$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft File: T04zJwO54ZxdoBGkjEsnbpsp11w.mft (raw, json) Hash identifier: JUa46lStYK0hCTo616uYBdDvKN6tuhC0t5TGjDr07K4= Subject key identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 Authority key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C Certificate issuer: /CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Certificate serial: 3553 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft Manifest number: 3553 Signing time: Sat 17 May 2025 17:43:51 +0000 Manifest this update: Sat 17 May 2025 17:43:51 +0000 Manifest next update: Sat 17 May 2025 23:43:51 +0000 Files and hashes: 1: T04zJwO54ZxdoBGkjEsnbpsp11w.crl (hash: NjEdupIGtXays/pOhpoCqyPGdjhI1opuwjE7SI3D7WU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13651 (0x3553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Validity Not Before: May 17 17:43:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=470D131A7541923CA9A1A4C76A5788ADFD240CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:41:3b:cc:83:cc:71:a2:fc:27:62:37:91: ee:ce:92:88:cc:36:35:05:5d:e9:49:34:1a:8d:c0: 55:1f:c3:63:38:e4:56:b7:80:7a:b8:e4:0f:d7:00: 60:61:32:c1:b4:27:22:0d:3c:c4:4b:99:32:17:12: 56:19:47:d1:11:01:8a:98:c5:db:9f:b6:b9:b4:fb: 45:68:aa:4b:32:4b:e9:f8:a2:3f:79:86:ad:19:15: 73:3f:42:7e:99:5a:e3:ea:e4:9e:cb:30:17:dc:ef: 3f:41:52:03:b1:bc:c5:4e:27:7e:1e:53:80:9b:6f: a8:2f:13:4c:b7:52:16:a6:cf:8f:06:9c:50:b3:07: a3:b9:10:33:1c:69:53:51:39:93:25:8b:89:63:32: 34:c9:2e:ed:f1:04:87:0f:5c:d6:7e:fd:9d:1a:f8: 0b:cb:7d:7b:5b:7b:74:17:c5:c6:9a:0c:91:af:3d: 4a:49:12:7b:f0:7b:81:fe:8d:d0:c1:84:9b:c9:ae: f5:61:5d:16:ab:73:48:03:32:39:34:eb:7a:54:a0: 68:73:1b:59:33:20:28:c2:70:d6:0c:aa:6d:b0:98: 02:cd:eb:f5:17:cc:cc:28:c9:7b:a2:32:39:fb:b5: 32:d9:7a:07:cd:53:91:88:41:f2:00:e6:a6:85:28: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 X509v3 Authority Key Identifier: keyid:4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f2:c9:a9:7b:d2:35:e9:b1:ca:c0:bb:ed:c1:e9:9a:d6:10: 3f:20:52:bc:cf:53:b8:c2:db:34:6b:17:1a:bd:0c:fb:2d:15: 5b:b7:86:e6:a4:c4:f6:10:11:8f:5a:95:66:78:7a:e2:0a:7d: 8f:56:a2:cb:c0:06:63:cb:2a:a8:1b:0e:33:1a:12:df:d8:77: e6:88:25:d5:3d:0b:75:a0:0f:25:e3:4a:ea:78:23:ab:9b:7f: e4:f1:e4:3b:61:19:d5:83:df:9d:0b:cf:d6:f9:77:6f:7a:a8: d9:00:29:39:44:cc:45:47:99:2b:3e:d0:9b:fe:ce:76:2e:2b: c2:06:97:7a:c1:bd:78:3f:c8:7b:75:c4:be:e4:5a:ab:53:4f: 10:54:59:ff:7b:3c:ee:9a:1e:e0:7e:8d:8b:70:1e:ad:97:b1: 3c:42:80:d3:6d:f6:3a:fd:4f:40:8d:1f:f9:44:a5:dd:3b:c6: 66:05:45:a0:a3:d4:8f:9f:0f:fc:d5:85:98:03:d4:8a:5a:d0: 23:60:cd:b4:94:92:67:fc:b1:3d:01:cf:2a:bd:35:2c:6e:54: 55:28:79:cf:7f:1f:9f:da:cf:78:d3:06:eb:6c:2b:a4:bf:c1: f4:18:54:1c:97:eb:b1:61:e7:b1:a8:c7:12:32:11:6a:52:79: bc:ba:5f:84 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICNVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEY0 RTMzMjcwM0I5RTE5QzVEQTAxMUE0OEM0QjI3NkU5QjI5RDc1QzAeFw0yNTA1MTcx NzQzNTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ3MEQxMzFBNzU0MTky M0NBOUExQTRDNzZBNTc4OEFERkQyNDBDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQbEE7zIPMcaL8J2I3ke7OkojMNjUFXelJNBqNwFUfw2M45Fa3 gHq45A/XAGBhMsG0JyINPMRLmTIXElYZR9ERAYqYxduftrm0+0VoqksyS+n4oj95 hq0ZFXM/Qn6ZWuPq5J7LMBfc7z9BUgOxvMVOJ34eU4Cbb6gvE0y3Uhamz48GnFCz B6O5EDMcaVNROZMli4ljMjTJLu3xBIcPXNZ+/Z0a+AvLfXtbe3QXxcaaDJGvPUpJ Envwe4H+jdDBhJvJrvVhXRarc0gDMjk063pUoGhzG1kzICjCcNYMqm2wmALN6/UX zMwoyXuiMjn7tTLZegfNU5GIQfIA5qaFKJYdAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURw0TGnVBkjypoaTHaleIrf0kDKcwHwYDVR0jBBgwFoAUT04zJwO54ZxdoBGk jEsnbpsp11wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4 L1QwNHpKd081NFp4ZG9CR2tqRXNuYnBzcDExdy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVDA0ekp3TzU0Wnhkb0JHa2pFc25icHNwMTF3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4L1QwNHpKd081NFp4ZG9C R2tqRXNuYnBzcDExdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA98smpe9I16bHKwLvtwema1hA/IFK8z1O4wts0axcavQz7LRVbt4bmpMT2EBGP WpVmeHriCn2PVqLLwAZjyyqoGw4zGhLf2HfmiCXVPQt1oA8l40rqeCOrm3/k8eQ7 YRnVg9+dC8/W+XdveqjZACk5RMxFR5krPtCb/s52LivCBpd6wb14P8h7dcS+5Fqr U08QVFn/ezzumh7gfo2LcB6tl7E8QoDTbfY6/U9AjR/5RKXdO8ZmBUWgo9SPnw/8 1YWYA9SKWtAjYM20lJJn/LE9Ac8qvTUsblRVKHnPfx+f2s940wbrbCukv8H0GFQc l+uxYeexqMcSMhFqUnm8ul+E -----END CERTIFICATE-----Generated at Sat May 17 21:28:14 2025 by rpki-client