$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft File: jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft (raw, json) Hash identifier: wKoIpOqq36RGO9tWHg0SdqP8dZjxft6PRWKrbtRBjco= Subject key identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 Authority key identifier: 8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D Certificate issuer: /CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Certificate serial: 0C2D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft Manifest number: 0C2D Signing time: Sat 17 May 2025 16:39:00 +0000 Manifest this update: Sat 17 May 2025 16:39:00 +0000 Manifest next update: Sat 17 May 2025 22:39:00 +0000 Files and hashes: 1: jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl (hash: yBQdSTgmair4/PoYVf3mUldJ6jx9J5CcB9y2snEK3Wo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Validity Not Before: May 17 16:39:00 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CDE39620232D3493A808C661D8F0441DB9B49F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:c5:81:52:c3:c3:16:cf:5d:20:16:5c:99: ba:5a:3b:ed:cf:8f:ac:8d:c7:ff:66:e4:12:18:ec: 3c:ab:b3:91:ce:a2:b7:d0:2f:6c:aa:94:d1:25:fe: ff:2b:20:8e:52:f3:c0:7c:6b:ca:6e:58:0e:5d:85: d3:ec:77:53:3d:d5:30:b5:b4:f8:30:c2:5b:88:95: 2d:4c:ac:21:8f:9d:bf:39:3a:78:56:33:3c:62:dc: ad:30:f6:a4:9f:2f:9e:f7:5a:11:33:f4:fe:0f:cd: f1:7d:d4:a2:b3:49:95:c2:26:91:79:7f:ec:cb:7f: d2:1d:1f:f9:4a:ff:f1:4d:32:93:ab:3c:a2:a6:92: 00:b6:36:a1:2f:ad:5c:c2:b5:bb:a2:56:be:b2:03: 87:29:36:1b:a1:d1:e4:b4:5d:82:b6:6b:34:ef:b1: 7b:4b:db:b8:a9:8f:e2:c0:7c:91:cb:67:4c:ae:56: e2:42:6a:cd:8d:e3:e2:97:ae:93:81:f9:3c:9d:77: 32:81:6e:16:76:a3:2f:9e:fc:6f:61:e1:2c:ed:cb: 1b:ae:52:d7:9a:e8:ae:cd:d5:50:91:57:98:0b:2b: 28:4a:2e:63:2b:cd:12:ca:2f:0a:88:c6:e8:c5:72: 4f:55:d4:ae:56:f4:8d:7e:40:f5:e0:89:06:34:fa: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 X509v3 Authority Key Identifier: keyid:8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:14:16:1d:0f:1a:ae:2d:de:e7:36:06:2c:48:bb:61:84:21: ae:02:70:4d:25:de:8a:d1:77:fb:a3:8b:02:22:85:b5:64:24: d1:00:5c:0f:e8:2b:ea:c4:5f:6c:30:41:80:b4:b5:a2:e0:19: 81:77:3c:4e:b9:24:9b:ce:33:a2:36:4b:7a:eb:c8:1b:7b:b6: 3b:77:5e:46:c4:33:a3:10:3b:d2:57:25:d5:5f:29:cf:6a:28: 42:9d:c5:2a:72:42:48:b7:c0:b2:a3:db:68:93:13:ac:13:4c: 15:68:a6:e9:f8:14:5a:fb:e1:9a:43:5b:76:86:ba:82:20:50: 0e:5b:9a:ea:6e:10:53:e3:4c:d8:35:70:24:de:65:03:46:9e: db:5f:84:31:26:97:10:de:64:2e:fc:bd:5a:78:70:86:e4:09: 76:bd:74:f3:17:32:74:ce:a5:32:eb:f9:9b:00:60:ef:72:c7: f0:58:c4:52:91:9d:e1:b6:46:2f:c3:8e:79:49:7a:11:ec:e8: 58:d2:32:4c:e7:b2:6e:26:64:fa:e6:16:ac:92:5c:da:68:79: fd:af:c5:82:ad:a8:3c:ac:ff:14:08:b2:bb:ab:bd:22:be:c2: e3:81:c8:aa:09:b5:97:de:b0:44:d5:b0:53:ec:e4:d5:a4:2c: eb:ca:47:06 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU4 REE1OUM4MTBGMTMyRjEyMDZFNEY3MkNFNjg2RkRFMzA1NEU2RDAeFw0yNTA1MTcx NjM5MDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENERTM5NjIwMjMyRDM0 OTNBODA4QzY2MUQ4RjA0NDFEQjlCNDlGNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHNsWBUsPDFs9dIBZcmbpaO+3Pj6yNx/9m5BIY7Dyrs5HOorfQ L2yqlNEl/v8rII5S88B8a8puWA5dhdPsd1M91TC1tPgwwluIlS1MrCGPnb85OnhW Mzxi3K0w9qSfL573WhEz9P4PzfF91KKzSZXCJpF5f+zLf9IdH/lK//FNMpOrPKKm kgC2NqEvrVzCtbuiVr6yA4cpNhuh0eS0XYK2azTvsXtL27ipj+LAfJHLZ0yuVuJC as2N4+KXrpOB+TyddzKBbhZ2oy+e/G9h4SztyxuuUtea6K7N1VCRV5gLKyhKLmMr zRLKLwqIxujFck9V1K5W9I1+QPXgiQY0+sJDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzeOWICMtNJOoCMZh2PBEHbm0n2cwHwYDVR0jBBgwFoAUjo2lnIEPEy8SBuT3 LOaG/eMFTm0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Ny9qbzJsbklFUEV5OFNCdVQzTE9hR19lTUZUbTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pvMmxuSUVQRXk4U0J1VDNMT2FHX2VNRlRtMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzcvam8ybG5JRVBFeThT QnVUM0xPYUdfZU1GVG0wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE0UFh0PGq4t3uc2BixIu2GEIa4CcE0l3orRd/ujiwIihbVkJNEAXA/oK+rE X2wwQYC0taLgGYF3PE65JJvOM6I2S3rryBt7tjt3XkbEM6MQO9JXJdVfKc9qKEKd xSpyQki3wLKj22iTE6wTTBVopun4FFr74ZpDW3aGuoIgUA5bmupuEFPjTNg1cCTe ZQNGnttfhDEmlxDeZC78vVp4cIbkCXa9dPMXMnTOpTLr+ZsAYO9yx/BYxFKRneG2 Ri/DjnlJehHs6FjSMkznsm4mZPrmFqySXNpoef2vxYKtqDys/xQIsrurvSK+wuOB yKoJtZfesETVsFPs5NWkLOvKRwY= -----END CERTIFICATE-----Generated at Sat May 17 19:41:10 2025 by rpki-client