$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft File: 89605Z7lMyYp7F4LaGZtNuKXN2s.mft (raw, json) Hash identifier: 9njjrm+PDzpsSd0xXqspveOy1xQmrDF5LgvAxT3iz9o= Subject key identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 Authority key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B Certificate issuer: /CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Certificate serial: 0445 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft Manifest number: 0445 Signing time: Sat 17 May 2025 17:42:57 +0000 Manifest this update: Sat 17 May 2025 17:42:57 +0000 Manifest next update: Sat 17 May 2025 23:42:57 +0000 Files and hashes: 1: 89605Z7lMyYp7F4LaGZtNuKXN2s.crl (hash: b39VBwsQU70hANwft6NsHrpqu1fy43rXZmvZ10UB+Hs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Validity Not Before: May 17 17:42:57 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=52797665E566FA8A9E8ACF2100B20A2E63FDF8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:22:b1:13:d3:08:92:e7:1f:ab:59:2f:b3: a1:ea:34:eb:d1:89:c7:1a:14:19:ec:00:38:d6:36: 20:7b:1c:77:cf:d1:60:76:50:d9:4e:84:9d:1c:c2: be:ca:bf:9a:fe:a3:af:dc:26:2f:87:5a:4c:2f:23: 1a:95:b3:31:ce:5c:69:04:ba:33:d5:cf:1a:82:e0: f2:44:9c:fc:6d:7e:a8:9c:46:1f:69:b6:3b:a0:0c: 15:9e:82:1c:71:23:fb:0c:7e:e4:95:12:bf:c0:11: 3b:56:e2:0d:f2:71:72:b0:b5:cb:4c:0c:bf:7c:42: 80:92:a8:63:cb:c0:9a:e1:62:85:35:3d:03:56:b5: ef:74:cf:d6:e3:bc:30:be:e2:f0:57:a0:49:55:74: 0a:5c:4a:d7:1c:c8:4c:24:ed:51:a6:36:1c:0c:db: a1:7c:9f:d0:d5:54:e7:26:70:b1:63:f6:4f:a9:ca: 70:0a:bb:d9:f8:d2:ee:f7:94:4c:c9:05:f1:03:34: 2a:4e:37:8e:ea:08:58:da:3d:2d:42:10:3c:5b:26: f0:2f:5c:06:cc:ca:d8:7b:4b:09:f8:5f:c7:25:fd: 5f:8a:38:50:bc:b6:c3:ff:3a:76:f6:dc:c0:41:76: b6:dc:68:54:1d:1c:46:17:ac:eb:3c:26:e7:c3:5c: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 X509v3 Authority Key Identifier: keyid:F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:3a:13:d5:2a:a4:fc:7b:2b:78:78:03:e9:8f:aa:40:cf:1d: 02:51:a9:15:a1:33:e3:6a:2b:1e:9a:0a:da:f0:da:4c:91:51: b3:cc:5b:f7:ba:83:0e:cb:19:68:c0:b2:00:db:e3:16:1a:b3: 45:1d:2d:ec:01:a7:7e:5c:39:4a:a0:b5:6a:87:72:72:f6:7d: 31:ba:4e:71:66:0d:61:f6:36:8f:58:77:d0:3a:d0:ef:d4:72: 3b:57:2c:f0:15:66:a2:7f:8a:67:c1:10:21:c2:6b:e1:0c:a1: dc:8d:91:e2:c7:dc:0c:ef:5c:54:21:14:b2:6c:04:e1:16:31: c7:91:ac:bc:8d:7c:15:8e:6e:9a:48:f9:fc:b3:e0:fb:93:4f: 07:41:09:b9:67:f4:ba:d6:ae:f4:8f:5d:4a:c0:bd:6b:20:cc: 06:36:16:da:f1:12:34:29:bb:cd:5e:93:31:d6:0b:75:81:5a: 93:ce:97:37:c3:e2:6c:7d:e1:1c:54:56:af:75:b9:d4:96:47: e9:25:60:46:df:a7:e9:f7:be:6a:d0:72:74:07:64:b4:d4:44: 5a:1d:6a:54:b5:af:d7:ee:ae:58:81:e6:10:76:a6:17:6f:26: ea:93:67:94:6c:56:42:67:c2:21:9b:f1:a3:a3:35:00:7e:d3: 9e:e7:30:80 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjNE RUI0RTU5RUU1MzMyNjI5RUM1RTBCNjg2NjZEMzZFMjk3Mzc2QjAeFw0yNTA1MTcx NzQyNTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUyNzk3NjY1RTU2NkZB OEE5RThBQ0YyMTAwQjIwQTJFNjNGREY4QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpJiKxE9MIkucfq1kvs6HqNOvRiccaFBnsADjWNiB7HHfP0WB2 UNlOhJ0cwr7Kv5r+o6/cJi+HWkwvIxqVszHOXGkEujPVzxqC4PJEnPxtfqicRh9p tjugDBWeghxxI/sMfuSVEr/AETtW4g3ycXKwtctMDL98QoCSqGPLwJrhYoU1PQNW te90z9bjvDC+4vBXoElVdApcStccyEwk7VGmNhwM26F8n9DVVOcmcLFj9k+pynAK u9n40u73lEzJBfEDNCpON47qCFjaPS1CEDxbJvAvXAbMyth7Swn4X8cl/V+KOFC8 tsP/Onb23MBBdrbcaFQdHEYXrOs8JufDXGmRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUnl2ZeVm+oqeis8hALIKLmP9+LEwHwYDVR0jBBgwFoAU89605Z7lMyYp7F4L aGZtNuKXN2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OS84OTYwNVo3bE15WXA3RjRMYUdadE51S1hOMnMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzg5NjA1WjdsTXlZcDdGNExhR1p0TnVLWE4ycy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTkvODk2MDVaN2xNeVlw N0Y0TGFHWnROdUtYTjJzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAL86E9UqpPx7K3h4A+mPqkDPHQJRqRWhM+NqKx6aCtrw2kyRUbPMW/e6gw7L GWjAsgDb4xYas0UdLewBp35cOUqgtWqHcnL2fTG6TnFmDWH2No9Yd9A60O/UcjtX LPAVZqJ/imfBECHCa+EModyNkeLH3AzvXFQhFLJsBOEWMceRrLyNfBWObppI+fyz 4PuTTwdBCbln9LrWrvSPXUrAvWsgzAY2FtrxEjQpu81ekzHWC3WBWpPOlzfD4mx9 4RxUVq91udSWR+klYEbfp+n3vmrQcnQHZLTURFodalS1r9furliB5hB2phdvJuqT Z5RsVkJnwiGb8aOjNQB+057nMIA= -----END CERTIFICATE-----Generated at Sat May 17 21:25:44 2025 by rpki-client