$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft File: kEgXQ3MJLmD9IX-_HSOR79WjObw.mft (raw, json) Hash identifier: pV0CHQajoc9jGY21B0k/8IPTplBMxLA+bzroOn5bmNs= Subject key identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F Authority key identifier: 90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC Certificate issuer: /CN=9048174373092E60FD217FBF1D2391EFD5A339BC Certificate serial: 03D5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft Manifest number: 03D5 Signing time: Sat 26 Apr 2025 13:11:01 +0000 Manifest this update: Sat 26 Apr 2025 13:11:01 +0000 Manifest next update: Sat 26 Apr 2025 19:11:01 +0000 Files and hashes: 1: kEgXQ3MJLmD9IX-_HSOR79WjObw.crl (hash: XlSzqdyTlxCXM8O4vOdbs2nZy9gwK+3MKhBXzp8W2pw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 981 (0x3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9048174373092E60FD217FBF1D2391EFD5A339BC Validity Not Before: Apr 26 13:11:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=30337587DFE9C72743A1F630DB98C1A2C739259F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:ba:ed:85:29:cf:39:2a:e0:6f:d7:56:94: bb:25:1a:e8:39:74:40:39:fb:bd:da:af:13:2d:47: 33:f5:50:8d:d9:25:74:61:57:c8:7c:b5:ee:77:75: 26:19:fd:e8:c5:50:0f:30:90:42:9c:a0:85:78:91: 78:2c:e5:db:df:3f:7f:a2:1b:7d:eb:71:8b:82:65: 21:4d:df:57:ca:76:30:ba:09:8f:52:2e:d9:70:db: e1:e2:52:6d:08:c4:16:f9:d1:ce:40:da:8c:e2:cd: ee:58:d3:68:a5:ba:4b:c3:92:3c:72:03:94:92:b4: 6f:ac:4b:ad:6b:05:88:ad:f4:a3:8a:42:62:5e:fb: 8a:c6:3c:51:aa:e4:d4:cd:a0:c0:48:62:ea:8d:0d: 22:a2:86:63:e3:1a:a0:83:f8:67:df:e1:1d:f6:99: b7:48:e6:07:d0:b2:58:a8:29:64:45:16:c4:ff:6b: 9e:3a:e2:25:f4:b4:8e:99:2f:fd:00:cc:05:a7:cd: 8c:a5:53:8a:ab:99:bc:93:65:99:bf:c7:2d:32:a2: 29:b4:12:82:3a:64:d8:8a:1a:4f:a2:37:90:cc:9c: 24:88:59:14:a3:b7:de:d3:4e:f5:0b:a2:e2:6b:ca: 93:65:10:e2:86:a5:71:56:fa:77:78:7b:19:cc:a1: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F X509v3 Authority Key Identifier: keyid:90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:49:1e:a0:45:28:87:63:6b:76:fa:c1:9a:f6:d9:49:97:7b: 69:ec:cc:c4:0b:fb:ca:08:2a:a6:f4:fd:04:f6:2b:36:c7:e3: cf:f1:d9:42:68:6a:46:ea:a6:72:8a:f7:3e:5d:c3:c7:28:fb: 53:00:31:49:8c:b4:2e:00:30:9d:e6:82:5a:69:c1:c0:5d:69: af:f4:39:f4:2f:c1:10:93:d1:43:d5:8f:21:7a:09:a1:21:8d: f2:08:f3:b7:fd:8c:93:f3:6a:85:31:be:74:a8:59:78:5e:7c: cd:ba:93:cf:d2:b4:22:8f:64:85:57:41:eb:4e:d8:05:33:90: 8b:8e:c6:87:80:1e:1f:39:25:8e:c8:79:a4:84:bc:2c:23:6f: ca:b4:fb:e8:4c:e0:71:ee:93:59:20:48:08:18:43:7b:e1:99: 08:4c:79:32:69:dd:6c:b5:e2:c6:22:82:9b:d0:9b:f8:14:33: 11:e2:f7:b1:65:65:fc:2a:4c:9e:6c:2c:af:20:5c:79:55:dd: 68:c4:8e:2f:64:5b:b0:8a:fe:06:3c:85:d8:21:92:06:87:85: 69:3e:bf:9c:a2:35:2d:f5:ab:5d:02:ad:17:10:88:b6:02:3b: 5c:61:fa:ba:af:c9:21:c5:3a:1e:c8:26:ad:86:bf:e0:1d:59: 04:be:6a:3c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTA0 ODE3NDM3MzA5MkU2MEZEMjE3RkJGMUQyMzkxRUZENUEzMzlCQzAeFw0yNTA0MjYx MzExMDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDMwMzM3NTg3REZFOUM3 Mjc0M0ExRjYzMERCOThDMUEyQzczOTI1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMUrrthSnPOSrgb9dWlLslGug5dEA5+73arxMtRzP1UI3ZJXRh V8h8te53dSYZ/ejFUA8wkEKcoIV4kXgs5dvfP3+iG33rcYuCZSFN31fKdjC6CY9S Ltlw2+HiUm0IxBb50c5A2ozize5Y02ilukvDkjxyA5SStG+sS61rBYit9KOKQmJe +4rGPFGq5NTNoMBIYuqNDSKihmPjGqCD+Gff4R32mbdI5gfQslioKWRFFsT/a546 4iX0tI6ZL/0AzAWnzYylU4qrmbyTZZm/xy0yoim0EoI6ZNiKGk+iN5DMnCSIWRSj t97TTvULouJrypNlEOKGpXFW+nd4exnMoZF1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMDN1h9/pxydDofYw25jBosc5JZ8wHwYDVR0jBBgwFoAUkEgXQ3MJLmD9IX+/ HSOR79WjObwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy MC9rRWdYUTNNSkxtRDlJWC1fSFNPUjc5V2pPYncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tFZ1hRM01KTG1EOUlYLV9IU09SNzlXak9idy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjAva0VnWFEzTUpMbUQ5 SVgtX0hTT1I3OVdqT2J3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFpJHqBFKIdja3b6wZr22UmXe2nszMQL+8oIKqb0/QT2KzbH48/x2UJoakbq pnKK9z5dw8co+1MAMUmMtC4AMJ3mglppwcBdaa/0OfQvwRCT0UPVjyF6CaEhjfII 87f9jJPzaoUxvnSoWXhefM26k8/StCKPZIVXQetO2AUzkIuOxoeAHh85JY7IeaSE vCwjb8q0++hM4HHuk1kgSAgYQ3vhmQhMeTJp3Wy14sYigpvQm/gUMxHi97FlZfwq TJ5sLK8gXHlV3WjEji9kW7CK/gY8hdghkgaHhWk+v5yiNS31q10CrRcQiLYCO1xh +rqvySHFOh7IJq2Gv+AdWQS+ajw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:10:28 2025 by rpki-client