$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft File: guAWKrqAu-i04flju0W2Ryk0T6E.mft (raw, json) Hash identifier: z86Gif2kI/raEFEMrRZQyYFLNmQ+mmgAJHSII4fhKkc= Subject key identifier: F6:E4:B1:FD:F6:64:46:B6:C4:85:1B:FC:43:A9:16:32:61:C1:96:E5 Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Certificate serial: 1D6C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft Manifest number: 1D6C Signing time: Sat 17 May 2025 13:13:36 +0000 Manifest this update: Sat 17 May 2025 13:13:36 +0000 Manifest next update: Sat 17 May 2025 19:13:36 +0000 Files and hashes: 1: guAWKrqAu-i04flju0W2Ryk0T6E.crl (hash: j4+4PP5TC6v2AfOt2VKz1BmqyY6ds7BXD6BNzdDzezs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7532 (0x1d6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1 Validity Not Before: May 17 13:13:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F6E4B1FDF66446B6C4851BFC43A9163261C196E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d7:2f:13:11:4e:c1:4d:64:10:b1:61:cf:b6: de:9a:85:44:6f:6b:18:6e:4b:2d:4a:e2:5a:23:0b: dc:c6:c2:d6:e1:da:d5:ea:71:0e:e2:8f:4b:37:13: 0a:c1:40:c5:ca:81:65:42:2c:30:70:71:a5:35:4c: ec:10:e1:57:18:fa:46:1c:ae:d1:6f:e8:74:2d:ba: 01:9f:25:0e:92:40:e7:0c:fb:6c:5e:f6:3a:a5:20: 87:86:b0:25:26:00:e4:49:80:2c:81:2c:ff:1a:e1: 2a:37:8d:2e:f7:78:f9:fe:2c:db:0f:4a:ad:53:71: c9:ad:5e:73:ea:67:e0:c7:24:9f:a6:e6:7e:89:f4: 52:83:7a:25:f2:03:c5:bc:4e:34:2b:46:eb:d8:cc: bf:57:c7:29:43:29:c0:ba:ae:52:24:ac:16:cf:85: aa:87:41:51:7f:98:9f:df:db:58:3f:4f:a2:3c:2c: 92:f6:a3:23:9b:c4:4b:a6:e1:da:db:9d:79:82:f2: d0:fd:3a:92:3c:a4:37:81:63:c5:c0:b5:d2:3a:f1: a4:6b:6c:ed:80:f9:66:e5:f7:a1:d1:72:18:6f:20: 62:a8:1d:f2:a0:f7:0f:77:71:ad:91:ba:ca:88:f0: 55:79:86:b8:74:33:dc:9a:c1:58:6b:ec:e6:27:0a: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E4:B1:FD:F6:64:46:B6:C4:85:1B:FC:43:A9:16:32:61:C1:96:E5 X509v3 Authority Key Identifier: keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:22:94:f5:d8:8a:01:ec:8e:a7:05:fd:98:58:1d:55:d6:82: 9c:4e:28:3d:38:da:78:fc:75:4a:c5:be:19:36:9b:72:06:61: 85:5e:4e:0b:4b:c9:70:04:2b:83:d2:be:86:c2:1e:a7:24:e7: 46:b8:82:fb:54:30:57:14:d6:6b:31:44:68:28:12:28:f8:a9: 34:58:13:14:4a:4d:0b:7a:95:c5:35:b5:a2:aa:ff:0b:f7:42: 0e:6a:27:ac:f3:a1:d8:9a:0d:0e:07:c9:bd:37:7f:6b:36:0c: 56:52:81:c1:31:b0:74:5e:3d:87:6b:7d:d0:cb:15:4c:07:a8: bd:d4:2c:7e:f4:5b:93:65:e8:d8:28:12:04:64:0d:b6:48:e3: 6e:1f:58:f3:f0:53:6a:e9:93:32:bc:5d:17:f7:e2:87:13:f6: b4:78:1a:a9:d9:30:8e:92:96:ee:78:ff:22:bb:3e:63:a8:3d: e7:6a:0d:01:cc:a3:5c:cf:18:34:26:1b:ce:5b:a2:2e:63:a1: 38:94:70:f0:09:fa:d8:f2:01:76:4c:2a:fb:25:c9:71:6b:80: ab:26:31:c4:d9:1d:28:40:62:a2:42:2b:36:c7:32:f4:d9:a2: e5:15:77:76:2f:9d:e0:f0:21:b4:2f:ff:fd:c0:69:83:e4:cf: 3a:fb:35:c1 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJF MDE2MkFCQTgwQkJFOEI0RTFGOTYzQkI0NUI2NDcyOTM0NEZBMTAeFw0yNTA1MTcx MzEzMzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEY2RTRCMUZERjY2NDQ2 QjZDNDg1MUJGQzQzQTkxNjMyNjFDMTk2RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX1y8TEU7BTWQQsWHPtt6ahURvaxhuSy1K4lojC9zGwtbh2tXq cQ7ij0s3EwrBQMXKgWVCLDBwcaU1TOwQ4VcY+kYcrtFv6HQtugGfJQ6SQOcM+2xe 9jqlIIeGsCUmAORJgCyBLP8a4So3jS73ePn+LNsPSq1TccmtXnPqZ+DHJJ+m5n6J 9FKDeiXyA8W8TjQrRuvYzL9XxylDKcC6rlIkrBbPhaqHQVF/mJ/f21g/T6I8LJL2 oyObxEum4drbnXmC8tD9OpI8pDeBY8XAtdI68aRrbO2A+Wbl96HRchhvIGKoHfKg 9w93ca2RusqI8FV5hrh0M9yawVhr7OYnCttdAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU9uSx/fZkRrbEhRv8Q6kWMmHBluUwHwYDVR0jBBgwFoAUguAWKrqAu+i04flj u0W2Ryk0T6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx L2d1QVdLcnFBdS1pMDRmbGp1MFcyUnlrMFQ2RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZ3VBV0tycUF1LWkwNGZsanUwVzJSeWswVDZFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxL2d1QVdLcnFBdS1pMDRm bGp1MFcyUnlrMFQ2RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCwIpT12IoB7I6nBf2YWB1V1oKcTig9ONp4/HVKxb4ZNptyBmGFXk4LS8lwBCuD 0r6Gwh6nJOdGuIL7VDBXFNZrMURoKBIo+Kk0WBMUSk0LepXFNbWiqv8L90IOaies 86HYmg0OB8m9N39rNgxWUoHBMbB0Xj2Ha33QyxVMB6i91Cx+9FuTZejYKBIEZA22 SONuH1jz8FNq6ZMyvF0X9+KHE/a0eBqp2TCOkpbueP8iuz5jqD3nag0BzKNczxg0 JhvOW6IuY6E4lHDwCfrY8gF2TCr7Jclxa4CrJjHE2R0oQGKiQis2xzL02aLlFXd2 L53g8CG0L//9wGmD5M86+zXB -----END CERTIFICATE-----Generated at Sat May 17 14:56:31 2025 by rpki-client