$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft File: DPxgVxKdypoWDypZIndlqeZ0lLs.mft (raw, json) Hash identifier: TzmG+pWciZfvwQB3ZmZ2QTdJw0z4083rPFuMRQ/5um0= Subject key identifier: 0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96 Authority key identifier: 0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB Certificate issuer: /CN=0CFC6057129DCA9A160F2A59227765A9E67494BB Certificate serial: 05EE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft Manifest number: 05EE Signing time: Sat 17 May 2025 22:40:49 +0000 Manifest this update: Sat 17 May 2025 22:40:49 +0000 Manifest next update: Sun 18 May 2025 04:40:49 +0000 Files and hashes: 1: DPxgVxKdypoWDypZIndlqeZ0lLs.crl (hash: KFf4iq7nEu4a+iH52xor9medlTS64/U9T9Hk0Oi05DY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1518 (0x5ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CFC6057129DCA9A160F2A59227765A9E67494BB Validity Not Before: May 17 22:40:49 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=0A119F57ACC03770F86C2A86F0217E60FDC14A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:1e:6b:8d:42:0c:34:04:f0:b7:a9:65:fc: 8d:7b:cf:4a:42:07:b3:5e:79:c5:a2:e5:77:99:f0: 18:22:f5:e0:40:8e:0e:d0:4b:21:f5:5d:d4:be:8d: 35:69:f2:59:18:69:fb:16:2f:11:47:30:4b:12:8f: 6c:15:4c:8a:dd:9c:38:96:d2:f0:b9:5c:73:2f:63: e0:90:89:d0:72:bf:15:60:ea:9d:59:7e:b9:04:d8: c2:99:f1:ba:c1:1c:c4:b9:64:b6:d1:c5:8c:df:ad: 88:2c:3e:e2:b6:07:94:5d:f6:fa:30:21:82:60:4c: f0:5d:4e:8b:7f:99:77:77:d7:2a:fb:1b:5f:7d:a9: 27:ab:9b:67:b8:c5:ce:cc:f2:84:5f:9d:cc:63:7a: b4:20:b0:d2:03:2c:de:1b:b9:2e:1e:08:4e:ec:2e: 77:dd:2e:74:33:21:78:39:ef:54:1b:89:9b:e0:2e: 1a:eb:63:0d:b0:e2:c1:8b:4e:10:a8:70:a3:d6:cd: 02:5a:8b:f0:af:4d:ef:e9:1f:4f:f2:a0:34:23:6d: 60:d5:1d:fd:8e:a5:c0:e2:45:9f:df:58:dc:68:96: c4:b7:ed:cb:b4:7f:61:b7:ad:e4:3b:ee:9e:f5:08: fb:44:26:8f:28:8d:9d:d4:4b:0b:14:d1:24:cf:fc: b4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96 X509v3 Authority Key Identifier: keyid:0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:10:b9:58:52:89:7e:e8:f2:3e:4e:29:27:c3:75:51:83:85: a1:86:fe:2f:ba:94:ca:66:50:04:cd:ce:c1:7c:81:d3:aa:9e: ee:57:23:37:f0:6d:b1:21:5e:7d:3a:ee:f9:81:7a:89:8f:c1: 43:fa:00:79:f2:a9:70:04:67:74:6d:c4:98:a0:30:f4:0a:f2: 22:04:5c:d1:b3:d7:61:5a:d9:2d:5c:d9:c5:ae:14:5b:63:fa: 43:22:4e:25:de:71:23:ac:98:24:52:a1:34:cf:f3:91:af:75: 49:59:d8:c9:2f:24:5b:13:39:4b:48:ea:d5:ff:33:dc:4f:0d: e6:cc:34:95:e2:cd:cc:4c:58:aa:29:56:6c:f6:4b:95:f9:c1: 75:fd:c6:21:7f:6a:28:2a:c5:68:0c:24:06:4d:97:73:2a:17: a7:ab:75:6e:d6:a4:eb:d3:ee:47:36:89:a8:4f:65:9e:80:f3: 7b:27:1f:64:d5:82:36:bd:d8:e3:a1:26:0d:16:a0:ff:c7:96: 9e:12:4d:ff:31:e3:0c:22:36:c6:c5:6b:fd:93:6b:2d:fe:56: 23:26:c2:41:a4:9d:f0:9f:10:39:a4:92:2b:2f:77:32:7a:bf: d9:47:d3:b4:83:7a:5f:f9:d3:dc:a1:d0:6c:39:84:0b:1d:ca: cf:32:a5:02 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENG QzYwNTcxMjlEQ0E5QTE2MEYyQTU5MjI3NzY1QTlFNjc0OTRCQjAeFw0yNTA1MTcy MjQwNDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBBMTE5RjU3QUNDMDM3 NzBGODZDMkE4NkYwMjE3RTYwRkRDMTRBOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8IB5rjUIMNATwt6ll/I17z0pCB7NeecWi5XeZ8Bgi9eBAjg7Q SyH1XdS+jTVp8lkYafsWLxFHMEsSj2wVTIrdnDiW0vC5XHMvY+CQidByvxVg6p1Z frkE2MKZ8brBHMS5ZLbRxYzfrYgsPuK2B5Rd9vowIYJgTPBdTot/mXd31yr7G199 qSerm2e4xc7M8oRfncxjerQgsNIDLN4buS4eCE7sLnfdLnQzIXg571QbiZvgLhrr Yw2w4sGLThCocKPWzQJai/CvTe/pH0/yoDQjbWDVHf2OpcDiRZ/fWNxolsS37cu0 f2G3reQ77p71CPtEJo8ojZ3USwsU0STP/LTnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUChGfV6zAN3D4bCqG8CF+YP3BSpYwHwYDVR0jBBgwFoAUDPxgVxKdypoWDypZ IndlqeZ0lLswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw NS9EUHhnVnhLZHlwb1dEeXBaSW5kbHFlWjBsTHMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RQeGdWeEtkeXBvV0R5cFpJbmRscWVaMGxMcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDUvRFB4Z1Z4S2R5cG9X RHlwWkluZGxxZVowbExzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMgQuVhSiX7o8j5OKSfDdVGDhaGG/i+6lMpmUATNzsF8gdOqnu5XIzfwbbEh Xn067vmBeomPwUP6AHnyqXAEZ3RtxJigMPQK8iIEXNGz12Fa2S1c2cWuFFtj+kMi TiXecSOsmCRSoTTP85GvdUlZ2MkvJFsTOUtI6tX/M9xPDebMNJXizcxMWKopVmz2 S5X5wXX9xiF/aigqxWgMJAZNl3MqF6erdW7WpOvT7kc2iahPZZ6A83snH2TVgja9 2OOhJg0WoP/Hlp4STf8x4wwiNsbFa/2Tay3+ViMmwkGknfCfEDmkkisvdzJ6v9lH 07SDel/509yh0Gw5hAsdys8ypQI= -----END CERTIFICATE-----Generated at Sun May 18 03:06:36 2025 by rpki-client