$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft File: nK_iVscKcA-tbifoO3QusmjjtdE.mft (raw, json) Hash identifier: KHweePJoXNPd6QqQIJgQmejR5mIm3raDvT2Np136aMQ= Subject key identifier: 17:91:07:6E:4D:36:68:45:2F:30:E8:69:CF:7D:E4:95:D5:C3:06:9F Authority key identifier: 9C:AF:E2:56:C7:0A:70:0F:AD:6E:27:E8:3B:74:2E:B2:68:E3:B5:D1 Certificate issuer: /CN=9CAFE256C70A700FAD6E27E83B742EB268E3B5D1 Certificate serial: 0C5F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft Manifest number: 0C5F Signing time: Sat 26 Apr 2025 08:39:38 +0000 Manifest this update: Sat 26 Apr 2025 08:39:38 +0000 Manifest next update: Sat 26 Apr 2025 14:39:38 +0000 Files and hashes: 1: nK_iVscKcA-tbifoO3QusmjjtdE.crl (hash: usXVMR3HZbpqL7hbA0ZHREhxVPqvJmE2ob0vmPxe4GY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CAFE256C70A700FAD6E27E83B742EB268E3B5D1 Validity Not Before: Apr 26 08:39:38 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1791076E4D3668452F30E869CF7DE495D5C3069F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:32:c3:cb:82:c9:3e:35:3c:8b:e7:17:d5: b3:2d:ec:d1:f2:4f:7d:36:96:5f:49:ca:d7:42:4b: 0c:ff:8a:1f:85:5f:4f:b3:56:01:d2:2f:27:f3:c7: 62:94:e8:14:af:ab:03:1b:83:f4:94:32:9e:b1:d8: 69:23:9a:e4:23:80:9b:ae:a9:1c:61:45:06:0a:1b: 1f:60:09:26:0a:92:b0:3f:6c:9a:85:13:c6:d8:6e: fc:dc:62:6a:64:8b:42:98:c5:d0:2e:b8:40:0c:d7: 17:9a:8b:53:27:1c:49:99:a7:1d:a0:9b:64:96:2a: 34:de:ff:12:94:02:17:42:28:20:fe:79:69:1c:e6: 52:c3:2e:53:bf:9d:7e:c3:49:17:3e:56:d4:b5:85: b8:48:0b:73:3d:07:1c:d8:ec:43:91:b0:57:af:6e: 15:ff:aa:b2:f5:8b:42:ef:52:7c:3a:2b:0a:89:25: 8b:39:02:5c:0d:8d:db:1b:9d:d5:9c:98:02:9f:9e: 42:0f:0e:56:41:c2:37:a9:af:1a:22:85:42:b6:05: db:73:0c:a4:1a:3c:95:55:87:1d:83:2c:a4:e6:83: c4:ed:d4:cc:2f:0b:8c:44:41:93:c6:14:48:5d:dd: 32:5c:8b:c9:ff:d9:b7:c5:27:56:64:79:42:2b:af: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:07:6E:4D:36:68:45:2F:30:E8:69:CF:7D:E4:95:D5:C3:06:9F X509v3 Authority Key Identifier: keyid:9C:AF:E2:56:C7:0A:70:0F:AD:6E:27:E8:3B:74:2E:B2:68:E3:B5:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:54:89:d5:61:2c:5a:56:75:48:96:62:d1:05:9f:45:c6: 99:22:95:42:b2:cc:17:82:de:5b:6d:3a:cd:76:19:1a:6d:52: 43:d6:d1:60:38:db:85:45:33:81:3f:9c:73:99:42:41:a2:9e: 42:a6:cf:d8:c1:e5:9b:c6:4d:0c:da:fe:43:27:db:f3:36:3f: 70:64:c6:69:ce:78:16:47:a6:1e:72:38:09:07:e2:3a:d5:4f: e3:8d:70:34:ee:aa:ad:9a:27:c3:33:36:07:2f:19:d0:3f:ac: 54:7c:57:e6:c4:8b:7e:19:35:5e:82:da:15:5b:43:88:76:ad: 9f:1a:7d:46:ca:5a:99:59:6d:7d:d8:76:9e:6b:67:4a:78:cf: 71:5c:b8:8f:10:c9:5a:6e:5e:8b:27:49:34:4c:04:0b:b9:9b: 45:02:ce:e3:1d:a2:3d:a0:78:63:6d:cd:ed:27:4b:b0:69:03: 05:9a:6e:d7:76:32:b1:74:55:b6:3f:d7:ab:36:30:8e:cc:9e: c6:f6:f2:93:4b:61:6c:5e:1d:f7:04:24:78:dd:4b:21:21:c7: fe:b0:19:c1:38:7d:f1:3a:d0:a6:63:0d:ac:1f:60:cf:9b:35: f1:f7:af:26:5c:a4:32:69:ce:6e:b8:29:59:ee:d9:3d:d7:b7: 70:b8:a0:da -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUNB RkUyNTZDNzBBNzAwRkFENkUyN0U4M0I3NDJFQjI2OEUzQjVEMTAeFw0yNTA0MjYw ODM5MzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDE3OTEwNzZFNEQzNjY4 NDUyRjMwRTg2OUNGN0RFNDk1RDVDMzA2OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTfzLDy4LJPjU8i+cX1bMt7NHyT302ll9JytdCSwz/ih+FX0+z VgHSLyfzx2KU6BSvqwMbg/SUMp6x2GkjmuQjgJuuqRxhRQYKGx9gCSYKkrA/bJqF E8bYbvzcYmpki0KYxdAuuEAM1xeai1MnHEmZpx2gm2SWKjTe/xKUAhdCKCD+eWkc 5lLDLlO/nX7DSRc+VtS1hbhIC3M9BxzY7EORsFevbhX/qrL1i0LvUnw6KwqJJYs5 AlwNjdsbndWcmAKfnkIPDlZBwjeprxoihUK2BdtzDKQaPJVVhx2DLKTmg8Tt1Mwv C4xEQZPGFEhd3TJci8n/2bfFJ1ZkeUIrr81NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUF5EHbk02aEUvMOhpz33kldXDBp8wHwYDVR0jBBgwFoAUnK/iVscKcA+tbifo O3QusmjjtdEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz My9uS19pVnNjS2NBLXRiaWZvTzNRdXNtamp0ZEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25LX2lWc2NLY0EtdGJpZm9PM1F1c21qanRkRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzMvbktfaVZzY0tjQS10 Ymlmb08zUXVzbWpqdGRFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAH1VInVYSxaVnVIlmLRBZ9FxpkilUKyzBeC3lttOs12GRptUkPW0WA424VF M4E/nHOZQkGinkKmz9jB5ZvGTQza/kMn2/M2P3BkxmnOeBZHph5yOAkH4jrVT+ON cDTuqq2aJ8MzNgcvGdA/rFR8V+bEi34ZNV6C2hVbQ4h2rZ8afUbKWplZbX3Ydp5r Z0p4z3FcuI8QyVpuXosnSTRMBAu5m0UCzuMdoj2geGNtze0nS7BpAwWabtd2MrF0 VbY/16s2MI7Mnsb28pNLYWxeHfcEJHjdSyEhx/6wGcE4ffE60KZjDawfYM+bNfH3 ryZcpDJpzm64KVnu2T3Xt3C4oNo= -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:49 2025 by rpki-client