$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft File: U8kE5DbkCUsscVNNs_Vzviozvjk.mft (raw, json) Hash identifier: 8aivffCueXvMVaMQyWEVqILB0wJfDy64Gk1eSkpAWng= Subject key identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 Authority key identifier: 53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 Certificate issuer: /CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Certificate serial: 0781 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft Manifest number: 0781 Signing time: Sun 18 May 2025 08:39:49 +0000 Manifest this update: Sun 18 May 2025 08:39:49 +0000 Manifest next update: Sun 18 May 2025 14:39:49 +0000 Files and hashes: 1: U8kE5DbkCUsscVNNs_Vzviozvjk.crl (hash: rr1FJLyw1BxVS7eqbNsMML6UPtiBVJaURgS3N+1ErSM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 14:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Validity Not Before: May 18 08:39:49 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CC485786D4ADBCDBFD1672905DD43CF845F24440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:58:66:c3:97:42:5c:cf:b5:79:44:d3:e4: 72:f0:d7:db:1b:f8:1b:67:1c:16:1b:5f:8c:e6:2e: 5f:ba:fc:6a:2a:74:3c:8a:c5:54:cd:c8:6a:08:3d: 16:e0:6d:dd:d0:6c:66:0f:60:b6:dc:f1:47:69:c0: 6e:15:28:f5:76:ee:8c:43:00:fd:97:f9:8b:a1:ce: e6:06:8d:cc:23:7f:f2:4c:33:0a:92:ec:57:52:5f: f0:51:ea:3b:4c:bb:9e:fb:27:0a:47:1e:91:31:df: 9f:e4:6e:a8:58:6b:ef:9c:7d:cb:71:ea:4e:5b:e4: aa:e2:7f:5f:da:d5:f6:64:71:80:44:b5:30:ef:2b: 9e:5b:bd:37:4b:5e:88:a7:91:98:f7:d5:a0:37:ef: 42:da:ca:cd:0d:2c:01:7c:9e:93:3b:e0:ab:27:de: 14:76:f2:bc:67:62:5b:12:a2:c7:d4:d4:26:b6:dc: bf:64:c8:0a:c3:14:07:39:82:fb:45:5b:9b:8b:d6: b3:9a:22:e2:03:d2:3c:19:19:70:1a:3e:7c:4a:12: 56:a1:0e:b9:53:5a:98:6c:eb:43:3a:c3:ef:b0:34: 22:84:aa:47:6f:a4:0b:18:53:15:a7:73:a3:17:57: d3:79:45:b7:28:98:6f:6e:cf:3f:86:bd:e7:39:f0: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 X509v3 Authority Key Identifier: keyid:53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d6:b1:a0:33:23:c1:38:0e:5f:77:68:3e:29:ef:2b:a8:44: 28:ed:ad:e9:99:a0:b7:77:08:da:db:40:fb:a9:08:4e:df:7c: bf:1f:a2:50:d1:15:fe:72:c8:a5:29:70:3e:0c:d5:b9:f9:03: 58:ac:e6:9b:90:8d:8c:75:97:02:97:b3:ba:a3:c0:60:03:63: f6:49:be:0e:2b:ad:ea:5c:2e:90:d5:66:d0:b8:bd:25:60:89: a6:c2:6d:59:87:62:35:fc:cf:7a:bc:a1:cf:d8:44:7f:0f:70: 74:05:25:9c:9d:ab:17:c7:7f:82:3f:b7:0d:70:09:69:ec:47: ab:9f:fa:87:0a:9c:32:17:c8:f6:07:5d:6f:39:47:91:8d:ed: e0:fd:93:6d:98:96:21:42:1d:8e:11:8e:0f:71:51:48:e1:0c: ac:a6:8e:c3:e8:9f:c5:cb:b7:65:f0:a7:02:b5:18:07:2c:87: db:38:e6:b6:65:88:88:d7:d3:39:e7:56:0b:e1:ff:c8:ce:72: 66:fa:ca:87:9e:16:43:e2:9e:b7:32:f3:b9:c3:f4:ee:88:89: 66:6f:c5:aa:bd:40:eb:f8:ca:80:40:c9:7a:18:08:dd:87:f1: 63:61:c7:f6:c4:7c:80:10:1b:3d:93:24:e4:82:dd:8f:96:77: db:fb:45:29 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTND OTA0RTQzNkU0MDk0QjJDNzE1MzREQjNGNTczQkUyQTMzQkUzOTAeFw0yNTA1MTgw ODM5NDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENDNDg1Nzg2RDRBREJD REJGRDE2NzI5MDVERDQzQ0Y4NDVGMjQ0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGWlhmw5dCXM+1eUTT5HLw19sb+BtnHBYbX4zmLl+6/GoqdDyK xVTNyGoIPRbgbd3QbGYPYLbc8UdpwG4VKPV27oxDAP2X+YuhzuYGjcwjf/JMMwqS 7FdSX/BR6jtMu577JwpHHpEx35/kbqhYa++cfctx6k5b5Krif1/a1fZkcYBEtTDv K55bvTdLXoinkZj31aA370Lays0NLAF8npM74Ksn3hR28rxnYlsSosfU1Ca23L9k yArDFAc5gvtFW5uL1rOaIuID0jwZGXAaPnxKElahDrlTWphs60M6w++wNCKEqkdv pAsYUxWnc6MXV9N5RbcomG9uzz+Gvec58OZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzEhXhtStvNv9FnKQXdQ8+EXyREAwHwYDVR0jBBgwFoAUU8kE5DbkCUsscVNN s/VzviozvjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OC9VOGtFNURia0NVc3NjVk5Oc19WenZpb3p2amsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1U4a0U1RGJrQ1Vzc2NWTk5zX1Z6dmlvenZqay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzgvVThrRTVEYmtDVXNz Y1ZOTnNfVnp2aW96dmprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI/WsaAzI8E4Dl93aD4p7yuoRCjtremZoLd3CNrbQPupCE7ffL8folDRFf5y yKUpcD4M1bn5A1is5puQjYx1lwKXs7qjwGADY/ZJvg4rrepcLpDVZtC4vSVgiabC bVmHYjX8z3q8oc/YRH8PcHQFJZydqxfHf4I/tw1wCWnsR6uf+ocKnDIXyPYHXW85 R5GN7eD9k22YliFCHY4Rjg9xUUjhDKymjsPon8XLt2XwpwK1GAcsh9s45rZliIjX 0znnVgvh/8jOcmb6yoeeFkPinrcy87nD9O6IiWZvxaq9QOv4yoBAyXoYCN2H8WNh x/bEfIAQGz2TJOSC3Y+Wd9v7RSk= -----END CERTIFICATE-----Generated at Sun May 18 13:19:55 2025 by rpki-client