$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft File: OpXd7iyMGeRxgIou20cqqm_g9Jg.mft (raw, json) Hash identifier: +PfCIstdfeEg8v0/hlIZRXV8gc713aGr+HTT1wYuPHc= Subject key identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 Authority key identifier: 3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 Certificate issuer: /CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Certificate serial: 0652 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft Manifest number: 0652 Signing time: Fri 16 May 2025 21:07:24 +0000 Manifest this update: Fri 16 May 2025 21:07:24 +0000 Manifest next update: Sat 17 May 2025 03:07:24 +0000 Files and hashes: 1: OpXd7iyMGeRxgIou20cqqm_g9Jg.crl (hash: oULTKQlbGXIbJ8DDSIgbUfYENypVC9KBMRe+4GNQ3X0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 03:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Validity Not Before: May 16 21:07:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=024B9897BA27D76C6D9B8F9C57C997D19875C2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9a:fb:3f:3b:ce:94:d2:81:30:cb:cc:a5:ce: e3:ad:a8:f0:a2:da:6f:11:37:7a:4b:db:83:6e:5b: b2:87:05:0a:37:9b:0d:12:08:f1:cf:a6:99:d7:3d: 13:cc:9e:48:88:0b:43:5e:7c:0f:b3:d3:11:b3:65: ea:db:89:23:e3:79:1f:2a:05:2e:d3:d1:37:d9:30: 6d:1d:ab:a2:2b:fc:7b:93:72:42:42:e2:24:30:ee: 3d:4e:27:fe:90:f8:d1:1b:81:17:1a:56:5a:55:50: e8:ec:ff:93:aa:4a:2f:f0:ad:25:96:3e:83:9d:bd: 66:17:0b:5b:03:ee:92:f3:08:71:44:c1:b5:0b:59: 56:81:b4:e3:de:b6:a7:36:0a:8c:d3:97:2b:ef:aa: 72:5a:bb:d4:47:d3:ed:c1:e5:14:b6:b8:3d:3d:36: 46:06:63:a9:4a:0c:74:c2:25:f9:fd:90:a1:83:24: db:f9:69:2f:61:1d:dc:f7:c5:46:38:ff:96:98:97: 4f:3f:a4:00:f7:db:1d:57:95:b1:3b:90:29:36:7a: e2:bb:99:09:85:89:d2:ad:05:6a:78:a2:7f:5f:ea: 83:8d:cf:c3:46:9f:39:87:39:de:00:46:9f:12:a8: 4e:3a:7d:66:49:5e:98:ba:ef:1d:55:9c:6d:c5:cb: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 X509v3 Authority Key Identifier: keyid:3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:8b:96:14:b2:75:22:77:f8:5a:ab:8c:ae:b7:08:6d:79:a9: 6f:c8:fe:c3:7f:42:04:f1:84:e4:d7:b0:b7:57:36:67:dc:e9: 2a:f9:45:5a:af:f6:de:f7:fd:fa:56:e2:81:dd:49:3e:13:52: 30:bf:9a:b6:49:33:18:6a:a2:cd:82:2f:c4:33:6a:a6:62:26: ab:88:ee:f8:8d:0b:7e:47:6b:2d:7e:9e:ec:84:2e:4f:0b:cd: b0:9b:19:44:88:84:c5:27:e9:15:61:18:71:80:fb:a9:cb:8e: 81:42:5c:0a:60:6d:df:aa:fe:db:6c:3f:f5:b9:9b:3a:11:c2: 46:0c:21:a2:8d:b2:c1:04:30:15:a9:ac:69:33:54:d9:d1:f8: cd:a2:53:1a:b8:41:89:d0:98:6d:90:5a:7d:b1:ff:2c:91:b7: 34:6f:44:c9:20:f7:ae:53:b9:6c:a9:5b:28:f7:a2:8b:05:4a: 14:b2:07:fa:58:ca:aa:85:cd:c9:88:36:32:3c:cf:ae:80:35: 5f:20:a0:43:16:6e:57:e5:e5:53:bd:21:e7:12:d6:33:7b:41: e4:d9:d5:27:be:f3:10:d1:3b:98:e5:30:65:f0:2e:14:45:68: b2:01:1b:ae:94:e7:f9:2c:7e:f7:67:80:d2:66:c8:c6:22:7b: 86:f3:46:86 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E5 NURERUUyQzhDMTlFNDcxODA4QTJFREI0NzJBQUE2RkUwRjQ5ODAeFw0yNTA1MTYy MTA3MjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAyNEI5ODk3QkEyN0Q3 NkM2RDlCOEY5QzU3Qzk5N0QxOTg3NUMyRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpmvs/O86U0oEwy8ylzuOtqPCi2m8RN3pL24NuW7KHBQo3mw0S CPHPppnXPRPMnkiIC0NefA+z0xGzZerbiSPjeR8qBS7T0TfZMG0dq6Ir/HuTckJC 4iQw7j1OJ/6Q+NEbgRcaVlpVUOjs/5OqSi/wrSWWPoOdvWYXC1sD7pLzCHFEwbUL WVaBtOPetqc2CozTlyvvqnJau9RH0+3B5RS2uD09NkYGY6lKDHTCJfn9kKGDJNv5 aS9hHdz3xUY4/5aYl08/pAD32x1XlbE7kCk2euK7mQmFidKtBWp4on9f6oONz8NG nzmHOd4ARp8SqE46fWZJXpi67x1VnG3FyzHfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAkuYl7on12xtm4+cV8mX0Zh1wvAwHwYDVR0jBBgwFoAUOpXd7iyMGeRxgIou 20cqqm/g9JgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9PcFhkN2l5TUdlUnhnSW91MjBjcXFtX2c5SmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09wWGQ3aXlNR2VSeGdJb3UyMGNxcW1fZzlKZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvT3BYZDdpeU1HZVJ4 Z0lvdTIwY3FxbV9nOUpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACaLlhSydSJ3+FqrjK63CG15qW/I/sN/QgTxhOTXsLdXNmfc6Sr5RVqv9t73 /fpW4oHdST4TUjC/mrZJMxhqos2CL8QzaqZiJquI7viNC35Hay1+nuyELk8LzbCb GUSIhMUn6RVhGHGA+6nLjoFCXApgbd+q/ttsP/W5mzoRwkYMIaKNssEEMBWprGkz VNnR+M2iUxq4QYnQmG2QWn2x/yyRtzRvRMkg965TuWypWyj3oosFShSyB/pYyqqF zcmINjI8z66ANV8goEMWblfl5VO9IecS1jN7QeTZ1Se+8xDRO5jlMGXwLhRFaLIB G66U5/ksfvdngNJmyMYie4bzRoY= -----END CERTIFICATE-----Generated at Sat May 17 02:49:41 2025 by rpki-client