$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft File: T04zJwO54ZxdoBGkjEsnbpsp11w.mft (raw, json) Hash identifier: C3G/rusjgkjZRED5+YRfg/7jWSoG17+mvANzDereid4= Subject key identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 Authority key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C Certificate issuer: /CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Certificate serial: 34EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft Manifest number: 34EA Signing time: Sat 26 Apr 2025 13:11:17 +0000 Manifest this update: Sat 26 Apr 2025 13:11:17 +0000 Manifest next update: Sat 26 Apr 2025 19:11:17 +0000 Files and hashes: 1: T04zJwO54ZxdoBGkjEsnbpsp11w.crl (hash: jy9xyPHPu3aTyw1rDIkO9cwEwE3vjHyocGY8daf161o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Validity Not Before: Apr 26 13:11:17 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=470D131A7541923CA9A1A4C76A5788ADFD240CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:41:3b:cc:83:cc:71:a2:fc:27:62:37:91: ee:ce:92:88:cc:36:35:05:5d:e9:49:34:1a:8d:c0: 55:1f:c3:63:38:e4:56:b7:80:7a:b8:e4:0f:d7:00: 60:61:32:c1:b4:27:22:0d:3c:c4:4b:99:32:17:12: 56:19:47:d1:11:01:8a:98:c5:db:9f:b6:b9:b4:fb: 45:68:aa:4b:32:4b:e9:f8:a2:3f:79:86:ad:19:15: 73:3f:42:7e:99:5a:e3:ea:e4:9e:cb:30:17:dc:ef: 3f:41:52:03:b1:bc:c5:4e:27:7e:1e:53:80:9b:6f: a8:2f:13:4c:b7:52:16:a6:cf:8f:06:9c:50:b3:07: a3:b9:10:33:1c:69:53:51:39:93:25:8b:89:63:32: 34:c9:2e:ed:f1:04:87:0f:5c:d6:7e:fd:9d:1a:f8: 0b:cb:7d:7b:5b:7b:74:17:c5:c6:9a:0c:91:af:3d: 4a:49:12:7b:f0:7b:81:fe:8d:d0:c1:84:9b:c9:ae: f5:61:5d:16:ab:73:48:03:32:39:34:eb:7a:54:a0: 68:73:1b:59:33:20:28:c2:70:d6:0c:aa:6d:b0:98: 02:cd:eb:f5:17:cc:cc:28:c9:7b:a2:32:39:fb:b5: 32:d9:7a:07:cd:53:91:88:41:f2:00:e6:a6:85:28: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 X509v3 Authority Key Identifier: keyid:4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ab:a4:59:27:c5:02:da:79:4d:c3:7c:7a:4e:35:23:e1:7e: 7c:17:fd:17:57:34:1f:05:a1:71:03:80:a9:4c:e2:bd:d3:b0: 7d:5d:07:83:1d:94:cb:19:d0:83:41:6f:63:6b:0a:0f:3d:70: a8:fb:7d:b6:6c:e3:08:55:d9:9f:72:15:dc:bb:07:72:69:5f: 51:16:07:7e:e2:61:8b:5a:29:eb:a1:86:3a:33:af:d2:4b:95: df:4b:90:70:e7:98:a3:87:3b:29:f6:1d:e2:62:64:73:10:c8: b0:90:02:d5:6b:db:e6:63:83:31:80:17:04:5a:d5:96:65:f5: 1e:9e:7b:59:1c:01:13:eb:1e:88:04:f5:a6:72:67:27:45:b5: 3e:9d:d5:57:12:54:f8:aa:b0:79:61:11:90:8e:08:0f:d0:b8: c4:19:93:f3:7c:82:ba:c7:5b:94:e8:61:37:10:6a:91:ac:3c: 7f:6e:37:58:e1:7a:c1:c8:03:0a:65:38:86:50:c6:9b:87:2d: 9a:20:f4:9d:6e:81:2b:db:2d:37:aa:87:ef:4b:bb:4f:e7:81: 65:b9:bf:60:19:2f:3b:b1:4a:2a:ae:01:60:46:39:a5:0b:96: 48:4d:88:68:82:2c:8c:3b:02:da:ef:19:98:1c:57:71:27:62: a8:dd:c2:f7 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICNOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEY0 RTMzMjcwM0I5RTE5QzVEQTAxMUE0OEM0QjI3NkU5QjI5RDc1QzAeFw0yNTA0MjYx MzExMTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ3MEQxMzFBNzU0MTky M0NBOUExQTRDNzZBNTc4OEFERkQyNDBDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQbEE7zIPMcaL8J2I3ke7OkojMNjUFXelJNBqNwFUfw2M45Fa3 gHq45A/XAGBhMsG0JyINPMRLmTIXElYZR9ERAYqYxduftrm0+0VoqksyS+n4oj95 hq0ZFXM/Qn6ZWuPq5J7LMBfc7z9BUgOxvMVOJ34eU4Cbb6gvE0y3Uhamz48GnFCz B6O5EDMcaVNROZMli4ljMjTJLu3xBIcPXNZ+/Z0a+AvLfXtbe3QXxcaaDJGvPUpJ Envwe4H+jdDBhJvJrvVhXRarc0gDMjk063pUoGhzG1kzICjCcNYMqm2wmALN6/UX zMwoyXuiMjn7tTLZegfNU5GIQfIA5qaFKJYdAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURw0TGnVBkjypoaTHaleIrf0kDKcwHwYDVR0jBBgwFoAUT04zJwO54ZxdoBGk jEsnbpsp11wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4 L1QwNHpKd081NFp4ZG9CR2tqRXNuYnBzcDExdy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVDA0ekp3TzU0Wnhkb0JHa2pFc25icHNwMTF3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4L1QwNHpKd081NFp4ZG9C R2tqRXNuYnBzcDExdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxq6RZJ8UC2nlNw3x6TjUj4X58F/0XVzQfBaFxA4CpTOK907B9XQeDHZTLGdCD QW9jawoPPXCo+322bOMIVdmfchXcuwdyaV9RFgd+4mGLWinroYY6M6/SS5XfS5Bw 55ijhzsp9h3iYmRzEMiwkALVa9vmY4MxgBcEWtWWZfUenntZHAET6x6IBPWmcmcn RbU+ndVXElT4qrB5YRGQjggP0LjEGZPzfIK6x1uU6GE3EGqRrDx/bjdY4XrByAMK ZTiGUMabhy2aIPSdboEr2y03qofvS7tP54Flub9gGS87sUoqrgFgRjmlC5ZITYho giyMOwLa7xmYHFdxJ2Ko3cL3 -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:43 2025 by rpki-client