$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.mft File: H4HG-W0BkJkB20LNehLnmKk_Trc.mft (raw, json) Hash identifier: RcqgHxzitpSBw7vljkJ/HjZf4OHWbk3B6/SeFqzur7o= Subject key identifier: 28:8B:2C:D2:5A:72:65:02:C8:E7:0C:1A:5D:FE:7B:88:37:0F:67:4E Authority key identifier: 1F:81:C6:F9:6D:01:90:99:01:DB:42:CD:7A:12:E7:98:A9:3F:4E:B7 Certificate issuer: /CN=1F81C6F96D01909901DB42CD7A12E798A93F4EB7 Certificate serial: 211F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H4HG-W0BkJkB20LNehLnmKk_Trc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.mft Manifest number: 211F Signing time: Sat 17 May 2025 03:12:12 +0000 Manifest this update: Sat 17 May 2025 03:12:12 +0000 Manifest next update: Sat 17 May 2025 09:12:12 +0000 Files and hashes: 1: H4HG-W0BkJkB20LNehLnmKk_Trc.crl (hash: X8UxZWeHgS5ytjPZMb3KFmRfPlmLJZDK8wXdlJOonVY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H4HG-W0BkJkB20LNehLnmKk_Trc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 09:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8479 (0x211f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F81C6F96D01909901DB42CD7A12E798A93F4EB7 Validity Not Before: May 17 03:12:12 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=288B2CD25A726502C8E70C1A5DFE7B88370F674E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ab:01:e3:31:74:77:76:6e:ae:0d:cd:02:f0: bc:8f:70:47:97:3b:28:21:d6:db:28:68:f6:e0:ff: aa:18:2b:bf:1a:ca:2f:4d:fe:f9:e7:ab:2d:3f:fc: 42:87:6b:c3:7d:56:d9:aa:22:23:2a:c2:da:1c:34: 18:ed:8e:34:12:5a:25:e2:07:b4:fb:36:5f:43:4b: 99:0f:14:32:bf:c0:25:8f:5f:18:0b:fd:d0:40:02: 36:52:8d:d4:da:1d:20:fe:03:f5:14:ea:12:fe:38: c2:65:d7:26:af:c1:de:eb:01:0a:e9:e3:0f:31:ad: 0f:93:a4:8a:38:be:e7:e7:a5:45:e6:ce:d1:53:68: 8f:65:85:b4:33:a2:8a:87:9e:24:82:2a:ed:cf:10: 17:15:a5:33:55:04:0b:c2:dd:16:cc:71:33:d6:41: fd:30:85:e9:d1:17:17:66:48:e2:ec:42:44:c8:07: b9:e7:06:c5:cc:15:dc:f4:21:55:cc:e2:3e:c2:9a: 4f:60:59:cc:54:b5:d8:29:78:84:98:5b:b3:2d:2e: 61:b2:89:0b:26:91:aa:65:00:2c:ae:8a:82:56:bb: 00:c2:ab:2e:d5:11:4d:b5:46:bd:ef:1a:34:02:d9: 50:f6:5a:0e:93:a1:fd:f9:d1:92:3d:d0:fe:ae:7c: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8B:2C:D2:5A:72:65:02:C8:E7:0C:1A:5D:FE:7B:88:37:0F:67:4E X509v3 Authority Key Identifier: