$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft File: xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft (raw, json) Hash identifier: uOLTHLo7XA1oQIvijEEjbSASBKB8l9kGIc+e8indIfs= Subject key identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF Authority key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 Certificate issuer: /CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Certificate serial: 037B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft Manifest number: 037B Signing time: Sat 21 Jun 2025 01:46:40 +0000 Manifest this update: Sat 21 Jun 2025 01:46:40 +0000 Manifest next update: Sat 21 Jun 2025 07:46:40 +0000 Files and hashes: 1: xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl (hash: NBY/tSf52eWASb5Nvwa0/civBeEMZ4PH+3iAWkLodfQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Validity Not Before: Jun 21 01:46:40 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C8C318B9C83E4804C50DAC66D69EC0CF7B53E4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f9:65:02:d1:b2:6d:23:c0:76:39:83:3f:83: 20:cc:91:bf:45:aa:34:65:56:39:d5:f4:e4:42:d4: 66:59:3d:fc:17:45:43:b0:8b:97:34:e8:99:1c:71: 86:d5:e3:5e:39:92:60:63:d0:1a:37:46:a9:64:59: a9:d3:b9:f2:fb:31:42:5c:c5:e2:87:e5:1f:e3:81: 43:50:07:35:36:30:88:57:d6:31:d6:dc:7d:c3:f0: d9:57:e0:23:be:22:7d:1d:9f:e6:87:2c:a8:f8:50: 78:f6:e1:95:5c:82:65:1a:10:65:a8:29:49:a3:d1: 2b:a2:1a:38:0d:cb:36:18:3d:a9:9e:83:16:d5:45: d6:7c:de:9d:e7:d8:8b:a2:76:10:4f:c5:cd:38:68: 4a:b0:82:46:f7:5b:7e:d7:7b:ea:f1:69:5d:82:9f: c3:72:19:2f:93:c3:e7:c8:72:08:db:0b:2a:7e:07: 60:11:e2:d8:c7:02:10:91:e8:94:3f:f5:06:d9:4d: cb:fc:e9:9d:44:0a:05:c8:da:cd:ba:68:87:10:88: 31:41:3c:24:72:4a:00:18:bd:5a:55:94:79:ce:f3: ea:c5:f3:04:39:f2:53:ff:65:36:c6:5e:b2:68:b2: fd:02:f6:4a:d4:6d:41:23:88:15:5a:58:c3:1e:f8: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF X509v3 Authority Key Identifier: keyid:C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:66:5f:d7:e6:7f:25:db:16:15:30:a0:bb:87:44:a4:9b:cc: 19:bf:43:be:e1:e3:fb:0d:74:aa:c5:23:46:09:14:70:35:24: 8d:18:62:61:80:e4:93:f5:d4:92:b9:77:fc:db:a2:02:bf:a1: 6f:b4:e1:a6:47:b1:ae:81:c7:85:a4:1c:1e:35:5c:da:16:bd: 94:f3:a8:ff:76:49:e4:db:f7:1a:0f:10:cc:32:29:6c:44:c3: bb:67:a0:28:70:ca:c9:4e:98:92:a6:b2:88:b6:23:01:99:b7: 6a:4d:16:a7:e9:4a:5b:f8:5d:cf:4e:49:d8:b5:e8:ca:3e:90: 04:2b:55:f5:c6:bb:09:6a:30:30:78:60:2a:f9:2d:37:a4:62: 19:e9:58:a5:63:7b:1e:b0:b1:a0:a7:2b:99:e0:b0:b6:c3:92: a7:f0:7d:ee:fc:1f:e2:95:d4:99:9d:4c:3e:b1:d7:b0:b7:3c: 71:48:84:ba:a9:2e:d9:33:39:ba:06:81:6d:50:63:7a:ec:23: 18:bd:9e:1c:e0:a4:77:c8:7b:9b:75:34:93:25:e4:fc:3c:7a: e6:3d:1c:a2:d0:e8:36:ee:be:90:62:06:c5:20:9e:c9:6b:18: 5f:c6:f2:d0:c5:78:0e:4a:81:08:b6:11:61:ae:b8:54:86:b1: 8a:72:1d:06 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA3swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzUz QUY0MDQzRkM0RDJCMDA4NTg4MjIyOUFCMjc1MDRCNkE4MjIzODAeFw0yNTA2MjEw MTQ2NDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM4QzMxOEI5QzgzRTQ4 MDRDNTBEQUM2NkQ2OUVDMENGN0I1M0U0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp+WUC0bJtI8B2OYM/gyDMkb9FqjRlVjnV9ORC1GZZPfwXRUOw i5c06JkccYbV4145kmBj0Bo3RqlkWanTufL7MUJcxeKH5R/jgUNQBzU2MIhX1jHW 3H3D8NlX4CO+In0dn+aHLKj4UHj24ZVcgmUaEGWoKUmj0SuiGjgNyzYYPamegxbV RdZ83p3n2IuidhBPxc04aEqwgkb3W37Xe+rxaV2Cn8NyGS+Tw+fIcgjbCyp+B2AR 4tjHAhCR6JQ/9QbZTcv86Z1ECgXI2s26aIcQiDFBPCRySgAYvVpVlHnO8+rF8wQ5 8lP/ZTbGXrJosv0C9krUbUEjiBVaWMMe+PKpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyMMYucg+SATFDaxm1p7Az3tT5K8wHwYDVR0jBBgwFoAUxTr0BD/E0rAIWIIi mrJ1BLaoIjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 MS94VHIwQkRfRTByQUlXSUlpbXJKMUJMYW9JamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hUcjBCRF9FMHJBSVdJSWltckoxQkxhb0lqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDEveFRyMEJEX0UwckFJ V0lJaW1ySjFCTGFvSWpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFxmX9fmfyXbFhUwoLuHRKSbzBm/Q77h4/sNdKrFI0YJFHA1JI0YYmGA5JP1 1JK5d/zbogK/oW+04aZHsa6Bx4WkHB41XNoWvZTzqP92SeTb9xoPEMwyKWxEw7tn oChwyslOmJKmsoi2IwGZt2pNFqfpSlv4Xc9OSdi16Mo+kAQrVfXGuwlqMDB4YCr5 LTekYhnpWKVjex6wsaCnK5ngsLbDkqfwfe78H+KV1JmdTD6x17C3PHFIhLqpLtkz OboGgW1QY3rsIxi9nhzgpHfIe5t1NJMl5Pw8euY9HKLQ6DbuvpBiBsUgnslrGF/G 8tDFeA5KgQi2EWGuuFSGsYpyHQY= -----END CERTIFICATE-----Generated at Sat Jun 21 03:59:33 2025 by rpki-client