$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft File: 5cbO_IeC-JcxoscpZu3Bgdq1riI.mft (raw, json) Hash identifier: Ybu3LxxsQi+GqP0JymUoC6VfCHAu9Ysp9TfsL65lZqA= Subject key identifier: 98:43:5C:DE:99:E9:3B:E3:3B:BA:E9:56:49:44:67:F0:A8:EE:4A:49 Authority key identifier: E5:C6:CE:FC:87:82:F8:97:31:A2:C7:29:66:ED:C1:81:DA:B5:AE:22 Certificate issuer: /CN=E5C6CEFC8782F89731A2C72966EDC181DAB5AE22 Certificate serial: 0932 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft Manifest number: 0932 Signing time: Sat 17 May 2025 17:38:15 +0000 Manifest this update: Sat 17 May 2025 17:38:15 +0000 Manifest next update: Sat 17 May 2025 23:38:15 +0000 Files and hashes: 1: 5cbO_IeC-JcxoscpZu3Bgdq1riI.crl (hash: SjfapG9tt2UE0tO2m+XWbZLFk2Ovo7sczDSP2wh8eVQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2354 (0x932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5C6CEFC8782F89731A2C72966EDC181DAB5AE22 Validity Not Before: May 17 17:38:15 2025 GMT Not After : Apr 9 06:27:19 2026 GMT Subject: CN=98435CDE99E93BE33BBAE956494467F0A8EE4A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:24:c2:19:52:91:06:da:f7:c7:99:b5:3c: a8:f6:0f:db:ed:2f:53:05:88:13:a2:3f:72:93:bb: 2d:03:67:5b:c9:bd:85:47:38:2e:3f:e9:34:1e:96: f2:80:87:b2:c7:9a:10:7d:db:e7:f3:6c:42:bf:f2: 83:b5:38:cf:9d:91:6d:43:21:ef:44:10:d1:d3:56: 31:4d:8b:1b:3a:7c:c8:09:14:44:dc:90:d0:1b:0d: d0:89:f0:60:f2:c2:9c:50:4f:5d:7f:a0:72:d0:f3: 96:db:e9:67:34:58:c8:d5:1e:2e:67:61:ae:80:f3: 92:23:88:a3:d7:2b:b9:93:78:f1:3b:9a:5d:83:ed: 50:ca:90:46:64:f1:a1:48:ac:ca:fc:01:39:fc:ab: d4:2a:d7:f8:6a:fe:14:cd:ab:7d:c9:b8:c5:72:10: 75:b1:4b:f6:13:08:16:65:03:1b:7d:ab:a7:2f:35: 4d:45:b3:6d:0e:5c:a8:09:43:9e:50:c8:57:6e:50: 32:95:c2:54:f0:3e:a2:77:ae:9e:0b:ff:40:a3:2c: 24:cf:01:66:39:76:01:6a:9b:5f:9b:36:6f:f1:a6: f7:57:46:52:5c:b2:b6:b1:75:a6:a1:6a:56:da:94: 40:20:33:59:8a:10:ec:98:4a:f7:fe:11:36:30:f4: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:43:5C:DE:99:E9:3B:E3:3B:BA:E9:56:49:44:67:F0:A8:EE:4A:49 X509v3 Authority Key Identifier: keyid:E5:C6:CE:FC:87:82:F8:97:31:A2:C7:29:66:ED:C1:81:DA:B5:AE:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:15:62:cc:1f:99:6f:1b:9d:46:3a:24:1b:b7:6b:09:e6:86: b3:e1:63:40:36:25:eb:1d:f2:15:e6:f8:f1:33:76:54:5a:59: a6:29:28:b9:7f:96:0c:d5:41:44:2b:fd:df:21:f6:91:a8:82: 59:b6:7f:00:e5:e0:e4:3c:87:2e:4e:7f:16:f5:74:1f:79:10: 7c:22:69:29:0b:87:1f:83:f2:e0:ba:5d:1b:ff:66:88:da:ab: b9:45:cf:df:d0:be:04:42:98:ef:8c:1c:da:9f:6d:08:6c:06: 6d:3e:3d:ed:f8:10:e4:83:91:0c:71:e0:79:81:d2:f6:35:71: a5:70:c6:ad:d0:f8:c1:85:82:33:5f:14:7a:73:af:3e:88:ba: 16:f2:b9:24:62:bb:9d:c9:91:61:63:b3:10:71:8c:af:32:3a: 2d:2d:eb:cd:81:a7:2c:d0:92:2c:8f:36:e0:d6:df:66:d2:d5: 52:b2:50:82:64:7e:cf:27:4f:9e:cc:1f:49:f8:43:e8:81:d8: 0e:6f:4f:dc:ae:25:3f:5f:d9:01:02:6b:b1:ee:45:08:6c:01: 66:d4:ac:9f:56:31:2c:b7:38:d2:2b:1c:52:d9:ba:4b:69:f6: 83:3a:db:8e:4c:4b:f2:8c:ae:26:21:13:44:14:69:60:77:3e: 2a:b5:92:2f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTVD NkNFRkM4NzgyRjg5NzMxQTJDNzI5NjZFREMxODFEQUI1QUUyMjAeFw0yNTA1MTcx NzM4MTVaFw0yNjA0MDkwNjI3MTlaMDMxMTAvBgNVBAMTKDk4NDM1Q0RFOTlFOTNC RTMzQkJBRTk1NjQ5NDQ2N0YwQThFRTRBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjfSTCGVKRBtr3x5m1PKj2D9vtL1MFiBOiP3KTuy0DZ1vJvYVH OC4/6TQelvKAh7LHmhB92+fzbEK/8oO1OM+dkW1DIe9EENHTVjFNixs6fMgJFETc kNAbDdCJ8GDywpxQT11/oHLQ85bb6Wc0WMjVHi5nYa6A85IjiKPXK7mTePE7ml2D 7VDKkEZk8aFIrMr8ATn8q9Qq1/hq/hTNq33JuMVyEHWxS/YTCBZlAxt9q6cvNU1F s20OXKgJQ55QyFduUDKVwlTwPqJ3rp4L/0CjLCTPAWY5dgFqm1+bNm/xpvdXRlJc sraxdaahalbalEAgM1mKEOyYSvf+ETYw9PQHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmENc3pnpO+M7uulWSURn8KjuSkkwHwYDVR0jBBgwFoAU5cbO/IeC+Jcxoscp Zu3Bgdq1riIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Mi81Y2JPX0llQy1KY3hvc2NwWnUzQmdkcTFyaUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVjYk9fSWVDLUpjeG9zY3BadTNCZ2RxMXJpSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjIvNWNiT19JZUMtSmN4 b3NjcFp1M0JnZHExcmlJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJUVYswfmW8bnUY6JBu3awnmhrPhY0A2Jesd8hXm+PEzdlRaWaYpKLl/lgzV QUQr/d8h9pGoglm2fwDl4OQ8hy5Ofxb1dB95EHwiaSkLhx+D8uC6XRv/Zojaq7lF z9/QvgRCmO+MHNqfbQhsBm0+Pe34EOSDkQxx4HmB0vY1caVwxq3Q+MGFgjNfFHpz rz6IuhbyuSRiu53JkWFjsxBxjK8yOi0t682BpyzQkiyPNuDW32bS1VKyUIJkfs8n T57MH0n4Q+iB2A5vT9yuJT9f2QECa7HuRQhsAWbUrJ9WMSy3ONIrHFLZuktp9oM6 245MS/KMriYhE0QUaWB3Piq1ki8= -----END CERTIFICATE-----Generated at Sat May 17 22:31:49 2025 by rpki-client