keyid:1F:81:C6:F9:6D:01:90:99:01:DB:42:CD:7A:12:E7:98:A9:3F:4E:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H4HG-W0BkJkB20LNehLnmKk_Trc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f0:91:d4:c3:71:bd:78:26:e4:e4:3a:b7:f2:1a:fe:8e:51: d1:0f:ca:a2:c2:10:59:bc:b5:b6:34:b0:4d:03:de:1b:6e:c3: 56:88:2a:9b:34:8f:4d:15:d2:77:51:eb:cc:49:f2:01:6c:2c: b9:30:3e:8f:d8:2c:22:ab:a9:1c:c9:e1:ce:fd:10:a9:c4:2e: 01:40:53:08:2d:d6:9b:39:e3:b4:b4:ac:91:9a:41:fd:df:7b: 15:ce:eb:dd:50:c4:5b:f5:db:1f:34:9b:29:a3:05:f2:0f:e1: 14:e8:3b:18:d9:8d:96:b8:fa:25:99:6c:b8:ec:b1:8e:1e:8f: e6:0f:72:c2:78:cf:d1:d7:16:71:e8:5c:0f:4e:68:85:99:d3: 92:1a:c2:ba:bb:1a:a4:a4:9b:4a:4d:20:43:ea:d9:75:5b:6a: 93:4c:f8:1b:eb:2d:72:bb:49:e6:6e:dd:a0:fd:9a:5f:71:28: 64:3d:8f:89:89:89:32:0d:99:b8:7f:a6:cd:22:93:76:df:3b: d7:2b:6e:3d:63:ae:fe:05:6b:cb:60:f0:b2:b6:b1:7f:5f:30: 18:ea:95:9c:f7:d5:dd:02:ef:4f:cf:cd:37:ff:46:5a:ba:8c: 06:dc:bc:cb:41:9d:79:6e:78:25:29:9d:05:2d:c3:f4:3c:22: 20:50:93:1e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY4 MUM2Rjk2RDAxOTA5OTAxREI0MkNEN0ExMkU3OThBOTNGNEVCNzAeFw0yNTA1MTcw MzEyMTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDI4OEIyQ0QyNUE3MjY1 MDJDOEU3MEMxQTVERkU3Qjg4MzcwRjY3NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZqwHjMXR3dm6uDc0C8LyPcEeXOygh1tsoaPbg/6oYK78ayi9N /vnnqy0//EKHa8N9VtmqIiMqwtocNBjtjjQSWiXiB7T7Nl9DS5kPFDK/wCWPXxgL /dBAAjZSjdTaHSD+A/UU6hL+OMJl1yavwd7rAQrp4w8xrQ+TpIo4vufnpUXmztFT aI9lhbQzooqHniSCKu3PEBcVpTNVBAvC3RbMcTPWQf0whenRFxdmSOLsQkTIB7nn BsXMFdz0IVXM4j7Cmk9gWcxUtdgpeISYW7MtLmGyiQsmkaplACyuioJWuwDCqy7V EU21Rr3vGjQC2VD2Wg6Tof350ZI90P6ufJVvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKIss0lpyZQLI5wwaXf57iDcPZ04wHwYDVR0jBBgwFoAUH4HG+W0BkJkB20LN ehLnmKk/TrcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAy My9INEhHLVcwQmtKa0IyMExOZWhMbm1La19UcmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0g0SEctVzBCa0prQjIwTE5laExubUtrX1RyYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMjMvSDRIRy1XMEJrSmtC MjBMTmVoTG5tS2tfVHJjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFDwkdTDcb14JuTkOrfyGv6OUdEPyqLCEFm8tbY0sE0D3htuw1aIKps0j00V 0ndR68xJ8gFsLLkwPo/YLCKrqRzJ4c79EKnELgFAUwgt1ps547S0rJGaQf3fexXO 691QxFv12x80mymjBfIP4RToOxjZjZa4+iWZbLjssY4ej+YPcsJ4z9HXFnHoXA9O aIWZ05Iawrq7GqSkm0pNIEPq2XVbapNM+BvrLXK7SeZu3aD9ml9xKGQ9j4mJiTIN mbh/ps0ik3bfO9crbj1jrv4Fa8tg8LK2sX9fMBjqlZz31d0C70/PzTf/Rlq6jAbc vMtBnXlueCUpnQUtw/Q8IiBQkx4= -----END CERTIFICATE-----Generated at Sat May 17 08:36:57 2025 by rpki-client