$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft File: VyVNn31j60IRhMWNAuBBlwWaag4.mft (raw, json) Hash identifier: EMPJHSowni9kIdKgATqxPz3EoaMCjXMzLHehDdjgWPk= Subject key identifier: 8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB Authority key identifier: 57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E Certificate issuer: /CN=57254D9F7D63EB421184C58D02E04197059A6A0E Certificate serial: 0908 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft Manifest number: 0908 Signing time: Fri 20 Jun 2025 15:47:10 +0000 Manifest this update: Fri 20 Jun 2025 15:47:09 +0000 Manifest next update: Fri 20 Jun 2025 21:47:09 +0000 Files and hashes: 1: VyVNn31j60IRhMWNAuBBlwWaag4.crl (hash: 3hC/DbHe20Ks/ACo5uulKsp36jOJW/o3ii4sNPiKBOc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 19:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2312 (0x908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57254D9F7D63EB421184C58D02E04197059A6A0E Validity Not Before: Jun 20 15:47:09 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8C0973127E8D45EBCEC8F7DEB61FDBF61CD5E2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:a3:56:2e:72:20:0b:b8:87:bc:20:2a:f8: e5:6a:81:f5:dc:d9:16:77:cd:f1:1d:03:a8:a6:59: 1f:7c:4c:0c:9e:1e:dc:9b:47:ef:a3:69:b4:8e:16: 2a:db:ab:2f:da:c9:f5:3a:8a:a9:43:f8:d7:59:76: 5d:0b:e5:83:af:e0:08:04:9a:51:ff:2e:78:64:cc: 12:f4:7f:f7:d8:01:11:8b:51:87:8a:5c:ca:a9:41: 5c:f2:36:ce:07:4a:2d:88:1d:64:d6:53:6d:0f:4d: fb:70:e9:17:c4:e9:b6:ac:39:77:b0:64:45:53:66: 25:19:f8:c5:35:83:2c:7b:4b:83:ea:98:74:03:a0: a9:cf:08:ba:47:6d:17:fa:56:a8:eb:f8:fd:2d:e6: cf:18:49:fa:7f:2e:1b:74:23:74:37:44:a7:61:77: 55:91:7a:1c:41:f1:df:61:c1:1d:47:9f:21:18:6f: ca:77:44:06:8f:0e:89:d2:67:12:e8:d0:b2:b2:62: 8f:49:21:65:cc:64:3f:8c:1f:79:f0:6f:8b:dd:94: 63:e2:d9:04:bc:42:fb:5a:38:c6:dd:33:00:b9:30: 07:15:70:5f:4a:0a:a8:d9:a6:dc:a5:98:5e:32:d1: 45:3a:96:e9:2e:d0:63:af:66:ca:3e:83:d0:53:86: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB X509v3 Authority Key Identifier: keyid:57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a5:ca:81:d8:c7:45:2e:14:37:0c:ba:8c:44:fa:a2:e3:00: 12:2e:9f:fd:50:c2:fa:5b:c0:bf:b2:ad:7e:c8:05:88:4f:1a: 99:d9:22:80:de:82:33:2b:7d:f9:3f:2d:80:4e:12:87:e4:a9: 29:12:8c:cf:2d:34:dc:bb:ae:96:6d:57:7d:9e:b4:57:7c:55: 3a:53:78:25:e6:1d:f0:b4:1b:63:9c:74:25:e7:66:17:58:43: 6a:1f:c3:b9:f7:68:a5:57:51:72:26:b4:93:12:af:7c:92:95: 62:f4:0c:54:37:4a:50:e2:b2:8d:1f:da:b5:71:7c:04:5b:a6: 20:ac:1c:aa:a7:d5:c4:e2:4e:71:63:40:70:6c:dd:86:99:17: 55:38:4b:25:72:b2:d7:17:39:7a:64:3e:4c:cf:98:35:16:75: 07:82:fe:14:bf:7d:7c:c7:27:c6:5b:87:e2:08:8a:23:00:65: 07:ee:ec:40:34:a4:e8:e8:84:64:18:7d:e6:f0:a0:b6:39:3b: 3d:a8:65:61:1f:8f:46:88:12:21:f5:7c:26:af:f7:6f:41:41: f3:ac:c3:b8:b1:e0:d9:06:99:e2:37:5d:80:71:8d:33:ca:a3: 01:ca:d8:86:51:00:eb:38:3b:bf:c8:6b:f0:21:fe:9f:56:6c: 68:46:8d:3f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTcy NTREOUY3RDYzRUI0MjExODRDNThEMDJFMDQxOTcwNTlBNkEwRTAeFw0yNTA2MjAx NTQ3MDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhDMDk3MzEyN0U4RDQ1 RUJDRUM4RjdERUI2MUZEQkY2MUNENUUyQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDThqNWLnIgC7iHvCAq+OVqgfXc2RZ3zfEdA6imWR98TAyeHtyb R++jabSOFirbqy/ayfU6iqlD+NdZdl0L5YOv4AgEmlH/LnhkzBL0f/fYARGLUYeK XMqpQVzyNs4HSi2IHWTWU20PTftw6RfE6basOXewZEVTZiUZ+MU1gyx7S4PqmHQD oKnPCLpHbRf6Vqjr+P0t5s8YSfp/Lht0I3Q3RKdhd1WRehxB8d9hwR1HnyEYb8p3 RAaPDonSZxLo0LKyYo9JIWXMZD+MH3nwb4vdlGPi2QS8QvtaOMbdMwC5MAcVcF9K CqjZptylmF4y0UU6luku0GOvZso+g9BThsAjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUjAlzEn6NRevOyPfeth/b9hzV4qswHwYDVR0jBBgwFoAUVyVNn31j60IRhMWN AuBBlwWaag4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC9WeVZObjMxajYwSVJoTVdOQXVCQmx3V2FhZzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1Z5Vk5uMzFqNjBJUmhNV05BdUJCbHdXYWFnNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzAvVnlWTm4zMWo2MElS aE1XTkF1QkJsd1dhYWc0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI+lyoHYx0UuFDcMuoxE+qLjABIun/1QwvpbwL+yrX7IBYhPGpnZIoDegjMr ffk/LYBOEofkqSkSjM8tNNy7rpZtV32etFd8VTpTeCXmHfC0G2OcdCXnZhdYQ2of w7n3aKVXUXImtJMSr3ySlWL0DFQ3SlDiso0f2rVxfARbpiCsHKqn1cTiTnFjQHBs 3YaZF1U4SyVystcXOXpkPkzPmDUWdQeC/hS/fXzHJ8Zbh+IIiiMAZQfu7EA0pOjo hGQYfebwoLY5Oz2oZWEfj0aIEiH1fCav929BQfOsw7ix4NkGmeI3XYBxjTPKowHK 2IZRAOs4O7/Ia/Ah/p9WbGhGjT8= -----END CERTIFICATE-----Generated at Fri Jun 20 19:39:20 2025 by rpki-client