$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft File: U8kE5DbkCUsscVNNs_Vzviozvjk.mft (raw, json) Hash identifier: O0TiubxSc74WgGvb0A13l2HkYhWBCHHbQRcS3XBtZcg= Subject key identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 Authority key identifier: 53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 Certificate issuer: /CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Certificate serial: 0716 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft Manifest number: 0716 Signing time: Sat 26 Apr 2025 13:07:46 +0000 Manifest this update: Sat 26 Apr 2025 13:07:46 +0000 Manifest next update: Sat 26 Apr 2025 19:07:46 +0000 Files and hashes: 1: U8kE5DbkCUsscVNNs_Vzviozvjk.crl (hash: WGxfa160Vdc0OZaQUZjHlDhI4HrZQcmFI15ZdonJm4Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 17:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Validity Not Before: Apr 26 13:07:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CC485786D4ADBCDBFD1672905DD43CF845F24440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:58:66:c3:97:42:5c:cf:b5:79:44:d3:e4: 72:f0:d7:db:1b:f8:1b:67:1c:16:1b:5f:8c:e6:2e: 5f:ba:fc:6a:2a:74:3c:8a:c5:54:cd:c8:6a:08:3d: 16:e0:6d:dd:d0:6c:66:0f:60:b6:dc:f1:47:69:c0: 6e:15:28:f5:76:ee:8c:43:00:fd:97:f9:8b:a1:ce: e6:06:8d:cc:23:7f:f2:4c:33:0a:92:ec:57:52:5f: f0:51:ea:3b:4c:bb:9e:fb:27:0a:47:1e:91:31:df: 9f:e4:6e:a8:58:6b:ef:9c:7d:cb:71:ea:4e:5b:e4: aa:e2:7f:5f:da:d5:f6:64:71:80:44:b5:30:ef:2b: 9e:5b:bd:37:4b:5e:88:a7:91:98:f7:d5:a0:37:ef: 42:da:ca:cd:0d:2c:01:7c:9e:93:3b:e0:ab:27:de: 14:76:f2:bc:67:62:5b:12:a2:c7:d4:d4:26:b6:dc: bf:64:c8:0a:c3:14:07:39:82:fb:45:5b:9b:8b:d6: b3:9a:22:e2:03:d2:3c:19:19:70:1a:3e:7c:4a:12: 56:a1:0e:b9:53:5a:98:6c:eb:43:3a:c3:ef:b0:34: 22:84:aa:47:6f:a4:0b:18:53:15:a7:73:a3:17:57: d3:79:45:b7:28:98:6f:6e:cf:3f:86:bd:e7:39:f0: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 X509v3 Authority Key Identifier: keyid:53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f5:50:56:7f:13:4a:01:fb:52:89:22:64:4e:86:f6:45:ea: 82:b9:aa:f5:7b:76:8f:fc:12:c0:dd:0b:26:29:61:59:fe:40: d4:cf:8e:d3:3a:13:32:c9:0a:6f:6a:bf:eb:ed:af:04:6d:d5: 88:21:3e:b8:ca:48:e1:4b:47:bb:d3:2a:b7:dc:99:d3:52:06: c8:b4:91:16:b6:fa:dd:2e:13:14:bc:b0:2f:60:87:43:73:9e: 3f:d8:ab:71:bc:4d:13:ee:a0:92:ff:9d:70:e8:fd:c9:a0:fe: 57:b2:9c:3f:c3:3d:21:e6:48:15:db:67:04:84:ef:09:dd:21: c8:b1:0e:63:fc:c0:84:ac:df:3e:89:f8:69:c4:d3:40:33:e6: 9d:90:f7:ca:fa:31:b8:dd:9d:08:b1:52:1a:22:d5:77:a6:8c: 3a:29:e9:a6:6e:d7:a6:52:17:7f:12:aa:79:2b:b3:e4:0b:e9: 7a:f5:99:c3:23:41:14:e1:eb:cf:cc:34:06:d4:71:95:7d:c8: d9:95:a7:f3:cb:b7:ac:ee:a5:66:6f:cf:4d:fa:a8:1d:29:d8: 9a:16:9e:89:73:28:94:fd:2f:1b:77:57:29:72:5a:0e:cf:c0: fb:57:a6:1a:15:74:cc:d3:4c:9d:47:10:b7:93:a0:79:ff:46: c1:1f:24:d7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTND OTA0RTQzNkU0MDk0QjJDNzE1MzREQjNGNTczQkUyQTMzQkUzOTAeFw0yNTA0MjYx MzA3NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENDNDg1Nzg2RDRBREJD REJGRDE2NzI5MDVERDQzQ0Y4NDVGMjQ0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGWlhmw5dCXM+1eUTT5HLw19sb+BtnHBYbX4zmLl+6/GoqdDyK xVTNyGoIPRbgbd3QbGYPYLbc8UdpwG4VKPV27oxDAP2X+YuhzuYGjcwjf/JMMwqS 7FdSX/BR6jtMu577JwpHHpEx35/kbqhYa++cfctx6k5b5Krif1/a1fZkcYBEtTDv K55bvTdLXoinkZj31aA370Lays0NLAF8npM74Ksn3hR28rxnYlsSosfU1Ca23L9k yArDFAc5gvtFW5uL1rOaIuID0jwZGXAaPnxKElahDrlTWphs60M6w++wNCKEqkdv pAsYUxWnc6MXV9N5RbcomG9uzz+Gvec58OZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzEhXhtStvNv9FnKQXdQ8+EXyREAwHwYDVR0jBBgwFoAUU8kE5DbkCUsscVNN s/VzviozvjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OC9VOGtFNURia0NVc3NjVk5Oc19WenZpb3p2amsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1U4a0U1RGJrQ1Vzc2NWTk5zX1Z6dmlvenZqay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzgvVThrRTVEYmtDVXNz Y1ZOTnNfVnp2aW96dmprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIv1UFZ/E0oB+1KJImROhvZF6oK5qvV7do/8EsDdCyYpYVn+QNTPjtM6EzLJ Cm9qv+vtrwRt1YghPrjKSOFLR7vTKrfcmdNSBsi0kRa2+t0uExS8sC9gh0Nznj/Y q3G8TRPuoJL/nXDo/cmg/leynD/DPSHmSBXbZwSE7wndIcixDmP8wISs3z6J+GnE 00Az5p2Q98r6MbjdnQixUhoi1XemjDop6aZu16ZSF38Sqnkrs+QL6Xr1mcMjQRTh 68/MNAbUcZV9yNmVp/PLt6zupWZvz036qB0p2JoWnolzKJT9Lxt3VylyWg7PwPtX phoVdMzTTJ1HELeToHn/RsEfJNc= -----END CERTIFICATE-----Generated at Sat Apr 26 15:14:49 2025 by rpki-client