$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft File: REpvrwhyRfumTIvW5EyRKvs9IGY.mft (raw, json) Hash identifier: 9cvPWdorvamBUhflo8kXwZ5T3mCVgYtkmpVAYX1/V/M= Subject key identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 Authority key identifier: 44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 Certificate issuer: /CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Certificate serial: 03FB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft Manifest number: 03FB Signing time: Sat 17 May 2025 17:40:04 +0000 Manifest this update: Sat 17 May 2025 17:40:04 +0000 Manifest next update: Sat 17 May 2025 23:40:04 +0000 Files and hashes: 1: REpvrwhyRfumTIvW5EyRKvs9IGY.crl (hash: uK6FK9kY1DsRh963EwaHwAVC9P5qUbm4LVtDfX5i0I8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066 Validity Not Before: May 17 17:40:04 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1AB861E2929A89AC6582D35AAD01A279CA426392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:79:8f:a0:8b:63:12:f9:e5:9d:c1:55:0a: 09:d9:71:50:88:eb:61:0a:93:7b:74:0e:80:b1:46: 0e:7a:1a:a5:2f:0b:0b:51:b7:6d:82:d7:3b:a1:1f: 8f:ce:71:78:39:27:2d:1a:42:61:ff:95:30:a5:d1: f7:44:a2:ed:fc:cb:27:33:46:f1:b0:2f:b3:86:7c: 67:66:1d:d7:63:38:b0:51:25:b3:ba:d6:e0:42:43: 07:6e:68:b8:6c:b3:17:df:1c:ec:37:21:24:db:9d: 43:2e:91:ed:73:a6:8d:b2:85:dc:c1:74:cd:ea:ef: 77:2e:b6:30:94:85:c0:37:29:1d:b4:82:27:d5:9c: 63:c6:5c:2c:72:0a:e1:9c:51:d0:9a:69:ea:c3:3c: 44:9e:fc:b0:cf:25:c1:0d:dd:82:f2:67:a8:97:9e: 00:b0:83:1e:17:ac:2a:d0:c1:56:13:b0:d7:15:68: 17:9b:96:05:69:b6:ee:d6:48:56:ad:82:f1:0a:8f: 9b:27:c4:05:fa:5e:6e:95:26:f5:95:02:b1:73:19: af:97:e7:8f:b0:63:69:9c:de:4e:8f:b3:fd:af:ec: e4:5e:22:31:f3:fd:50:e7:6b:26:7a:16:a1:9c:06: 6d:b1:69:52:1d:6b:14:f6:3c:e9:17:bc:55:44:3e: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92 X509v3 Authority Key Identifier: keyid:44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d5:c2:06:28:5a:25:31:9d:c2:fa:b2:ff:0f:75:3e:60:63: 49:b3:35:9e:05:7e:1b:6f:f3:d7:c4:16:e3:c7:18:ca:2d:dd: 8f:9d:98:b7:d3:18:09:ab:d8:ec:91:ac:e9:f3:5c:4e:23:f3: 58:9c:9d:5c:a6:db:0b:ec:86:6e:b4:e5:14:33:cb:bd:6f:9a: a4:88:24:e9:25:3c:fa:1b:8d:c9:db:0f:23:12:ff:7c:67:98: 0c:bf:0d:b7:e2:d6:6e:31:51:03:f4:1f:a3:37:18:49:d9:ce: c0:c6:41:17:6f:84:b4:21:b6:54:71:e3:3e:41:c3:af:26:5b: 91:20:b5:23:a7:6e:d2:6f:cd:1a:d4:4e:10:56:a5:05:31:1b: 98:66:e4:d5:ae:fe:77:e9:8a:45:ef:19:23:b1:1b:30:36:b9: 07:a3:28:48:07:a8:99:49:a3:b5:53:0a:5a:d7:0a:38:bf:d8: f0:49:f8:45:47:36:d5:d4:01:38:1e:15:2e:7b:7b:20:f5:d6: f2:f3:0b:c2:ac:c6:02:25:ed:c1:b1:1d:8f:a9:1a:7f:8b:ba: ae:cf:83:aa:8f:8a:23:95:3e:11:4d:6c:75:b4:e4:4d:ae:d5: 59:5f:2c:22:4b:38:8a:a1:75:98:49:93:67:95:31:37:d7:5c: 6f:18:c9:4a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ0 QTZGQUYwODcyNDVGQkE2NEM4QkQ2RTQ0QzkxMkFGQjNEMjA2NjAeFw0yNTA1MTcx NzQwMDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBQjg2MUUyOTI5QTg5 QUM2NTgyRDM1QUFEMDFBMjc5Q0E0MjYzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDATXmPoItjEvnlncFVCgnZcVCI62EKk3t0DoCxRg56GqUvCwtR t22C1zuhH4/OcXg5Jy0aQmH/lTCl0fdEou38yyczRvGwL7OGfGdmHddjOLBRJbO6 1uBCQwduaLhssxffHOw3ISTbnUMuke1zpo2yhdzBdM3q73cutjCUhcA3KR20gifV nGPGXCxyCuGcUdCaaerDPESe/LDPJcEN3YLyZ6iXngCwgx4XrCrQwVYTsNcVaBeb lgVptu7WSFatgvEKj5snxAX6Xm6VJvWVArFzGa+X54+wY2mc3k6Ps/2v7OReIjHz /VDnayZ6FqGcBm2xaVIdaxT2POkXvFVEPmZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGrhh4pKaiaxlgtNarQGiecpCY5IwHwYDVR0jBBgwFoAUREpvrwhyRfumTIvW 5EyRKvs9IGYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9SRXB2cndoeVJmdW1USXZXNUV5Ukt2czlJR1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JFcHZyd2h5UmZ1bVRJdlc1RXlSS3ZzOUlHWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvUkVwdnJ3aHlSZnVt VEl2VzVFeVJLdnM5SUdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJHVwgYoWiUxncL6sv8PdT5gY0mzNZ4Ffhtv89fEFuPHGMot3Y+dmLfTGAmr 2OyRrOnzXE4j81icnVym2wvshm605RQzy71vmqSIJOklPPobjcnbDyMS/3xnmAy/ Dbfi1m4xUQP0H6M3GEnZzsDGQRdvhLQhtlRx4z5Bw68mW5EgtSOnbtJvzRrUThBW pQUxG5hm5NWu/nfpikXvGSOxGzA2uQejKEgHqJlJo7VTClrXCji/2PBJ+EVHNtXU ATgeFS57eyD11vLzC8KsxgIl7cGxHY+pGn+Luq7Pg6qPiiOVPhFNbHW05E2u1Vlf LCJLOIqhdZhJk2eVMTfXXG8YyUo= -----END CERTIFICATE-----Generated at Sat May 17 21:21:50 2025 by rpki-client