$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft File: 89605Z7lMyYp7F4LaGZtNuKXN2s.mft (raw, json) Hash identifier: JqigVRNj43Tq8lZLMmdHlP553rKUMbIR6zUZN6oHLh0= Subject key identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 Authority key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B Certificate issuer: /CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Certificate serial: 03DD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft Manifest number: 03DD Signing time: Sat 26 Apr 2025 13:10:28 +0000 Manifest this update: Sat 26 Apr 2025 13:10:28 +0000 Manifest next update: Sat 26 Apr 2025 19:10:28 +0000 Files and hashes: 1: 89605Z7lMyYp7F4LaGZtNuKXN2s.crl (hash: RW2aPwiPIQoAVGjrKIUkKzgBkP23W2yC3a/yRoSjkrQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Validity Not Before: Apr 26 13:10:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=52797665E566FA8A9E8ACF2100B20A2E63FDF8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:22:b1:13:d3:08:92:e7:1f:ab:59:2f:b3: a1:ea:34:eb:d1:89:c7:1a:14:19:ec:00:38:d6:36: 20:7b:1c:77:cf:d1:60:76:50:d9:4e:84:9d:1c:c2: be:ca:bf:9a:fe:a3:af:dc:26:2f:87:5a:4c:2f:23: 1a:95:b3:31:ce:5c:69:04:ba:33:d5:cf:1a:82:e0: f2:44:9c:fc:6d:7e:a8:9c:46:1f:69:b6:3b:a0:0c: 15:9e:82:1c:71:23:fb:0c:7e:e4:95:12:bf:c0:11: 3b:56:e2:0d:f2:71:72:b0:b5:cb:4c:0c:bf:7c:42: 80:92:a8:63:cb:c0:9a:e1:62:85:35:3d:03:56:b5: ef:74:cf:d6:e3:bc:30:be:e2:f0:57:a0:49:55:74: 0a:5c:4a:d7:1c:c8:4c:24:ed:51:a6:36:1c:0c:db: a1:7c:9f:d0:d5:54:e7:26:70:b1:63:f6:4f:a9:ca: 70:0a:bb:d9:f8:d2:ee:f7:94:4c:c9:05:f1:03:34: 2a:4e:37:8e:ea:08:58:da:3d:2d:42:10:3c:5b:26: f0:2f:5c:06:cc:ca:d8:7b:4b:09:f8:5f:c7:25:fd: 5f:8a:38:50:bc:b6:c3:ff:3a:76:f6:dc:c0:41:76: b6:dc:68:54:1d:1c:46:17:ac:eb:3c:26:e7:c3:5c: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 X509v3 Authority Key Identifier: keyid:F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:a7:8a:e9:ce:3e:f3:60:60:df:52:3a:40:34:90:a5:89:ae: 32:56:09:57:e1:56:58:75:81:80:cd:de:98:b1:61:be:67:55: 69:53:f8:6e:90:d0:8e:89:0a:43:b9:12:d7:4e:93:5f:6c:60: eb:b5:86:46:b2:de:dc:71:e1:d3:a3:96:cc:b2:8e:bc:74:d1: 76:8e:8b:db:4c:1d:98:85:81:62:92:d0:93:a2:29:97:35:ea: 80:81:41:e7:86:5d:ef:dc:5c:eb:af:eb:2f:0e:3b:2d:d9:b7: 8a:94:90:a2:09:1e:94:cd:16:8d:d1:d7:f8:83:68:9d:e2:cc: ae:e7:43:f2:d8:1d:58:15:73:e9:29:8e:96:fd:02:c2:a5:78: b1:a1:b2:fb:36:5d:04:87:97:f9:37:f4:73:96:75:2f:98:96: f0:d2:ce:7d:74:9a:b5:80:1a:aa:94:23:bf:9b:30:d6:29:72: 9b:9c:dd:11:2f:41:cb:20:db:cc:c7:cc:72:4c:6a:d7:6d:b8: 96:c1:18:86:85:ef:a4:9b:8d:30:13:15:59:6f:8f:45:18:24: 6c:8e:4f:7e:65:bb:87:b2:23:41:10:03:a5:fe:fa:68:f0:7e: 50:af:7a:52:67:da:24:df:dc:38:08:b5:5f:47:10:ed:86:25: 0d:25:06:60 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjNE RUI0RTU5RUU1MzMyNjI5RUM1RTBCNjg2NjZEMzZFMjk3Mzc2QjAeFw0yNTA0MjYx MzEwMjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUyNzk3NjY1RTU2NkZB OEE5RThBQ0YyMTAwQjIwQTJFNjNGREY4QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpJiKxE9MIkucfq1kvs6HqNOvRiccaFBnsADjWNiB7HHfP0WB2 UNlOhJ0cwr7Kv5r+o6/cJi+HWkwvIxqVszHOXGkEujPVzxqC4PJEnPxtfqicRh9p tjugDBWeghxxI/sMfuSVEr/AETtW4g3ycXKwtctMDL98QoCSqGPLwJrhYoU1PQNW te90z9bjvDC+4vBXoElVdApcStccyEwk7VGmNhwM26F8n9DVVOcmcLFj9k+pynAK u9n40u73lEzJBfEDNCpON47qCFjaPS1CEDxbJvAvXAbMyth7Swn4X8cl/V+KOFC8 tsP/Onb23MBBdrbcaFQdHEYXrOs8JufDXGmRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUnl2ZeVm+oqeis8hALIKLmP9+LEwHwYDVR0jBBgwFoAU89605Z7lMyYp7F4L aGZtNuKXN2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OS84OTYwNVo3bE15WXA3RjRMYUdadE51S1hOMnMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzg5NjA1WjdsTXlZcDdGNExhR1p0TnVLWE4ycy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTkvODk2MDVaN2xNeVlw N0Y0TGFHWnROdUtYTjJzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMWniunOPvNgYN9SOkA0kKWJrjJWCVfhVlh1gYDN3pixYb5nVWlT+G6Q0I6J CkO5EtdOk19sYOu1hkay3txx4dOjlsyyjrx00XaOi9tMHZiFgWKS0JOiKZc16oCB QeeGXe/cXOuv6y8OOy3Zt4qUkKIJHpTNFo3R1/iDaJ3izK7nQ/LYHVgVc+kpjpb9 AsKleLGhsvs2XQSHl/k39HOWdS+YlvDSzn10mrWAGqqUI7+bMNYpcpuc3REvQcsg 28zHzHJMatdtuJbBGIaF76SbjTATFVlvj0UYJGyOT35lu4eyI0EQA6X++mjwflCv elJn2iTf3DgItV9HEO2GJQ0lBmA= -----END CERTIFICATE-----Generated at Sat Apr 26 15:12:45 2025 by rpki-client