$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft File: 3-pN9aKB625y06MUKkU2QAzMSM0.mft (raw, json) Hash identifier: +lZGbKZAHoJCUwQP1BjM6Ca8HiUJSu6KDAEAjbiif3Y= Subject key identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E Authority key identifier: DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD Certificate issuer: /CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Certificate serial: 0772 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft Manifest number: 0772 Signing time: Sat 26 Apr 2025 08:36:24 +0000 Manifest this update: Sat 26 Apr 2025 08:36:24 +0000 Manifest next update: Sat 26 Apr 2025 14:36:24 +0000 Files and hashes: 1: 3-pN9aKB625y06MUKkU2QAzMSM0.crl (hash: VHqFTlJkfoHi6Q0W79mNrwAPjD4qEfrXgPZ3rW+Qfw0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1906 (0x772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Validity Not Before: Apr 26 08:36:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=32E7383A6FE497B476EE736359087E501952A06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:18:54:3e:fb:1f:c3:7e:42:12:df:f3:83: 9d:b3:44:25:05:bd:a8:ab:bd:0c:cf:dc:94:de:fd: 7b:8c:e9:64:f0:1b:eb:4f:2b:f2:76:d5:d6:dd:d2: 7d:24:2e:86:41:06:a2:9e:e7:71:08:c6:d2:53:7d: 39:bd:71:79:7d:98:21:bd:48:8f:c6:f3:8c:79:cf: 00:ed:1b:b3:00:db:93:68:bb:b1:1b:e4:7e:db:0a: f7:3c:74:37:29:0d:a0:7c:73:ba:36:4b:08:89:2b: a1:73:b5:f5:08:7e:06:b1:f8:be:6c:59:d6:58:9f: 9b:e4:b8:c7:49:87:72:52:02:16:ed:e8:cc:11:ff: bd:e2:b6:89:f8:71:cf:d1:56:90:89:58:9a:bc:8a: a5:0d:49:26:97:a8:ef:ff:c8:8d:40:a6:23:5e:37: b3:30:21:7c:9c:9e:64:21:44:66:fa:b4:88:d5:36: d5:e8:d9:f2:9e:58:29:7d:61:fa:aa:ee:ca:3b:32: 71:6a:51:c6:d6:15:db:a3:16:3a:9d:7d:d1:10:0d: d4:7a:dd:fc:cc:46:87:89:fb:40:9b:49:ce:93:18: b4:1b:6e:ae:07:23:8a:27:80:09:44:af:5e:4c:ec: b7:d6:2e:26:9a:0d:39:a7:59:46:75:74:40:c4:05: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E X509v3 Authority Key Identifier: keyid:DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d4:a8:01:8a:f7:1e:77:07:2f:e9:6f:05:63:0f:2c:9f:ac: ab:02:d8:2a:3f:19:3c:c7:bf:09:ba:3d:91:f7:ce:e3:9a:24: c7:f8:33:a4:aa:c4:90:a7:98:bf:76:fe:4a:9f:db:34:5c:34: 83:9a:95:da:06:10:c6:49:59:1e:b3:51:84:58:76:80:0b:d0: 4b:8d:46:30:f1:19:34:8f:7d:7f:6f:ad:91:30:10:1c:72:79: 9e:7a:7a:7a:bd:6a:c9:ad:3f:bb:a2:16:c5:a9:83:d9:06:0b: 39:a1:b4:f4:36:41:b3:bf:03:71:be:2b:74:78:45:9c:09:03: 4c:d8:8d:42:1f:f6:fc:bf:ed:d7:c6:c1:82:b7:aa:1f:0d:9d: a2:26:e7:f4:ec:e2:d4:57:c9:65:e7:71:de:92:f3:51:7f:a8: 28:01:a9:50:67:73:ae:a6:ed:11:76:7f:64:00:bf:52:05:02: 9f:fb:5f:37:9d:f8:b5:6c:47:86:fd:e7:23:0e:ae:a7:a8:f9: ad:f1:f8:57:3e:6e:9c:74:de:3d:2e:7d:47:56:d1:eb:2a:9c: aa:56:11:a4:c0:6d:77:0b:c0:5a:ac:9e:0a:fe:11:45:51:d2: 4d:ee:3f:4d:03:b8:3f:c9:b9:d0:df:fa:be:47:0a:de:35:49: 11:fa:ec:47 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZF QTRERjVBMjgxRUI2RTcyRDNBMzE0MkE0NTM2NDAwQ0NDNDhDRDAeFw0yNTA0MjYw ODM2MjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDMyRTczODNBNkZFNDk3 QjQ3NkVFNzM2MzU5MDg3RTUwMTk1MkEwNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2khhUPvsfw35CEt/zg52zRCUFvairvQzP3JTe/XuM6WTwG+tP K/J21dbd0n0kLoZBBqKe53EIxtJTfTm9cXl9mCG9SI/G84x5zwDtG7MA25Nou7Eb 5H7bCvc8dDcpDaB8c7o2SwiJK6FztfUIfgax+L5sWdZYn5vkuMdJh3JSAhbt6MwR /73iton4cc/RVpCJWJq8iqUNSSaXqO//yI1ApiNeN7MwIXycnmQhRGb6tIjVNtXo 2fKeWCl9Yfqq7so7MnFqUcbWFdujFjqdfdEQDdR63fzMRoeJ+0CbSc6TGLQbbq4H I4ongAlEr15M7LfWLiaaDTmnWUZ1dEDEBRlZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMuc4Om/kl7R27nNjWQh+UBlSoG4wHwYDVR0jBBgwFoAU3+pN9aKB625y06MU KkU2QAzMSM0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My8zLXBOOWFLQjYyNXkwNk1VS2tVMlFBek1TTTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzMtcE45YUtCNjI1eTA2TVVLa1UyUUF6TVNNMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvMy1wTjlhS0I2MjV5 MDZNVUtrVTJRQXpNU00wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ/UqAGK9x53By/pbwVjDyyfrKsC2Co/GTzHvwm6PZH3zuOaJMf4M6SqxJCn mL92/kqf2zRcNIOaldoGEMZJWR6zUYRYdoAL0EuNRjDxGTSPfX9vrZEwEBxyeZ56 enq9asmtP7uiFsWpg9kGCzmhtPQ2QbO/A3G+K3R4RZwJA0zYjUIf9vy/7dfGwYK3 qh8NnaIm5/Ts4tRXyWXncd6S81F/qCgBqVBnc66m7RF2f2QAv1IFAp/7Xzed+LVs R4b95yMOrqeo+a3x+Fc+bpx03j0ufUdW0esqnKpWEaTAbXcLwFqsngr+EUVR0k3u P00DuD/JudDf+r5HCt41SRH67Ec= -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:48 2025 by rpki-client