$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft File: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft (raw, json) Hash identifier: cIgouRtpdeHjI/t5YDXPJ3pulILzQotpbixcKd/o0C8= Subject key identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 Authority key identifier: 1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA Certificate issuer: /CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Certificate serial: 04CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft Manifest number: 04CB Signing time: Mon 16 Jun 2025 23:25:22 +0000 Manifest this update: Mon 16 Jun 2025 23:25:22 +0000 Manifest next update: Tue 17 Jun 2025 05:25:22 +0000 Files and hashes: 1: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl (hash: RZVXpQked7oH0IXtK7bE21WR2tKUWRxeotxotEa4p/8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 05:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Validity Not Before: Jun 16 23:25:22 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=BF7821F78FFC418D66ABC2C904523A53F50E1AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:f6:2f:ee:1a:47:a8:a0:29:f3:cf:46:70: 8f:f3:f1:6a:c8:f5:d0:a5:56:7d:e1:dc:f9:f8:60: 61:a1:07:60:57:c0:44:0b:ec:63:1e:9b:05:27:4e: 9f:de:07:ae:49:55:1d:20:94:37:27:c2:dc:e0:80: 30:b2:af:71:d5:69:62:b3:e0:1d:d8:e0:5d:86:ef: 5c:aa:fe:bb:7c:7a:d5:63:33:89:d9:49:28:7a:4f: c5:fb:91:b2:48:6d:7b:09:e0:dd:a1:23:d1:92:f6: 21:e7:6e:d6:92:5e:71:e6:0b:e2:35:80:dc:c8:a3: 51:ad:06:4f:0d:51:00:d9:6f:eb:04:82:ec:a4:07: e5:af:06:44:95:6d:12:68:20:5d:f6:1f:00:83:11: 65:25:e0:01:ce:0d:ad:cc:28:7e:d2:8d:da:62:61: 89:ba:7f:b3:e6:09:6e:03:f0:49:67:b6:5c:68:01: c7:54:40:58:58:b1:4d:28:64:27:38:56:f8:f4:f9: c9:d3:ea:64:e9:2d:f1:ac:4c:27:84:b4:e1:40:0a: df:39:65:80:3a:1f:ca:84:bc:46:55:fd:89:2e:97: 27:a5:4a:ff:3d:99:8e:b7:0a:e5:78:0f:2c:d9:12: 3f:c1:a8:c5:14:cd:24:f1:a3:60:50:08:e0:09:19: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 X509v3 Authority Key Identifier: keyid:1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:62:4f:4e:6e:2f:cc:97:c7:9f:c3:a1:4e:26:d4:07:5f:6f: 39:e6:0b:3f:35:ed:7d:06:b8:e2:e1:37:39:47:8e:74:16:f7: 00:eb:0c:90:dd:2e:f1:19:35:40:cc:52:2a:1c:a4:f7:6e:88: 4d:b0:47:9a:66:36:61:bd:77:88:60:d3:6e:11:90:74:bd:34: 3a:0f:72:89:f6:fa:aa:23:37:34:92:db:97:24:c4:af:cb:83: 85:e0:39:01:f4:28:3d:ea:47:b9:99:2f:79:f0:7e:58:d8:8e: c6:32:34:7b:90:3e:d8:88:26:ec:1c:68:30:46:8d:19:f7:ee: 54:1f:d2:05:67:b8:b0:29:5a:95:73:f6:99:64:c2:bb:59:60: db:70:42:ca:e3:b6:8e:e1:b3:7b:8e:3d:38:6d:f0:44:17:f6: 8f:50:a2:55:ab:36:10:6e:3e:7c:59:95:de:c7:c7:b1:89:0a: 12:3f:06:c5:4c:4e:00:dd:63:a3:d7:e5:62:86:22:08:88:89: 62:87:b7:98:c0:35:db:5e:54:21:76:b7:a5:33:ec:06:50:e1: 87:e8:b9:4c:d1:fd:01:5c:57:51:cc:47:8e:dc:0c:16:ef:7a: 57:5f:ab:4e:7f:bd:68:76:6a:1f:a1:ae:84:23:f7:16:30:ba: 36:8e:b3:f6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFD REMyNkM0RTBGNjcwREZFMEJBNjNDMkYyMzRERTQ2RjYyMkJBQTAeFw0yNTA2MTYy MzI1MjJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEJGNzgyMUY3OEZGQzQx OEQ2NkFCQzJDOTA0NTIzQTUzRjUwRTFBQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpjvYv7hpHqKAp889GcI/z8WrI9dClVn3h3Pn4YGGhB2BXwEQL 7GMemwUnTp/eB65JVR0glDcnwtzggDCyr3HVaWKz4B3Y4F2G71yq/rt8etVjM4nZ SSh6T8X7kbJIbXsJ4N2hI9GS9iHnbtaSXnHmC+I1gNzIo1GtBk8NUQDZb+sEguyk B+WvBkSVbRJoIF32HwCDEWUl4AHODa3MKH7SjdpiYYm6f7PmCW4D8ElntlxoAcdU QFhYsU0oZCc4Vvj0+cnT6mTpLfGsTCeEtOFACt85ZYA6H8qEvEZV/YkulyelSv89 mY63CuV4DyzZEj/BqMUUzSTxo2BQCOAJGf1BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUv3gh94/8QY1mq8LJBFI6U/UOGrcwHwYDVR0jBBgwFoAUGs3CbE4PZw3+C6Y8 LyNN5G9iK6owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Mi9HczNDYkU0UFp3My1DNlk4THlOTjVHOWlLNm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dzM0NiRTRQWnczLUM2WThMeU5ONUc5aUs2by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjIvR3MzQ2JFNFBadzMt QzZZOEx5Tk41RzlpSzZvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAOpiT05uL8yXx5/DoU4m1AdfbznmCz817X0GuOLhNzlHjnQW9wDrDJDdLvEZ NUDMUiocpPduiE2wR5pmNmG9d4hg024RkHS9NDoPcon2+qojNzSS25ckxK/Lg4Xg OQH0KD3qR7mZL3nwfljYjsYyNHuQPtiIJuwcaDBGjRn37lQf0gVnuLApWpVz9plk wrtZYNtwQsrjto7hs3uOPTht8EQX9o9QolWrNhBuPnxZld7Hx7GJChI/BsVMTgDd Y6PX5WKGIgiIiWKHt5jANdteVCF2t6Uz7AZQ4YfouUzR/QFcV1HMR47cDBbveldf q05/vWh2ah+hroQj9xYwujaOs/Y= -----END CERTIFICATE-----Generated at Tue Jun 17 04:39:46 2025 by rpki-client