAAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:28:bb:7c:1a:f0:d3:9f:66:23:b6:41:bf: 5a:eb:0b:09:49:fd:ac:89:14:fe:ec:a0:d1:e0:65: 77:49:e6:c8:39:06:c2:69:5a:81:ee:e0:f8:9f:39: b8:ec:a3:a5:ae:85:61:b1:14:70:fa:d2:10:83:9b: b0:f2:5b:b8:40:03:f4:49:cc:59:26:8b:f0:ba:1c: a6:54:6f:00:d5:82:a9:d2:72:57:bb:46:7d:03:6b: d2:97:36:39:77:67:86:9e:6a:b5:67:1e:62:a3:51: d8:db:94:b3:b3:5c:71:03:0d:43:a8:49:2a:92:25: ee:67:1d:93:11:93:8d:1a:35:32:ac:75:3c:2c:75: 17:56:7f:b3:cc:59:dd:00:02:7b:58:22:e8:30:c3: b5:fd:4d:e1:dd:1a:78:3d:4f:63:c4:d6:ea:20:59: 20:ca:5e:29:f8:c0:9d:a4:54:b1:3a:0b:9b:60:a7: 80:84:66:ca:75:d4:cc:73:cd:bf:e8:9f:79:b1:a3: 0f:f4:fa:24:0b:81:9a:4b:7e:61:40:19:4b:fb:b0: 42:ff:13:bb:41:8b:ab:d2:52:5d:f1:4c:ca:d1:8e: 74:c5:5d:d2:c5:d0:39:75:b2:43:6e:ea:68:b7:6c: e7:16:ec:6b:c2:3b:45:20:37:9e:1c:21:3e:6a:23: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:55:30:7f:d2:a9:31:24:e0:21:13:53:7f:b7:ef:ee:c8:9b: c7:a5:c7:09:82:c4:cb:87:d0:de:a6:05:93:0c:a1:c7:da:d2: 72:78:e7:0b:a9:ac:56:30:a0:6e:e3:fe:00:21:48:0c:49:96: fc:98:87:b9:db:56:24:fc:48:3f:64:85:ee:87:f5:ca:f5:e0: b7:66:12:cb:b2:2e:a5:0f:cd:9d:d4:94:d6:68:45:0d:b4:ad: e6:40:83:4b:44:4b:dd:bb:c8:d7:ec:f3:d1:b0:2e:5c:43:10: ef:e4:d2:68:7b:c1:99:92:52:28:d2:9b:10:38:b2:f5:ca:fe: 4f:8d:2f:41:9f:82:e1:25:a0:7c:15:6c:a7:a7:4a:3a:14:25: 8f:dc:70:58:ae:31:a6:7c:14:e6:f3:20:43:77:6c:5e:9a:8d: fe:dd:f7:36:19:93:1c:5b:ca:e5:d9:03:83:c3:e8:da:35:c8: 2a:a9:c1:3d:9b:b4:49:d7:aa:c3:be:a3:b7:00:7a:e5:a7:da: ae:32:09:54:ee:7d:f4:f2:02:bd:05:de:ef:cd:a4:9e:f9:98: d6:a6:dd:85:a4:26:21:32:2b:54:8f:14:f9:e6:94:52:ae:8e: 1b:a0:60:0b:45:13:0c:04:ff:a7:61:b7:4c:23:27:c7:e0:ce: ad:c6:e0:f5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICKp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MjEy MjQxMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVDODg2Mzc1QTZBQjEz NjI2RjQ1NDQ5NDVENzM4NzEyMDU3RkRBQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3pii7fBrw059mI7ZBv1rrCwlJ/ayJFP7soNHgZXdJ5sg5BsJp WoHu4PifObjso6WuhWGxFHD60hCDm7DyW7hAA/RJzFkmi/C6HKZUbwDVgqnScle7 Rn0Da9KXNjl3Z4aearVnHmKjUdjblLOzXHEDDUOoSSqSJe5nHZMRk40aNTKsdTws dRdWf7PMWd0AAntYIugww7X9TeHdGng9T2PE1uogWSDKXin4wJ2kVLE6C5tgp4CE Zsp11Mxzzb/on3mxow/0+iQLgZpLfmFAGUv7sEL/E7tBi6vSUl3xTMrRjnTFXdLF 0Dl1skNu6mi3bOcW7GvCO0UgN54cIT5qIyZxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXIhjdaarE2JvRUSUXXOHEgV/2qowHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvMHF0c20yNFdVelRB TXRCUjFmeDlGVWZrNDFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ5VMH/SqTEk4CETU3+37+7Im8elxwmCxMuH0N6mBZMMocfa0nJ45wuprFYw oG7j/gAhSAxJlvyYh7nbViT8SD9khe6H9cr14LdmEsuyLqUPzZ3UlNZoRQ20reZA g0tES927yNfs89GwLlxDEO/k0mh7wZmSUijSmxA4svXK/k+NL0GfguEloHwVbKen SjoUJY/ccFiuMaZ8FObzIEN3bF6ajf7d9zYZkxxbyuXZA4PD6No1yCqpwT2btEnX qsO+o7cAeuWn2q4yCVTuffTyAr0F3u/NpJ75mNam3YWkJiEyK1SPFPnmlFKujhug YAtFEwwE/6dht0wjJ8fgzq3G4PU= -----END CERTIFICATE-----Generated at Sun Jun 22 00:04:19 2025 by rpki-client