$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft File: jADfzi10-W1xE_7xW2z4zSGqJm4.mft (raw, json) Hash identifier: oTMdT1MGlTiUrzlwPuvVeLO5r6diinnxoBLTVyAUmTo= Subject key identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D Authority key identifier: 8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E Certificate issuer: /CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Certificate serial: 1CED Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft Manifest number: 1CED Signing time: Sat 26 Apr 2025 06:36:58 +0000 Manifest this update: Sat 26 Apr 2025 06:36:58 +0000 Manifest next update: Sat 26 Apr 2025 12:36:58 +0000 Files and hashes: 1: jADfzi10-W1xE_7xW2z4zSGqJm4.crl (hash: G6GS2EUlJGR6BntP4tfXzoVw0JUdbE0ju0WEks+Ya4A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7405 (0x1ced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Validity Not Before: Apr 26 06:36:58 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2DBDCE5D957056DAF5725D4EF0B8D9FD9FA84F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:78:49:97:ff:78:07:ae:27:3d:db:c3:d3: 5f:d9:dc:5f:b7:bd:f8:d4:f2:0e:89:b1:8e:be:53: c2:b0:5a:a3:5d:61:4e:b4:01:1b:2f:7d:5e:6e:7f: b7:31:62:eb:a4:c6:5e:4d:47:60:9d:80:d4:e9:36: 24:32:5e:3d:4d:23:94:c2:c6:a0:47:9d:f5:5d:d9: 13:c0:e2:81:5b:56:1a:ff:92:4e:ec:fc:b8:4f:4e: a7:52:de:f8:79:47:1c:29:c1:77:1b:0b:93:71:65: 41:7f:38:0e:af:e3:96:67:a4:cd:50:db:e5:5e:97: 90:22:5d:6a:23:69:8e:72:35:27:ff:8b:ed:ea:33: 71:cc:aa:96:e7:cc:18:43:05:8b:4c:ac:15:47:99: ef:c2:46:61:88:a2:58:33:38:40:de:59:05:f8:f0: fd:99:dd:08:a6:2c:ce:23:b5:f3:a3:45:f5:3c:60: 53:29:71:e5:5b:26:30:50:51:25:e2:5f:10:db:0a: ca:cb:26:9a:59:26:c7:c3:c6:48:3b:1f:1f:cd:48: 6b:0e:c2:1b:6e:48:71:ba:3c:7e:c3:c3:bc:42:38: cb:d3:2b:86:2d:75:7e:0f:5f:74:bf:5d:d6:00:61: fb:3e:30:05:7d:86:71:a0:b4:ec:f4:de:60:da:d1: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D X509v3 Authority Key Identifier: keyid:8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f2:0e:87:2b:08:e1:f4:de:d9:38:b7:a7:0b:63:26:52:11: 78:bb:65:d6:36:d7:fc:87:48:1b:32:ba:4e:91:53:8b:03:a1: 46:76:d4:df:d4:a9:37:37:bc:bb:d6:f6:77:2a:a7:60:f3:18: 65:af:43:30:73:c6:b6:45:11:dd:fd:9e:53:28:22:a3:06:85: 27:e0:f9:2a:59:1c:2f:3a:8a:0b:c6:c3:2c:9c:cd:ee:44:93: 71:d2:53:ce:fe:ef:be:ba:70:78:88:58:8b:77:1d:86:de:12: ec:12:c9:e7:9d:d2:b9:55:00:dd:fd:a0:96:5f:83:37:e1:cf: 1c:cb:8d:0c:25:73:c2:1c:06:58:c3:85:b5:1f:76:a2:d8:2e: 6f:11:7d:77:66:1d:73:c1:e8:4f:a3:00:f7:e4:a2:6c:e3:12: 70:4f:c0:b7:22:b5:01:db:2a:d7:46:93:98:0a:6f:6a:b7:bf: 5a:b6:af:4a:94:94:0a:9e:63:29:3d:29:41:98:69:db:07:44: 20:70:5a:12:73:6c:4d:ac:86:0c:8f:40:4d:02:b5:4a:75:2b: 9f:12:fb:cc:fa:b6:8b:2e:db:20:17:cf:4b:07:09:f4:e8:80: fb:46:7f:bd:25:4b:c7:fe:cc:3f:d2:f5:af:e3:90:bc:1d:f9: 1d:cd:4c:ac -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMw MERGQ0UyRDc0Rjk2RDcxMTNGRUYxNUI2Q0Y4Q0QyMUFBMjY2RTAeFw0yNTA0MjYw NjM2NThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJEQkRDRTVEOTU3MDU2 REFGNTcyNUQ0RUYwQjhEOUZEOUZBODRGM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV4nhJl/94B64nPdvD01/Z3F+3vfjU8g6JsY6+U8KwWqNdYU60 ARsvfV5uf7cxYuukxl5NR2CdgNTpNiQyXj1NI5TCxqBHnfVd2RPA4oFbVhr/kk7s /LhPTqdS3vh5RxwpwXcbC5NxZUF/OA6v45ZnpM1Q2+Vel5AiXWojaY5yNSf/i+3q M3HMqpbnzBhDBYtMrBVHme/CRmGIolgzOEDeWQX48P2Z3QimLM4jtfOjRfU8YFMp ceVbJjBQUSXiXxDbCsrLJppZJsfDxkg7Hx/NSGsOwhtuSHG6PH7Dw7xCOMvTK4Yt dX4PX3S/XdYAYfs+MAV9hnGgtOz03mDa0Ut5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQULb3OXZVwVtr1cl1O8LjZ/Z+oTz0wHwYDVR0jBBgwFoAUjADfzi10+W1xE/7x W2z4zSGqJm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OC9qQURmemkxMC1XMXhFXzd4VzJ6NHpTR3FKbTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pBRGZ6aTEwLVcxeEVfN3hXMno0elNHcUptNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTgvakFEZnppMTAtVzF4 RV83eFcyejR6U0dxSm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFbyDocrCOH03tk4t6cLYyZSEXi7ZdY21/yHSBsyuk6RU4sDoUZ21N/UqTc3 vLvW9ncqp2DzGGWvQzBzxrZFEd39nlMoIqMGhSfg+SpZHC86igvGwyycze5Ek3HS U87+7766cHiIWIt3HYbeEuwSyeed0rlVAN39oJZfgzfhzxzLjQwlc8IcBljDhbUf dqLYLm8RfXdmHXPB6E+jAPfkomzjEnBPwLcitQHbKtdGk5gKb2q3v1q2r0qUlAqe Yyk9KUGYadsHRCBwWhJzbE2shgyPQE0CtUp1K58S+8z6tosu2yAXz0sHCfTogPtG f70lS8f+zD/S9a/jkLwd+R3NTKw= -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:58 2025 by rpki-client