$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft File: REpvrwhyRfumTIvW5EyRKvs9IGY.mft (raw, json) Hash identifier: gGocl9Uiisw/Ob8EUQ3faGE2AtkpGMZDVY4jqanvXl0= Subject key identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 Authority key identifier: 44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 Certificate issuer: /CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Certificate serial: 04A7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft Manifest number: 04A7 Signing time: Sat 21 Jun 2025 11:13:52 +0000 Manifest this update: Sat 21 Jun 2025 11:13:52 +0000 Manifest next update: Sat 21 Jun 2025 17:13:52 +0000 Files and hashes: 1: REpvrwhyRfumTIvW5EyRKvs9IGY.crl (hash: K1JsV0mlP6irD0w27Xg/l4p3CVQLIVx8SB4WY7BAjeo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Validity Not Before: Jun 21 11:13:52 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1AB861E2929A89AC6582D35AAD01A279CA426392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:79:8f:a0:8b:63:12:f9:e5:9d:c1:55:0a: 09:d9:71:50:88:eb:61:0a:93:7b:74:0e:80:b1:46: 0e:7a:1a:a5:2f:0b:0b:51:b7:6d:82:d7:3b:a1:1f: 8f:ce:71:78:39:27:2d:1a:42:61:ff:95:30:a5:d1: f7:44:a2:ed:fc:cb:27:33:46:f1:b0:2f:b3:86:7c: 67:66:1d:d7:63:38:b0:51:25:b3:ba:d6:e0:42:43: 07:6e:68:b8:6c:b3:17:df:1c:ec:37:21:24:db:9d: 43:2e:91:ed:73:a6:8d:b2:85:dc:c1:74:cd:ea:ef: 77:2e:b6:30:94:85:c0:37:29:1d:b4:82:27:d5:9c: 63:c6:5c:2c:72:0a:e1:9c:51:d0:9a:69:ea:c3:3c: 44:9e:fc:b0:cf:25:c1:0d:dd:82:f2:67:a8:97:9e: 00:b0:83:1e:17:ac:2a:d0:c1:56:13:b0:d7:15:68: 17:9b:96:05:69:b6:ee:d6:48:56:ad:82:f1:0a:8f: 9b:27:c4:05:fa:5e:6e:95:26:f5:95:02:b1:73:19: af:97:e7:8f:b0:63:69:9c:de:4e:8f:b3:fd:af:ec: e4:5e:22:31:f3:fd:50:e7:6b:26:7a:16:a1:9c:06: 6d:b1:69:52:1d:6b:14:f6:3c:e9:17:bc:55:44:3e: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 X509v3 Authority Key Identifier: keyid:44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f1:18:f6:78:4a:70:fc:0d:41:47:83:1d:0c:73:ca:6a:c5: 8e:2d:58:89:58:1b:a0:e4:26:4a:31:21:cd:5f:0e:26:a9:2b: c9:5b:92:c0:11:04:88:0e:e7:f5:c9:8c:cc:0b:71:5d:ed:59: 51:51:63:da:a3:1a:b2:8e:52:91:af:09:5d:88:75:0c:ce:97: 1d:fa:a7:50:0d:b6:57:71:dd:a9:88:bd:f3:bd:e0:54:f1:a8: 49:a9:ab:98:63:f8:0e:de:e3:0f:a6:89:4f:c8:2e:bf:bc:74: 37:eb:2e:0b:46:9b:d3:c1:ca:47:65:83:b6:c2:b7:6b:89:0d: 48:10:75:93:8c:a2:a2:8d:a2:63:81:e3:28:68:5a:a9:02:c7: 06:26:4b:cd:d2:af:0d:c2:58:49:1b:1f:8a:e7:77:26:5e:5f: 8b:0f:6a:43:19:81:26:63:82:df:ca:7b:59:38:68:94:2e:4a: 95:ef:87:37:c9:65:00:7d:a0:af:f8:84:da:28:ec:96:6d:b5: 42:90:9f:c1:a7:29:e3:2f:36:56:2d:39:04:88:3c:09:32:88: 3f:e3:b4:ab:76:a1:09:ce:01:bf:89:ca:88:51:56:b8:ba:03: 30:10:6e:b9:22:ac:80:b2:ee:20:bd:8c:e7:38:9f:a5:f4:89: 0a:0f:3b:23 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ0 QTZGQUYwODcyNDVGQkE2NEM4QkQ2RTQ0QzkxMkFGQjNEMjA2NjAeFw0yNTA2MjEx MTEzNTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBQjg2MUUyOTI5QTg5 QUM2NTgyRDM1QUFEMDFBMjc5Q0E0MjYzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDATXmPoItjEvnlncFVCgnZcVCI62EKk3t0DoCxRg56GqUvCwtR t22C1zuhH4/OcXg5Jy0aQmH/lTCl0fdEou38yyczRvGwL7OGfGdmHddjOLBRJbO6 1uBCQwduaLhssxffHOw3ISTbnUMuke1zpo2yhdzBdM3q73cutjCUhcA3KR20gifV nGPGXCxyCuGcUdCaaerDPESe/LDPJcEN3YLyZ6iXngCwgx4XrCrQwVYTsNcVaBeb lgVptu7WSFatgvEKj5snxAX6Xm6VJvWVArFzGa+X54+wY2mc3k6Ps/2v7OReIjHz /VDnayZ6FqGcBm2xaVIdaxT2POkXvFVEPmZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGrhh4pKaiaxlgtNarQGiecpCY5IwHwYDVR0jBBgwFoAUREpvrwhyRfumTIvW 5EyRKvs9IGYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9SRXB2cndoeVJmdW1USXZXNUV5Ukt2czlJR1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JFcHZyd2h5UmZ1bVRJdlc1RXlSS3ZzOUlHWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvUkVwdnJ3aHlSZnVt VEl2VzVFeVJLdnM5SUdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI3xGPZ4SnD8DUFHgx0Mc8pqxY4tWIlYG6DkJkoxIc1fDiapK8lbksARBIgO 5/XJjMwLcV3tWVFRY9qjGrKOUpGvCV2IdQzOlx36p1ANtldx3amIvfO94FTxqEmp q5hj+A7e4w+miU/ILr+8dDfrLgtGm9PBykdlg7bCt2uJDUgQdZOMoqKNomOB4yho WqkCxwYmS83Srw3CWEkbH4rndyZeX4sPakMZgSZjgt/Ke1k4aJQuSpXvhzfJZQB9 oK/4hNoo7JZttUKQn8GnKeMvNlYtOQSIPAkyiD/jtKt2oQnOAb+JyohRVri6AzAQ brkirICy7iC9jOc4n6X0iQoPOyM= -----END CERTIFICATE-----Generated at Sat Jun 21 16:52:55 2025 by rpki-client