$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft File: vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json) Hash identifier: f0sjfkKiziQz/e88Jy2/5i8w8jmpioExdtvW1FrI5xg= Subject key identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 5EE0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft Manifest number: 425D Signing time: Sat 26 Apr 2025 13:11:14 +0000 Manifest this update: Sat 26 Apr 2025 13:11:14 +0000 Manifest next update: Sat 26 Apr 2025 19:11:14 +0000 Files and hashes: 1: TSY7JcOEbzPWgbE9NK4zQt1XAvY.roa (hash: aLhl2+Q8OwATqdMYpJ2RVYRINELa+dVAZvh7RXDHT3g=) 2: uVgk8t-O2k60XCEaCsMauOlrBAo.roa (hash: owHUj/RmYqUVmV7ohWesDrEdgk+fQY/BCNEPtGgDvC4=) 3: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: ae5x5CXW92upLywcFVeoU/orWpDkp/wrCehf+IOCjnc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24288 (0x5ee0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 26 13:11:14 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c: a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef: 6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d: e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06: 74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe: aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a: f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c: 74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86: 4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab: 21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c: 3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c: d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70: 45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed: 42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c: 95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce: e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4: 4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:88:04:09:85:ea:a7:ff:8f:18:ad:f0:7f:fb:1a:56:ea:9f: 85:85:0c:ff:cb:aa:71:ab:4b:24:e9:56:bf:c9:48:6d:87:89: 84:ee:9c:ba:58:60:e6:a6:08:d9:91:f2:90:3a:46:8b:7c:45: 8d:83:38:d0:5f:1c:a7:4d:2c:a0:f3:94:11:ce:0e:60:98:fc: 31:41:5f:46:5e:aa:90:91:a0:a2:e4:72:22:79:23:75:94:d9: df:0f:b8:90:b1:d1:a8:e9:64:21:23:2f:df:2a:ce:39:52:86: 0c:d0:f0:55:f4:44:e1:62:9f:73:64:7b:44:2f:d9:44:ed:9f: 02:2d:ee:e1:5f:0c:23:82:4f:dd:0c:30:a9:f2:97:f6:1e:61: 6b:e2:09:be:2b:c3:1b:40:c1:45:68:2b:cf:4c:c2:85:65:17: 79:4d:09:e7:e5:6f:b7:7c:8b:3a:a6:e7:95:3f:19:97:66:df: ca:7f:fc:fa:e7:57:e7:c1:0f:d4:cf:c9:51:95:11:63:0b:fa: 0c:fa:e2:e7:aa:97:9d:4a:89:bc:90:d4:f1:c9:d3:b8:ee:8c: 37:3f:02:7b:eb:6a:9c:28:16:c2:89:53:07:5e:fb:b2:04:0e: 71:f0:19:3f:9f:21:e5:0d:c0:32:ff:6b:56:50:d6:03:b4:46: e1:0c:4d:38 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICXuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA0MjYx MzExMTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU4OTI0NjVCMEE0RjM1 NjEzRDY5MkIzQjY4NTM2RThFQzEwRTBCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7L9Ho9iRXPO+XbdUrbKBD92Jo4hqyRWVeI5vv72/4T+WgxRZ3 rrlAbdLsXegiVk778yzSIfVM4jHeBnRYnNEsORB8iiOzTXun/qpK8GUJuVuyCdMB GFP8KvHPBO3tCet6lEqP53bYfHTj+C1SRbBX/I9d7fyrhkwa1OcktwCGfYmwKt8L qyH4tEKCze3EczTun8mELDtJxrhkRo+Cm8iA7U8FfNPgIwB9UksmEmgJJlhYcEW/ 1yZ9BX9g13l4e0kP7UJxhrP+X3vnQvpu6HaMDJWLWfuI6Upq8hK7eII2zulAUS8J LKXIbCv+YVtU5ErAzbOsYEj1vSqTCvyqrY79AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU6JJGWwpPNWE9aSs7aFNujsEOC7MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZldnRoa0RMcGxrOXFm bWozU0tOT0pFa1dPby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/iAQJheqn/48YrfB/+xpW6p+FhQz/y6pxq0sk6Va/yUhth4mE7py6WGDmpgjZ kfKQOkaLfEWNgzjQXxynTSyg85QRzg5gmPwxQV9GXqqQkaCi5HIieSN1lNnfD7iQ sdGo6WQhIy/fKs45UoYM0PBV9EThYp9zZHtEL9lE7Z8CLe7hXwwjgk/dDDCp8pf2 HmFr4gm+K8MbQMFFaCvPTMKFZRd5TQnn5W+3fIs6pueVPxmXZt/Kf/z651fnwQ/U z8lRlRFjC/oM+uLnqpedSom8kNTxydO47ow3PwJ762qcKBbCiVMHXvuyBA5x8Bk/ nyHlDcAy/2tWUNYDtEbhDE04 -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:57 2025 by rpki-client