$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft File: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft (raw, json) Hash identifier: KKYCb4DHylubId+xGB9IUAD1n1R2fzQUj4gykhf3Mgg= Subject key identifier: D6:B5:D0:D7:93:BE:E5:20:86:99:C6:F0:E2:15:FC:D9:70:7B:1F:45 Authority key identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 Certificate issuer: /CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9 Certificate serial: 0684 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft Manifest number: 0684 Signing time: Sat 17 May 2025 17:40:41 +0000 Manifest this update: Sat 17 May 2025 17:40:41 +0000 Manifest next update: Sat 17 May 2025 23:40:41 +0000 Files and hashes: 1: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl (hash: /eKL0KRqJ18pVVYfekJQMMbRmAuS4eX+Xk+Sqy5wTic=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9 Validity Not Before: May 17 17:40:41 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D6B5D0D793BEE5208699C6F0E215FCD9707B1F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:d3:0e:1b:f9:dc:f6:c3:da:9d:8d:58:6b: 30:74:cc:fd:09:29:47:9c:42:0f:f9:5a:0c:5b:55: 53:de:89:be:bb:75:56:38:3b:da:0d:68:d3:2b:70: b1:26:7a:56:ae:ba:25:52:b2:76:d1:4e:f7:45:ca: d6:71:1f:b7:99:69:7a:00:54:ef:ae:86:fc:af:88: 78:a4:02:52:49:6e:1e:42:20:5c:5d:d4:93:21:45: e6:2d:9b:4f:d4:1f:4a:75:a5:6a:62:9e:42:77:a2: 77:67:7b:8f:c8:cc:8a:b3:cc:64:11:c1:42:46:c4: 0a:8c:18:e6:ab:8d:da:1e:5b:5f:69:c8:02:8d:00: ba:8d:99:4a:00:a9:63:9f:e1:98:17:5f:7e:e0:c9: 13:28:4f:df:dd:a6:7c:e5:95:05:b2:4b:fa:50:54: fd:70:66:ba:85:3d:a9:a7:dd:04:08:ed:40:c0:21: de:12:93:80:09:36:b2:16:c0:04:3a:5f:a1:12:18: c6:5a:ec:e1:a5:92:18:ee:25:d9:96:fa:43:60:f4: 51:89:df:74:0e:96:d3:3a:54:72:a0:e3:b5:f8:b0: 97:44:2b:86:d0:c0:ee:6c:00:55:a1:de:ba:7e:79: 43:e8:04:5c:5f:7a:20:47:ad:55:f9:6f:15:cb:99: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B5:D0:D7:93:BE:E5:20:86:99:C6:F0:E2:15:FC:D9:70:7B:1F:45 X509v3 Authority Key Identifier: keyid:AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bd:1c:f9:e3:d5:48:52:38:cf:a6:7a:36:9f:48:86:9e:1d: 1e:8a:0d:ad:fc:12:4e:10:5e:b0:c4:dc:4f:0c:f2:87:94:c1: 3b:c1:88:28:1d:da:fe:75:1c:94:8a:96:fe:30:11:1e:7f:24: 32:f7:91:14:69:3e:3f:96:87:a6:9e:a7:27:74:3d:c8:9a:49: f8:7d:1f:19:de:43:9d:88:af:87:8a:bb:50:7e:af:d9:3b:8c: d7:83:ab:73:93:51:b4:ab:f9:db:79:11:e0:55:b8:96:c1:dd: ef:e3:a4:8e:57:06:45:c1:2b:48:f6:25:35:b8:e4:e1:ee:b2: 18:2e:28:2c:aa:ab:f7:6d:00:d7:4c:b9:92:bd:5e:20:62:e2: 51:8f:cc:3b:0f:e2:31:82:0f:e0:b3:4c:d1:55:4c:fa:4a:dc: 50:61:ab:a0:e1:39:4c:a0:42:f8:e4:48:0a:44:aa:b4:75:69: 4f:c8:bb:07:3d:c1:78:a7:a3:1f:b4:e6:91:77:62:0f:f7:8a: ae:0d:06:69:85:3e:c4:2e:56:92:34:63:7d:80:07:a2:0e:34: 04:61:e0:c0:07:ec:d2:37:48:fc:bb:d0:38:0a:1e:e6:5f:95: d7:ad:a4:7d:57:81:7a:ac:66:1e:65:4d:f6:d5:d3:96:8e:f5: 6b:cd:a3:08 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUY4 QTU3MUMwQzdDQkEzMTkzQzdFOTQxQ0Y0NjMxREMzMzAyM0ZEOTAeFw0yNTA1MTcx NzQwNDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ2QjVEMEQ3OTNCRUU1 MjA4Njk5QzZGMEUyMTVGQ0Q5NzA3QjFGNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1tdMOG/nc9sPanY1YazB0zP0JKUecQg/5WgxbVVPeib67dVY4 O9oNaNMrcLEmelauuiVSsnbRTvdFytZxH7eZaXoAVO+uhvyviHikAlJJbh5CIFxd 1JMhReYtm0/UH0p1pWpinkJ3ondne4/IzIqzzGQRwUJGxAqMGOarjdoeW19pyAKN ALqNmUoAqWOf4ZgXX37gyRMoT9/dpnzllQWyS/pQVP1wZrqFPamn3QQI7UDAId4S k4AJNrIWwAQ6X6ESGMZa7OGlkhjuJdmW+kNg9FGJ33QOltM6VHKg47X4sJdEK4bQ wO5sAFWh3rp+eUPoBFxfeiBHrVX5bxXLmWDnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU1rXQ15O+5SCGmcbw4hX82XB7H0UwHwYDVR0jBBgwFoAUr4pXHAx8ujGTx+lB z0Yx3DMCP9kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 My9yNHBYSEF4OHVqR1R4LWxCejBZeDNETUNQOWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3I0cFhIQXg4dWpHVHgtbEJ6MFl4M0RNQ1A5ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTMvcjRwWEhBeDh1akdU eC1sQnowWXgzRE1DUDlrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB+9HPnj1UhSOM+mejafSIaeHR6KDa38Ek4QXrDE3E8M8oeUwTvBiCgd2v51 HJSKlv4wER5/JDL3kRRpPj+Wh6aepyd0PciaSfh9HxneQ52Ir4eKu1B+r9k7jNeD q3OTUbSr+dt5EeBVuJbB3e/jpI5XBkXBK0j2JTW45OHushguKCyqq/dtANdMuZK9 XiBi4lGPzDsP4jGCD+CzTNFVTPpK3FBhq6DhOUygQvjkSApEqrR1aU/Iuwc9wXin ox+05pF3Yg/3iq4NBmmFPsQuVpI0Y32AB6IONARh4MAH7NI3SPy70DgKHuZfldet pH1XgXqsZh5lTfbV05aO9WvNowg= -----END CERTIFICATE-----Generated at Sat May 17 22:37:21 2025 by rpki-client