$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft File: RHMR0DbVD1TEQW-41oIgp8uWgZk.mft (raw, json) Hash identifier: vKTqdoQchAEgqqBEvIhGAU+Ll0w2QZjA2N54MUn+gqw= Subject key identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD Authority key identifier: 44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 Certificate issuer: /CN=447311D036D50F54C4416FB8D68220A7CB968199 Certificate serial: 0EC1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft Manifest number: 0EC1 Signing time: Sat 21 Jun 2025 11:12:04 +0000 Manifest this update: Sat 21 Jun 2025 11:12:04 +0000 Manifest next update: Sat 21 Jun 2025 17:12:04 +0000 Files and hashes: 1: RHMR0DbVD1TEQW-41oIgp8uWgZk.crl (hash: uTQhZWOMQy9xHQRVJRNNUNYSJvvWcNqZj1w1SItthS4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3777 (0xec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447311D036D50F54C4416FB8D68220A7CB968199 Validity Not Before: Jun 21 11:12:04 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E87AE688BDC7A10FDD5E9B3706E050B1F5ACABCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:b5:20:11:08:e9:94:a4:b3:1b:10:e3:3b: 8c:9b:f3:3c:66:be:c4:8c:4c:8f:32:3d:75:bf:40: 7b:bf:65:97:b4:a5:fe:86:a0:df:27:cd:91:ff:04: 80:9d:7b:92:1a:d2:53:3d:27:c4:5d:a3:5c:c3:5c: 09:da:07:ba:5a:0d:d5:1e:a4:6c:fd:17:f2:a3:54: d7:10:0c:f5:45:bd:d6:fd:89:c3:14:99:b0:96:26: bc:f2:71:99:3c:9a:25:fd:6e:3a:9f:15:5b:01:e4: f7:2c:71:0b:3b:9c:a5:e1:28:15:63:3d:3f:61:bd: 99:0c:65:f7:ea:a6:2c:32:c6:9d:ab:8c:6c:12:6b: 77:72:c5:92:9e:23:aa:85:b5:09:6f:7d:e2:b6:66: 82:64:e6:c8:d5:71:b8:db:e6:7a:ee:92:72:48:cc: 75:03:dc:86:79:a6:05:67:84:18:21:37:5e:9e:c6: fa:3b:a9:a0:c7:79:33:d5:c7:75:d6:11:4c:2e:45: 14:55:6e:95:9f:eb:2f:c8:99:ec:42:7b:89:51:79: b9:4c:8b:46:ff:73:f2:d0:7f:f8:9b:b8:2c:17:2d: 19:62:83:96:ac:c5:0c:ea:5b:04:bd:e1:b1:b2:7c: 6d:82:3a:c6:23:3d:6e:4f:20:11:17:4f:05:e1:7a: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD X509v3 Authority Key Identifier: keyid:44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:7d:ce:ba:73:ce:fd:de:6b:7f:dd:00:20:d5:3c:06:b7:7e: f1:93:6a:3f:a7:d9:ce:45:1a:c9:ac:4a:35:ff:7d:90:d5:fd: db:71:3e:b1:20:95:85:f8:be:0b:7f:69:0c:f2:ae:78:06:5e: a8:a8:a4:a9:09:81:cb:30:ba:2c:5d:6b:ce:97:3a:b8:4f:19: 8a:f5:61:d3:39:a1:8e:dd:65:fa:59:95:ee:7b:f6:4a:fe:7b: 3d:46:fb:05:89:f4:95:c5:9a:a8:52:6b:ee:20:89:fc:fb:b9: 54:cc:d2:d0:ff:12:d1:56:31:7d:bd:95:a0:95:02:2a:35:18: 34:13:de:22:82:af:6e:e3:37:3e:7f:8a:51:0e:51:f6:8a:93: 16:80:19:77:c3:35:3c:47:ea:5b:2f:79:7f:96:5a:0d:91:9f: db:f0:52:a9:d9:76:6f:1a:a2:69:95:de:7c:f0:7a:8a:77:8a: b9:a1:b1:f4:6a:7d:33:cb:b5:19:53:ec:6c:c9:97:40:63:57: aa:04:82:37:cb:5b:12:83:bf:70:3c:26:6b:e8:cc:12:b2:e6: a3:bd:e2:71:4d:e8:43:78:41:b7:0f:eb:23:a1:95:63:31:fa: d6:82:7f:7a:51:44:98:69:b0:c7:20:b4:95:ff:8f:51:ee:5d: e9:5b:45:58 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ3 MzExRDAzNkQ1MEY1NEM0NDE2RkI4RDY4MjIwQTdDQjk2ODE5OTAeFw0yNTA2MjEx MTEyMDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU4N0FFNjg4QkRDN0Ex MEZERDVFOUIzNzA2RTA1MEIxRjVBQ0FCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmULUgEQjplKSzGxDjO4yb8zxmvsSMTI8yPXW/QHu/ZZe0pf6G oN8nzZH/BICde5Ia0lM9J8Rdo1zDXAnaB7paDdUepGz9F/KjVNcQDPVFvdb9icMU mbCWJrzycZk8miX9bjqfFVsB5PcscQs7nKXhKBVjPT9hvZkMZffqpiwyxp2rjGwS a3dyxZKeI6qFtQlvfeK2ZoJk5sjVcbjb5nruknJIzHUD3IZ5pgVnhBghN16exvo7 qaDHeTPVx3XWEUwuRRRVbpWf6y/ImexCe4lReblMi0b/c/LQf/ibuCwXLRlig5as xQzqWwS94bGyfG2COsYjPW5PIBEXTwXhehJPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6HrmiL3HoQ/dXps3BuBQsfWsq80wHwYDVR0jBBgwFoAURHMR0DbVD1TEQW+4 1oIgp8uWgZkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx OS9SSE1SMERiVkQxVEVRVy00MW9JZ3A4dVdnWmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JITVIwRGJWRDFURVFXLTQxb0lncDh1V2daay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvUkhNUjBEYlZEMVRF UVctNDFvSWdwOHVXZ1prLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHN9zrpzzv3ea3/dACDVPAa3fvGTaj+n2c5FGsmsSjX/fZDV/dtxPrEglYX4 vgt/aQzyrngGXqiopKkJgcswuixda86XOrhPGYr1YdM5oY7dZfpZle579kr+ez1G +wWJ9JXFmqhSa+4gifz7uVTM0tD/EtFWMX29laCVAio1GDQT3iKCr27jNz5/ilEO UfaKkxaAGXfDNTxH6lsveX+WWg2Rn9vwUqnZdm8aommV3nzweop3irmhsfRqfTPL tRlT7GzJl0BjV6oEgjfLWxKDv3A8JmvozBKy5qO94nFN6EN4QbcP6yOhlWMx+taC f3pRRJhpsMcgtJX/j1HuXelbRVg= -----END CERTIFICATE-----Generated at Sat Jun 21 14:36:08 2025 by rpki-client