$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft File: 3-pN9aKB625y06MUKkU2QAzMSM0.mft (raw, json) Hash identifier: /XLZ1+BAeuH97AOaMlMLAu7FipwsNEg8AP+Uy7bjsmM= Subject key identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E Authority key identifier: DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD Certificate issuer: /CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Certificate serial: 0887 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft Manifest number: 0887 Signing time: Fri 20 Jun 2025 18:11:06 +0000 Manifest this update: Fri 20 Jun 2025 18:11:06 +0000 Manifest next update: Sat 21 Jun 2025 00:11:06 +0000 Files and hashes: 1: 3-pN9aKB625y06MUKkU2QAzMSM0.crl (hash: pr2+H4B6Tm46W6Hb605+9enHn02EScV+JHRjdmiEE4o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 00:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Validity Not Before: Jun 20 18:11:06 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=32E7383A6FE497B476EE736359087E501952A06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:18:54:3e:fb:1f:c3:7e:42:12:df:f3:83: 9d:b3:44:25:05:bd:a8:ab:bd:0c:cf:dc:94:de:fd: 7b:8c:e9:64:f0:1b:eb:4f:2b:f2:76:d5:d6:dd:d2: 7d:24:2e:86:41:06:a2:9e:e7:71:08:c6:d2:53:7d: 39:bd:71:79:7d:98:21:bd:48:8f:c6:f3:8c:79:cf: 00:ed:1b:b3:00:db:93:68:bb:b1:1b:e4:7e:db:0a: f7:3c:74:37:29:0d:a0:7c:73:ba:36:4b:08:89:2b: a1:73:b5:f5:08:7e:06:b1:f8:be:6c:59:d6:58:9f: 9b:e4:b8:c7:49:87:72:52:02:16:ed:e8:cc:11:ff: bd:e2:b6:89:f8:71:cf:d1:56:90:89:58:9a:bc:8a: a5:0d:49:26:97:a8:ef:ff:c8:8d:40:a6:23:5e:37: b3:30:21:7c:9c:9e:64:21:44:66:fa:b4:88:d5:36: d5:e8:d9:f2:9e:58:29:7d:61:fa:aa:ee:ca:3b:32: 71:6a:51:c6:d6:15:db:a3:16:3a:9d:7d:d1:10:0d: d4:7a:dd:fc:cc:46:87:89:fb:40:9b:49:ce:93:18: b4:1b:6e:ae:07:23:8a:27:80:09:44:af:5e:4c:ec: b7:d6:2e:26:9a:0d:39:a7:59:46:75:74:40:c4:05: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E X509v3 Authority Key Identifier: keyid:DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ed:b7:17:c3:a8:cd:c0:2c:4f:b7:ce:98:07:46:fe:1c:fe: 6d:9f:dc:66:3c:3e:65:c7:61:b5:9a:6e:98:90:9a:3b:95:8e: ea:7d:0c:69:eb:d7:cc:44:13:ec:83:d3:7e:f7:3d:b4:e3:34: c6:9f:18:86:09:61:73:59:aa:1a:f4:be:27:dc:2d:35:3d:4f: 2c:22:05:7c:e5:d0:ce:53:58:78:3b:d0:ca:ad:db:37:bd:11: c4:60:20:b6:64:fb:90:63:91:d3:79:10:1a:ff:90:ec:0f:8b: 64:e2:d3:f4:5a:10:97:fd:16:00:90:6d:d3:4d:eb:a7:ec:62: 31:88:64:cb:e1:7e:75:45:67:7f:e4:15:d8:5a:ce:ec:1e:c0: 11:3c:10:64:c3:a3:a2:a7:67:55:02:10:2b:49:59:1c:11:92: af:2e:7e:ab:8d:ac:52:ab:fa:67:c6:03:96:41:a7:7b:ba:01: 57:77:03:bb:52:a7:68:c2:bd:29:07:4a:03:a4:1d:c4:df:15: 96:93:2d:e8:ab:98:8d:fd:57:0e:27:97:3d:b2:9e:a5:bb:e6: c9:08:0d:d7:2b:b6:5c:32:48:01:7f:6b:90:9a:cb:c7:b6:b8: 14:97:2c:f2:ad:52:b6:ee:99:14:19:b5:04:c0:7c:a7:c7:74: 6b:97:2a:d4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZF QTRERjVBMjgxRUI2RTcyRDNBMzE0MkE0NTM2NDAwQ0NDNDhDRDAeFw0yNTA2MjAx ODExMDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDMyRTczODNBNkZFNDk3 QjQ3NkVFNzM2MzU5MDg3RTUwMTk1MkEwNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2khhUPvsfw35CEt/zg52zRCUFvairvQzP3JTe/XuM6WTwG+tP K/J21dbd0n0kLoZBBqKe53EIxtJTfTm9cXl9mCG9SI/G84x5zwDtG7MA25Nou7Eb 5H7bCvc8dDcpDaB8c7o2SwiJK6FztfUIfgax+L5sWdZYn5vkuMdJh3JSAhbt6MwR /73iton4cc/RVpCJWJq8iqUNSSaXqO//yI1ApiNeN7MwIXycnmQhRGb6tIjVNtXo 2fKeWCl9Yfqq7so7MnFqUcbWFdujFjqdfdEQDdR63fzMRoeJ+0CbSc6TGLQbbq4H I4ongAlEr15M7LfWLiaaDTmnWUZ1dEDEBRlZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMuc4Om/kl7R27nNjWQh+UBlSoG4wHwYDVR0jBBgwFoAU3+pN9aKB625y06MU KkU2QAzMSM0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My8zLXBOOWFLQjYyNXkwNk1VS2tVMlFBek1TTTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzMtcE45YUtCNjI1eTA2TVVLa1UyUUF6TVNNMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvMy1wTjlhS0I2MjV5 MDZNVUtrVTJRQXpNU00wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIHttxfDqM3ALE+3zpgHRv4c/m2f3GY8PmXHYbWabpiQmjuVjup9DGnr18xE E+yD0373PbTjNMafGIYJYXNZqhr0vifcLTU9TywiBXzl0M5TWHg70Mqt2ze9EcRg ILZk+5BjkdN5EBr/kOwPi2Ti0/RaEJf9FgCQbdNN66fsYjGIZMvhfnVFZ3/kFdha zuwewBE8EGTDo6KnZ1UCECtJWRwRkq8ufquNrFKr+mfGA5ZBp3u6AVd3A7tSp2jC vSkHSgOkHcTfFZaTLeirmI39Vw4nlz2ynqW75skIDdcrtlwySAF/a5Cay8e2uBSX LPKtUrbumRQZtQTAfKfHdGuXKtQ= -----END CERTIFICATE-----Generated at Fri Jun 20 20:55:32 2025 by rpki-client