$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json) Hash identifier: Zup4vs4Zt0DyR72QHeUMhAYMCLL99WtEoasUDcwgQzk= Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Certificate serial: 0DA9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft Manifest number: 0DA9 Signing time: Sat 21 Jun 2025 06:44:15 +0000 Manifest this update: Sat 21 Jun 2025 06:44:15 +0000 Manifest next update: Sat 21 Jun 2025 12:44:15 +0000 Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: Ih7hVKP7euwljvbLoAlxaXc902e6OWJze1ZyziYHD0E=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3497 (0xda9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Validity Not Before: Jun 21 06:44:15 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c: 6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62: a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5: 2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04: 54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03: df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db: c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2: 30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32: 00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92: 4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1: 6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac: c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4: 24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c: fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42: 8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc: 30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03: 1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 X509v3 Authority Key Identifier: keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:89:d6:12:53:63:35:e6:4f:b1:e1:cc:ee:bd:2a:cc:9b:11: 0f:82:6e:ae:91:de:aa:79:79:c8:f9:0b:b5:45:68:ea:68:3e: ad:74:b6:72:8f:47:bd:68:4a:94:05:2c:31:0d:59:12:d5:e1: 02:af:35:74:17:e8:0b:e5:98:9a:2a:d8:ef:a3:7a:2c:da:3d: f4:a0:9b:69:84:02:b7:ec:1b:f8:ac:e9:5c:62:e0:b0:18:8f: 8d:14:3b:7a:f1:d7:ef:25:b4:19:4e:84:b1:97:33:a1:86:f0: 57:0e:4b:63:b3:df:15:e4:cc:88:7b:64:f7:83:d2:f3:31:5f: 71:84:7d:f2:25:35:65:e1:1f:c8:72:c4:07:9d:ea:d2:a3:02: bb:88:67:0f:c1:80:c9:34:1e:5a:20:df:dc:14:7a:cc:1f:b9: 89:94:2c:f6:d0:51:04:b5:5a:3c:36:c8:93:4c:64:09:9e:cf: 68:72:67:42:de:45:a2:db:a5:ea:8d:ed:30:1b:62:1f:fd:a7: 15:c1:79:2f:34:f3:83:ab:c6:f5:5f:34:4a:47:6c:09:3c:56: 9a:ec:89:80:b4:bb:e9:7f:f9:e6:fd:31:db:3a:48:f3:48:8c: ca:12:d2:33:d9:0f:51:26:0b:fe:7d:14:37:43:54:31:4e:00: 5e:00:89:a7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzM0 NjhGNTY4MjYxRjJEODA4RjcwMzBFMDlDRkFCQkUxRUUwRUQxNDAeFw0yNTA2MjEw NjQ0MTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVEMzZBOTRBNUFEMEVD RkUwRDZFODFBREI3RTM3NUQyRTVDMjQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWa6duO8ddF5qkZmdJjGqWxoZBwN8Axaodn82PYqHXwy+JjOBP WcpEQGpLpSu8XrwLB53CadTFHAZABFRQW4cutdCsMz0KAcbgA9/3sh36A+ex9Un3 41wP28awOQgBeG+ISWWkCd61ojAG1miKFb/3UXd03zPfMgCiQtgBPf7Vk1InO+U1 kkxFZ7Y3GGWUDtjncnDL0W1E75gcI44rf3tSj30RrMRBKaMXo95HFKObmOpwtCRh 2MPN1GZ3NsDd8J+MnPxYV+0QpUdRWFhUx4CCQo65x55RavW5MSokneSPzDD9JB6u BELPrn9AKLEjAx18HZ6mjkdJUB3oGYBeGCzlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7TapSlrQ7P4NboGtt+N10uXCQBMwHwYDVR0jBBgwFoAUM0aPVoJh8tgI9wMO Cc+rvh7g7RQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy OC9NMGFQVm9KaDh0Z0k5d01PQ2MtcnZoN2c3UlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL00wYVBWb0poOHRnSTl3TU9DYy1ydmg3ZzdSUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjgvTTBhUFZvSmg4dGdJ OXdNT0NjLXJ2aDdnN1JRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACGJ1hJTYzXmT7HhzO69KsybEQ+Cbq6R3qp5ecj5C7VFaOpoPq10tnKPR71o SpQFLDENWRLV4QKvNXQX6AvlmJoq2O+jeizaPfSgm2mEArfsG/is6Vxi4LAYj40U O3rx1+8ltBlOhLGXM6GG8FcOS2Oz3xXkzIh7ZPeD0vMxX3GEffIlNWXhH8hyxAed 6tKjAruIZw/BgMk0Hlog39wUeswfuYmULPbQUQS1Wjw2yJNMZAmez2hyZ0LeRaLb peqN7TAbYh/9pxXBeS8084OrxvVfNEpHbAk8VprsiYC0u+l/+eb9Mds6SPNIjMoS 0jPZD1EmC/59FDdDVDFOAF4Aiac= -----END CERTIFICATE-----Generated at Sat Jun 21 12:12:04 2025 by rpki-client