$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft File: zgJJuefVZubL61d9djs8y7Gwqy0.mft (raw, json) Hash identifier: kW0ujuGmGtjjkK9QKMFZLQjmi6iH3jEKJDMoefbyT3w= Subject key identifier: D7:35:CF:06:4F:7B:A7:C5:2F:10:67:93:7F:4D:16:BA:F0:6C:5E:4A Authority key identifier: CE:02:49:B9:E7:D5:66:E6:CB:EB:57:7D:76:3B:3C:CB:B1:B0:AB:2D Certificate issuer: /CN=CE0249B9E7D566E6CBEB577D763B3CCBB1B0AB2D Certificate serial: 220C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft Manifest number: 21FA Signing time: Sat 17 May 2025 13:08:08 +0000 Manifest this update: Sat 17 May 2025 13:08:08 +0000 Manifest next update: Sat 17 May 2025 19:08:08 +0000 Files and hashes: 1: WyTkXHEhLqcsjNd_oPHvbf674aI.roa (hash: gt/t6rEu5sUWRrRf2e3Slg7FAm0I0chcu0jtaf/OGlg=) 2: cYoSIKX5rPaGhe1jQErFxMn1KlE.roa (hash: sGiqqVrNR6d7HV7W1A6wNpAMcqkm+3f/aPa23FGvVeA=) 3: zgJJuefVZubL61d9djs8y7Gwqy0.crl (hash: C1KMvM6SU0L+uVKPrAhjnLwRC7zDtU0T12Iky+inbfU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8716 (0x220c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0249B9E7D566E6CBEB577D763B3CCBB1B0AB2D Validity Not Before: May 17 13:08:08 2025 GMT Not After : Apr 9 06:40:24 2026 GMT Subject: CN=D735CF064F7BA7C52F1067937F4D16BAF06C5E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:09:3b:af:00:60:89:fe:1c:da:67:e3:72:bb: e8:ad:94:64:0b:0e:e3:b8:81:9f:9f:09:c0:99:4c: 7e:5d:df:36:31:92:48:82:c2:8d:27:f8:66:60:b6: 1a:60:9c:9a:0a:da:a9:8c:fb:0e:a5:cf:6d:64:e4: 6c:b6:b3:c8:d0:15:a2:e6:03:55:bb:14:77:6e:d6: 2b:1a:2e:70:a9:a8:1f:c9:67:b7:de:a3:53:90:48: 88:12:bd:6f:1c:e2:38:aa:40:dd:5c:08:ab:18:8a: 75:5b:ac:1f:be:b1:dd:34:9d:b5:69:92:a8:6f:8d: c5:8f:d6:51:ae:37:72:d2:44:27:f8:4c:6c:8f:d5: 6f:73:87:21:6a:21:4c:77:fd:5d:b0:1c:01:55:e7: 7d:b4:5d:bd:d8:1b:b2:1d:46:05:28:47:f1:82:6f: 94:4a:50:83:56:0c:f8:20:cd:78:f4:0e:fa:a2:41: 6c:76:1b:67:66:a3:32:12:a4:af:45:a4:f6:25:35: 22:cd:f3:b5:bc:ea:8a:2c:f0:64:c9:ba:c4:98:13: 90:16:04:5e:17:23:6f:3c:c1:b6:36:15:2c:09:a0: 73:fb:e3:51:e6:1f:96:63:14:26:bc:48:48:67:eb: 44:67:16:86:ea:59:f5:33:79:b6:5d:49:c9:eb:d5: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:35:CF:06:4F:7B:A7:C5:2F:10:67:93:7F:4D:16:BA:F0:6C:5E:4A X509v3 Authority Key Identifier: keyid:CE:02:49:B9:E7:D5:66:E6:CB:EB:57:7D:76:3B:3C:CB:B1:B0:AB:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:b4:a7:df:4c:6f:11:31:04:a9:5b:cc:67:3a:26:cb:c7:69: