$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft File: 89605Z7lMyYp7F4LaGZtNuKXN2s.mft (raw, json) Hash identifier: dOuRfgUjdE9fVryNMgIeo0Hx5DoyBxvh4Da6XvsJv0E= Subject key identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 Authority key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B Certificate issuer: /CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Certificate serial: 04F6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft Manifest number: 04F6 Signing time: Sun 22 Jun 2025 11:17:07 +0000 Manifest this update: Sun 22 Jun 2025 11:17:07 +0000 Manifest next update: Sun 22 Jun 2025 17:17:07 +0000 Files and hashes: 1: 89605Z7lMyYp7F4LaGZtNuKXN2s.crl (hash: W39+VdXB6nxZ9c9Rl/cogqu0ZiQLxTPfU5mZ/tnE4Uw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1270 (0x4f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Validity Not Before: Jun 22 11:17:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=52797665E566FA8A9E8ACF2100B20A2E63FDF8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:22:b1:13:d3:08:92:e7:1f:ab:59:2f:b3: a1:ea:34:eb:d1:89:c7:1a:14:19:ec:00:38:d6:36: 20:7b:1c:77:cf:d1:60:76:50:d9:4e:84:9d:1c:c2: be:ca:bf:9a:fe:a3:af:dc:26:2f:87:5a:4c:2f:23: 1a:95:b3:31:ce:5c:69:04:ba:33:d5:cf:1a:82:e0: f2:44:9c:fc:6d:7e:a8:9c:46:1f:69:b6:3b:a0:0c: 15:9e:82:1c:71:23:fb:0c:7e:e4:95:12:bf:c0:11: 3b:56:e2:0d:f2:71:72:b0:b5:cb:4c:0c:bf:7c:42: 80:92:a8:63:cb:c0:9a:e1:62:85:35:3d:03:56:b5: ef:74:cf:d6:e3:bc:30:be:e2:f0:57:a0:49:55:74: 0a:5c:4a:d7:1c:c8:4c:24:ed:51:a6:36:1c:0c:db: a1:7c:9f:d0:d5:54:e7:26:70:b1:63:f6:4f:a9:ca: 70:0a:bb:d9:f8:d2:ee:f7:94:4c:c9:05:f1:03:34: 2a:4e:37:8e:ea:08:58:da:3d:2d:42:10:3c:5b:26: f0:2f:5c:06:cc:ca:d8:7b:4b:09:f8:5f:c7:25:fd: 5f:8a:38:50:bc:b6:c3:ff:3a:76:f6:dc:c0:41:76: b6:dc:68:54:1d:1c:46:17:ac:eb:3c:26:e7:c3:5c: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 X509v3 Authority Key Identifier: keyid:F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:1b:30:46:04:35:0b:24:60:f0:5d:47:42:99:2e:82:a6:05: 6e:40:ca:4f:01:ee:fe:ea:b3:44:44:cc:3d:d7:f5:eb:68:77: a4:16:99:c3:68:65:ab:aa:b3:62:fe:d2:ad:5e:75:e8:63:73: 3c:29:7e:39:e3:c5:6f:86:f6:05:2d:84:3a:3c:0b:43:31:b5: 6e:35:bc:40:64:6d:2e:8e:06:db:9c:69:db:ec:8f:39:4c:24: ba:da:88:61:10:b3:e0:91:25:e0:4b:ef:e1:47:e6:88:a9:7b: 97:19:b2:07:3d:c1:15:f9:95:ae:02:46:c3:ba:f0:a7:09:87: ac:a2:99:a2:31:be:c0:c9:c5:14:b2:4b:36:b8:32:47:97:61: 01:7f:a5:87:cd:d5:fe:b2:40:21:5d:f5:71:7d:f2:3e:87:1f: f3:ea:6f:5d:5b:ed:1d:d7:5a:8d:65:02:50:e8:e4:e2:67:ae: a8:6a:66:e3:27:77:ab:3f:34:3f:dc:54:e2:d3:bb:b5:80:03: 0d:0b:85:59:fa:95:7a:0d:0d:55:1d:37:f8:d3:63:7d:81:d7: 16:bd:72:23:a6:14:58:df:4c:78:bc:dc:98:48:47:d8:ec:c2: ed:12:10:ea:8d:53:e6:4e:61:82:19:32:92:e4:4c:c6:f1:6a: 77:5d:c4:99 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjNE RUI0RTU5RUU1MzMyNjI5RUM1RTBCNjg2NjZEMzZFMjk3Mzc2QjAeFw0yNTA2MjIx MTE3MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUyNzk3NjY1RTU2NkZB OEE5RThBQ0YyMTAwQjIwQTJFNjNGREY4QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpJiKxE9MIkucfq1kvs6HqNOvRiccaFBnsADjWNiB7HHfP0WB2 UNlOhJ0cwr7Kv5r+o6/cJi+HWkwvIxqVszHOXGkEujPVzxqC4PJEnPxtfqicRh9p tjugDBWeghxxI/sMfuSVEr/AETtW4g3ycXKwtctMDL98QoCSqGPLwJrhYoU1PQNW te90z9bjvDC+4vBXoElVdApcStccyEwk7VGmNhwM26F8n9DVVOcmcLFj9k+pynAK u9n40u73lEzJBfEDNCpON47qCFjaPS1CEDxbJvAvXAbMyth7Swn4X8cl/V+KOFC8 tsP/Onb23MBBdrbcaFQdHEYXrOs8JufDXGmRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUnl2ZeVm+oqeis8hALIKLmP9+LEwHwYDVR0jBBgwFoAU89605Z7lMyYp7F4L aGZtNuKXN2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OS84OTYwNVo3bE15WXA3RjRMYUdadE51S1hOMnMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzg5NjA1WjdsTXlZcDdGNExhR1p0TnVLWE4ycy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTkvODk2MDVaN2xNeVlw N0Y0TGFHWnROdUtYTjJzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKAbMEYENQskYPBdR0KZLoKmBW5Ayk8B7v7qs0REzD3X9etod6QWmcNoZauq s2L+0q1edehjczwpfjnjxW+G9gUthDo8C0MxtW41vEBkbS6OBtucadvsjzlMJLra iGEQs+CRJeBL7+FH5oipe5cZsgc9wRX5la4CRsO68KcJh6yimaIxvsDJxRSySza4 MkeXYQF/pYfN1f6yQCFd9XF98j6HH/Pqb11b7R3XWo1lAlDo5OJnrqhqZuMnd6s/ ND/cVOLTu7WAAw0LhVn6lXoNDVUdN/jTY32B1xa9ciOmFFjfTHi83JhIR9jswu0S EOqNU+ZOYYIZMpLkTMbxanddxJk= -----END CERTIFICATE-----Generated at Sun Jun 22 15:00:08 2025 by rpki-client