$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft File: zfv2KGSEFu4dmdMuX5yWhae-K7w.mft (raw, json) Hash identifier: oFDfOio4hGMEAjiRXh8v6wF4rN8GQ+bfyS+jhV5zLoc= Subject key identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B Authority key identifier: CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC Certificate issuer: /CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Certificate serial: 1D4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft Manifest number: 1D4E Signing time: Sat 17 May 2025 03:12:15 +0000 Manifest this update: Sat 17 May 2025 03:12:15 +0000 Manifest next update: Sat 17 May 2025 09:12:15 +0000 Files and hashes: 1: zfv2KGSEFu4dmdMuX5yWhae-K7w.crl (hash: 0Otjqci66Iw/HRBQPWS9WuFDmQYdtI9bYZsofRKiGbQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 09:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7502 (0x1d4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Validity Not Before: May 17 03:12:15 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3C66EB21CE741247CB2A9320E25E8CEF324D467B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:49:8e:33:ee:b4:d8:a8:76:b4:9d:5b:cc:42: 2f:9f:47:62:a7:e1:8e:d7:07:e1:e0:5d:02:81:a9: d0:22:bd:24:a3:6e:9b:de:62:be:2a:40:6e:38:19: d3:66:28:57:3b:99:53:71:f2:5c:d4:ea:c3:bd:6c: 63:37:85:6b:ef:18:36:68:30:95:90:1a:8b:ee:0e: 89:8c:5e:43:ee:c6:df:15:16:3c:34:7e:46:5f:06: ec:d9:86:c9:7c:a8:28:9c:34:56:48:c9:b3:e5:a2: 6c:90:33:29:c8:8c:e9:57:34:c6:f6:45:37:f6:71: 00:2f:1b:b8:9e:8b:f3:92:5f:88:93:ed:a9:3d:ef: 3b:61:74:ad:7b:bf:e7:3e:27:63:a2:88:49:0a:a3: 1f:63:11:40:d4:86:24:0f:5a:73:f0:17:3d:33:25: 61:42:8f:5f:6e:85:46:f6:90:98:fd:ae:43:2b:02: e5:09:fd:c9:44:df:58:94:36:c2:a7:05:a9:60:18: 20:49:44:c6:b4:5a:20:a1:24:05:fa:5a:7e:e4:47: fe:e9:51:73:9b:c1:59:2e:be:3e:9a:84:64:52:8f: c3:c7:31:32:1f:f0:53:4d:4e:9c:81:0a:f0:13:99: d8:61:bf:3b:c8:1d:59:92:30:46:36:2a:ab:87:d8: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B X509v3 Authority Key Identifier: keyid:CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:8b:54:be:cc:69:ac:0a:20:1c:df:ee:1c:06:55:5f:4a:f4: c5:5c:9c:2d:08:21:1a:04:c7:d1:97:1f:99:8a:a0:51:e8:ce: 0b:be:d8:47:11:a8:6e:02:2a:1f:a7:aa:7c:f3:4f:80:09:68: 63:b6:2a:b5:ad:e8:85:b9:38:e3:04:0b:72:ed:32:d8:c9:ae: 81:de:db:62:08:ad:f6:37:f4:38:6c:2c:15:75:4a:f5:cc:bf: 94:c4:7d:7d:50:6e:98:05:22:c8:b7:f8:64:95:39:a0:ae:7c: 52:f6:d5:cc:e2:37:a8:00:33:7c:03:a2:b2:2d:51:9d:be:ec: 19:55:b9:73:0b:9b:5e:0a:d7:bc:c7:a0:9b:3e:7c:b3:c7:5f: f4:99:1a:15:0e:d8:44:c0:e3:db:ca:3a:1e:01:e8:96:ef:a2: 35:ef:a1:67:41:01:9d:bd:f5:c3:54:2e:e7:f1:77:43:6d:2f: c5:19:62:6e:da:ab:c2:f4:81:09:83:02:c4:e9:1d:f5:db:97: d8:07:f8:a8:51:95:32:56:25:b0:91:e2:b7:df:37:0d:f5:7e: 49:ed:2a:bf:8a:38:f6:b4:c8:af:6c:26:25:70:3b:a2:6e:22: 6c:4f:63:05:2c:8e:43:05:63:f4:d3:0e:b2:a8:dd:76:21:3f: c8:02:a1:b6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHU4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RG QkY2Mjg2NDg0MTZFRTFEOTlEMzJFNUY5Qzk2ODVBN0JFMkJCQzAeFw0yNTA1MTcw MzEyMTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNDNjZFQjIxQ0U3NDEy NDdDQjJBOTMyMEUyNUU4Q0VGMzI0RDQ2N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtSY4z7rTYqHa0nVvMQi+fR2Kn4Y7XB+HgXQKBqdAivSSjbpve Yr4qQG44GdNmKFc7mVNx8lzU6sO9bGM3hWvvGDZoMJWQGovuDomMXkPuxt8VFjw0 fkZfBuzZhsl8qCicNFZIybPlomyQMynIjOlXNMb2RTf2cQAvG7iei/OSX4iT7ak9 7zthdK17v+c+J2OiiEkKox9jEUDUhiQPWnPwFz0zJWFCj19uhUb2kJj9rkMrAuUJ /clE31iUNsKnBalgGCBJRMa0WiChJAX6Wn7kR/7pUXObwVkuvj6ahGRSj8PHMTIf 8FNNTpyBCvATmdhhvzvIHVmSMEY2KquH2AjHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPGbrIc50EkfLKpMg4l6M7zJNRnswHwYDVR0jBBgwFoAUzfv2KGSEFu4dmdMu X5yWhae+K7wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy My96ZnYyS0dTRUZ1NGRtZE11WDV5V2hhZS1LN3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pmdjJLR1NFRnU0ZG1kTXVYNXlXaGFlLUs3dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjMvemZ2MktHU0VGdTRk bWRNdVg1eVdoYWUtSzd3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEGLVL7MaawKIBzf7hwGVV9K9MVcnC0IIRoEx9GXH5mKoFHozgu+2EcRqG4C Kh+nqnzzT4AJaGO2KrWt6IW5OOMEC3LtMtjJroHe22IIrfY39DhsLBV1SvXMv5TE fX1QbpgFIsi3+GSVOaCufFL21cziN6gAM3wDorItUZ2+7BlVuXMLm14K17zHoJs+ fLPHX/SZGhUO2ETA49vKOh4B6JbvojXvoWdBAZ299cNULufxd0NtL8UZYm7aq8L0 gQmDAsTpHfXbl9gH+KhRlTJWJbCR4rffNw31fkntKr+KOPa0yK9sJiVwO6JuImxP YwUsjkMFY/TTDrKo3XYhP8gCobY= -----END CERTIFICATE-----Generated at Sat May 17 08:35:44 2025 by rpki-client