$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft File: rG7v4uYozkZswlwA92XMjVOKljE.mft (raw, json) Hash identifier: M1GAL7i8tfyHrcm71PSajYoYz0odUVjhphtB2TNGMls= Subject key identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 Authority key identifier: AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 Certificate issuer: /CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Certificate serial: 069C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft Manifest number: 069C Signing time: Sat 21 Jun 2025 01:42:10 +0000 Manifest this update: Sat 21 Jun 2025 01:42:10 +0000 Manifest next update: Sat 21 Jun 2025 07:42:10 +0000 Files and hashes: 1: rG7v4uYozkZswlwA92XMjVOKljE.crl (hash: iZPv3K9ODJFWoVh4K3ISPNd3ozmCLe0PEmtUODCJKkQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 07:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Validity Not Before: Jun 21 01:42:10 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5DBC1774C216B68CB2FB36DF3273F6DA28545505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ad:ac:7b:44:6c:5d:ff:9e:5f:48:e2:5c:c2: 37:32:a8:5e:a5:34:31:87:30:f0:cf:f6:0b:4b:cc: ac:9c:37:fa:25:e8:d2:c0:e1:84:b2:39:ea:b5:63: 8d:f6:9c:1c:00:e6:13:0c:a8:1a:f0:33:39:ed:65: 24:bc:be:49:b0:50:8c:74:7b:e3:42:91:a1:21:f2: 70:2f:36:66:5e:41:b4:e2:bd:c6:cf:f1:0c:84:04: 12:a8:f2:ed:61:6c:b5:36:65:09:04:f0:a7:aa:82: cc:69:51:7b:c0:76:ef:12:65:50:2f:8b:71:3d:05: bd:d6:37:1e:8a:b7:82:ba:08:77:19:44:e1:31:f9: 82:3c:1a:83:73:e0:cf:e5:82:3d:25:f1:29:25:3d: e0:63:be:5d:d5:08:31:89:bb:3a:c4:53:02:72:18: 1d:4c:1f:40:4c:86:e0:a6:0c:14:f8:6a:e6:06:23: 77:3e:44:06:b1:aa:78:71:e7:22:9b:90:87:44:9d: 60:f9:cd:01:89:3e:43:11:61:ff:72:8a:a1:3e:01: ef:33:45:f3:e8:b0:08:4f:79:73:cd:85:fd:6b:57: ec:42:d9:83:61:77:22:ae:1d:26:b6:12:c3:fb:34: f7:4c:4e:54:00:4d:85:89:7a:cd:55:cf:58:c6:cc: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 X509v3 Authority Key Identifier: keyid:AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:65:94:a5:e7:fc:7b:e0:20:7b:8c:ec:1d:8d:80:b4:c4:25: f0:5b:81:be:17:26:04:08:fb:72:3d:e5:8c:74:3a:38:ee:54: 5d:9c:4f:70:01:f6:c7:18:76:64:4b:fb:af:1d:33:96:f2:b7: 93:41:f1:33:43:87:0a:e1:ec:dc:27:c9:84:b6:a3:d8:25:35: e9:a0:50:f0:c7:3f:b8:30:68:e7:e4:64:ac:16:ca:81:0d:23: 3e:c9:17:31:6c:3d:87:44:5d:ea:0c:54:81:b3:df:ac:ba:3f: 00:bf:1f:f7:91:de:e4:f6:c0:66:34:07:fa:ee:1d:d9:75:c6: 5b:62:34:1b:64:a9:03:2d:cc:40:1f:02:b5:1d:20:61:fe:c7: 2e:e4:b7:23:01:ae:97:6e:71:e6:b8:9b:10:09:62:9c:d2:60: d4:8e:39:d9:af:e4:c1:73:ba:b8:e9:34:8e:0e:a5:84:fd:0f: c6:d1:10:cb:47:91:38:c7:ac:9a:ff:49:ab:e9:88:ef:14:bf: 90:84:08:03:01:17:6f:0b:7e:75:94:aa:d4:7a:c8:62:69:a0: 31:6d:e9:10:ac:4b:76:3b:39:0f:54:35:f6:a0:c7:f6:98:ca: 89:9e:b8:3d:1d:11:10:7f:27:38:e9:83:b6:f8:80:aa:91:49: 60:4a:a0:46 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUM2 RUVGRTJFNjI4Q0U0NjZDQzI1QzAwRjc2NUNDOEQ1MzhBOTYzMTAeFw0yNTA2MjEw MTQyMTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVEQkMxNzc0QzIxNkI2 OENCMkZCMzZERjMyNzNGNkRBMjg1NDU1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0rax7RGxd/55fSOJcwjcyqF6lNDGHMPDP9gtLzKycN/ol6NLA 4YSyOeq1Y432nBwA5hMMqBrwMzntZSS8vkmwUIx0e+NCkaEh8nAvNmZeQbTivcbP 8QyEBBKo8u1hbLU2ZQkE8KeqgsxpUXvAdu8SZVAvi3E9Bb3WNx6Kt4K6CHcZROEx +YI8GoNz4M/lgj0l8SklPeBjvl3VCDGJuzrEUwJyGB1MH0BMhuCmDBT4auYGI3c+ RAaxqnhx5yKbkIdEnWD5zQGJPkMRYf9yiqE+Ae8zRfPosAhPeXPNhf1rV+xC2YNh dyKuHSa2EsP7NPdMTlQATYWJes1Vz1jGzBWfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXbwXdMIWtoyy+zbfMnP22ihUVQUwHwYDVR0jBBgwFoAUrG7v4uYozkZswlwA 92XMjVOKljEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw Mi9yRzd2NHVZb3prWnN3bHdBOTJYTWpWT0tsakUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JHN3Y0dVlvemtac3dsd0E5MlhNalZPS2xqRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDIvckc3djR1WW96a1pz d2x3QTkyWE1qVk9LbGpFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHhllKXn/HvgIHuM7B2NgLTEJfBbgb4XJgQI+3I95Yx0OjjuVF2cT3AB9scY dmRL+68dM5byt5NB8TNDhwrh7NwnyYS2o9glNemgUPDHP7gwaOfkZKwWyoENIz7J FzFsPYdEXeoMVIGz36y6PwC/H/eR3uT2wGY0B/ruHdl1xltiNBtkqQMtzEAfArUd IGH+xy7ktyMBrpducea4mxAJYpzSYNSOOdmv5MFzurjpNI4OpYT9D8bREMtHkTjH rJr/SavpiO8Uv5CECAMBF28LfnWUqtR6yGJpoDFt6RCsS3Y7OQ9UNfagx/aYyome uD0dERB/Jzjpg7b4gKqRSWBKoEY= -----END CERTIFICATE-----Generated at Sat Jun 21 06:45:52 2025 by rpki-client