$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft File: CZkX2MUTgArhbVggcgZ8KTd8Jik.mft (raw, json) Hash identifier: eKDSco9BgdA/Z56SXCzIbwgX1YpBJCe5IoBqTgOisv4= Subject key identifier: A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6 Authority key identifier: 09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29 Certificate issuer: /CN=099917D8C513800AE16D582072067C29377C2629 Certificate serial: 54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft Manifest number: 54 Signing time: Sat 26 Apr 2025 09:36:39 +0000 Manifest this update: Sat 26 Apr 2025 09:36:39 +0000 Manifest next update: Sat 26 Apr 2025 15:36:39 +0000 Files and hashes: 1: CZkX2MUTgArhbVggcgZ8KTd8Jik.crl (hash: 2kAp6iNngBXtXQ7J31Y1+Tj+eerSyZGz3bMX0gXKAQU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099917D8C513800AE16D582072067C29377C2629 Validity Not Before: Apr 26 09:36:39 2025 GMT Not After : Apr 10 01:10:05 2026 GMT Subject: CN=A3FF29CFD23BB00C4218F91914122C83CB18F8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:5e:98:92:b3:79:0e:37:55:5d:95:bf:18: 53:30:b8:fb:e5:ce:b8:5b:8f:83:37:66:a1:2e:84: 4b:23:1f:6a:f1:52:80:f7:a3:08:f1:8c:d3:75:94: 4c:18:f8:07:3f:97:1c:a5:3b:6c:f7:19:0d:80:1e: b4:aa:4b:b6:4f:cf:37:de:9f:e8:02:3a:45:95:ac: 54:98:55:de:cb:2b:79:5e:e5:d2:8a:05:f9:38:b3: 80:35:9f:cd:a4:0b:b4:3b:2e:1c:ae:ba:5f:fd:02: 0a:23:8d:b7:4c:45:28:a3:7d:f4:41:0e:ef:2e:bb: 83:00:06:ce:e7:8d:12:34:c9:ba:32:56:52:1b:8b: 6f:e7:ea:fd:61:f6:54:6c:cd:73:25:a2:18:85:1f: 62:b9:27:13:dc:be:1b:be:9c:63:6c:8c:44:23:aa: 43:a4:46:e9:68:19:af:54:07:c0:f1:2d:7a:d5:d2: 82:cc:05:b0:f4:31:38:0c:83:15:98:fa:19:10:9e: ba:ec:67:e9:b9:38:27:20:1a:2c:ae:28:21:89:87: 6b:aa:c8:00:ef:60:60:ae:7d:fa:d6:78:ad:b7:14: 5a:ba:f1:ea:17:d9:16:4f:b8:e0:9f:66:4d:be:66: 31:77:fc:35:72:f8:cf:cb:9b:f3:5e:2c:c3:cd:b9: 3a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6 X509v3 Authority Key Identifier: keyid:09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:fc:81:f6:b9:c4:4b:d6:ed:85:ab:b9:3f:64:e7:20:6d:42: 97:86:ae:93:5e:82:6d:4f:d4:0f:a3:fc:96:9a:e9:b0:90:70: 87:c6:cc:3e:7b:a9:c3:48:e8:04:d1:b3:e9:5d:18:40:8b:82: 12:c7:1c:6f:a5:74:fd:72:d4:78:10:01:9f:e9:d7:40:04:7d: 0a:c2:3f:e8:7a:ed:ee:bc:94:ce:20:8a:f7:38:3e:3c:57:56: 66:2a:eb:6a:3a:39:43:99:df:e5:92:7f:e5:b8:1f:53:b9:80: 1f:83:3a:02:7e:0d:11:92:d2:c6:52:03:96:38:9d:ca:51:5e: 93:a4:ba:43:5b:a3:de:0a:24:fa:f5:51:11:98:92:6f:25:ae: 4c:99:36:34:fe:88:8e:12:44:a8:60:28:0a:62:be:ce:3c:20: 56:b0:81:2c:e7:1b:5f:e2:5e:9a:dc:7b:e3:8f:ce:f5:de:c0: c2:aa:11:8a:39:cd:e8:51:52:ba:54:20:7e:7d:78:7f:33:6d: 14:42:df:de:e2:c8:ca:d7:21:6a:cc:3f:33:28:6b:c8:ea:27: 47:79:1d:34:96:86:c8:e6:c9:cb:4b:e0:28:85:25:a6:6f:99: 6e:d2:f3:6a:c5:9d:de:cb:a1:02:a5:36:89:31:9d:7a:d4:87: 74:29:62:68 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTk5 MTdEOEM1MTM4MDBBRTE2RDU4MjA3MjA2N0MyOTM3N0MyNjI5MB4XDTI1MDQyNjA5 MzYzOVoXDTI2MDQxMDAxMTAwNVowMzExMC8GA1UEAxMoQTNGRjI5Q0ZEMjNCQjAw QzQyMThGOTE5MTQxMjJDODNDQjE4RjhGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKviXpiSs3kON1Vdlb8YUzC4++XOuFuPgzdmoS6ESyMfavFSgPej CPGM03WUTBj4Bz+XHKU7bPcZDYAetKpLtk/PN96f6AI6RZWsVJhV3ssreV7l0ooF +TizgDWfzaQLtDsuHK66X/0CCiONt0xFKKN99EEO7y67gwAGzueNEjTJujJWUhuL b+fq/WH2VGzNcyWiGIUfYrknE9y+G76cY2yMRCOqQ6RG6WgZr1QHwPEtetXSgswF sPQxOAyDFZj6GRCeuuxn6bk4JyAaLK4oIYmHa6rIAO9gYK59+tZ4rbcUWrrx6hfZ Fk+44J9mTb5mMXf8NXL4z8ub814sw825Ok8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSj/ynP0juwDEIY+RkUEiyDyxj49jAfBgNVHSMEGDAWgBQJmRfYxROACuFtWCBy BnwpN3wmKTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzYw L0Naa1gyTVVUZ0FyaGJWZ2djZ1o4S1RkOEppay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQ1prWDJNVVRnQXJoYlZnZ2NnWjhLVGQ4SmlrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2MC9DWmtYMk1VVGdBcmhi VmdnY2daOEtUZDhKaWsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVvyB9rnES9bthau5P2TnIG1Cl4auk16CbU/UD6P8lprpsJBwh8bMPnupw0jo BNGz6V0YQIuCEsccb6V0/XLUeBABn+nXQAR9CsI/6Hrt7ryUziCK9zg+PFdWZirr ajo5Q5nf5ZJ/5bgfU7mAH4M6An4NEZLSxlIDljidylFek6S6Q1uj3gok+vVREZiS byWuTJk2NP6IjhJEqGAoCmK+zjwgVrCBLOcbX+Jemtx744/O9d7AwqoRijnN6FFS ulQgfn14fzNtFELf3uLIytchasw/MyhryOonR3kdNJaGyObJy0vgKIUlpm+ZbtLz asWd3suhAqU2iTGdetSHdCliaA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:40:32 2025 by rpki-client