$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft File: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft (raw, json) Hash identifier: F6SY5qSl6rXp2nidHSeWQY9nYJrAdSb+9p/m041OFbQ= Subject key identifier: 3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85 Authority key identifier: 48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F Certificate issuer: /CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F Certificate serial: 0A0C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft Manifest number: 0A0C Signing time: Sat 26 Apr 2025 09:36:35 +0000 Manifest this update: Sat 26 Apr 2025 09:36:35 +0000 Manifest next update: Sat 26 Apr 2025 15:36:35 +0000 Files and hashes: 1: SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl (hash: WySJNbJ1cXuOQKkPIcLauuPNfTosy3zRfW5srWGZtoI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2572 (0xa0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48E48AFAF1F8994A667566CF5FD364FA75B0686F Validity Not Before: Apr 26 09:36:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3E57938859E187A2C451D166422106DB45821085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:ef:9a:86:f7:ef:22:38:0b:68:89:27:3e: 83:99:5a:37:75:00:79:34:33:93:4a:ed:6c:85:53: ca:31:28:da:8b:e0:e1:7a:ae:0a:76:f2:47:a5:79: 0e:8e:5c:15:3c:cd:96:0c:65:ca:2a:d8:bc:ee:a4: 11:fb:e5:d1:33:94:31:d7:af:1c:64:f7:f7:81:06: 88:6c:9e:4a:59:8e:82:14:b1:a9:8a:2f:14:fd:2a: 0e:b6:aa:fc:48:51:e0:55:c1:2a:70:e7:ca:f5:77: 6c:0e:b9:9a:e2:fc:cf:59:4c:4b:66:c8:41:67:3c: e5:18:9d:65:cd:da:04:00:d1:6f:4d:64:0a:44:ef: 3b:e4:d2:70:b6:98:36:a0:0c:fd:ac:2c:bd:73:c1: aa:3a:45:6d:3c:63:6d:de:e6:1f:77:9e:94:62:00: ea:05:da:02:72:e2:ca:9e:bf:a6:08:51:f6:7a:0d: 09:06:1a:66:54:53:4e:38:f2:f8:65:46:f0:0b:ad: ea:4d:c3:fa:a2:52:78:ee:a8:ab:24:78:e9:90:9b: f9:44:1e:7e:fa:1b:35:e7:32:7b:1c:1e:a1:e9:76: d1:ee:a1:5a:13:98:8e:3a:d1:97:82:5d:11:52:f1: de:d7:b5:ff:8b:3a:7c:3d:f7:30:23:54:c9:ac:60: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:93:88:59:E1:87:A2:C4:51:D1:66:42:21:06:DB:45:82:10:85 X509v3 Authority Key Identifier: keyid:48:E4:8A:FA:F1:F8:99:4A:66:75:66:CF:5F:D3:64:FA:75:B0:68:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3245/SOSK-vH4mUpmdWbPX9Nk-nWwaG8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:59:28:c9:58:99:19:42:ec:82:cb:42:f4:5f:05:c5:a7:95: 1e:09:2d:75:6c:99:d7:11:96:7c:41:af:83:a4:6e:fd:fd:a5: f3:43:a7:ae:09:7d:77:23:47:7e:4f:7c:e5:eb:bf:cb:c9:80: 5a:90:06:4b:cb:bd:81:a6:38:db:71:6b:25:0d:c1:e0:bb:8c: 44:42:7c:d2:b7:bc:8f:7d:d6:ae:e3:6c:23:3b:5c:8b:82:59: 7a:a0:1f:8e:c2:8c:36:d5:4f:43:15:58:fc:b4:0b:8d:e1:0b: f9:28:ce:7f:7e:1b:45:22:59:ec:88:97:02:a0:4c:1a:d1:40: 8f:09:8c:37:7e:16:a3:fb:a5:69:89:1d:2c:ff:9c:05:fd:09: e6:a4:85:65:3a:c8:cb:1e:2c:e0:00:7b:ac:83:0f:7b:03:07: d4:15:23:4a:e3:f5:66:f5:2c:d9:ec:a5:da:d1:04:ef:b8:09: c2:1b:8a:16:f6:94:df:ba:65:ee:a2:79:05:8c:d7:e6:cc:54: d9:e3:3b:fc:af:27:7c:7d:7d:b8:07:c1:c2:ea:1f:c0:54:ef: dd:92:da:4d:30:3a:a9:61:13:5c:52:91:7f:ac:a4:fe:f5:c2: 9e:bf:d2:74:34:6b:9c:bf:d7:8e:1f:44:10:2b:47:5b:27:16: a5:de:ab:b1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDhF NDhBRkFGMUY4OTk0QTY2NzU2NkNGNUZEMzY0RkE3NUIwNjg2RjAeFw0yNTA0MjYw OTM2MzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNFNTc5Mzg4NTlFMTg3 QTJDNDUxRDE2NjQyMjEwNkRCNDU4MjEwODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX7e+ahvfvIjgLaIknPoOZWjd1AHk0M5NK7WyFU8oxKNqL4OF6 rgp28keleQ6OXBU8zZYMZcoq2LzupBH75dEzlDHXrxxk9/eBBohsnkpZjoIUsamK LxT9Kg62qvxIUeBVwSpw58r1d2wOuZri/M9ZTEtmyEFnPOUYnWXN2gQA0W9NZApE 7zvk0nC2mDagDP2sLL1zwao6RW08Y23e5h93npRiAOoF2gJy4sqev6YIUfZ6DQkG GmZUU0448vhlRvALrepNw/qiUnjuqKskeOmQm/lEHn76GzXnMnscHqHpdtHuoVoT mI460ZeCXRFS8d7Xtf+LOnw99zAjVMmsYLZBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPleTiFnhh6LEUdFmQiEG20WCEIUwHwYDVR0jBBgwFoAUSOSK+vH4mUpmdWbP X9Nk+nWwaG8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 NS9TT1NLLXZING1VcG1kV2JQWDlOay1uV3dhRzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NPU0stdkg0bVVwbWRXYlBYOU5rLW5Xd2FHOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDUvU09TSy12SDRtVXBt ZFdiUFg5Tmstbld3YUc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJRZKMlYmRlC7ILLQvRfBcWnlR4JLXVsmdcRlnxBr4Okbv39pfNDp64JfXcj R35PfOXrv8vJgFqQBkvLvYGmONtxayUNweC7jERCfNK3vI991q7jbCM7XIuCWXqg H47CjDbVT0MVWPy0C43hC/kozn9+G0UiWeyIlwKgTBrRQI8JjDd+FqP7pWmJHSz/ nAX9CeakhWU6yMseLOAAe6yDD3sDB9QVI0rj9Wb1LNnspdrRBO+4CcIbihb2lN+6 Ze6ieQWM1+bMVNnjO/yvJ3x9fbgHwcLqH8BU792S2k0wOqlhE1xSkX+spP71wp6/ 0nQ0a5y/144fRBArR1snFqXeq7E= -----END CERTIFICATE-----Generated at Sat Apr 26 13:47:06 2025 by rpki-client