$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft File: eulp1muK2ryf72OJwrw1xQoV7a0.mft (raw, json) Hash identifier: roBavFDfhb9Jsh81mAQvgkaTgz+qdKtsY+oJ2aDJ7R0= Subject key identifier: 00:45:18:11:47:6B:60:51:DD:DF:33:32:52:68:48:5E:CB:28:42:F3 Authority key identifier: 7A:E9:69:D6:6B:8A:DA:BC:9F:EF:63:89:C2:BC:35:C5:0A:15:ED:AD Certificate issuer: /CN=7AE969D66B8ADABC9FEF6389C2BC35C50A15EDAD Certificate serial: 04B0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eulp1muK2ryf72OJwrw1xQoV7a0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft Manifest number: 04B0 Signing time: Sat 26 Apr 2025 08:38:12 +0000 Manifest this update: Sat 26 Apr 2025 08:38:12 +0000 Manifest next update: Sat 26 Apr 2025 14:38:12 +0000 Files and hashes: 1: eulp1muK2ryf72OJwrw1xQoV7a0.crl (hash: PHm5hdJH9L6QVk82tkmPae+v4KE54hrs3gT1CprHf+g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eulp1muK2ryf72OJwrw1xQoV7a0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AE969D66B8ADABC9FEF6389C2BC35C50A15EDAD Validity Not Before: Apr 26 08:38:12 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=00451811476B6051DDDF33325268485ECB2842F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:69:41:1e:2a:13:83:aa:fe:e3:4d:23:f6: 46:99:1d:c0:dc:c2:7d:92:dd:53:a2:7c:d2:36:74: fa:25:8d:3d:45:2d:f1:65:c4:ee:13:07:80:c6:e4: 26:2c:c2:63:ae:9f:88:07:ce:c8:11:8e:02:8d:0f: 50:8a:2e:d1:0c:73:65:48:78:42:4a:d3:fe:40:d8: 04:8a:6b:c6:82:4b:57:8e:08:70:4d:e3:4e:7e:b1: 2b:8e:05:82:d6:2b:1b:c0:bc:94:c7:d0:98:10:f4: ba:51:f8:55:85:e9:ff:c0:63:d0:85:c4:ce:7c:9a: 9c:33:bc:1f:b4:56:f1:74:f2:94:15:c8:45:33:6a: 1e:76:94:8f:7e:90:b3:b8:26:31:47:4f:f3:90:38: 74:76:41:09:28:4a:15:4a:a2:ca:d5:51:6d:31:f1: eb:b0:0c:4c:ee:50:e6:9e:18:fa:e5:af:24:29:b2: 31:ba:41:59:56:9b:ef:cc:4d:ad:05:75:9f:c7:26: d7:a5:8c:05:95:3b:ad:33:9f:6f:14:5f:f5:e8:f2: 04:f5:7e:33:ed:56:5d:2c:b8:7c:4c:80:ff:10:b7: 9c:74:86:5c:98:55:28:82:c2:9e:13:30:98:a0:9a: d0:93:6c:e1:bd:b9:63:f7:42:1f:27:a4:2d:0a:b6: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:45:18:11:47:6B:60:51:DD:DF:33:32:52:68:48:5E:CB:28:42:F3 X509v3 Authority Key Identifier: keyid:7A:E9:69:D6:6B:8A:DA:BC:9F:EF:63:89:C2:BC:35:C5:0A:15:ED:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eulp1muK2ryf72OJwrw1xQoV7a0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:04:6e:7a:a6:c8:cb:6d:d5:12:fa:d2:13:de:d4:81:9c:6d: a9:e9:c5:5f:8a:4a:52:6e:86:39:6d:8b:9d:09:4b:35:db:16: 06:71:0a:d3:91:0e:d0:ac:9b:7f:eb:cc:04:da:35:e1:3b:53: e6:f4:f6:d1:67:0f:77:f0:74:46:a3:83:94:20:8e:f4:42:55: 34:95:7f:79:8a:32:ce:4b:bf:3c:77:77:2d:48:ae:ba:40:3e: cc:26:9a:cd:8c:b3:cf:3d:ab:39:55:53:68:68:c1:5d:96:ab: 2c:27:28:dc:c3:99:38:35:2d:e5:00:44:69:28:33:cc:c2:34: d5:08:63:15:dc:c9:5d:90:c8:8b:99:0e:96:e8:72:d5:f6:ff: 0b:5f:76:ca:ef:02:23:05:0d:4b:f7:11:ae:0c:21:bf:77:24: d7:1e:05:ae:30:ed:a1:0f:9a:42:e0:75:14:f2:f5:de:75:59: b8:74:ca:fc:f6:14:80:a6:a3:55:40:ec:34:5d:6e:e7:30:76: 31:ab:ff:47:e6:40:99:52:b0:00:af:6b:97:bd:f2:c1:7f:1e: 3f:05:e8:7b:89:51:88:60:fc:61:b1:93:9a:b5:ce:ad:55:3f: ea:6b:66:8b:a5:65:16:f2:ac:63:19:89:09:81:36:1f:e5:bd: c0:40:f1:2d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0FF OTY5RDY2QjhBREFCQzlGRUY2Mzg5QzJCQzM1QzUwQTE1RURBRDAeFw0yNTA0MjYw ODM4MTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAwNDUxODExNDc2QjYw NTFERERGMzMzMjUyNjg0ODVFQ0IyODQyRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ZGlBHioTg6r+400j9kaZHcDcwn2S3VOifNI2dPoljT1FLfFl xO4TB4DG5CYswmOun4gHzsgRjgKND1CKLtEMc2VIeEJK0/5A2ASKa8aCS1eOCHBN 405+sSuOBYLWKxvAvJTH0JgQ9LpR+FWF6f/AY9CFxM58mpwzvB+0VvF08pQVyEUz ah52lI9+kLO4JjFHT/OQOHR2QQkoShVKosrVUW0x8euwDEzuUOaeGPrlryQpsjG6 QVlWm+/MTa0FdZ/HJteljAWVO60zn28UX/Xo8gT1fjPtVl0suHxMgP8Qt5x0hlyY VSiCwp4TMJigmtCTbOG9uWP3Qh8npC0KtkO3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAEUYEUdrYFHd3zMyUmhIXssoQvMwHwYDVR0jBBgwFoAUeulp1muK2ryf72OJ wrw1xQoV7a0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx MC9ldWxwMW11SzJyeWY3Mk9Kd3J3MXhRb1Y3YTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2V1bHAxbXVLMnJ5ZjcyT0p3cncxeFFvVjdhMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTAvZXVscDFtdUsycnlm NzJPSndydzF4UW9WN2EwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB8EbnqmyMtt1RL60hPe1IGcbanpxV+KSlJuhjlti50JSzXbFgZxCtORDtCs m3/rzATaNeE7U+b09tFnD3fwdEajg5QgjvRCVTSVf3mKMs5Lvzx3dy1IrrpAPswm ms2Ms889qzlVU2howV2WqywnKNzDmTg1LeUARGkoM8zCNNUIYxXcyV2QyIuZDpbo ctX2/wtfdsrvAiMFDUv3Ea4MIb93JNceBa4w7aEPmkLgdRTy9d51Wbh0yvz2FICm o1VA7DRdbucwdjGr/0fmQJlSsACva5e98sF/Hj8F6HuJUYhg/GGxk5q1zq1VP+pr ZoulZRbyrGMZiQmBNh/lvcBA8S0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:45 2025 by rpki-client