$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft File: ldntqLoorwPp7aZMarFbbPYvoGM.mft (raw, json) Hash identifier: 7hQfBnUg8BPMvyi23Fc7I4XReVkkqWRh4KzRRg7223Y= Subject key identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 Authority key identifier: 95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 Certificate issuer: /CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Certificate serial: 03B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft Manifest number: 03B1 Signing time: Fri 20 Jun 2025 10:46:43 +0000 Manifest this update: Fri 20 Jun 2025 10:46:43 +0000 Manifest next update: Fri 20 Jun 2025 16:46:43 +0000 Files and hashes: 1: ldntqLoorwPp7aZMarFbbPYvoGM.crl (hash: Kb3W+lQFsOvxNynOWahbCB2GFKyxy6jZHTodLNuh8ag=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Validity Not Before: Jun 20 10:46:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F1422785AEB77794E677E837686C920829C22C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:1f:1b:36:2f:ba:66:78:29:1c:e0:a7:3a: 97:52:e5:09:dd:d1:91:b2:73:8a:72:5a:fc:a9:11: 97:73:c7:c1:13:86:59:6c:bd:a3:25:61:19:5c:d7: b5:44:e8:47:12:14:87:85:36:53:cd:b7:8c:5a:0a: 86:22:22:05:c5:8e:1c:9f:27:8d:d0:8a:82:f3:20: ca:3c:41:96:1d:51:34:21:07:d8:78:7a:f9:35:f9: f0:0d:4c:70:c8:71:b5:74:b6:34:d8:38:6c:88:c6: b8:48:bd:24:d3:29:c3:d7:86:b8:08:12:f8:a0:01: 3c:63:5f:36:f8:36:15:90:cb:02:62:21:8b:4e:5d: 90:cd:e8:cb:d7:7c:6f:e4:54:09:01:77:f8:bc:8a: 71:90:b1:fc:a6:ad:c1:17:d0:66:90:b7:1e:53:98: e1:d6:30:e6:60:ef:29:8c:1e:48:d6:b0:cf:53:d7: 3a:22:b5:cd:53:64:8f:76:ca:4b:21:ec:90:ce:06: cd:4b:35:e0:75:02:fd:aa:fe:22:75:36:99:ea:32: 1d:4e:04:8a:56:3a:06:14:0f:f4:d5:60:02:81:2d: 20:30:5f:c3:48:55:ed:db:e7:72:77:e6:2c:99:ef: 84:7d:e3:ba:fc:f6:c7:f9:a2:35:46:c8:65:41:76: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 X509v3 Authority Key Identifier: keyid:95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:07:cc:90:50:02:0b:df:a5:9d:a1:84:6b:42:32:c4:bc:7d: 02:3a:2e:75:b5:c0:06:86:2b:f5:ce:af:26:04:c2:3f:93:55: a2:7d:14:8b:32:83:4e:2e:2a:fc:04:a4:96:e9:99:7a:a6:8f: 20:3f:2a:10:d3:06:46:15:d9:82:fc:ed:75:28:b1:1d:1e:92: 5e:65:41:81:2c:de:a9:71:b5:e5:7a:8d:62:01:c8:0b:34:52: 9d:bd:a6:3a:47:b8:49:53:6a:72:ad:d6:6b:9e:9b:e2:a4:c8: 78:ee:37:2d:91:7d:ee:f7:b4:c2:bc:53:5b:e1:14:cf:13:75: d2:74:5a:13:cc:8e:91:36:f3:62:27:a9:8a:ee:67:7f:a2:b9: 69:04:cf:7d:8a:0d:01:85:3b:31:4b:84:35:7b:b0:23:92:f9: 22:e8:13:a4:6c:18:8e:3f:5b:29:30:3e:64:4e:3a:2c:8b:64: 66:66:a7:d9:df:45:4f:19:8a:a5:55:a6:ed:bd:6e:58:6f:ca: 99:b0:01:b2:8a:f6:4e:36:5b:7e:36:35:b0:09:97:e7:92:1c: 1c:be:45:38:24:47:d3:46:9f:3f:d6:7d:a3:11:29:ae:c9:87: 40:1f:98:12:bc:92:4c:57:e1:d2:39:96:11:32:19:33:67:2d: 36:ce:bf:ab -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTVE OUVEQThCQTI4QUYwM0U5RURBNjRDNkFCMTVCNkNGNjJGQTA2MzAeFw0yNTA2MjAx MDQ2NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYxNDIyNzg1QUVCNzc3 OTRFNjc3RTgzNzY4NkM5MjA4MjlDMjJDNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJB8bNi+6ZngpHOCnOpdS5Qnd0ZGyc4pyWvypEZdzx8EThlls vaMlYRlc17VE6EcSFIeFNlPNt4xaCoYiIgXFjhyfJ43QioLzIMo8QZYdUTQhB9h4 evk1+fANTHDIcbV0tjTYOGyIxrhIvSTTKcPXhrgIEvigATxjXzb4NhWQywJiIYtO XZDN6MvXfG/kVAkBd/i8inGQsfymrcEX0GaQtx5TmOHWMOZg7ymMHkjWsM9T1zoi tc1TZI92yksh7JDOBs1LNeB1Av2q/iJ1NpnqMh1OBIpWOgYUD/TVYAKBLSAwX8NI Ve3b53J35iyZ74R947r89sf5ojVGyGVBdp5/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8UInha63d5Tmd+g3aGySCCnCLHAwHwYDVR0jBBgwFoAUldntqLoorwPp7aZM arFbbPYvoGMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OS9sZG50cUxvb3J3UHA3YVpNYXJGYmJQWXZvR00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xkbnRxTG9vcndQcDdhWk1hckZiYlBZdm9HTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzkvbGRudHFMb29yd1Bw N2FaTWFyRmJiUFl2b0dNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABwHzJBQAgvfpZ2hhGtCMsS8fQI6LnW1wAaGK/XOryYEwj+TVaJ9FIsyg04u KvwEpJbpmXqmjyA/KhDTBkYV2YL87XUosR0ekl5lQYEs3qlxteV6jWIByAs0Up29 pjpHuElTanKt1muem+KkyHjuNy2Rfe73tMK8U1vhFM8TddJ0WhPMjpE282InqYru Z3+iuWkEz32KDQGFOzFLhDV7sCOS+SLoE6RsGI4/WykwPmROOiyLZGZmp9nfRU8Z iqVVpu29blhvypmwAbKK9k42W342NbAJl+eSHBy+RTgkR9NGnz/WfaMRKa7Jh0Af mBK8kkxX4dI5lhEyGTNnLTbOv6s= -----END CERTIFICATE-----Generated at Fri Jun 20 13:13:34 2025 by rpki-client