$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft File: v53ECbEbmTO6Vq39mHrqjUQseeY.mft (raw, json) Hash identifier: hs+BxX0GD5L+P3z5UVU9dQJnpX9HgQwZ0ISESTUxkSk= Subject key identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E Authority key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 Certificate issuer: /CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Certificate serial: 021E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft Manifest number: 021E Signing time: Sun 22 Jun 2025 08:11:46 +0000 Manifest this update: Sun 22 Jun 2025 08:11:46 +0000 Manifest next update: Sun 22 Jun 2025 14:11:46 +0000 Files and hashes: 1: v53ECbEbmTO6Vq39mHrqjUQseeY.crl (hash: 6tZIe1emCtdOxRGceM8o59P0JW113ubIrFGTNcVKu04=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 14:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Validity Not Before: Jun 22 08:11:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F8E22E50F93E415F3459D2358118CB2C26310B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:77:2d:29:68:98:00:29:fe:22:7e:7d:b9: 3a:e9:2b:47:d5:25:b3:7f:94:ee:92:e0:3d:94:40: 25:7f:40:5d:2e:bb:c1:fa:cd:e2:64:93:ee:a0:1d: 21:33:4e:76:b5:7e:71:6c:39:77:d8:56:9b:1a:3a: ac:e1:95:97:b5:d7:9f:c4:04:05:c6:d8:6d:46:e5: b1:85:ef:64:e5:f8:2d:1e:00:b4:79:cb:c3:86:73: 0a:05:36:dd:c5:67:41:83:03:df:ef:fe:9e:14:e7: 1d:d0:a3:50:3d:77:a7:ca:73:d8:53:48:71:d5:76: a0:dd:b9:cb:6a:82:db:3b:82:c7:33:8d:b6:42:2c: cb:05:ca:e4:95:b7:9f:fd:64:a4:7b:d9:dc:21:5b: ee:0e:b2:d8:0c:81:b5:98:55:41:90:b2:cd:d4:35: 68:1b:5b:38:63:03:b8:5b:0c:a3:ba:e3:94:fd:c8: ae:81:69:50:99:9c:b9:cd:7f:28:14:d6:b0:60:9a: 9f:25:35:77:fa:63:91:5c:5c:cf:a3:25:97:2f:0e: 5d:f1:8a:68:49:0b:94:89:74:0e:c7:ce:77:9c:8a: 84:14:46:4e:56:ee:f9:e4:4b:1c:d1:3c:df:94:e4: 8b:c8:ce:ae:af:7b:80:34:ff:6e:8a:de:a2:b3:10: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E X509v3 Authority Key Identifier: keyid:BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:78:0c:9b:c0:07:a6:0f:55:9d:de:7e:a8:8a:67:40:d8:d4: 08:09:5a:53:6c:e9:ce:d9:99:30:58:4a:d8:e5:cc:b3:f8:5c: 9b:b8:61:a5:2b:b4:e2:ff:9e:0e:1e:bb:78:da:fd:ff:8a:8e: bf:ce:05:90:92:c3:c5:48:c7:54:43:89:6c:21:18:85:e2:95: 6c:0b:ea:56:69:c3:c3:1e:c1:01:67:5a:ac:6e:78:93:1f:f4: 92:2d:13:ae:99:6d:1a:30:8d:fa:9f:53:e5:e6:b5:c4:8e:66: c0:6e:6b:25:00:58:96:e2:dd:69:79:23:e4:d3:0f:6d:fc:41: 49:90:50:11:c9:fe:10:9c:37:f4:56:8c:5e:1b:11:a4:a3:db: 23:14:83:3b:65:5d:72:b7:b3:ce:8a:19:9f:f2:f1:02:ab:b4: b5:de:1b:5a:df:63:ee:ce:ca:02:4f:7c:1b:09:5b:df:00:1d: 91:1b:e0:95:ab:be:81:5d:e9:c8:6e:ca:3e:77:6f:54:97:cb: 97:1e:c1:32:f8:39:dc:1c:7c:62:7c:57:43:f7:99:38:29:cb: 78:ff:e6:e4:24:20:a1:aa:30:39:24:5c:e7:6e:0c:f9:d5:2d: 9e:f2:27:49:45:02:fa:d2:96:0d:2f:2d:06:c8:b3:65:2d:99: 9f:22:7e:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY5 REM0MDlCMTFCOTkzM0JBNTZBREZEOTg3QUVBOEQ0NDJDNzlFNjAeFw0yNTA2MjIw ODExNDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEY4RTIyRTUwRjkzRTQx NUYzNDU5RDIzNTgxMThDQjJDMjYzMTBCOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPz3ctKWiYACn+In59uTrpK0fVJbN/lO6S4D2UQCV/QF0uu8H6 zeJkk+6gHSEzTna1fnFsOXfYVpsaOqzhlZe115/EBAXG2G1G5bGF72Tl+C0eALR5 y8OGcwoFNt3FZ0GDA9/v/p4U5x3Qo1A9d6fKc9hTSHHVdqDductqgts7gsczjbZC LMsFyuSVt5/9ZKR72dwhW+4OstgMgbWYVUGQss3UNWgbWzhjA7hbDKO645T9yK6B aVCZnLnNfygU1rBgmp8lNXf6Y5FcXM+jJZcvDl3ximhJC5SJdA7HznecioQURk5W 7vnkSxzRPN+U5IvIzq6ve4A0/26K3qKzEOf3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+OIuUPk+QV80WdI1gRjLLCYxC44wHwYDVR0jBBgwFoAUv53ECbEbmTO6Vq39 mHrqjUQseeYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 Ni92NTNFQ2JFYm1UTzZWcTM5bUhycWpVUXNlZVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Y1M0VDYkVibVRPNlZxMzltSHJxalVRc2VlWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTYvdjUzRUNiRWJtVE82 VnEzOW1IcnFqVVFzZWVZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFB4DJvAB6YPVZ3efqiKZ0DY1AgJWlNs6c7ZmTBYStjlzLP4XJu4YaUrtOL/ ng4eu3ja/f+Kjr/OBZCSw8VIx1RDiWwhGIXilWwL6lZpw8MewQFnWqxueJMf9JIt E66ZbRowjfqfU+XmtcSOZsBuayUAWJbi3Wl5I+TTD238QUmQUBHJ/hCcN/RWjF4b EaSj2yMUgztlXXK3s86KGZ/y8QKrtLXeG1rfY+7OygJPfBsJW98AHZEb4JWrvoFd 6chuyj53b1SXy5cewTL4OdwcfGJ8V0P3mTgpy3j/5uQkIKGqMDkkXOduDPnVLZ7y J0lFAvrSlg0vLQbIs2UtmZ8ifgA= -----END CERTIFICATE-----Generated at Sun Jun 22 10:50:54 2025 by rpki-client