$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft File: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft (raw, json) Hash identifier: VsXkGVe/QhBpOnTB9T2BHJsqA2rbmazYJ9kYD/jzx/I= Subject key identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 Authority key identifier: 66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF Certificate issuer: /CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Certificate serial: 02F0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft Manifest number: 02F0 Signing time: Sat 26 Apr 2025 13:08:46 +0000 Manifest this update: Sat 26 Apr 2025 13:08:46 +0000 Manifest next update: Sat 26 Apr 2025 19:08:46 +0000 Files and hashes: 1: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl (hash: V12PySfYbGMMd4uxjRnBTbLSsN6fcP2zcszjHdD6+SQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 17:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Validity Not Before: Apr 26 13:08:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F0DCD3E56B07333F5EAD5D479ED734FE6D5AB0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f2:74:a3:57:8d:a7:30:b6:5d:54:f2:76:3c: 75:bc:97:b6:8e:5d:b3:36:fd:e9:56:18:78:96:73: d8:ff:17:78:38:2d:df:e3:72:28:58:4a:da:e9:ea: 9a:95:a1:b3:92:d1:35:e8:3f:13:90:b8:5f:b4:ca: 48:5a:e8:9d:51:8b:d6:93:fc:7a:50:db:32:4a:ed: cf:6b:64:ff:80:3c:35:c0:18:c4:0a:8f:89:ed:c9: c3:48:f2:9c:e1:fc:da:ff:83:2d:fc:2a:fd:c1:44: 18:e1:88:a5:33:ff:cb:89:e7:0e:24:d0:28:f9:89: 4b:6d:10:f6:7e:10:b8:e6:c1:fe:15:cb:e0:d8:ee: 9c:c1:95:47:af:6a:b5:5a:6f:60:3d:c7:02:c0:d0: f1:df:6b:c8:4f:02:f9:17:d4:ee:e5:d4:1b:45:0c: 28:35:38:d9:18:79:63:13:d0:5c:c5:bf:0e:df:4b: 15:1f:71:fb:68:43:dc:77:6b:e1:c8:f2:e9:a3:cf: ea:4b:40:da:e0:c4:d5:37:3a:36:c0:c5:cd:b1:e5: 79:30:6e:94:b3:86:33:e0:f5:cb:74:28:3c:07:24: d6:49:c5:cc:ec:51:b5:e2:98:6e:12:e0:24:ed:3d: 46:93:41:37:88:14:aa:c9:09:cd:72:f1:5f:7c:ae: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 X509v3 Authority Key Identifier: keyid:66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:53:b9:fc:26:a1:ab:50:de:46:40:eb:4f:0a:24:5f:c5:ef: 6d:58:02:4b:19:0d:f3:34:c2:09:ec:99:e5:42:13:c4:f5:63: 29:87:bd:9c:a1:b4:09:c6:92:08:d7:6d:ab:3a:73:10:da:a3: cd:30:28:52:aa:7d:17:7d:8c:41:d2:6c:a2:a9:53:d1:e9:f5: 20:06:ce:35:e5:54:03:7f:a6:eb:88:8f:c1:c8:97:83:d1:4b: e5:ce:03:81:a8:63:14:8d:67:fd:14:66:b4:9d:57:43:e5:e4: 33:9b:36:88:04:6a:4b:0f:9e:c3:eb:f8:3a:88:24:4e:f7:03: 28:dc:4e:cb:d3:69:38:c7:55:a8:a1:64:6e:c0:47:3f:27:b4: 41:9d:0d:51:11:ee:c7:fb:08:7f:f0:d7:2f:d9:15:28:6b:b4: 00:26:59:03:d5:84:11:e8:66:ff:5b:d1:00:e1:db:57:4b:f0: a6:7f:e7:06:15:90:d2:d9:09:fb:99:c2:a5:0c:fd:96:59:6b: b0:08:e9:5b:83:11:5c:49:76:2c:d7:d5:59:03:82:e4:3a:e5: f4:8e:4c:5c:b7:cf:a8:97:a2:e7:b1:2e:26:76:f5:28:3d:83: 11:f2:90:51:9e:aa:f0:8f:17:55:64:41:a6:b7:9e:f6:60:37: bb:78:91:c6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY3 NkE2NjQyQTRGNjAxNkJDMDcxREY2MjZCMkJFQkNCNDNCNUVDRjAeFw0yNTA0MjYx MzA4NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYwRENEM0U1NkIwNzMz M0Y1RUFENUQ0NzlFRDczNEZFNkQ1QUIwQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD08nSjV42nMLZdVPJ2PHW8l7aOXbM2/elWGHiWc9j/F3g4Ld/j cihYStrp6pqVobOS0TXoPxOQuF+0ykha6J1Ri9aT/HpQ2zJK7c9rZP+APDXAGMQK j4ntycNI8pzh/Nr/gy38Kv3BRBjhiKUz/8uJ5w4k0Cj5iUttEPZ+ELjmwf4Vy+DY 7pzBlUevarVab2A9xwLA0PHfa8hPAvkX1O7l1BtFDCg1ONkYeWMT0FzFvw7fSxUf cftoQ9x3a+HI8umjz+pLQNrgxNU3OjbAxc2x5XkwbpSzhjPg9ct0KDwHJNZJxczs UbXimG4S4CTtPUaTQTeIFKrJCc1y8V98rimxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8NzT5WsHMz9erV1Hntc0/m1asLMwHwYDVR0jBBgwFoAUZnamZCpPYBa8Bx32 JrK+vLQ7Xs8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MS9abmFtWkNwUFlCYThCeDMySnJLLXZMUTdYczguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1puYW1aQ3BQWUJhOEJ4MzJKckstdkxRN1hzOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvWm5hbVpDcFBZQmE4 QngzMkpySy12TFE3WHM4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAItTufwmoatQ3kZA608KJF/F721YAksZDfM0wgnsmeVCE8T1YymHvZyhtAnG kgjXbas6cxDao80wKFKqfRd9jEHSbKKpU9Hp9SAGzjXlVAN/puuIj8HIl4PRS+XO A4GoYxSNZ/0UZrSdV0Pl5DObNogEaksPnsPr+DqIJE73AyjcTsvTaTjHVaihZG7A Rz8ntEGdDVER7sf7CH/w1y/ZFShrtAAmWQPVhBHoZv9b0QDh21dL8KZ/5wYVkNLZ CfuZwqUM/ZZZa7AI6VuDEVxJdizX1VkDguQ65fSOTFy3z6iXouexLiZ29Sg9gxHy kFGeqvCPF1VkQaa3nvZgN7t4kcY= -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:52 2025 by rpki-client