f3:4b:e2:a1:1f:a9:ea:64:ce:5b:26:a0:ef:33:44:ad:d5:91: 37:63:dc:85:ab:86:8e:3c:44:0d:b4:4f:08:fc:77:07:0d:68: c2:fb:58:dd:a1:b0:ff:ff:c6:61:ea:71:0a:06:ed:1e:c3:20: 55:5e:a7:9d:21:cf:f3:42:02:d8:69:fb:68:09:5f:f4:e2:ee: a3:af:b2:7e:3b:d2:eb:a3:b7:83:c2:d6:e0:a3:b4:27:f1:b6: c9:eb:cc:f8:8e:89:0c:d9:5e:53:09:e4:c6:53:60:81:c1:f6: 75:60:df:b1:a1:64:bb:d6:54:cf:8c:ae:19:48:ab:26:30:18: 83:92:07:c6:a2:31:0c:af:6e:0e:8b:e5:e5:bc:2d:b0:74:d8: d0:53:f9:bc:18:3e:7d:96:f9:68:61:83:d1:39:a9:32:30:3f: 50:88:d4:69:ff:c1:2c:62:ac:50:2d:c1:3b:6e:a4:16:8c:64: 15:4f:c4:06:b6:4e:49:56:fb:2e:11:da:4a:01:4d:54:e7:d3: 24:6e:46:43:c9:c1:75:14:62:a6:26:92:24:e8:a2:0a:ad:c2: bb:bd:59:0f:ee:5b:90:6b:9b:00:a1:14:b7:0f:bf:92:e8:6e: 75:ab:bb:1f -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Uw MjQ5QjlFN0Q1NjZFNkNCRUI1NzdENzYzQjNDQ0JCMUIwQUIyRDAeFw0yNTA1MTcx MzA4MDhaFw0yNjA0MDkwNjQwMjRaMDMxMTAvBgNVBAMTKEQ3MzVDRjA2NEY3QkE3 QzUyRjEwNjc5MzdGNEQxNkJBRjA2QzVFNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcCTuvAGCJ/hzaZ+Nyu+itlGQLDuO4gZ+fCcCZTH5d3zYxkkiC wo0n+GZgthpgnJoK2qmM+w6lz21k5Gy2s8jQFaLmA1W7FHdu1isaLnCpqB/JZ7fe o1OQSIgSvW8c4jiqQN1cCKsYinVbrB++sd00nbVpkqhvjcWP1lGuN3LSRCf4TGyP 1W9zhyFqIUx3/V2wHAFV5320Xb3YG7IdRgUoR/GCb5RKUINWDPggzXj0DvqiQWx2 G2dmozISpK9FpPYlNSLN87W86oos8GTJusSYE5AWBF4XI288wbY2FSwJoHP741Hm H5ZjFCa8SEhn60RnFobqWfUzebZdScnr1fHJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU1zXPBk97p8UvEGeTf00WuvBsXkowHwYDVR0jBBgwFoAUzgJJuefVZubL61d9 djs8y7Gwqy0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy L3pnSkp1ZWZWWnViTDYxZDlkanM4eTdHd3F5MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvemdKSnVlZlZadWJMNjFkOWRqczh5N0d3cXkwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMyL3pnSkp1ZWZWWnViTDYx ZDlkanM4eTdHd3F5MC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDctKffTG8RMQSpW8xnOibLx2nzS+KhH6nqZM5bJqDvM0St1ZE3Y9yFq4aOPEQN tE8I/HcHDWjC+1jdobD//8Zh6nEKBu0ewyBVXqedIc/zQgLYaftoCV/04u6jr7J+ O9Lro7eDwtbgo7Qn8bbJ68z4jokM2V5TCeTGU2CBwfZ1YN+xoWS71lTPjK4ZSKsm MBiDkgfGojEMr24Oi+XlvC2wdNjQU/m8GD59lvloYYPROakyMD9QiNRp/8EsYqxQ LcE7bqQWjGQVT8QGtk5JVvsuEdpKAU1U59MkbkZDycF1FGKmJpIk6KIKrcK7vVkP 7luQa5sAoRS3D7+S6G51q7sf -----END CERTIFICATE-----Generated at Sat May 17 17:09:06 2025 by rpki-client