$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft File: jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft (raw, json) Hash identifier: B23+RfmGzc7+7RI8b7342kY7mX16dTiUWIJd0gHYfCA= Subject key identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 Authority key identifier: 8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D Certificate issuer: /CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Certificate serial: 0BC4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft Manifest number: 0BC4 Signing time: Sat 26 Apr 2025 09:36:57 +0000 Manifest this update: Sat 26 Apr 2025 09:36:57 +0000 Manifest next update: Sat 26 Apr 2025 15:36:57 +0000 Files and hashes: 1: jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl (hash: ree2v51+E4U+knvQqwO0x99eKevk3XWDAN1DOGRi1sc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Validity Not Before: Apr 26 09:36:57 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CDE39620232D3493A808C661D8F0441DB9B49F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:c5:81:52:c3:c3:16:cf:5d:20:16:5c:99: ba:5a:3b:ed:cf:8f:ac:8d:c7:ff:66:e4:12:18:ec: 3c:ab:b3:91:ce:a2:b7:d0:2f:6c:aa:94:d1:25:fe: ff:2b:20:8e:52:f3:c0:7c:6b:ca:6e:58:0e:5d:85: d3:ec:77:53:3d:d5:30:b5:b4:f8:30:c2:5b:88:95: 2d:4c:ac:21:8f:9d:bf:39:3a:78:56:33:3c:62:dc: ad:30:f6:a4:9f:2f:9e:f7:5a:11:33:f4:fe:0f:cd: f1:7d:d4:a2:b3:49:95:c2:26:91:79:7f:ec:cb:7f: d2:1d:1f:f9:4a:ff:f1:4d:32:93:ab:3c:a2:a6:92: 00:b6:36:a1:2f:ad:5c:c2:b5:bb:a2:56:be:b2:03: 87:29:36:1b:a1:d1:e4:b4:5d:82:b6:6b:34:ef:b1: 7b:4b:db:b8:a9:8f:e2:c0:7c:91:cb:67:4c:ae:56: e2:42:6a:cd:8d:e3:e2:97:ae:93:81:f9:3c:9d:77: 32:81:6e:16:76:a3:2f:9e:fc:6f:61:e1:2c:ed:cb: 1b:ae:52:d7:9a:e8:ae:cd:d5:50:91:57:98:0b:2b: 28:4a:2e:63:2b:cd:12:ca:2f:0a:88:c6:e8:c5:72: 4f:55:d4:ae:56:f4:8d:7e:40:f5:e0:89:06:34:fa: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 X509v3 Authority Key Identifier: keyid:8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:99:d0:3f:47:6f:00:43:e8:b7:2f:cd:70:b6:29:87:9d:a1: 5e:6f:17:21:00:2c:59:44:cd:ec:b5:80:cd:5a:ed:57:80:c3: a3:3c:16:55:e0:17:16:1a:6a:ef:0c:b6:89:11:76:09:b7:78: 86:fb:07:92:6b:bd:39:03:a6:31:ea:09:d0:dd:77:2a:74:0b: 66:ea:f1:ec:de:cf:62:a6:f2:8e:62:68:2f:47:1a:83:0b:86: 4f:04:95:74:55:b6:ad:0e:eb:1a:d9:7c:2e:c2:99:6b:1c:68: 8f:de:c0:1f:d4:36:04:87:1d:6f:92:8d:4e:13:71:31:20:ae: 61:8d:66:1b:5c:0d:fe:fe:28:c2:b9:7e:1b:92:7d:f3:c3:0d: ae:17:e1:5d:38:6b:26:9d:ad:77:1b:4d:13:65:3b:8f:ad:83: dc:c1:f5:9d:19:b5:d7:b8:fb:3b:bd:d1:a4:ec:f3:d0:91:ff: 22:b0:68:fe:aa:5a:52:b8:8d:d0:ce:2a:e1:5b:9f:46:10:0b: 19:d1:be:87:ab:b2:df:85:89:05:e7:4a:d4:29:ad:f5:17:1d: 56:23:76:1b:d3:69:3a:f6:93:91:b2:26:20:7a:c2:f8:ec:0f: 99:83:2a:5d:ac:af:e8:a9:b4:06:36:09:b6:ed:4f:f3:33:ab: f1:ed:68:a9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU4 REE1OUM4MTBGMTMyRjEyMDZFNEY3MkNFNjg2RkRFMzA1NEU2RDAeFw0yNTA0MjYw OTM2NTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENERTM5NjIwMjMyRDM0 OTNBODA4QzY2MUQ4RjA0NDFEQjlCNDlGNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHNsWBUsPDFs9dIBZcmbpaO+3Pj6yNx/9m5BIY7Dyrs5HOorfQ L2yqlNEl/v8rII5S88B8a8puWA5dhdPsd1M91TC1tPgwwluIlS1MrCGPnb85OnhW Mzxi3K0w9qSfL573WhEz9P4PzfF91KKzSZXCJpF5f+zLf9IdH/lK//FNMpOrPKKm kgC2NqEvrVzCtbuiVr6yA4cpNhuh0eS0XYK2azTvsXtL27ipj+LAfJHLZ0yuVuJC as2N4+KXrpOB+TyddzKBbhZ2oy+e/G9h4SztyxuuUtea6K7N1VCRV5gLKyhKLmMr zRLKLwqIxujFck9V1K5W9I1+QPXgiQY0+sJDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzeOWICMtNJOoCMZh2PBEHbm0n2cwHwYDVR0jBBgwFoAUjo2lnIEPEy8SBuT3 LOaG/eMFTm0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Ny9qbzJsbklFUEV5OFNCdVQzTE9hR19lTUZUbTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pvMmxuSUVQRXk4U0J1VDNMT2FHX2VNRlRtMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzcvam8ybG5JRVBFeThT QnVUM0xPYUdfZU1GVG0wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHeZ0D9HbwBD6LcvzXC2KYedoV5vFyEALFlEzey1gM1a7VeAw6M8FlXgFxYa au8MtokRdgm3eIb7B5JrvTkDpjHqCdDddyp0C2bq8ezez2Km8o5iaC9HGoMLhk8E lXRVtq0O6xrZfC7CmWscaI/ewB/UNgSHHW+SjU4TcTEgrmGNZhtcDf7+KMK5fhuS ffPDDa4X4V04ayadrXcbTRNlO4+tg9zB9Z0Ztde4+zu90aTs89CR/yKwaP6qWlK4 jdDOKuFbn0YQCxnRvoerst+FiQXnStQprfUXHVYjdhvTaTr2k5GyJiB6wvjsD5mD Kl2sr+iptAY2CbbtT/Mzq/HtaKk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:31 2025 by rpki-client