$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3307/USN2g1L_1eSeSpn0-TWAPoNb35Y.mft File: USN2g1L_1eSeSpn0-TWAPoNb35Y.mft (raw, json) Hash identifier: 8IlVmxfG029gV+OCXZ0/bgHGLTgE24rpYNWxS7iKZmY= Subject key identifier: 7E:9E:E0:90:3F:FE:91:E9:63:B2:B8:E8:9E:D7:23:94:AA:68:A5:31 Authority key identifier: 51:23:76:83:52:FF:D5:E4:9E:4A:99:F4:F9:35:80:3E:83:5B:DF:96 Certificate issuer: /CN=5123768352FFD5E49E4A99F4F935803E835BDF96 Certificate serial: 05B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/USN2g1L_1eSeSpn0-TWAPoNb35Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/USN2g1L_1eSeSpn0-TWAPoNb35Y.mft Manifest number: 05B1 Signing time: Sat 17 May 2025 17:38:21 +0000 Manifest this update: Sat 17 May 2025 17:38:21 +0000 Manifest next update: Sat 17 May 2025 23:38:21 +0000 Files and hashes: 1: USN2g1L_1eSeSpn0-TWAPoNb35Y.crl (hash: 4jxwJ29u7SAFLdb8otpM20ig7bjLlHDIyp18L4rsA28=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/USN2g1L_1eSeSpn0-TWAPoNb35Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/USN2g1L_1eSeSpn0-TWAPoNb35Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/USN2g1L_1eSeSpn0-TWAPoNb35Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5123768352FFD5E49E4A99F4F935803E835BDF96 Validity Not Before: May 17 17:38:21 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7E9EE0903FFE91E963B2B8E89ED72394AA68A531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:9d:f9:db:d7:5e:9b:ea:09:7d:fd:85:6b: 77:8b:7d:07:20:7a:11:87:2d:f3:bf:be:bf:15:ee: a2:cc:b0:df:f3:19:de:42:46:1f:de:67:d8:f2:14: 53:b7:3b:0d:71:63:82:c7:e2:02:20:d3:74:e2:81: 2d:7c:66:6d:e0:e4:bd:5e:3a:5d:76:8e:71:ef:56: 87:4e:e3:f9:4a:df:2b:19:54:82:dd:71:4a:4d:65: b2:99:ee:4d:b7:36:b2:89:d9:38:0c:de:58:7e:e6: e2:93:b0:e5:64:3c:ee:7e:5c:86:00:57:20:29:60: 0b:76:9d:c7:6c:82:3e:5c:7a:09:5d:6e:77:72:18: e6:76:03:2e:e3:1a:82:90:82:5e:2c:ef:8f:8a:30: 24:92:d1:7a:4e:3c:88:d7:73:31:0b:d8:d9:20:95: 61:73:11:aa:c4:6d:b4:d6:70:7a:18:90:b3:4e:d4: 01:72:fa:b6:35:73:11:ea:af:78:c1:b7:1d:fe:4e: ba:92:c8:62:f6:8b:21:09:b8:57:2b:48:02:de:af: 1d:67:46:03:b9:5d:5f:f5:94:e5:ca:0d:d9:b4:4c: 4c:cf:13:98:47:fe:4f:e0:89:0a:2e:89:78:02:3b: b4:82:a1:ed:2e:8d:ad:d3:c6:a4:af:d3:b2:a3:6e: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9E:E0:90:3F:FE:91:E9:63:B2:B8:E8:9E:D7:23:94:AA:68:A5:31 X509v3 Authority Key Identifier: