$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft File: jADfzi10-W1xE_7xW2z4zSGqJm4.mft (raw, json) Hash identifier: bcvnp6FVtO6MxPPIbSv0DJ2ipbmaQn46Fj9VUlhFDe4= Subject key identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D Authority key identifier: 8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E Certificate issuer: /CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Certificate serial: 1D57 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft Manifest number: 1D57 Signing time: Sat 17 May 2025 17:38:22 +0000 Manifest this update: Sat 17 May 2025 17:38:22 +0000 Manifest next update: Sat 17 May 2025 23:38:22 +0000 Files and hashes: 1: jADfzi10-W1xE_7xW2z4zSGqJm4.crl (hash: lrew/E1rvKx+AzqKcEUI8SR5cIRe3g4n107QgttSxmE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7511 (0x1d57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Validity Not Before: May 17 17:38:22 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2DBDCE5D957056DAF5725D4EF0B8D9FD9FA84F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:78:49:97:ff:78:07:ae:27:3d:db:c3:d3: 5f:d9:dc:5f:b7:bd:f8:d4:f2:0e:89:b1:8e:be:53: c2:b0:5a:a3:5d:61:4e:b4:01:1b:2f:7d:5e:6e:7f: b7:31:62:eb:a4:c6:5e:4d:47:60:9d:80:d4:e9:36: 24:32:5e:3d:4d:23:94:c2:c6:a0:47:9d:f5:5d:d9: 13:c0:e2:81:5b:56:1a:ff:92:4e:ec:fc:b8:4f:4e: a7:52:de:f8:79:47:1c:29:c1:77:1b:0b:93:71:65: 41:7f:38:0e:af:e3:96:67:a4:cd:50:db:e5:5e:97: 90:22:5d:6a:23:69:8e:72:35:27:ff:8b:ed:ea:33: 71:cc:aa:96:e7:cc:18:43:05:8b:4c:ac:15:47:99: ef:c2:46:61:88:a2:58:33:38:40:de:59:05:f8:f0: fd:99:dd:08:a6:2c:ce:23:b5:f3:a3:45:f5:3c:60: 53:29:71:e5:5b:26:30:50:51:25:e2:5f:10:db:0a: ca:cb:26:9a:59:26:c7:c3:c6:48:3b:1f:1f:cd:48: 6b:0e:c2:1b:6e:48:71:ba:3c:7e:c3:c3:bc:42:38: cb:d3:2b:86:2d:75:7e:0f:5f:74:bf:5d:d6:00:61: fb:3e:30:05:7d:86:71:a0:b4:ec:f4:de:60:da:d1: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D X509v3 Authority Key Identifier: keyid:8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b4:eb:98:8b:35:ba:76:11:72:a3:59:ec:3d:6c:3f:d4:58: b6:9f:4b:66:97:8b:78:15:04:1e:0d:c8:8f:e1:56:6f:20:f3: 59:56:0d:8c:35:df:d8:3a:50:e2:b9:0f:a5:3c:e7:41:02:19: 51:d9:60:43:88:58:d2:80:aa:a7:db:6a:10:d7:c2:bd:d9:d8: d6:72:a5:b5:0d:0d:27:07:39:5c:67:6b:34:df:58:36:96:91: 5f:39:0e:08:d8:5c:df:be:a9:cb:2c:49:03:85:87:40:b1:b6: 7b:3c:e8:20:0d:9a:ce:76:e4:f6:8c:c6:6b:4f:6e:c9:3d:4b: 01:50:96:87:e1:e9:24:3b:18:85:45:e6:8b:6e:c5:94:d0:9b: df:43:99:34:ce:2e:52:f8:49:aa:e4:73:3f:bb:b5:72:d2:43: f6:81:cd:c0:48:d0:61:e1:f5:a7:14:08:33:d0:20:29:81:97: bc:4c:c8:44:0b:8d:8d:55:b5:39:22:de:74:d9:6a:94:4d:2a: 5c:99:e1:e7:1f:e6:4d:bb:b0:fb:11:6c:50:9a:c8:5f:c9:5a: de:03:69:99:6d:81:b4:c7:fd:8d:84:c2:3d:cd:2d:d8:5c:7a: 4a:2d:07:8b:34:b7:b0:89:b9:96:70:b7:cc:11:45:de:e0:72: 77:0b:7e:fb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMw MERGQ0UyRDc0Rjk2RDcxMTNGRUYxNUI2Q0Y4Q0QyMUFBMjY2RTAeFw0yNTA1MTcx NzM4MjJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJEQkRDRTVEOTU3MDU2 REFGNTcyNUQ0RUYwQjhEOUZEOUZBODRGM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV4nhJl/94B64nPdvD01/Z3F+3vfjU8g6JsY6+U8KwWqNdYU60 ARsvfV5uf7cxYuukxl5NR2CdgNTpNiQyXj1NI5TCxqBHnfVd2RPA4oFbVhr/kk7s /LhPTqdS3vh5RxwpwXcbC5NxZUF/OA6v45ZnpM1Q2+Vel5AiXWojaY5yNSf/i+3q M3HMqpbnzBhDBYtMrBVHme/CRmGIolgzOEDeWQX48P2Z3QimLM4jtfOjRfU8YFMp ceVbJjBQUSXiXxDbCsrLJppZJsfDxkg7Hx/NSGsOwhtuSHG6PH7Dw7xCOMvTK4Yt dX4PX3S/XdYAYfs+MAV9hnGgtOz03mDa0Ut5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQULb3OXZVwVtr1cl1O8LjZ/Z+oTz0wHwYDVR0jBBgwFoAUjADfzi10+W1xE/7x W2z4zSGqJm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OC9qQURmemkxMC1XMXhFXzd4VzJ6NHpTR3FKbTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pBRGZ6aTEwLVcxeEVfN3hXMno0elNHcUptNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTgvakFEZnppMTAtVzF4 RV83eFcyejR6U0dxSm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHW065iLNbp2EXKjWew9bD/UWLafS2aXi3gVBB4NyI/hVm8g81lWDYw139g6 UOK5D6U850ECGVHZYEOIWNKAqqfbahDXwr3Z2NZypbUNDScHOVxnazTfWDaWkV85 DgjYXN++qcssSQOFh0Cxtns86CANms525PaMxmtPbsk9SwFQlofh6SQ7GIVF5otu xZTQm99DmTTOLlL4Sarkcz+7tXLSQ/aBzcBI0GHh9acUCDPQICmBl7xMyEQLjY1V tTki3nTZapRNKlyZ4ecf5k27sPsRbFCayF/JWt4DaZltgbTH/Y2Ewj3NLdhcekot B4s0t7CJuZZwt8wRRd7gcncLfvs= -----END CERTIFICATE-----Generated at Sat May 17 22:36:10 2025 by rpki-client