$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft File: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft (raw, json) Hash identifier: 5xx1+yKAnLsqYRs8Se1SSXNf0uX+at1ZfVjPGbz/NGk= Subject key identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 Authority key identifier: 60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 Certificate issuer: /CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Certificate serial: 0DDC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft Manifest number: 0DDC Signing time: Sun 22 Jun 2025 01:12:33 +0000 Manifest this update: Sun 22 Jun 2025 01:12:33 +0000 Manifest next update: Sun 22 Jun 2025 07:12:33 +0000 Files and hashes: 1: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl (hash: 1eH95Hj3V++5RG8lijJCU6aObgyNqchXfcFlHvI6nis=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3548 (0xddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Validity Not Before: Jun 22 01:12:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4417D6FBFFB0DC025A87456F40A5FEAD98D1BAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:b3:11:0c:da:e4:3c:97:50:8b:7c:6d:03: b5:6c:ca:8e:44:3c:8b:55:d7:96:cc:6a:28:e2:a2: ea:14:25:db:38:84:83:92:2d:26:f8:6e:0f:9e:4a: c5:17:05:51:fa:ed:c5:11:aa:0b:f5:ec:d6:26:64: f6:37:df:19:04:18:2b:87:35:b9:76:6c:78:52:44: de:96:23:8e:da:82:8a:a8:63:60:1a:5f:e3:f6:c4: 5e:da:ab:fa:c2:c7:60:89:fb:29:f0:38:90:ff:e3: df:02:6b:c6:f0:c3:fe:ee:a5:68:95:ad:58:8d:ba: db:a5:03:34:b1:d6:74:e4:c1:30:6c:07:b7:6f:29: b0:60:91:70:a1:8a:ce:89:e8:39:a9:26:3a:98:f7: 87:63:6f:d6:b7:42:38:a5:e6:72:4f:f5:52:07:4e: 85:5a:2e:6a:a5:1a:7f:e5:4f:7a:94:61:be:22:52: b3:ec:86:fe:50:fa:c0:18:5a:a5:27:95:8f:10:f4: 19:fd:18:2b:8c:0b:91:70:fb:d6:59:77:b1:c7:7c: c0:57:2e:b8:2c:8f:4b:46:04:ad:46:90:9a:73:dc: 0d:7d:41:a7:f0:0d:8a:6c:50:89:5f:b4:36:3a:8e: 6a:52:89:ac:46:b5:10:bd:0f:7e:7b:38:4f:df:52: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 X509v3 Authority Key Identifier: keyid:60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:99:bd:a2:4e:da:b4:00:5d:24:ad:d5:be:a8:b2:17:d3:5e: 9d:12:65:40:43:cb:de:ad:75:e0:c7:9a:71:4b:6a:bb:ad:85: 3f:72:88:7a:19:96:82:0b:5c:e5:03:dc:2f:a4:30:24:cc:e8: da:10:52:04:a0:20:3f:e4:c4:e6:94:b1:65:c9:84:c2:24:3e: 00:0d:5d:ff:0a:40:d0:61:9d:4e:26:7e:e4:b5:ea:ce:d9:45: 59:75:26:8c:53:f3:3f:61:04:4a:dc:68:7b:67:2a:17:61:c2: 2a:fd:33:e1:71:f7:66:24:80:1e:4b:04:c7:48:f3:9e:09:dd: 79:1e:ff:ce:18:24:5f:ca:05:8c:29:9b:a9:2d:64:57:e2:15: fa:cb:72:66:9a:7a:ba:de:39:c9:40:20:fc:52:3f:64:63:5f: 67:7b:d6:ce:c5:87:e1:dd:38:92:f1:30:2d:0d:8b:90:4f:b2: db:36:4e:9e:0b:e4:5c:a4:9a:e6:88:cd:29:15:6a:fc:96:41: e2:de:59:af:30:fb:3f:8b:31:96:8c:50:f8:a8:e6:52:53:31: 7d:15:a1:1e:0c:30:75:0f:4f:a1:66:c6:70:ae:c2:92:4e:c3: 92:48:d5:f9:19:61:ec:e2:2a:bf:88:59:1d:01:85:a4:f7:09: aa:a0:58:5a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjBC MkQ4RjkwRDIxMDVDOEVCODc2ODU2QUE5NzVCNTNDNDMyNjk5NjAeFw0yNTA2MjIw MTEyMzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ0MTdENkZCRkZCMERD MDI1QTg3NDU2RjQwQTVGRUFEOThEMUJBRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk07MRDNrkPJdQi3xtA7Vsyo5EPItV15bMaijiouoUJds4hIOS LSb4bg+eSsUXBVH67cURqgv17NYmZPY33xkEGCuHNbl2bHhSRN6WI47agoqoY2Aa X+P2xF7aq/rCx2CJ+ynwOJD/498Ca8bww/7upWiVrViNutulAzSx1nTkwTBsB7dv KbBgkXChis6J6DmpJjqY94djb9a3Qjil5nJP9VIHToVaLmqlGn/lT3qUYb4iUrPs hv5Q+sAYWqUnlY8Q9Bn9GCuMC5Fw+9ZZd7HHfMBXLrgsj0tGBK1GkJpz3A19Qafw DYpsUIlftDY6jmpSiaxGtRC9D357OE/fUoIxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQURBfW+/+w3AJah0VvQKX+rZjRuuEwHwYDVR0jBBgwFoAUYLLY+Q0hBcjrh2hW qpdbU8QyaZYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy Ny9ZTExZLVEwaEJjanJoMmhXcXBkYlU4UXlhWlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1lMTFktUTBoQmNqcmgyaFdxcGRiVThReWFaWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjcvWUxMWS1RMGhCY2py aDJoV3FwZGJVOFF5YVpZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMCZvaJO2rQAXSSt1b6oshfTXp0SZUBDy96tdeDHmnFLaruthT9yiHoZloIL XOUD3C+kMCTM6NoQUgSgID/kxOaUsWXJhMIkPgANXf8KQNBhnU4mfuS16s7ZRVl1 JoxT8z9hBErcaHtnKhdhwir9M+Fx92YkgB5LBMdI854J3Xke/84YJF/KBYwpm6kt ZFfiFfrLcmaaerreOclAIPxSP2RjX2d71s7Fh+HdOJLxMC0Ni5BPsts2Tp4L5Fyk muaIzSkVavyWQeLeWa8w+z+LMZaMUPio5lJTMX0VoR4MMHUPT6FmxnCuwpJOw5JI 1fkZYeziKr+IWR0BhaT3CaqgWFo= -----END CERTIFICATE-----Generated at Sun Jun 22 07:12:27 2025 by rpki-client