$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft File: CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft (raw, json) Hash identifier: yckhvVh3YVGXPP6JZZsphuMaZs3ExI6IkQDzIuzdlLY= Subject key identifier: 5A:DE:3D:59:F7:52:4C:6D:05:AA:65:5D:EE:F5:34:55:33:79:E1:F5 Authority key identifier: 08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61 Certificate issuer: /CN=0812172AA74AF852C0F5A7787B64825FE5619361 Certificate serial: 073C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft Manifest number: 073C Signing time: Sat 17 May 2025 17:39:28 +0000 Manifest this update: Sat 17 May 2025 17:39:28 +0000 Manifest next update: Sat 17 May 2025 23:39:28 +0000 Files and hashes: 1: CBIXKqdK-FLA9ad4e2SCX-Vhk2E.crl (hash: Jzb/LlPjOtRDzQDayLrkuCsPVelcSe0CPWRaBHh2vGU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1852 (0x73c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0812172AA74AF852C0F5A7787B64825FE5619361 Validity Not Before: May 17 17:39:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5ADE3D59F7524C6D05AA655DEEF534553379E1F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:ab:96:69:4b:1f:65:ef:59:6e:9a:88:e8: 28:32:7f:38:b0:7f:e2:c3:40:49:a2:6f:38:67:c6: de:4f:b1:5a:a9:07:af:a9:cd:29:01:a4:7f:19:92: ec:d5:fa:3d:df:da:08:c7:6f:3a:d2:d4:64:af:ac: a4:78:c1:a8:02:e3:2d:e2:6f:fc:69:a1:18:f3:b8: 25:89:2a:fc:e4:4c:18:d8:07:6b:65:be:61:16:24: e5:f8:78:a7:50:76:bf:bd:7e:ef:f3:98:16:ad:92: c2:ea:7e:9c:f5:6e:2b:52:ea:13:4b:c9:92:33:72: eb:04:3a:ce:c7:23:43:ac:e2:44:2d:1e:cd:0e:c6: 38:c6:22:e0:70:03:50:7b:c4:14:b3:2a:36:69:ce: 58:c9:a1:b1:b8:03:62:e9:f9:2d:e3:d4:a4:a1:8e: 5e:70:9c:16:2e:b7:98:af:84:ce:22:c7:32:a5:4f: c9:11:67:8e:3d:ed:aa:1b:0a:6c:c3:e5:8d:f3:a9: 2d:be:16:18:fd:3d:60:1a:ef:0b:b6:e9:6d:40:22: 2a:89:ab:13:84:45:4a:63:eb:5b:04:ca:0c:ba:84: b5:49:55:80:30:32:8d:19:22:c8:45:33:ec:e6:70: 7f:7a:f5:06:e6:f9:ae:a6:46:aa:35:cd:c7:d1:23: e3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DE:3D:59:F7:52:4C:6D:05:AA:65:5D:EE:F5:34:55:33:79:E1:F5 X509v3 Authority Key Identifier: keyid:08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:07:2c:f4:2d:c6:73:9f:9a:fe:1c:77:eb:ac:95:88:a3:3b: d4:31:c6:84:9a:3e:da:23:21:59:11:88:15:f9:53:59:8f:01: 60:67:32:ea:46:41:b4:fd:ee:a7:a1:58:fb:4d:2c:37:58:a9: 0c:bd:b2:49:15:97:17:69:e9:26:7c:d3:52:90:c9:51:2e:22: 3d:53:b3:fc:1e:a2:3c:f3:ff:1e:6c:5d:90:cf:90:57:62:bf: 04:52:42:a3:fa:72:a7:fb:4a:19:ae:71:d6:c4:14:f5:6e:f7: b2:ac:08:df:29:c1:37:39:71:40:8a:8a:e1:2a:b8:c1:5b:17: ae:2c:ab:10:d0:de:61:21:f6:3b:46:da:2d:76:a6:6e:de:f7: 1c:4b:d4:1e:cd:de:1b:32:34:23:22:60:74:6a:bc:a7:4a:1b: f5:25:98:cb:08:b8:72:68:78:a6:07:c7:11:1a:6e:d8:94:5a: 32:ec:a7:4a:2e:d6:51:1c:6d:49:93:71:b9:85:83:58:ce:1b: a6:13:65:1c:83:42:1f:0b:ee:fd:43:31:01:ce:2d:d3:3a:5e: 9c:16:ba:b0:3c:86:ce:4a:88:9e:e2:e1:52:53:6d:fe:63:ad: be:f3:e8:57:93:f3:1e:67:04:b6:4f:74:04:19:7f:9a:bf:77: a6:83:5a:b9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDgx MjE3MkFBNzRBRjg1MkMwRjVBNzc4N0I2NDgyNUZFNTYxOTM2MTAeFw0yNTA1MTcx NzM5MjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVBREUzRDU5Rjc1MjRD NkQwNUFBNjU1REVFRjUzNDU1MzM3OUUxRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFg6uWaUsfZe9ZbpqI6Cgyfziwf+LDQEmibzhnxt5PsVqpB6+p zSkBpH8ZkuzV+j3f2gjHbzrS1GSvrKR4wagC4y3ib/xpoRjzuCWJKvzkTBjYB2tl vmEWJOX4eKdQdr+9fu/zmBatksLqfpz1bitS6hNLyZIzcusEOs7HI0Os4kQtHs0O xjjGIuBwA1B7xBSzKjZpzljJobG4A2Lp+S3j1KShjl5wnBYut5ivhM4ixzKlT8kR Z4497aobCmzD5Y3zqS2+Fhj9PWAa7wu26W1AIiqJqxOERUpj61sEygy6hLVJVYAw Mo0ZIshFM+zmcH969Qbm+a6mRqo1zcfRI+OZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUWt49WfdSTG0FqmVd7vU0VTN54fUwHwYDVR0jBBgwFoAUCBIXKqdK+FLA9ad4 e2SCX+Vhk2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OS9DQklYS3FkSy1GTEE5YWQ0ZTJTQ1gtVmhrMkUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0NCSVhLcWRLLUZMQTlhZDRlMlNDWC1WaGsyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzkvQ0JJWEtxZEstRkxB OWFkNGUyU0NYLVZoazJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKMHLPQtxnOfmv4cd+uslYijO9QxxoSaPtojIVkRiBX5U1mPAWBnMupGQbT9 7qehWPtNLDdYqQy9skkVlxdp6SZ801KQyVEuIj1Ts/weojzz/x5sXZDPkFdivwRS QqP6cqf7ShmucdbEFPVu97KsCN8pwTc5cUCKiuEquMFbF64sqxDQ3mEh9jtG2i12 pm7e9xxL1B7N3hsyNCMiYHRqvKdKG/UlmMsIuHJoeKYHxxEabtiUWjLsp0ou1lEc bUmTcbmFg1jOG6YTZRyDQh8L7v1DMQHOLdM6XpwWurA8hs5KiJ7i4VJTbf5jrb7z 6FeT8x5nBLZPdAQZf5q/d6aDWrk= -----END CERTIFICATE-----Generated at Sat May 17 21:30:10 2025 by rpki-client