$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft File: rvnRXVUWBDHU9wnoqjo61bzM1uU.mft (raw, json) Hash identifier: DVrrgGspJ7R6PncyaHMgSoFX15iwg6DnEfV8sGdZaHw= Subject key identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 Authority key identifier: AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 Certificate issuer: /CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Certificate serial: 15A9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft Manifest number: 15A8 Signing time: Sat 21 Jun 2025 11:14:36 +0000 Manifest this update: Sat 21 Jun 2025 11:14:36 +0000 Manifest next update: Sat 21 Jun 2025 17:14:36 +0000 Files and hashes: 1: rvnRXVUWBDHU9wnoqjo61bzM1uU.crl (hash: 5ixg3i8trAWq1yW9oNb0ejCzSjLd7EGOtJ0KfAn54yw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5545 (0x15a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Validity Not Before: Jun 21 11:14:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=0B8E0425F3DFB4FC5ADADEF1A84A31CC41970B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:4b:56:fa:21:51:7e:b9:ed:95:52:ab:dd: 85:90:94:18:ef:68:f7:fd:2e:8f:8c:93:ac:71:fa: 95:e7:7b:21:d5:3d:3f:3d:5f:af:f9:5a:04:d4:c4: 0e:4b:f8:b4:73:5d:cb:49:71:70:20:75:7d:a6:37: f6:9c:c8:2d:2c:dc:75:40:20:71:a0:f9:08:73:62: 46:bb:f7:c8:2a:e9:45:46:52:4d:20:bb:a5:fa:af: 78:48:b6:5c:73:a7:89:7f:7a:da:51:5f:c4:e7:60: 2a:74:2b:74:cd:88:8e:6b:4d:75:98:ad:24:22:75: 09:27:8d:70:18:ab:e3:58:31:7f:8a:c0:bb:49:68: 0d:e1:32:fd:29:2f:33:f9:0b:31:36:db:67:93:cc: 00:07:3b:07:6d:42:52:b0:63:e5:a1:c3:58:f2:59: ea:ed:f5:51:1f:86:b1:bf:e3:1d:25:9a:a0:2a:29: 33:8f:41:b0:19:63:29:69:a8:24:13:08:34:8f:41: 35:8f:65:ad:93:3a:77:7d:83:22:93:7f:64:d8:15: ac:35:25:fe:b9:04:2a:c7:9f:c8:ea:3f:e5:d0:0e: 7d:92:9c:2e:97:bf:1d:f6:07:de:f1:ae:33:63:7e: 45:4c:cd:60:a9:48:a7:8e:42:58:01:e9:a2:37:d9: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 X509v3 Authority Key Identifier: keyid:AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:85:33:70:20:73:68:6b:b4:b2:ae:d3:a7:06:a7:cf:03:46: 08:6a:39:01:91:97:61:37:9f:65:ae:ff:00:79:0d:a1:20:8f: 1a:18:31:41:fa:9d:1c:17:5a:7d:ff:29:5b:97:33:15:74:73: 9b:73:49:d3:8e:d8:3b:e7:d5:11:7d:b0:64:8c:79:af:8c:e9: fc:0c:91:ad:92:56:39:bf:0b:bd:de:d6:e8:3f:95:1e:67:88: cc:32:f5:6f:b0:6d:31:f6:a5:23:a1:47:86:96:e8:a4:f7:3b: ae:35:b7:1d:44:2a:7d:32:fb:92:60:c9:bc:80:f0:31:50:6d: 98:56:48:a5:cb:ed:82:79:77:5a:72:1b:91:4e:26:35:65:15: 6c:b3:f3:fa:15:f7:ad:cc:50:26:94:62:43:17:63:52:9d:b3: cc:6d:a9:38:de:19:f3:cb:e0:c7:18:76:c7:d3:bc:9d:bf:88: e0:8a:16:71:9f:85:63:35:50:b4:7e:f4:c9:29:ad:32:f1:5f: 9b:90:9d:99:da:1f:9f:57:eb:30:01:44:5a:68:3c:dd:6d:0b: f2:37:ec:6c:f3:bb:ff:1f:3c:a2:d1:c1:d3:76:97:84:a4:6b: 36:22:ab:bf:38:ff:be:50:9a:95:8b:98:d8:c0:d4:e9:e8:f7: f0:97:9d:fe -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVG OUQxNUQ1NTE2MDQzMUQ0RjcwOUU4QUEzQTNBRDVCQ0NDRDZFNTAeFw0yNTA2MjEx MTE0MzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBCOEUwNDI1RjNERkI0 RkM1QURBREVGMUE4NEEzMUNDNDE5NzBCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfqktW+iFRfrntlVKr3YWQlBjvaPf9Lo+Mk6xx+pXneyHVPT89 X6/5WgTUxA5L+LRzXctJcXAgdX2mN/acyC0s3HVAIHGg+QhzYka798gq6UVGUk0g u6X6r3hItlxzp4l/etpRX8TnYCp0K3TNiI5rTXWYrSQidQknjXAYq+NYMX+KwLtJ aA3hMv0pLzP5CzE222eTzAAHOwdtQlKwY+Whw1jyWert9VEfhrG/4x0lmqAqKTOP QbAZYylpqCQTCDSPQTWPZa2TOnd9gyKTf2TYFaw1Jf65BCrHn8jqP+XQDn2SnC6X vx32B97xrjNjfkVMzWCpSKeOQlgB6aI32VlTAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUC44EJfPftPxa2t7xqEoxzEGXC2AwHwYDVR0jBBgwFoAUrvnRXVUWBDHU9wno qjo61bzM1uUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEw L3J2blJYVlVXQkRIVTl3bm9xam82MWJ6TTF1VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcnZuUlhWVVdCREhVOXdub3FqbzYxYnpNMXVVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEwL3J2blJYVlVXQkRIVTl3 bm9xam82MWJ6TTF1VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCyhTNwIHNoa7SyrtOnBqfPA0YIajkBkZdhN59lrv8AeQ2hII8aGDFB+p0cF1p9 /ylblzMVdHObc0nTjtg759URfbBkjHmvjOn8DJGtklY5vwu93tboP5UeZ4jMMvVv sG0x9qUjoUeGluik9zuuNbcdRCp9MvuSYMm8gPAxUG2YVkily+2CeXdachuRTiY1 ZRVss/P6FfetzFAmlGJDF2NSnbPMbak43hnzy+DHGHbH07ydv4jgihZxn4VjNVC0 fvTJKa0y8V+bkJ2Z2h+fV+swAURaaDzdbQvyN+xs87v/Hzyi0cHTdpeEpGs2Iqu/ OP++UJqVi5jYwNTp6Pfwl53+ -----END CERTIFICATE-----Generated at Sat Jun 21 16:48:11 2025 by rpki-client