$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft File: 82uLa5gte__1JH2mSO9nP3cW7wg.mft (raw, json) Hash identifier: XuHBSEBdw1oW1rY4RhSyg6zd9Qs2JaTGQcFIZvZUfig= Subject key identifier: 4F:EF:8A:00:B9:9E:A4:4B:C0:29:C1:2A:98:55:DE:46:B1:99:A9:42 Authority key identifier: F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08 Certificate issuer: /CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08 Certificate serial: 0C33 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft Manifest number: 0C2E Signing time: Sat 17 May 2025 22:40:56 +0000 Manifest this update: Sat 17 May 2025 22:40:56 +0000 Manifest next update: Sun 18 May 2025 04:40:56 +0000 Files and hashes: 1: 82uLa5gte__1JH2mSO9nP3cW7wg.crl (hash: gMgmdWtjshMTSI/SE6DqctTkROZQJvnc6kYeJ12vkBE=) 2: jHn4wbtBBL_NI2yHT-HejHu5DR8.roa (hash: MVwJ+ea07YYJ+ojjvSV6NaIkYGlp6i5oCdATarZYHHw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08 Validity Not Before: May 17 22:40:56 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4FEF8A00B99EA44BC029C12A9855DE46B199A942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:9b:da:7e:6f:e3:7a:c4:e2:d7:94:60:f7: b9:04:28:83:45:87:e6:83:a0:72:fd:77:85:75:72: 87:19:88:b4:97:d5:98:e5:6e:e7:b2:0b:15:3f:66: 3b:d6:12:9e:16:3d:2f:b7:e3:a1:c5:21:b9:15:bd: 30:38:01:50:40:17:30:99:bf:46:f4:d1:e9:c9:c2: 13:fd:01:2e:7c:c2:40:9e:2c:66:e6:f5:09:1e:77: e8:49:4a:1f:50:f7:23:68:a1:07:64:38:13:b5:30: 59:2b:58:85:9f:5d:ad:35:7e:2a:79:b2:69:86:cf: 39:0e:8a:4d:b5:af:17:6a:49:2d:ae:79:16:6c:f7: ff:09:eb:9c:50:21:da:fa:d2:7a:3f:53:06:a4:36: 75:28:2a:61:ba:44:25:1f:2c:8d:d3:15:06:4c:6f: 54:8a:a3:d2:51:8f:2d:84:6f:97:f3:1a:d3:da:0c: 5a:bd:c8:ff:1e:58:cc:d4:ad:ab:e4:7f:d1:c7:5d: 73:f5:60:d4:39:94:dc:f5:ed:d9:8f:bb:a5:a6:e1: 34:4e:ad:f6:d9:02:51:fb:27:c3:a1:ee:29:88:f3: df:0a:43:95:2e:f1:4e:9d:7d:5f:ce:b3:d6:4b:cf: 13:1e:8f:d2:a3:54:93:cf:45:9b:6b:e1:e0:98:4e: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EF:8A:00:B9:9E:A4:4B:C0:29:C1:2A:98:55:DE:46:B1:99:A9:42 X509v3 Authority Key Identifier: keyid:F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c1:6c:a6:bd:c6:4b:3f:42:c8:65:ab:2a:e4:ad:30:03:8a: c2:5f:e4:81:62:a1:30:c8:af:91:8b:26:f9:62:83:e5:0a:1d: 11:d5:fd:7b:d9:75:a2:8d:ee:22:a1:4e:15:6d:a7:92:5d:ff: a6:31:d0:69:8f:1b:9f:f8:a1:8f:b7:dc:a6:5a:b2:c4:63:3b: 68:2d:7b:7e:01:42:db:ec:54:da:28:35:a2:06:ca:c8:9e:10: 0a:1d:f8:a7:99:4f:c6:28:43:97:8e:ea:84:9c:f8:c9:d5:77: fa:22:9e:45:4e:8c:e5:72:27:a5:35:49:c0:b8:c1:50:3c:b4: 4b:2b:16:a1:a1:2f:ce:d0:e9:5d:cf:2f:4a:1b:7c:2f:6e:cd: 81:17:b4:56:45:64:1a:38:49:bc:38:f0:97:ba:02:e1:02:97: 22:01:80:b3:a0:9c:f2:c8:54:3b:1f:7d:23:3f:e9:20:18:b1: 12:2d:83:1c:ce:b5:79:b2:44:20:63:e3:1c:58:d3:9e:91:ed: b4:01:8b:ea:10:92:1c:1f:7b:3c:58:ad:79:09:b7:f8:84:53: 93:9b:3f:b1:c2:ec:d4:47:f9:5c:3d:95:af:4c:d3:c9:19:02: 9b:9f:d5:43:54:85:e9:a3:79:9f:21:25:ce:02:64:39:43:d4: 45:42:e3:b9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjM2 QjhCNkI5ODJEN0JGRkY1MjQ3REE2NDhFRjY3M0Y3NzE2RUYwODAeFw0yNTA1MTcy MjQwNTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRGRUY4QTAwQjk5RUE0 NEJDMDI5QzEyQTk4NTVERTQ2QjE5OUE5NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB3Zvafm/jesTi15Rg97kEKINFh+aDoHL9d4V1cocZiLSX1Zjl bueyCxU/ZjvWEp4WPS+346HFIbkVvTA4AVBAFzCZv0b00enJwhP9AS58wkCeLGbm 9Qked+hJSh9Q9yNooQdkOBO1MFkrWIWfXa01fip5smmGzzkOik21rxdqSS2ueRZs 9/8J65xQIdr60no/UwakNnUoKmG6RCUfLI3TFQZMb1SKo9JRjy2Eb5fzGtPaDFq9 yP8eWMzUravkf9HHXXP1YNQ5lNz17dmPu6Wm4TROrfbZAlH7J8Oh7imI898KQ5Uu 8U6dfV/Os9ZLzxMej9KjVJPPRZtr4eCYTofJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUT++KALmepEvAKcEqmFXeRrGZqUIwHwYDVR0jBBgwFoAU82uLa5gte//1JH2m SO9nP3cW7wgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz OC84MnVMYTVndGVfXzFKSDJtU085blAzY1c3d2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzgydUxhNWd0ZV9fMUpIMm1TTzluUDNjVzd3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzgvODJ1TGE1Z3RlX18x SkgybVNPOW5QM2NXN3dnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADPBbKa9xks/QshlqyrkrTADisJf5IFioTDIr5GLJvlig+UKHRHV/XvZdaKN 7iKhThVtp5Jd/6Yx0GmPG5/4oY+33KZassRjO2gte34BQtvsVNooNaIGysieEAod +KeZT8YoQ5eO6oSc+MnVd/oinkVOjOVyJ6U1ScC4wVA8tEsrFqGhL87Q6V3PL0ob fC9uzYEXtFZFZBo4Sbw48Je6AuEClyIBgLOgnPLIVDsffSM/6SAYsRItgxzOtXmy RCBj4xxY056R7bQBi+oQkhwfezxYrXkJt/iEU5ObP7HC7NRH+Vw9la9M08kZApuf 1UNUhemjeZ8hJc4CZDlD1EVC47k= -----END CERTIFICATE-----Generated at Sun May 18 02:08:26 2025 by rpki-client