keyid:51:23:76:83:52:FF:D5:E4:9E:4A:99:F4:F9:35:80:3E:83:5B:DF:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/USN2g1L_1eSeSpn0-TWAPoNb35Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/USN2g1L_1eSeSpn0-TWAPoNb35Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/USN2g1L_1eSeSpn0-TWAPoNb35Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:3f:b0:d4:c0:ad:30:ce:99:14:e2:cb:59:72:5d:4a:2e:46: c2:61:5c:93:c6:fc:a3:44:45:d8:cb:d0:fa:1b:74:73:0d:f6: d8:fd:9f:02:73:c8:ec:f3:04:1c:55:c3:4d:96:b0:7c:90:f9: 17:b5:6f:1d:51:23:d8:84:4c:35:4f:b0:4b:2b:92:54:9e:2d: 94:23:84:07:61:8c:1e:14:59:c8:91:59:33:c6:61:77:5b:7c: 21:08:6a:da:fa:54:9c:d5:81:79:d1:60:9e:06:b6:9b:6f:91: ad:26:a4:47:54:c6:da:b4:f0:9b:3f:b1:8b:69:9e:52:91:f3: 84:28:af:05:fa:bc:48:ae:0d:4c:e3:de:60:ba:52:75:ff:44: b9:c3:56:ab:b3:38:6a:03:e0:40:ea:b9:3a:6b:8c:b1:38:d6: 9a:d8:b3:f7:b6:74:28:f3:50:ec:b2:ff:25:bd:72:14:7e:fe: 8f:26:28:b1:a6:83:82:e9:34:8c:b6:e5:56:21:a0:5a:42:95: f0:17:56:dc:9d:1e:11:2a:d7:2b:dd:fb:46:3f:29:af:03:8a: ef:9a:ba:c8:b4:dd:c9:1d:fb:bd:02:f4:9e:7a:eb:6f:c0:5d: 35:b6:e4:c4:b6:00:0c:ca:08:07:69:34:dd:29:f4:02:5a:b5: ef:97:74:8e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy Mzc2ODM1MkZGRDVFNDlFNEE5OUY0RjkzNTgwM0U4MzVCREY5NjAeFw0yNTA1MTcx NzM4MjFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDdFOUVFMDkwM0ZGRTkx RTk2M0IyQjhFODlFRDcyMzk0QUE2OEE1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcmp3529dem+oJff2Fa3eLfQcgehGHLfO/vr8V7qLMsN/zGd5C Rh/eZ9jyFFO3Ow1xY4LH4gIg03TigS18Zm3g5L1eOl12jnHvVodO4/lK3ysZVILd cUpNZbKZ7k23NrKJ2TgM3lh+5uKTsOVkPO5+XIYAVyApYAt2ncdsgj5cegldbndy GOZ2Ay7jGoKQgl4s74+KMCSS0XpOPIjXczEL2NkglWFzEarEbbTWcHoYkLNO1AFy +rY1cxHqr3jBtx3+TrqSyGL2iyEJuFcrSALerx1nRgO5XV/1lOXKDdm0TEzPE5hH /k/giQouiXgCO7SCoe0uja3TxqSv07KjbhG3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUfp7gkD/+keljsrjontcjlKpopTEwHwYDVR0jBBgwFoAUUSN2g1L/1eSeSpn0 +TWAPoNb35YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw Ny9VU04yZzFMXzFlU2VTcG4wLVRXQVBvTmIzNVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1VTTjJnMUxfMWVTZVNwbjAtVFdBUG9OYjM1WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDcvVVNOMmcxTF8xZVNl U3BuMC1UV0FQb05iMzVZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACA/sNTArTDOmRTiy1lyXUouRsJhXJPG/KNERdjL0PobdHMN9tj9nwJzyOzz BBxVw02WsHyQ+Re1bx1RI9iETDVPsEsrklSeLZQjhAdhjB4UWciRWTPGYXdbfCEI atr6VJzVgXnRYJ4Gtptvka0mpEdUxtq08Js/sYtpnlKR84QorwX6vEiuDUzj3mC6 UnX/RLnDVquzOGoD4EDquTprjLE41prYs/e2dCjzUOyy/yW9chR+/o8mKLGmg4Lp NIy25VYhoFpClfAXVtydHhEq1yvd+0Y/Ka8Diu+ausi03ckd+70C9J5662/AXTW2 5MS2AAzKCAdpNN0p9AJate+XdI4= -----END CERTIFICATE-----Generated at Sat May 17 22:36:08 2025 by rpki-client