$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft File: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft (raw, json) Hash identifier: Hw1UdKIZSLSmidAkYc8Vn9Aj7hnLZ7gsnyrZ6VPBcrk= Subject key identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 Authority key identifier: 1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 Certificate issuer: /CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Certificate serial: 0996 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft Manifest number: 0996 Signing time: Sun 18 May 2025 03:38:47 +0000 Manifest this update: Sun 18 May 2025 03:38:47 +0000 Manifest next update: Sun 18 May 2025 09:38:47 +0000 Files and hashes: 1: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl (hash: ehIIYjQiBmUclnYXIbUWCMLrL6Z3fTvkXLtx6t41wk4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 09:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Validity Not Before: May 18 03:38:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DF2B630C2F6B918F026FB0C2B233BA075BC472A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:68:4a:be:88:df:bc:8a:aa:56:f4:0c:14: e3:4b:49:e5:78:fb:38:31:46:38:0f:90:f2:e7:7e: 04:d7:35:a3:76:a4:d9:a2:27:a6:da:fd:91:9b:d9: 5f:ed:ed:2b:ad:3f:2f:ee:de:c5:11:69:ac:f7:a0: c5:0c:d4:17:9d:d3:d5:65:dc:65:fa:93:03:01:ed: 66:90:40:c2:5e:7d:96:97:31:cd:b4:d8:14:e0:b9: 23:67:e5:43:0f:4b:3b:f9:6d:1b:ea:98:f4:b5:6b: 63:dc:18:5a:af:eb:46:6e:77:0d:bc:f4:48:09:5d: 28:9c:b3:ee:a3:bb:d8:04:d6:04:ca:26:21:14:c1: 58:ad:c3:94:d3:8c:c1:06:1c:84:79:67:98:6a:9b: 3b:ae:18:7f:f1:09:9c:67:76:7d:04:84:77:17:55: bb:0e:16:e2:3e:ac:46:b1:56:03:1a:c6:78:69:cb: 3b:ad:c1:87:73:dd:d7:3d:59:e5:4d:51:30:17:9e: 63:30:db:ac:f9:21:df:11:68:3b:b3:6a:ae:91:e7: 92:52:ce:94:27:84:b7:66:82:59:eb:6b:c5:55:05: 75:bc:73:da:70:aa:b0:5d:d1:a5:43:3d:88:04:0c: 37:d0:ff:5c:30:20:03:d7:ef:75:2b:e0:38:63:b7: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 X509v3 Authority Key Identifier: keyid:1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:1a:20:1d:e9:03:a8:b8:7d:20:7c:32:12:f3:7c:8b:7f:d5: 50:ca:7b:15:ad:48:54:b3:09:dd:ba:35:60:bd:d4:09:4c:94: c7:e6:cc:e5:5b:05:73:7e:cc:02:47:4c:54:98:60:60:9a:05: 3b:47:f2:15:76:f8:56:0c:23:58:2a:b9:f7:33:b9:0a:2c:55: a5:7a:11:ce:2d:94:e0:b0:71:f5:19:71:ff:90:1d:13:d5:ae: 83:a2:70:d9:da:e7:a0:e4:7b:f7:5e:ef:39:d8:f1:dc:fc:64: 7f:78:49:1e:2f:28:bf:3b:b8:f3:a2:83:41:b7:8c:26:e5:d6: 02:2f:ff:83:ff:3b:20:3f:44:42:9f:d1:b2:d0:43:e6:e3:92: fc:0f:51:6e:6f:d1:8a:61:ec:bb:34:bc:56:3b:8a:19:e3:af: 7c:a5:97:d2:6d:50:1f:13:b1:77:fe:3c:84:af:21:46:1c:07: 1f:0a:ca:b3:d7:16:0a:b1:62:ae:22:82:17:06:2a:94:cd:ee: 63:94:92:32:fe:f2:28:f4:91:55:15:05:8f:89:75:11:36:b9: 0e:b2:32:88:e5:79:77:d2:11:7c:8a:09:5a:04:fa:b5:ca:bc: e7:d6:87:f9:f3:4d:02:70:e7:3c:d3:f3:41:d7:96:5a:c8:4d: 99:79:86:74 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUUw OTlFMDVFNkMxQTEwMUVGMDU3OTEyRkJDMTMzRjE3MERFRTBBNzAeFw0yNTA1MTgw MzM4NDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERGMkI2MzBDMkY2Qjkx OEYwMjZGQjBDMkIyMzNCQTA3NUJDNDcyQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr9GhKvojfvIqqVvQMFONLSeV4+zgxRjgPkPLnfgTXNaN2pNmi J6ba/ZGb2V/t7SutPy/u3sURaaz3oMUM1Bed09Vl3GX6kwMB7WaQQMJefZaXMc20 2BTguSNn5UMPSzv5bRvqmPS1a2PcGFqv60Zudw289EgJXSics+6ju9gE1gTKJiEU wVitw5TTjMEGHIR5Z5hqmzuuGH/xCZxndn0EhHcXVbsOFuI+rEaxVgMaxnhpyzut wYdz3dc9WeVNUTAXnmMw26z5Id8RaDuzaq6R55JSzpQnhLdmglnra8VVBXW8c9pw qrBd0aVDPYgEDDfQ/1wwIAPX73Ur4Dhjt8YvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3ytjDC9rkY8Cb7DCsjO6B1vEcqcwHwYDVR0jBBgwFoAUHgmeBebBoQHvBXkS +8Ez8XDe4KcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Ni9IZ21lQmViQm9RSHZCWGtTLThFejhYRGU0S2MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hnbWVCZWJCb1FIdkJYa1MtOEV6OFhEZTRLYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTYvSGdtZUJlYkJvUUh2 QlhrUy04RXo4WERlNEtjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEMaIB3pA6i4fSB8MhLzfIt/1VDKexWtSFSzCd26NWC91AlMlMfmzOVbBXN+ zAJHTFSYYGCaBTtH8hV2+FYMI1gqufczuQosVaV6Ec4tlOCwcfUZcf+QHRPVroOi cNna56Dke/de7znY8dz8ZH94SR4vKL87uPOig0G3jCbl1gIv/4P/OyA/REKf0bLQ Q+bjkvwPUW5v0Yph7Ls0vFY7ihnjr3yll9JtUB8TsXf+PISvIUYcBx8KyrPXFgqx Yq4ighcGKpTN7mOUkjL+8ij0kVUVBY+JdRE2uQ6yMojleXfSEXyKCVoE+rXKvOfW h/nzTQJw5zzT80HXllrITZl5hnQ= -----END CERTIFICATE-----Generated at Sun May 18 09:13:30 2025 by rpki-client