$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft File: RHMR0DbVD1TEQW-41oIgp8uWgZk.mft (raw, json) Hash identifier: LYZCSNRC5nXZWyVJtzR89nQmh3GTPIVp3mukWQwtIhw= Subject key identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD Authority key identifier: 44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 Certificate issuer: /CN=447311D036D50F54C4416FB8D68220A7CB968199 Certificate serial: 0E16 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft Manifest number: 0E16 Signing time: Sat 17 May 2025 22:38:20 +0000 Manifest this update: Sat 17 May 2025 22:38:20 +0000 Manifest next update: Sun 18 May 2025 04:38:20 +0000 Files and hashes: 1: RHMR0DbVD1TEQW-41oIgp8uWgZk.crl (hash: SJ6R32JTU/ksV3o0N9HXhcexT9rmDVQxtj5/JDYsj+g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3606 (0xe16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447311D036D50F54C4416FB8D68220A7CB968199 Validity Not Before: May 17 22:38:20 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E87AE688BDC7A10FDD5E9B3706E050B1F5ACABCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:b5:20:11:08:e9:94:a4:b3:1b:10:e3:3b: 8c:9b:f3:3c:66:be:c4:8c:4c:8f:32:3d:75:bf:40: 7b:bf:65:97:b4:a5:fe:86:a0:df:27:cd:91:ff:04: 80:9d:7b:92:1a:d2:53:3d:27:c4:5d:a3:5c:c3:5c: 09:da:07:ba:5a:0d:d5:1e:a4:6c:fd:17:f2:a3:54: d7:10:0c:f5:45:bd:d6:fd:89:c3:14:99:b0:96:26: bc:f2:71:99:3c:9a:25:fd:6e:3a:9f:15:5b:01:e4: f7:2c:71:0b:3b:9c:a5:e1:28:15:63:3d:3f:61:bd: 99:0c:65:f7:ea:a6:2c:32:c6:9d:ab:8c:6c:12:6b: 77:72:c5:92:9e:23:aa:85:b5:09:6f:7d:e2:b6:66: 82:64:e6:c8:d5:71:b8:db:e6:7a:ee:92:72:48:cc: 75:03:dc:86:79:a6:05:67:84:18:21:37:5e:9e:c6: fa:3b:a9:a0:c7:79:33:d5:c7:75:d6:11:4c:2e:45: 14:55:6e:95:9f:eb:2f:c8:99:ec:42:7b:89:51:79: b9:4c:8b:46:ff:73:f2:d0:7f:f8:9b:b8:2c:17:2d: 19:62:83:96:ac:c5:0c:ea:5b:04:bd:e1:b1:b2:7c: 6d:82:3a:c6:23:3d:6e:4f:20:11:17:4f:05:e1:7a: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD X509v3 Authority Key Identifier: keyid:44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:16:eb:87:1b:fd:0d:ab:5b:b0:e2:ef:4d:98:79:30:dc:45: c9:08:c5:12:4e:c0:9e:3b:43:17:53:9d:4d:54:cb:e9:b4:1e: 6d:4d:b2:32:bc:bf:a4:92:ac:9f:65:6a:03:ef:c4:0c:a4:1c: 22:2d:0f:dc:c6:70:42:33:8d:8f:da:4d:83:90:63:d0:2e:05: 47:1e:89:ab:3e:1c:7c:95:97:16:3b:6d:93:59:e4:b8:07:14: 06:1b:b7:bb:a2:4d:1b:27:4a:07:f3:53:26:0d:4b:65:97:66: a0:f0:a9:b4:3a:b5:33:ec:90:f8:a7:11:d0:a7:62:cf:47:52: 71:0b:6e:72:dd:b9:9f:bc:a2:23:9f:87:7e:4d:d0:3a:a7:70: 4f:eb:d5:03:6c:89:b9:84:69:24:d1:03:6f:de:9f:9d:a0:53: 47:02:15:fc:24:25:cf:2c:5f:ab:8b:c9:dd:c4:c8:cc:72:cf: 61:17:55:d2:8e:20:b0:fd:ad:b0:62:32:84:7c:2a:5a:1a:ef: ca:7c:e0:5b:0e:59:15:c5:53:b7:82:f3:7e:a5:51:2b:6a:01: 1e:3d:6b:21:73:de:af:27:d2:9d:5f:e4:05:f3:d8:3a:86:67: f8:b3:f8:5b:59:f3:52:5a:89:df:86:cb:8b:77:d1:fb:e3:55: f9:e3:3e:3d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ3 MzExRDAzNkQ1MEY1NEM0NDE2RkI4RDY4MjIwQTdDQjk2ODE5OTAeFw0yNTA1MTcy MjM4MjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU4N0FFNjg4QkRDN0Ex MEZERDVFOUIzNzA2RTA1MEIxRjVBQ0FCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmULUgEQjplKSzGxDjO4yb8zxmvsSMTI8yPXW/QHu/ZZe0pf6G oN8nzZH/BICde5Ia0lM9J8Rdo1zDXAnaB7paDdUepGz9F/KjVNcQDPVFvdb9icMU mbCWJrzycZk8miX9bjqfFVsB5PcscQs7nKXhKBVjPT9hvZkMZffqpiwyxp2rjGwS a3dyxZKeI6qFtQlvfeK2ZoJk5sjVcbjb5nruknJIzHUD3IZ5pgVnhBghN16exvo7 qaDHeTPVx3XWEUwuRRRVbpWf6y/ImexCe4lReblMi0b/c/LQf/ibuCwXLRlig5as xQzqWwS94bGyfG2COsYjPW5PIBEXTwXhehJPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6HrmiL3HoQ/dXps3BuBQsfWsq80wHwYDVR0jBBgwFoAURHMR0DbVD1TEQW+4 1oIgp8uWgZkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx OS9SSE1SMERiVkQxVEVRVy00MW9JZ3A4dVdnWmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JITVIwRGJWRDFURVFXLTQxb0lncDh1V2daay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvUkhNUjBEYlZEMVRF UVctNDFvSWdwOHVXZ1prLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAD0W64cb/Q2rW7Di702YeTDcRckIxRJOwJ47QxdTnU1Uy+m0Hm1NsjK8v6SS rJ9lagPvxAykHCItD9zGcEIzjY/aTYOQY9AuBUceias+HHyVlxY7bZNZ5LgHFAYb t7uiTRsnSgfzUyYNS2WXZqDwqbQ6tTPskPinEdCnYs9HUnELbnLduZ+8oiOfh35N 0DqncE/r1QNsibmEaSTRA2/en52gU0cCFfwkJc8sX6uLyd3EyMxyz2EXVdKOILD9 rbBiMoR8Kloa78p84FsOWRXFU7eC836lUStqAR49ayFz3q8n0p1f5AXz2DqGZ/iz +FtZ81Jaid+Gy4t30fvjVfnjPj0= -----END CERTIFICATE-----Generated at Sun May 18 02:02:54 2025 by rpki-client