$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft File: BFagwwe9oIjxq3j2p-wFemB5Yy4.mft (raw, json) Hash identifier: 3+T2W+3CFBoPmT7aEkfVJbxF147gNfzDKxD87gjdQos= Subject key identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 Authority key identifier: 04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E Certificate issuer: /CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Certificate serial: 32D6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft Manifest number: 32D6 Signing time: Sun 22 Jun 2025 00:41:00 +0000 Manifest this update: Sun 22 Jun 2025 00:41:00 +0000 Manifest next update: Sun 22 Jun 2025 06:41:00 +0000 Files and hashes: 1: BFagwwe9oIjxq3j2p-wFemB5Yy4.crl (hash: mMMCcHr0bfXijoJO+/x2qeKg7yJhpDMM83VbT4srzgU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13014 (0x32d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Validity Not Before: Jun 22 00:41:00 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=458891FA790C06BC3506F01EC58C2286F412A8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:bc:c9:e8:e6:04:bb:64:b8:68:bb:18:11: 8b:8d:7e:fc:53:d0:c1:e4:bb:57:e3:e0:48:ec:3a: 3d:fb:a6:04:d4:97:f3:f3:9c:be:f8:19:0e:60:7a: 56:bb:35:09:d7:90:56:0d:db:4b:0b:de:8d:98:83: af:fc:0f:80:17:f2:13:72:5a:5e:34:02:c5:7d:c9: 97:81:89:9d:43:8a:8f:51:13:34:e0:1a:8e:94:dc: 8c:12:4f:6c:1e:f1:2d:c2:7e:5f:62:88:40:96:c4: 93:5e:bb:4b:9b:08:ce:36:da:15:6b:40:d3:b0:38: 1d:52:78:09:1f:87:df:1e:0c:27:e1:fa:75:b8:07: b1:2a:2e:19:cf:80:28:b4:24:f8:bc:56:5b:cb:06: d7:64:27:0f:6b:fa:05:ed:94:2e:a8:94:3c:d7:fe: 0c:21:30:53:a3:07:c6:5a:36:48:d3:ca:81:fd:49: 2c:88:93:b5:9e:11:3f:f6:a1:cd:bf:27:71:0c:23: e7:23:f2:f6:ff:4b:50:77:17:23:ab:40:c5:5e:6f: dd:5b:0e:8f:a8:84:a8:2a:cf:9e:b5:b3:ba:62:61: f2:17:3e:00:9a:d2:82:a9:2a:a6:bf:5f:0c:72:30: d6:0e:a7:33:18:fe:aa:ff:8c:38:42:54:2f:b3:af: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 X509v3 Authority Key Identifier: keyid:04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d9:e9:6d:e3:87:4d:16:0e:87:43:e4:49:36:f1:a4:3e:4f: bb:73:88:a5:f3:5f:92:e3:49:f7:ca:17:6e:8d:2e:16:4a:96: 26:70:66:8c:4d:4e:7d:98:62:30:69:75:9d:62:ff:b0:a6:8a: 85:a9:28:61:82:8d:cf:9d:30:87:e8:17:be:31:52:a1:96:dd: be:3c:3c:2c:57:8d:a0:84:b8:32:18:de:93:98:73:ca:83:79: 6d:cf:a1:3f:41:ed:33:b2:31:35:4a:dc:c2:45:e5:7b:cf:12: 9c:aa:71:c7:6e:8a:14:9d:5c:a4:a4:57:c9:e1:6c:9e:01:b2: ae:09:1f:bc:2d:49:02:aa:16:05:a2:3b:2b:1b:e7:13:c7:5d: e5:9e:9c:e6:77:bc:1d:75:bc:d8:d3:14:59:97:89:03:fc:c7: 43:41:e8:38:7a:38:04:7e:da:8b:bc:21:cb:0f:19:8b:7f:3a: ed:44:ab:7a:6e:1a:c1:dd:48:5f:89:d5:70:3a:6a:03:cf:bf: ee:0a:64:09:ad:f7:a6:2b:ca:1f:c7:96:ab:ea:e7:57:79:17: 0d:3e:0e:f6:9e:88:e7:24:39:12:2f:81:1e:19:0c:b4:84:9b: 22:ff:7f:d5:bf:17:03:0d:4a:12:85:bb:4d:0d:5e:41:dd:8a: 4b:00:b4:9a -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICMtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ1 NkEwQzMwN0JEQTA4OEYxQUI3OEY2QTdFQzA1N0E2MDc5NjMyRTAeFw0yNTA2MjIw MDQxMDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ1ODg5MUZBNzkwQzA2 QkMzNTA2RjAxRUM1OEMyMjg2RjQxMkE4QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVvbzJ6OYEu2S4aLsYEYuNfvxT0MHku1fj4EjsOj37pgTUl/Pz nL74GQ5gela7NQnXkFYN20sL3o2Yg6/8D4AX8hNyWl40AsV9yZeBiZ1Dio9REzTg Go6U3IwST2we8S3Cfl9iiECWxJNeu0ubCM422hVrQNOwOB1SeAkfh98eDCfh+nW4 B7EqLhnPgCi0JPi8VlvLBtdkJw9r+gXtlC6olDzX/gwhMFOjB8ZaNkjTyoH9SSyI k7WeET/2oc2/J3EMI+cj8vb/S1B3FyOrQMVeb91bDo+ohKgqz561s7piYfIXPgCa 0oKpKqa/XwxyMNYOpzMY/qr/jDhCVC+zr7L/AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQURYiR+nkMBrw1BvAexYwihvQSqKMwHwYDVR0jBBgwFoAUBFagwwe9oIjxq3j2 p+wFemB5Yy4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzcv QkZhZ3d3ZTlvSWp4cTNqMnAtd0ZlbUI1WXk0LmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9CRmFnd3dlOW9JanhxM2oycC13RmVtQjVZeTQuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ny9CRmFnd3dlOW9JanhxM2oy cC13RmVtQjVZeTQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA P9npbeOHTRYOh0PkSTbxpD5Pu3OIpfNfkuNJ98oXbo0uFkqWJnBmjE1OfZhiMGl1 nWL/sKaKhakoYYKNz50wh+gXvjFSoZbdvjw8LFeNoIS4Mhjek5hzyoN5bc+hP0Ht M7IxNUrcwkXle88SnKpxx26KFJ1cpKRXyeFsngGyrgkfvC1JAqoWBaI7KxvnE8dd 5Z6c5ne8HXW82NMUWZeJA/zHQ0HoOHo4BH7ai7whyw8Zi3867USrem4awd1IX4nV cDpqA8+/7gpkCa33pivKH8eWq+rnV3kXDT4O9p6I5yQ5Ei+BHhkMtISbIv9/1b8X Aw1KEoW7TQ1eQd2KSwC0mg== -----END CERTIFICATE-----Generated at Sun Jun 22 05:21:08 2025 by rpki-client