$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft File: q8wu6vrqrw1E480gBAmZ7T6LblY.mft (raw, json) Hash identifier: z/5LMtaPIIOfJckXvoKxsfxrKypsf7i5PT3Me/qGoDY= Subject key identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D Authority key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Certificate issuer: /CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Certificate serial: 82 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft Manifest number: 81 Signing time: Sat 21 Jun 2025 20:13:45 +0000 Manifest this update: Sat 21 Jun 2025 20:13:45 +0000 Manifest next update: Sun 22 Jun 2025 02:13:45 +0000 Files and hashes: 1: 8pET--HPS_iwNgKvdvhO6hUpYY8.roa (hash: 6SAZbRDpK1sENuyYvdYIHX9ysDsnTxmubEeumEfPXKI=) 2: q8wu6vrqrw1E480gBAmZ7T6LblY.crl (hash: fDFQyAfAOuVZB+Ho4wZRq11HkwZNYrkxyVJ12D5FXV4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Validity Not Before: Jun 21 20:13:45 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=37625CC0E618E351120BD6539F60DC6CF0F3184D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:21:2a:f1:4f:0b:88:c5:c9:4f:f8:1f:dc: 8d:38:b9:6c:c0:8f:70:99:ab:ca:13:f6:42:5e:68: fa:88:53:a7:89:b6:0f:97:c4:5d:ee:f2:18:74:b1: fd:95:8f:d9:97:fd:ea:cb:91:04:c0:ad:8c:dd:8d: 85:f7:3f:c9:02:11:c2:69:5b:a4:58:7d:bd:b6:a7: 81:8a:27:43:70:c6:9e:ec:6c:e2:1b:a7:91:10:83: 4c:ee:19:3c:f2:4c:a6:35:dd:a3:0a:af:88:92:20: 0f:a5:d6:bb:1a:5a:ad:ac:0a:a8:48:f8:fd:99:5b: d8:d4:3c:8d:ec:b6:a7:d7:06:f5:67:f9:d4:c4:a2: df:91:6e:58:6b:e2:ef:b0:43:66:a6:1a:1f:97:ea: eb:f7:06:6f:f6:34:79:f9:b4:29:d7:20:0b:5e:d3: bc:74:28:0c:ef:74:d6:9e:20:66:1c:6b:57:4c:d4: 24:2c:aa:2d:f4:22:9c:15:af:1b:08:2f:4f:fb:44: cc:b6:0e:3a:0b:8b:2f:80:f5:75:95:86:39:ad:29: fd:0f:57:10:50:86:ba:17:82:66:84:60:b5:8b:3d: f8:35:9d:67:04:15:ed:ac:91:72:6e:79:b7:eb:af: 0f:56:6a:ec:90:39:f0:66:8e:7c:ab:5c:35:76:b5: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D X509v3 Authority Key Identifier: keyid:AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:59:43:92:4b:ca:20:81:8b:ea:03:d3:48:48:bd:22:13:cc: 20:c4:93:9a:e8:f1:63:7e:d8:62:46:91:45:a5:11:8f:74:f2: f1:b0:5d:46:c5:0c:d6:c1:e5:72:bc:93:fa:e4:f1:50:66:bb: 50:86:b1:4e:7a:47:65:9a:10:46:1f:4d:ac:4b:ef:1f:bb:8f: 77:0c:18:0b:be:07:cb:5c:18:ef:ee:b0:64:a9:0c:a6:6e:64: 3c:b1:ab:e8:2b:63:fb:e9:e5:6d:31:38:b0:2f:ee:6b:35:1b: e4:1c:d7:64:72:95:bc:12:fd:12:52:e6:44:5f:37:a5:9a:67: 9b:02:f2:12:1d:e2:c9:f4:81:a1:52:6a:90:76:a0:f6:d0:45: 30:cb:34:5f:4a:0a:4e:49:27:aa:b4:a8:51:31:ae:fd:9e:b2: fe:9a:64:4c:6a:40:0a:84:74:f5:e2:54:fa:fc:ee:b7:04:d0: 56:fc:83:bf:84:38:ee:27:b7:7b:01:f8:e4:5f:da:33:84:79: 5f:20:3a:11:8c:22:24:c2:5e:34:17:7b:74:a3:4d:d4:bc:1c: 1a:6a:a4:cd:77:90:42:b9:68:b0:10:3a:24:a2:44:89:5c:76: e6:b9:d8:3b:95:d5:b9:ad:ad:fe:6c:b1:c6:bc:56:ec:3d:65: 5a:0f:5d:1d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD QzJFRUFGQUVBQUYwRDQ0RTNDRDIwMDQwOTk5RUQzRThCNkU1NjAeFw0yNTA2MjEy MDEzNDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM3NjI1Q0MwRTYxOEUz NTExMjBCRDY1MzlGNjBEQzZDRjBGMzE4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdXSEq8U8LiMXJT/gf3I04uWzAj3CZq8oT9kJeaPqIU6eJtg+X xF3u8hh0sf2Vj9mX/erLkQTArYzdjYX3P8kCEcJpW6RYfb22p4GKJ0Nwxp7sbOIb p5EQg0zuGTzyTKY13aMKr4iSIA+l1rsaWq2sCqhI+P2ZW9jUPI3stqfXBvVn+dTE ot+Rblhr4u+wQ2amGh+X6uv3Bm/2NHn5tCnXIAte07x0KAzvdNaeIGYca1dM1CQs qi30IpwVrxsIL0/7RMy2DjoLiy+A9XWVhjmtKf0PVxBQhroXgmaEYLWLPfg1nWcE Fe2skXJuebfrrw9WauyQOfBmjnyrXDV2tTafAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUN2JcwOYY41ESC9ZTn2DcbPDzGE0wHwYDVR0jBBgwFoAUq8wu6vrqrw1E480g BAmZ7T6LblYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Ny9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3E4d3U2dnJxcncxRTQ4MGdCQW1aN1Q2TGJsWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTcvcTh3dTZ2cnFydzFF NDgwZ0JBbVo3VDZMYmxZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADhZQ5JLyiCBi+oD00hIvSITzCDEk5ro8WN+2GJGkUWlEY908vGwXUbFDNbB 5XK8k/rk8VBmu1CGsU56R2WaEEYfTaxL7x+7j3cMGAu+B8tcGO/usGSpDKZuZDyx q+grY/vp5W0xOLAv7ms1G+Qc12RylbwS/RJS5kRfN6WaZ5sC8hId4sn0gaFSapB2 oPbQRTDLNF9KCk5JJ6q0qFExrv2esv6aZExqQAqEdPXiVPr87rcE0Fb8g7+EOO4n t3sB+ORf2jOEeV8gOhGMIiTCXjQXe3SjTdS8HBpqpM13kEK5aLAQOiSiRIlcdua5 2DuV1bmtrf5ssca8Vuw9ZVoPXR0= -----END CERTIFICATE-----Generated at Sun Jun 22 00:04:06 2025 by rpki-client