$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.mft File: 5nly8uDEjmq9G__KM5YicDZJm28.mft (raw, json) Hash identifier: uMJF4jIXHfNxBqnbUbdPDDGr/B0XimnbgdPbb5czkrU= Subject key identifier: E8:1B:8D:2C:D9:AA:BC:34:41:DF:C8:A1:75:68:18:54:1B:6D:89:DC Authority key identifier: E6:79:72:F2:E0:C4:8E:6A:BD:1B:FF:CA:33:96:22:70:36:49:9B:6F Certificate issuer: /CN=E67972F2E0C48E6ABD1BFFCA3396227036499B6F Certificate serial: 0E8C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5nly8uDEjmq9G__KM5YicDZJm28.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.mft Manifest number: 0E8C Signing time: Sat 17 May 2025 17:37:52 +0000 Manifest this update: Sat 17 May 2025 17:37:52 +0000 Manifest next update: Sat 17 May 2025 23:37:52 +0000 Files and hashes: 1: 5nly8uDEjmq9G__KM5YicDZJm28.crl (hash: Yri7CbW6RvcqR+M/cIrEc+82dMOoNlr9XyAjMm6FmWE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5nly8uDEjmq9G__KM5YicDZJm28.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E67972F2E0C48E6ABD1BFFCA3396227036499B6F Validity Not Before: May 17 17:37:52 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E81B8D2CD9AABC3441DFC8A1756818541B6D89DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:11:47:e9:65:0b:f8:62:f2:4f:c0:1e:78:b5: 8a:c9:c5:07:a5:ab:c1:bd:2c:76:a6:79:a4:ac:7c: bb:50:37:04:83:e6:0d:dd:01:dc:fb:d5:3a:f6:c9: d3:1f:48:43:96:08:34:db:92:0f:54:3c:44:e1:05: 9f:95:d7:94:30:2f:be:81:7f:4b:84:83:93:9e:a9: ce:ae:8b:36:1c:63:fb:d9:49:7c:0e:89:f3:33:f1: e0:eb:56:ec:45:fb:f2:4f:fb:ae:f0:59:3b:7e:b8: 54:68:e7:44:a8:d2:bb:e5:1b:4d:42:e3:2d:ad:dd: 5c:53:b6:05:f2:3c:2d:a4:d7:a8:6c:aa:90:cf:3b: ff:71:b2:50:0f:61:65:b5:5d:bf:1a:33:61:a0:7c: 4e:f0:7b:89:61:c7:ba:1e:ff:6f:91:e6:40:2c:f6: fd:3f:25:3a:64:92:f7:78:8e:e6:b5:2b:58:48:aa: d7:da:26:71:5a:dd:f4:bb:4c:9f:b7:cb:77:2d:df: b3:cb:c8:6c:b9:1f:fe:03:7c:a7:a0:9c:65:ed:06: 97:b3:d6:a3:48:58:e0:ef:b8:7a:46:85:2a:ef:ce: a7:9a:7a:8a:70:10:b2:d1:80:d6:89:33:ba:e4:ba: d4:a5:ea:87:25:6c:0b:c4:8f:97:8f:1d:e8:96:e5: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1B:8D:2C:D9:AA:BC:34:41:DF:C8:A1:75:68:18:54:1B:6D:89:DC X509v3 Authority Key Identifier: keyid:E6:79:72:F2:E0:C4:8E:6A:BD:1B:FF:CA:33:96:22:70:36:49:9B:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5nly8uDEjmq9G__KM5YicDZJm28.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:c4:55:75:b7:2c:4d:ba:5f:2f:f5:44:69:7f:a3:c3:f6:b9: b4:40:2c:dd:5e:a1:9c:6b:07:a0:2e:c3:1a:b3:1a:5a:73:96: e3:9a:9b:df:19:27:90:16:10:32:d3:35:16:df:16:1a:b5:35: d5:d4:42:22:bb:6d:7c:ae:4e:02:04:4b:e9:30:ca:9d:ae:88: 21:3d:b3:a4:f4:6f:b0:c2:d4:5f:17:58:61:12:09:b6:ce:96: 9d:c8:84:36:24:7e:fc:4a:4a:27:3c:38:dd:c6:77:a5:44:16: 82:cc:d9:ac:2d:d2:dd:95:10:6d:0d:6b:2d:f8:d6:03:d6:ef: 25:7c:28:e7:b4:77:19:53:0f:fb:80:81:1a:75:39:b7:dc:a8: a0:17:9b:ed:ad:4b:b7:60:d9:dd:29:90:fb:d0:61:72:a0:6f: e6:c4:35:6d:80:f0:f8:a6:a7:4d:91:6d:93:e9:5f:18:ee:50: 03:a8:ac:41:07:89:15:4c:5b:9a:fc:10:a2:ac:20:1b:a6:04: 6d:d7:bb:cc:27:63:2a:42:a9:1a:e1:4e:7f:55:ba:0b:c3:02: 1a:6e:ee:6c:2e:af:e1:c1:a8:cc:7a:16:07:1a:86:65:a7:c1: aa:a2:03:ab:4e:f9:dd:9d:a5:bd:3a:2c:84:f5:a1:42:7f:4e: f7:f5:e6:63 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY3 OTcyRjJFMEM0OEU2QUJEMUJGRkNBMzM5NjIyNzAzNjQ5OUI2RjAeFw0yNTA1MTcx NzM3NTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU4MUI4RDJDRDlBQUJD MzQ0MURGQzhBMTc1NjgxODU0MUI2RDg5REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD8EUfpZQv4YvJPwB54tYrJxQelq8G9LHameaSsfLtQNwSD5g3d Adz71Tr2ydMfSEOWCDTbkg9UPEThBZ+V15QwL76Bf0uEg5Oeqc6uizYcY/vZSXwO ifMz8eDrVuxF+/JP+67wWTt+uFRo50So0rvlG01C4y2t3VxTtgXyPC2k16hsqpDP O/9xslAPYWW1Xb8aM2GgfE7we4lhx7oe/2+R5kAs9v0/JTpkkvd4jua1K1hIqtfa JnFa3fS7TJ+3y3ct37PLyGy5H/4DfKegnGXtBpez1qNIWODvuHpGhSrvzqeaeopw ELLRgNaJM7rkutSl6oclbAvEj5ePHeiW5dA/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6BuNLNmqvDRB38ihdWgYVBttidwwHwYDVR0jBBgwFoAU5nly8uDEjmq9G//K M5YicDZJm28wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx NS81bmx5OHVERWptcTlHX19LTTVZaWNEWkptMjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVubHk4dURFam1xOUdfX0tNNVlpY0RaSm0yOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTUvNW5seTh1REVqbXE5 R19fS001WWljRFpKbTI4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANHEVXW3LE26Xy/1RGl/o8P2ubRALN1eoZxrB6AuwxqzGlpzluOam98ZJ5AW EDLTNRbfFhq1NdXUQiK7bXyuTgIES+kwyp2uiCE9s6T0b7DC1F8XWGESCbbOlp3I hDYkfvxKSic8ON3Gd6VEFoLM2awt0t2VEG0Nay341gPW7yV8KOe0dxlTD/uAgRp1 ObfcqKAXm+2tS7dg2d0pkPvQYXKgb+bENW2A8Pimp02RbZPpXxjuUAOorEEHiRVM W5r8EKKsIBumBG3Xu8wnYypCqRrhTn9VugvDAhpu7mwur+HBqMx6FgcahmWnwaqi A6tO+d2dpb06LIT1oUJ/Tvf15mM= -----END CERTIFICATE-----Generated at Sat May 17 23:20:13 2025 by rpki-client