$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft File: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft (raw, json) Hash identifier: VPLU9Wt/yZsG/BgD41K8eBCSPO8Xrh2pDXcA9Ofadtw= Subject key identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 Authority key identifier: 66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF Certificate issuer: /CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Certificate serial: 0400 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft Manifest number: 0400 Signing time: Fri 20 Jun 2025 15:45:18 +0000 Manifest this update: Fri 20 Jun 2025 15:45:18 +0000 Manifest next update: Fri 20 Jun 2025 21:45:18 +0000 Files and hashes: 1: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl (hash: +EeBty/t1pIO5gtjMMHlHHgw3gmIh0RIiPUYaZ2nI1I=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 21:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Validity Not Before: Jun 20 15:45:18 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F0DCD3E56B07333F5EAD5D479ED734FE6D5AB0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f2:74:a3:57:8d:a7:30:b6:5d:54:f2:76:3c: 75:bc:97:b6:8e:5d:b3:36:fd:e9:56:18:78:96:73: d8:ff:17:78:38:2d:df:e3:72:28:58:4a:da:e9:ea: 9a:95:a1:b3:92:d1:35:e8:3f:13:90:b8:5f:b4:ca: 48:5a:e8:9d:51:8b:d6:93:fc:7a:50:db:32:4a:ed: cf:6b:64:ff:80:3c:35:c0:18:c4:0a:8f:89:ed:c9: c3:48:f2:9c:e1:fc:da:ff:83:2d:fc:2a:fd:c1:44: 18:e1:88:a5:33:ff:cb:89:e7:0e:24:d0:28:f9:89: 4b:6d:10:f6:7e:10:b8:e6:c1:fe:15:cb:e0:d8:ee: 9c:c1:95:47:af:6a:b5:5a:6f:60:3d:c7:02:c0:d0: f1:df:6b:c8:4f:02:f9:17:d4:ee:e5:d4:1b:45:0c: 28:35:38:d9:18:79:63:13:d0:5c:c5:bf:0e:df:4b: 15:1f:71:fb:68:43:dc:77:6b:e1:c8:f2:e9:a3:cf: ea:4b:40:da:e0:c4:d5:37:3a:36:c0:c5:cd:b1:e5: 79:30:6e:94:b3:86:33:e0:f5:cb:74:28:3c:07:24: d6:49:c5:cc:ec:51:b5:e2:98:6e:12:e0:24:ed:3d: 46:93:41:37:88:14:aa:c9:09:cd:72:f1:5f:7c:ae: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 X509v3 Authority Key Identifier: keyid:66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ef:02:9a:c6:3d:cd:07:f3:6e:03:65:50:13:4e:a7:28:cc: 9e:68:af:98:fc:6f:28:66:57:29:e4:96:8c:02:69:a0:57:41: a4:6e:d9:af:39:ee:5f:08:ff:56:44:73:16:1d:52:2e:ad:9a: 04:9a:79:c3:43:7c:d3:e1:f4:01:1c:34:fb:5d:bd:3d:1c:18: 27:cf:3a:90:ba:f5:59:15:d6:05:d2:91:d2:36:5c:f3:b1:96: 18:19:5b:a8:34:36:58:80:a9:bd:29:14:16:8a:4f:2c:a5:85: b1:aa:36:35:01:35:8b:e7:1e:2e:c7:a0:21:3c:e8:09:a0:68: 7d:02:44:51:ff:ee:e7:df:6d:60:fa:9f:ae:36:d9:03:32:0a: 9c:5d:f3:58:af:0b:03:f9:8e:1e:76:71:40:ee:46:a5:8a:f6: 0d:d8:96:a3:d7:b7:1c:74:f6:e0:ae:d6:29:6d:27:af:df:01: 46:49:0f:15:86:7b:42:1a:dc:cc:c7:ac:94:2c:f6:6f:7c:e7: 1e:c3:19:fb:d8:1e:a1:12:da:f7:43:e3:70:b5:81:d4:fc:9c: 2c:c7:bc:59:90:49:21:6a:5c:90:b2:9c:f8:d6:cb:99:7d:de: 4e:77:6d:d5:92:c4:c0:61:78:94:57:76:d7:11:e0:29:c6:56: 62:bc:9a:c1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY3 NkE2NjQyQTRGNjAxNkJDMDcxREY2MjZCMkJFQkNCNDNCNUVDRjAeFw0yNTA2MjAx NTQ1MThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYwRENEM0U1NkIwNzMz M0Y1RUFENUQ0NzlFRDczNEZFNkQ1QUIwQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD08nSjV42nMLZdVPJ2PHW8l7aOXbM2/elWGHiWc9j/F3g4Ld/j cihYStrp6pqVobOS0TXoPxOQuF+0ykha6J1Ri9aT/HpQ2zJK7c9rZP+APDXAGMQK j4ntycNI8pzh/Nr/gy38Kv3BRBjhiKUz/8uJ5w4k0Cj5iUttEPZ+ELjmwf4Vy+DY 7pzBlUevarVab2A9xwLA0PHfa8hPAvkX1O7l1BtFDCg1ONkYeWMT0FzFvw7fSxUf cftoQ9x3a+HI8umjz+pLQNrgxNU3OjbAxc2x5XkwbpSzhjPg9ct0KDwHJNZJxczs UbXimG4S4CTtPUaTQTeIFKrJCc1y8V98rimxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8NzT5WsHMz9erV1Hntc0/m1asLMwHwYDVR0jBBgwFoAUZnamZCpPYBa8Bx32 JrK+vLQ7Xs8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MS9abmFtWkNwUFlCYThCeDMySnJLLXZMUTdYczguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1puYW1aQ3BQWUJhOEJ4MzJKckstdkxRN1hzOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvWm5hbVpDcFBZQmE4 QngzMkpySy12TFE3WHM4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJDvAprGPc0H824DZVATTqcozJ5or5j8byhmVynklowCaaBXQaRu2a857l8I /1ZEcxYdUi6tmgSaecNDfNPh9AEcNPtdvT0cGCfPOpC69VkV1gXSkdI2XPOxlhgZ W6g0NliAqb0pFBaKTyylhbGqNjUBNYvnHi7HoCE86AmgaH0CRFH/7uffbWD6n642 2QMyCpxd81ivCwP5jh52cUDuRqWK9g3YlqPXtxx09uCu1iltJ6/fAUZJDxWGe0Ia 3MzHrJQs9m985x7DGfvYHqES2vdD43C1gdT8nCzHvFmQSSFqXJCynPjWy5l93k53 bdWSxMBheJRXdtcR4CnGVmK8msE= -----END CERTIFICATE-----Generated at Fri Jun 20 21:01:15 2025 by rpki-client