$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft File: cpzUo3V_UkXEbNX7sK1MjtG73Us.mft (raw, json) Hash identifier: OCHEtHaEela8lgQ42KsNhxqU4UGy27aTiR8Ez2Mu8gs= Subject key identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 Authority key identifier: 72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B Certificate issuer: /CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Certificate serial: 1500 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft Manifest number: 1500 Signing time: Sat 17 May 2025 23:07:29 +0000 Manifest this update: Sat 17 May 2025 23:07:29 +0000 Manifest next update: Sun 18 May 2025 05:07:29 +0000 Files and hashes: 1: cpzUo3V_UkXEbNX7sK1MjtG73Us.crl (hash: Iga2/NwuCmGPGt8/kBu7mmPvzZtxikfZJ3taMMKrHrY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5376 (0x1500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Validity Not Before: May 17 23:07:29 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B2C580BE6C0A90D2887CAE55DD0C71A81BE1C6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:4b:a7:ea:0e:54:b0:74:1f:43:82:e2:d6: 23:41:e9:9f:b0:d1:09:31:5e:92:73:75:78:c5:27: d9:92:38:ab:4f:90:68:4b:94:8f:5c:5f:75:81:3c: 2e:2e:01:00:c1:3c:a9:99:d4:b3:5f:8a:f5:23:1d: 9c:47:a5:d0:d5:6c:25:77:b8:c5:6b:87:fd:83:f8: d2:98:a7:3d:04:bf:8b:f6:2d:d1:2b:34:51:eb:8d: 8a:7e:12:88:e3:2a:99:08:13:30:a9:ca:d8:2e:30: cf:8d:fc:22:7a:a9:c1:21:af:03:b0:e1:5d:ee:74: 41:74:c3:ae:80:ae:8a:71:2c:a1:f9:f4:ee:5e:78: 87:3b:67:26:77:ee:60:78:32:e4:10:b7:bc:6e:bc: 86:dd:5b:61:74:e8:78:cc:a4:0c:7e:99:6a:cc:b5: 36:70:ab:48:4f:11:38:a2:a4:16:dd:c9:f6:aa:29: e6:07:e4:b9:f6:68:56:b6:b8:c8:a9:0d:55:0d:b7: 68:0a:07:92:06:23:51:f7:2a:c0:30:b7:78:57:75: 10:0d:96:65:44:60:af:e9:ac:42:3a:37:6f:da:1f: 4d:ea:d6:e8:41:ee:7d:e3:63:7e:9a:58:81:5f:9a: dc:31:35:d1:20:de:3e:b3:88:01:fe:e0:7d:0b:0c: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 X509v3 Authority Key Identifier: keyid:72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b3:d1:4b:ff:f2:4e:a0:a3:e9:e7:32:bc:c2:7c:47:0d:28: 2c:50:a5:e1:f7:0b:c9:c9:d6:21:d5:22:af:08:45:ed:7f:54: 52:08:9f:23:0d:ca:ac:f3:65:5c:55:42:3d:85:df:2e:d1:8c: 83:0e:46:70:87:28:77:17:db:cf:b2:4f:eb:f0:91:f8:39:ad: a1:d0:3f:ab:f8:50:0d:c3:72:b8:8c:5a:41:ef:8a:09:92:5f: 7c:0e:3b:61:0a:5c:0f:b3:60:4a:3d:c4:90:12:00:46:69:6a: ca:83:d7:b4:95:f2:29:82:9c:3d:c0:34:5a:a9:77:e8:a1:f7: ec:14:bc:ef:c7:d8:80:85:70:ca:1a:e3:6d:8e:f6:b5:44:d0: 50:3d:4b:ec:ba:1f:d0:bf:05:bf:24:0d:1b:7a:d4:a2:b4:d8: 88:6d:b7:a0:09:14:09:33:cd:26:6f:70:d4:ed:fd:db:87:f4: 14:bc:f5:4f:90:76:8a:86:85:81:73:b7:d8:dd:88:33:36:5c: 63:39:be:44:74:cf:95:a3:47:c5:81:c6:0e:ba:15:db:43:bf: 36:42:db:cd:7f:a7:3c:a6:e9:02:1d:bd:8e:e1:65:b5:3d:4d: cc:74:7a:c0:c2:f6:bb:42:fa:5f:ed:cc:2f:5d:bc:7c:1e:76: e4:6b:5d:ae -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzI5 Q0Q0QTM3NTdGNTI0NUM0NkNENUZCQjBBRDRDOEVEMUJCREQ0QjAeFw0yNTA1MTcy MzA3MjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIyQzU4MEJFNkMwQTkw RDI4ODdDQUU1NUREMEM3MUE4MUJFMUM2QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsZ0un6g5UsHQfQ4Li1iNB6Z+w0QkxXpJzdXjFJ9mSOKtPkGhL lI9cX3WBPC4uAQDBPKmZ1LNfivUjHZxHpdDVbCV3uMVrh/2D+NKYpz0Ev4v2LdEr NFHrjYp+EojjKpkIEzCpytguMM+N/CJ6qcEhrwOw4V3udEF0w66AropxLKH59O5e eIc7ZyZ37mB4MuQQt7xuvIbdW2F06HjMpAx+mWrMtTZwq0hPETiipBbdyfaqKeYH 5Ln2aFa2uMipDVUNt2gKB5IGI1H3KsAwt3hXdRANlmVEYK/prEI6N2/aH03q1uhB 7n3jY36aWIFfmtwxNdEg3j6ziAH+4H0LDE7FAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUssWAvmwKkNKIfK5V3QxxqBvhxqUwHwYDVR0jBBgwFoAUcpzUo3V/UkXEbNX7 sK1MjtG73UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 Ny9jcHpVbzNWX1VrWEViTlg3c0sxTWp0RzczVXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NwelVvM1ZfVWtYRWJOWDdzSzFNanRHNzNVcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODcvY3B6VW8zVl9Va1hF Yk5YN3NLMU1qdEc3M1VzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH2z0Uv/8k6go+nnMrzCfEcNKCxQpeH3C8nJ1iHVIq8IRe1/VFIInyMNyqzz ZVxVQj2F3y7RjIMORnCHKHcX28+yT+vwkfg5raHQP6v4UA3DcriMWkHvigmSX3wO O2EKXA+zYEo9xJASAEZpasqD17SV8imCnD3ANFqpd+ih9+wUvO/H2ICFcMoa422O 9rVE0FA9S+y6H9C/Bb8kDRt61KK02Ihtt6AJFAkzzSZvcNTt/duH9BS89U+QdoqG hYFzt9jdiDM2XGM5vkR0z5WjR8WBxg66FdtDvzZC281/pzym6QIdvY7hZbU9Tcx0 esDC9rtC+l/tzC9dvHweduRrXa4= -----END CERTIFICATE-----Generated at Sun May 18 03:43:37 2025 by rpki-client