$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft File: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft (raw, json) Hash identifier: xvVO80Uv6QRcg1DQqXmnRqyUmcw/1JAkA5oUCDYx1+A= Subject key identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B Authority key identifier: AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 Certificate issuer: /CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Certificate serial: 0651 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft Manifest number: 0651 Signing time: Sat 17 May 2025 17:41:05 +0000 Manifest this update: Sat 17 May 2025 17:41:05 +0000 Manifest next update: Sat 17 May 2025 23:41:05 +0000 Files and hashes: 1: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl (hash: MI81oL7n3Q9Rq77SOb3mvkGbD6rW1ZnBpVY3ipyM+Vk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Validity Not Before: May 17 17:41:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C95006BDDC4D9538F86B94D2F10A03B33D839E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:3e:d1:98:1a:5e:b9:06:33:2a:5d:0b:8a: 68:fa:99:a8:b8:39:6d:48:f2:36:5e:ee:a8:1b:70: 60:02:23:38:d0:dd:46:c7:60:cc:31:df:67:47:7a: db:fd:ec:e5:9f:b1:f9:33:b6:2e:6c:7d:7b:cc:1b: 71:0e:0b:77:95:f7:7a:2f:ed:aa:14:0c:0a:f4:df: 53:32:8f:e9:e8:36:73:85:7a:44:25:49:4e:53:b2: 73:39:dd:77:9d:a6:c3:da:61:ef:50:4a:01:c6:02: a3:ed:1e:32:14:23:61:26:2d:a1:46:0c:a5:f3:fa: d5:0b:71:4b:42:e5:83:91:e5:42:3b:32:92:a0:0b: e3:aa:80:7e:2c:41:69:db:59:4b:cc:c3:2b:5e:6c: d4:6f:62:c0:b7:8a:20:bd:97:c3:52:21:40:f7:e2: 7c:e6:b0:86:ce:32:56:5b:a3:94:df:4c:cb:a3:15: ce:8b:12:70:1b:6b:3e:38:3e:cc:d7:1b:a3:46:b3: a3:5b:57:63:05:c4:5a:e0:78:3d:e4:69:e1:92:0e: bc:4c:2c:1d:12:98:6d:3b:53:4d:cc:9e:9a:9e:49: a7:fc:1d:5a:08:fd:9c:7b:31:e9:c5:f0:3e:fc:b4: b1:7e:38:17:4c:b0:03:f7:4c:13:ea:c5:18:cb:67: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B X509v3 Authority Key Identifier: keyid:AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6a:1e:0a:d2:84:6a:7c:36:04:de:22:3a:26:75:3e:1a:4e: b3:97:ac:b7:64:ea:7e:6a:60:af:0a:79:2a:ed:28:2b:06:55: 67:00:7c:16:11:c5:7d:01:27:7c:86:b6:4b:50:e0:cb:47:94: f2:fe:cc:6e:2f:5c:76:a9:aa:c2:36:c5:1f:3a:52:d6:9d:a1: 87:b0:64:54:53:b9:d1:50:35:3e:29:2d:26:0e:7e:77:f3:a4: 14:d0:71:af:a2:3a:22:3c:3e:cd:bd:c8:ae:ad:d6:c0:b7:73: e3:bc:c4:59:c8:91:14:39:bd:bf:db:92:21:c9:78:a6:c1:bf: 4b:21:7b:df:2c:d2:c2:26:ea:12:6e:7c:e9:40:fb:7a:93:16: a5:a7:bd:30:16:ec:58:f1:99:14:81:2c:e8:0b:6a:1f:59:be: fe:4c:40:8d:fe:ee:96:20:7a:e6:25:fa:a6:87:7a:9b:23:ad: f2:a1:33:a0:d1:87:d5:13:b2:31:95:5b:ca:35:a1:05:03:c6: 74:38:a3:cf:0d:d0:2d:8e:19:55:0e:a8:d8:42:2c:98:9e:30: 0f:9b:fe:03:7c:d9:c9:a8:f2:93:68:64:d3:22:81:9b:0a:19: ae:33:cf:0e:cc:78:44:63:37:c7:e8:2a:56:bf:1e:60:8a:25: e4:72:16:10 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUNE N0MwNzQ5RTUzQTEwQTAwMjVDRDlDQUZGODc4QkUyRERCNTYzODAeFw0yNTA1MTcx NzQxMDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM5NTAwNkJEREM0RDk1 MzhGODZCOTREMkYxMEEwM0IzM0Q4MzlFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvVT7RmBpeuQYzKl0Limj6mai4OW1I8jZe7qgbcGACIzjQ3UbH YMwx32dHetv97OWfsfkzti5sfXvMG3EOC3eV93ov7aoUDAr031Myj+noNnOFekQl SU5TsnM53XedpsPaYe9QSgHGAqPtHjIUI2EmLaFGDKXz+tULcUtC5YOR5UI7MpKg C+OqgH4sQWnbWUvMwytebNRvYsC3iiC9l8NSIUD34nzmsIbOMlZbo5TfTMujFc6L EnAbaz44PszXG6NGs6NbV2MFxFrgeD3kaeGSDrxMLB0SmG07U03MnpqeSaf8HVoI /Zx7MenF8D78tLF+OBdMsAP3TBPqxRjLZ4eDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyVAGvdxNlTj4a5TS8QoDsz2DniswHwYDVR0jBBgwFoAUrNfAdJ5ToQoAJc2c r/h4vi3bVjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ni9yTmZBZEo1VG9Rb0FKYzJjcl9oNHZpM2JWamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JOZkFkSjVUb1FvQUpjMmNyX2g0dmkzYlZqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTYvck5mQWRKNVRvUW9B SmMyY3JfaDR2aTNiVmpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHxqHgrShGp8NgTeIjomdT4aTrOXrLdk6n5qYK8KeSrtKCsGVWcAfBYRxX0B J3yGtktQ4MtHlPL+zG4vXHapqsI2xR86UtadoYewZFRTudFQNT4pLSYOfnfzpBTQ ca+iOiI8Ps29yK6t1sC3c+O8xFnIkRQ5vb/bkiHJeKbBv0she98s0sIm6hJufOlA +3qTFqWnvTAW7FjxmRSBLOgLah9Zvv5MQI3+7pYgeuYl+qaHepsjrfKhM6DRh9UT sjGVW8o1oQUDxnQ4o88N0C2OGVUOqNhCLJieMA+b/gN82cmo8pNoZNMigZsKGa4z zw7MeERjN8foKla/HmCKJeRyFhA= -----END CERTIFICATE-----Generated at Sat May 17 19:41:12 2025 by rpki-client