$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft File: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft (raw, json) Hash identifier: ypGpJY0GfLRvgmHVwMJ27fgBxYBG9VVM7G4YEhW3JC8= Subject key identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B Authority key identifier: AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 Certificate issuer: /CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Certificate serial: 05E8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft Manifest number: 05E8 Signing time: Sat 26 Apr 2025 08:38:31 +0000 Manifest this update: Sat 26 Apr 2025 08:38:31 +0000 Manifest next update: Sat 26 Apr 2025 14:38:31 +0000 Files and hashes: 1: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl (hash: eiZbaOM6qAJrz2iuG43j/yl25EIndkaIlMQqywGW55I=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Validity Not Before: Apr 26 08:38:31 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C95006BDDC4D9538F86B94D2F10A03B33D839E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:3e:d1:98:1a:5e:b9:06:33:2a:5d:0b:8a: 68:fa:99:a8:b8:39:6d:48:f2:36:5e:ee:a8:1b:70: 60:02:23:38:d0:dd:46:c7:60:cc:31:df:67:47:7a: db:fd:ec:e5:9f:b1:f9:33:b6:2e:6c:7d:7b:cc:1b: 71:0e:0b:77:95:f7:7a:2f:ed:aa:14:0c:0a:f4:df: 53:32:8f:e9:e8:36:73:85:7a:44:25:49:4e:53:b2: 73:39:dd:77:9d:a6:c3:da:61:ef:50:4a:01:c6:02: a3:ed:1e:32:14:23:61:26:2d:a1:46:0c:a5:f3:fa: d5:0b:71:4b:42:e5:83:91:e5:42:3b:32:92:a0:0b: e3:aa:80:7e:2c:41:69:db:59:4b:cc:c3:2b:5e:6c: d4:6f:62:c0:b7:8a:20:bd:97:c3:52:21:40:f7:e2: 7c:e6:b0:86:ce:32:56:5b:a3:94:df:4c:cb:a3:15: ce:8b:12:70:1b:6b:3e:38:3e:cc:d7:1b:a3:46:b3: a3:5b:57:63:05:c4:5a:e0:78:3d:e4:69:e1:92:0e: bc:4c:2c:1d:12:98:6d:3b:53:4d:cc:9e:9a:9e:49: a7:fc:1d:5a:08:fd:9c:7b:31:e9:c5:f0:3e:fc:b4: b1:7e:38:17:4c:b0:03:f7:4c:13:ea:c5:18:cb:67: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B X509v3 Authority Key Identifier: keyid:AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d9:49:f1:d5:c3:65:b4:92:61:65:76:c8:be:d9:3e:6b:39: ca:5b:75:ca:f3:8c:57:96:dc:9d:16:68:90:bc:28:b5:aa:1b: a6:48:03:62:08:db:fb:aa:94:37:00:13:b6:76:d3:36:3a:86: 4a:2d:d6:d0:a4:e2:e3:a2:44:89:53:ee:d2:75:a1:db:78:b5: 3c:a8:c7:85:4e:06:2f:80:16:71:bb:bf:be:b7:7c:7c:7b:10: c2:02:84:58:07:66:30:d9:7d:75:5a:8d:87:d6:51:f2:0c:20: da:5d:59:06:49:ae:b8:7c:da:d0:83:6f:95:ff:42:c3:c4:88: 19:7b:12:8a:1a:d4:78:b4:f1:df:25:33:33:29:8f:17:65:4c: 95:96:98:80:ee:63:3a:0b:6e:07:97:e0:a6:56:2e:4c:cd:65: e9:57:c7:1f:b1:9d:5d:fe:90:4c:44:c7:b6:34:71:60:fd:33: a7:e4:76:86:6a:6d:a2:52:3b:62:2d:24:e4:06:09:fc:a5:4b: 2b:b1:70:61:a4:40:fc:19:9a:6f:a8:58:62:49:f3:9a:62:73: ba:bf:09:ce:ce:5f:2d:b0:ad:eb:a3:2f:45:df:02:9b:06:82: 50:64:63:29:2b:30:b9:0d:2e:97:98:1c:3b:2f:17:10:a8:ec: d1:1f:36:2c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUNE N0MwNzQ5RTUzQTEwQTAwMjVDRDlDQUZGODc4QkUyRERCNTYzODAeFw0yNTA0MjYw ODM4MzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM5NTAwNkJEREM0RDk1 MzhGODZCOTREMkYxMEEwM0IzM0Q4MzlFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvVT7RmBpeuQYzKl0Limj6mai4OW1I8jZe7qgbcGACIzjQ3UbH YMwx32dHetv97OWfsfkzti5sfXvMG3EOC3eV93ov7aoUDAr031Myj+noNnOFekQl SU5TsnM53XedpsPaYe9QSgHGAqPtHjIUI2EmLaFGDKXz+tULcUtC5YOR5UI7MpKg C+OqgH4sQWnbWUvMwytebNRvYsC3iiC9l8NSIUD34nzmsIbOMlZbo5TfTMujFc6L EnAbaz44PszXG6NGs6NbV2MFxFrgeD3kaeGSDrxMLB0SmG07U03MnpqeSaf8HVoI /Zx7MenF8D78tLF+OBdMsAP3TBPqxRjLZ4eDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyVAGvdxNlTj4a5TS8QoDsz2DniswHwYDVR0jBBgwFoAUrNfAdJ5ToQoAJc2c r/h4vi3bVjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ni9yTmZBZEo1VG9Rb0FKYzJjcl9oNHZpM2JWamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JOZkFkSjVUb1FvQUpjMmNyX2g0dmkzYlZqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTYvck5mQWRKNVRvUW9B SmMyY3JfaDR2aTNiVmpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABPZSfHVw2W0kmFldsi+2T5rOcpbdcrzjFeW3J0WaJC8KLWqG6ZIA2II2/uq lDcAE7Z20zY6hkot1tCk4uOiRIlT7tJ1odt4tTyox4VOBi+AFnG7v763fHx7EMIC hFgHZjDZfXVajYfWUfIMINpdWQZJrrh82tCDb5X/QsPEiBl7Eooa1Hi08d8lMzMp jxdlTJWWmIDuYzoLbgeX4KZWLkzNZelXxx+xnV3+kExEx7Y0cWD9M6fkdoZqbaJS O2ItJOQGCfylSyuxcGGkQPwZmm+oWGJJ85pic7q/Cc7OXy2wreujL0XfApsGglBk YykrMLkNLpeYHDsvFxCo7NEfNiw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:47 2025 by rpki-client