$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft File: RHMR0DbVD1TEQW-41oIgp8uWgZk.mft (raw, json) Hash identifier: b44kxoyL/doA6I0QPm2QsyI/2Sm2cwmikV2eGbIwpFg= Subject key identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD Authority key identifier: 44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 Certificate issuer: /CN=447311D036D50F54C4416FB8D68220A7CB968199 Certificate serial: 0DAC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft Manifest number: 0DAC Signing time: Sat 26 Apr 2025 11:07:06 +0000 Manifest this update: Sat 26 Apr 2025 11:07:06 +0000 Manifest next update: Sat 26 Apr 2025 17:07:06 +0000 Files and hashes: 1: RHMR0DbVD1TEQW-41oIgp8uWgZk.crl (hash: 00dlLOLgEZ2UuNSRyTQlhH9e3v0kjIXKE5L5hBqk1bM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447311D036D50F54C4416FB8D68220A7CB968199 Validity Not Before: Apr 26 11:07:06 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E87AE688BDC7A10FDD5E9B3706E050B1F5ACABCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:b5:20:11:08:e9:94:a4:b3:1b:10:e3:3b: 8c:9b:f3:3c:66:be:c4:8c:4c:8f:32:3d:75:bf:40: 7b:bf:65:97:b4:a5:fe:86:a0:df:27:cd:91:ff:04: 80:9d:7b:92:1a:d2:53:3d:27:c4:5d:a3:5c:c3:5c: 09:da:07:ba:5a:0d:d5:1e:a4:6c:fd:17:f2:a3:54: d7:10:0c:f5:45:bd:d6:fd:89:c3:14:99:b0:96:26: bc:f2:71:99:3c:9a:25:fd:6e:3a:9f:15:5b:01:e4: f7:2c:71:0b:3b:9c:a5:e1:28:15:63:3d:3f:61:bd: 99:0c:65:f7:ea:a6:2c:32:c6:9d:ab:8c:6c:12:6b: 77:72:c5:92:9e:23:aa:85:b5:09:6f:7d:e2:b6:66: 82:64:e6:c8:d5:71:b8:db:e6:7a:ee:92:72:48:cc: 75:03:dc:86:79:a6:05:67:84:18:21:37:5e:9e:c6: fa:3b:a9:a0:c7:79:33:d5:c7:75:d6:11:4c:2e:45: 14:55:6e:95:9f:eb:2f:c8:99:ec:42:7b:89:51:79: b9:4c:8b:46:ff:73:f2:d0:7f:f8:9b:b8:2c:17:2d: 19:62:83:96:ac:c5:0c:ea:5b:04:bd:e1:b1:b2:7c: 6d:82:3a:c6:23:3d:6e:4f:20:11:17:4f:05:e1:7a: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD X509v3 Authority Key Identifier: keyid:44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:56:96:fe:f3:d8:dc:d6:79:60:92:4e:d4:19:7d:eb:b8:58: ef:0c:30:91:f9:6a:5c:59:a8:65:78:f6:25:b6:2d:89:dd:9b: b0:28:37:f1:75:18:57:df:b4:93:4f:61:ef:9b:69:b6:53:08: 16:de:5f:21:f8:40:de:fd:a1:9b:fd:82:7b:dc:c3:8a:82:a1: c4:cd:a9:2a:7b:aa:e3:60:4b:79:bb:b5:08:a2:a5:79:a7:a3: b7:9d:55:97:1d:ad:57:a1:72:bc:94:26:37:08:2e:71:94:8d: 0f:14:b5:f5:26:7c:f8:49:7a:0b:fa:3b:82:e7:70:5f:3c:b3: 11:08:b2:fd:8e:60:51:cb:c9:51:56:3e:a4:dc:17:72:33:3f: 9a:f8:2c:fc:6b:e9:c5:3f:57:46:41:4e:fd:27:2a:35:ad:22: 21:76:cb:7e:79:36:f2:52:ce:e3:0b:01:d4:d3:98:a2:0c:ed: 2c:67:15:ec:f7:fd:8d:c1:87:6c:d6:11:13:02:dd:7e:07:27: 66:2f:3d:e9:ad:a9:d5:ad:ea:9f:cc:4e:3e:69:aa:9d:14:fe: d0:d0:28:ca:ef:5c:29:8e:11:48:3f:10:72:86:c0:77:12:1e: e0:25:30:47:63:4b:af:0b:e8:7a:21:bc:a3:80:43:74:98:97: 3e:d4:3d:0e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ3 MzExRDAzNkQ1MEY1NEM0NDE2RkI4RDY4MjIwQTdDQjk2ODE5OTAeFw0yNTA0MjYx MTA3MDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU4N0FFNjg4QkRDN0Ex MEZERDVFOUIzNzA2RTA1MEIxRjVBQ0FCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmULUgEQjplKSzGxDjO4yb8zxmvsSMTI8yPXW/QHu/ZZe0pf6G oN8nzZH/BICde5Ia0lM9J8Rdo1zDXAnaB7paDdUepGz9F/KjVNcQDPVFvdb9icMU mbCWJrzycZk8miX9bjqfFVsB5PcscQs7nKXhKBVjPT9hvZkMZffqpiwyxp2rjGwS a3dyxZKeI6qFtQlvfeK2ZoJk5sjVcbjb5nruknJIzHUD3IZ5pgVnhBghN16exvo7 qaDHeTPVx3XWEUwuRRRVbpWf6y/ImexCe4lReblMi0b/c/LQf/ibuCwXLRlig5as xQzqWwS94bGyfG2COsYjPW5PIBEXTwXhehJPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6HrmiL3HoQ/dXps3BuBQsfWsq80wHwYDVR0jBBgwFoAURHMR0DbVD1TEQW+4 1oIgp8uWgZkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx OS9SSE1SMERiVkQxVEVRVy00MW9JZ3A4dVdnWmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JITVIwRGJWRDFURVFXLTQxb0lncDh1V2daay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvUkhNUjBEYlZEMVRF UVctNDFvSWdwOHVXZ1prLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAANWlv7z2NzWeWCSTtQZfeu4WO8MMJH5alxZqGV49iW2LYndm7AoN/F1GFff tJNPYe+babZTCBbeXyH4QN79oZv9gnvcw4qCocTNqSp7quNgS3m7tQiipXmno7ed VZcdrVehcryUJjcILnGUjQ8UtfUmfPhJegv6O4LncF88sxEIsv2OYFHLyVFWPqTc F3IzP5r4LPxr6cU/V0ZBTv0nKjWtIiF2y355NvJSzuMLAdTTmKIM7SxnFez3/Y3B h2zWERMC3X4HJ2YvPemtqdWt6p/MTj5pqp0U/tDQKMrvXCmOEUg/EHKGwHcSHuAl MEdjS68L6HohvKOAQ3SYlz7UPQ4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:41 2025 by rpki-client