$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft File: DqwT6V7p4IXk3eST4sWV7hZQy5E.mft (raw, json) Hash identifier: 8cazq35/IscwzSjm2I5/QIO72+4OkobON6w7ES1qmeg= Subject key identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA Authority key identifier: 0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 Certificate issuer: /CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Certificate serial: 08EE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft Manifest number: 08EE Signing time: Sun 15 Jun 2025 07:25:05 +0000 Manifest this update: Sun 15 Jun 2025 07:25:05 +0000 Manifest next update: Sun 15 Jun 2025 13:25:05 +0000 Files and hashes: 1: DqwT6V7p4IXk3eST4sWV7hZQy5E.crl (hash: Vy5cwoZdKOTiIhBUJoiR5LPvmzm2exjnkXmMejqfD6w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 09:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Validity Not Before: Jun 15 07:25:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C130BB42761CDC64A0C4FD8C24857C4C71BC9EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:65:ae:fa:dc:ed:29:cc:7f:ec:48:ba:c1: 9d:87:25:fe:64:4b:9c:6c:2a:24:71:70:03:66:73: 7c:55:a3:90:51:c8:1f:fd:d8:a0:24:ab:d1:6c:30: a3:ab:ca:97:29:6b:2c:87:0b:ef:8c:13:16:78:86: 05:6c:15:00:bf:76:66:55:9d:e9:6a:a9:c4:ce:73: b3:8a:23:7b:5c:bf:6d:33:d8:86:94:09:27:ab:0b: 23:46:a7:f4:a6:ab:c1:9c:40:1c:bc:e0:21:ec:c4: c7:3b:97:aa:98:a3:8d:c1:e0:ba:6a:5a:63:41:7b: 36:75:55:d4:4e:5a:bb:2f:a5:c4:f2:c0:82:ad:dc: eb:9f:cc:37:c8:e4:35:3f:21:f2:c9:7d:d0:17:6f: fa:90:b4:c8:e1:44:ca:f3:2e:81:50:a4:38:41:ef: 7b:fd:c1:d9:35:86:ee:92:bc:0a:ca:8c:51:b4:17: af:58:74:38:84:04:93:c8:82:e5:b6:51:a8:48:a9: 75:ed:af:75:02:37:20:62:4e:e7:95:2c:fa:62:4e: 53:ee:cc:ad:8a:d9:27:6e:64:fb:04:0c:8f:b2:fa: 24:c5:b0:91:c2:83:21:79:98:c5:3f:b5:87:43:96: ec:95:18:f5:40:8a:43:51:02:fb:f0:b4:0e:88:59: 75:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA X509v3 Authority Key Identifier: keyid:0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:75:b6:e6:3b:a0:c0:89:3a:04:13:d9:53:ad:93:61:b8:86: 8b:8a:a0:5d:8b:31:c0:8e:a1:e5:a1:19:b1:c7:ac:a5:7d:b0: c2:b8:63:40:e5:4b:82:a1:49:f4:38:0f:b8:a2:c4:1e:ac:02: be:81:3e:c2:4d:ad:19:75:d7:b8:f9:67:ea:8a:9d:db:b7:7a: 83:a1:f7:77:ac:fd:fc:e4:19:ca:f1:73:cd:5c:1e:96:d1:62: c6:42:a6:63:c3:f1:cd:8f:bc:19:a1:1d:bd:9f:dc:c5:a7:93: 01:29:ba:d7:3c:4d:25:75:43:ba:91:3f:b5:48:ce:3c:70:42: f3:86:ac:90:d2:db:fe:0c:f4:5d:71:61:e2:89:82:fe:35:0b: f1:ea:c1:db:8a:7d:ac:b8:b4:d0:86:1d:cf:35:9d:91:83:3a: 1e:6d:be:ac:c4:c5:39:2a:c8:9f:12:9a:7c:cd:29:a9:3d:ca: e9:47:d6:20:c2:c0:6e:7f:75:83:8c:3b:40:5d:48:21:bb:a6: 39:bc:c5:36:24:53:4e:94:39:79:5e:e8:93:22:08:fc:bc:27: 7d:3b:3b:8d:de:f5:a6:23:84:a0:d5:de:71:30:23:ea:fb:5b: a8:73:ec:a0:d6:72:26:4c:ca:f5:84:d2:88:b5:19:32:1c:c2: 47:08:48:fb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB QzEzRTk1RUU5RTA4NUU0RERFNDkzRTJDNTk1RUUxNjUwQ0I5MTAeFw0yNTA2MTUw NzI1MDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMxMzBCQjQyNzYxQ0RD NjRBMEM0RkQ4QzI0ODU3QzRDNzFCQzlFRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIrWWu+tztKcx/7Ei6wZ2HJf5kS5xsKiRxcANmc3xVo5BRyB/9 2KAkq9FsMKOrypcpayyHC++MExZ4hgVsFQC/dmZVnelqqcTOc7OKI3tcv20z2IaU CSerCyNGp/Smq8GcQBy84CHsxMc7l6qYo43B4LpqWmNBezZ1VdROWrsvpcTywIKt 3OufzDfI5DU/IfLJfdAXb/qQtMjhRMrzLoFQpDhB73v9wdk1hu6SvArKjFG0F69Y dDiEBJPIguW2UahIqXXtr3UCNyBiTueVLPpiTlPuzK2K2SduZPsEDI+y+iTFsJHC gyF5mMU/tYdDluyVGPVAikNRAvvwtA6IWXXxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUwTC7QnYc3GSgxP2MJIV8THG8nvowHwYDVR0jBBgwFoAUDqwT6V7p4IXk3eST 4sWV7hZQy5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC9EcXdUNlY3cDRJWGszZVNUNHNXVjdoWlF5NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Rxd1Q2VjdwNElYazNlU1Q0c1dWN2haUXk1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzAvRHF3VDZWN3A0SVhr M2VTVDRzV1Y3aFpReTVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADN1tuY7oMCJOgQT2VOtk2G4houKoF2LMcCOoeWhGbHHrKV9sMK4Y0DlS4Kh SfQ4D7iixB6sAr6BPsJNrRl117j5Z+qKndu3eoOh93es/fzkGcrxc81cHpbRYsZC pmPD8c2PvBmhHb2f3MWnkwEputc8TSV1Q7qRP7VIzjxwQvOGrJDS2/4M9F1xYeKJ gv41C/HqwduKfay4tNCGHc81nZGDOh5tvqzExTkqyJ8SmnzNKak9yulH1iDCwG5/ dYOMO0BdSCG7pjm8xTYkU06UOXle6JMiCPy8J307O43e9aYjhKDV3nEwI+r7W6hz 7KDWciZMyvWE0oi1GTIcwkcISPs= -----END CERTIFICATE-----Generated at Sun Jun 15 09:21:34 2025 by rpki-client