$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft File: RJgA4NOab6QpLdGwZto9qI0i-rw.mft (raw, json) Hash identifier: ctMhl2YgFbZLW782zRdTyH6+BvLrw6lg5yylk/l28AU= Subject key identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 Authority key identifier: 44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC Certificate issuer: /CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Certificate serial: 038C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft Manifest number: 038C Signing time: Sat 17 May 2025 17:40:24 +0000 Manifest this update: Sat 17 May 2025 17:40:24 +0000 Manifest next update: Sat 17 May 2025 23:40:24 +0000 Files and hashes: 1: RJgA4NOab6QpLdGwZto9qI0i-rw.crl (hash: G+21SUmz9ddyrBwa2LcvQWLCpcPqf/kc7KKkZuv1+Gg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Validity Not Before: May 17 17:40:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A21902D82F6C08116AC14E15D910AA41902FB009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b6:d6:e9:4a:69:59:89:35:9b:c3:c0:9d:01: 96:9b:84:97:1a:d0:7a:63:ed:5a:a8:10:c7:1c:cb: 52:e9:ab:01:5c:2d:b2:b6:a0:66:50:e2:c5:3f:43: c0:ff:11:cd:5b:c6:f5:0e:f3:fe:b5:78:08:26:66: bb:3f:e1:36:82:ee:7f:c3:60:10:76:04:8e:26:10: 13:a8:0f:30:3f:0e:16:87:45:a6:1b:33:21:eb:02: 12:58:2a:b3:5c:96:64:90:8d:c8:1a:a0:5e:8a:f2: ac:95:c5:fa:e0:ab:d7:1a:89:98:45:4d:ab:20:3f: 18:43:2d:02:2b:56:95:b9:73:05:a2:9a:ec:d5:20: dd:1b:0e:78:ce:a6:66:eb:ba:47:af:4d:35:29:d4: fe:d0:c3:0a:07:3f:1d:b4:0c:f2:48:2d:c9:fd:81: a5:3b:3f:29:a6:3f:42:3f:00:a6:f4:e0:ee:4a:ab: 84:4b:56:8b:db:24:d2:54:4b:ca:4e:e3:ab:4d:72: 08:34:47:1b:e2:f7:be:66:d5:ad:89:ba:d4:52:ca: 6d:d4:6a:30:48:e0:bc:13:54:82:4d:4f:3b:60:18: ba:15:4e:56:c0:8b:27:21:26:11:4c:0f:71:3b:24: cf:f4:57:fe:93:e8:e6:69:25:09:0b:db:d3:80:67: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 X509v3 Authority Key Identifier: keyid:44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0e:4a:70:24:fb:c3:8e:f4:23:0d:50:cc:d4:00:5e:13:2d: b7:41:4c:af:26:bf:98:72:94:14:7c:db:d2:04:63:2b:4d:17: 49:3b:5c:49:b8:4e:62:e4:d5:ff:8b:db:ec:0f:c7:47:bc:ad: 21:34:39:4d:ca:8e:53:d6:c0:d4:3f:9a:33:d7:60:07:b0:d5: e2:f3:a5:6a:df:bf:a6:bb:14:c9:b8:a9:f5:d5:6f:05:07:49: e8:e7:76:70:f4:8d:d9:76:e2:49:7c:8b:74:6a:c6:4d:9d:ae: 70:2c:db:93:14:ce:33:0b:85:f2:c0:ba:56:89:28:9e:9f:38: 1f:5d:65:54:3c:1b:8e:46:ba:5e:43:9e:dc:6a:bb:88:a6:3e: eb:05:ae:f3:bb:f8:68:34:e0:a1:07:0d:55:b3:7e:ed:65:ac: 75:b4:53:97:f9:95:a8:fe:21:a7:0c:b9:30:4f:e2:52:2a:7f: b4:46:25:58:bf:ad:95:85:c3:3a:77:9a:52:ad:af:00:d6:79: fe:a5:f5:7f:dd:a4:b3:ea:b3:39:d3:05:fc:4e:e6:71:8e:5f: 4f:87:b7:8b:0e:a7:6b:65:08:ab:30:23:3d:64:1d:4a:50:99: 6c:7e:b5:f0:38:2a:2f:16:65:83:d1:fc:06:c0:a9:59:73:ba: 33:3f:ea:aa -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ5 ODAwRTBEMzlBNkZBNDI5MkREMUIwNjZEQTNEQTg4RDIyRkFCQzAeFw0yNTA1MTcx NzQwMjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEEyMTkwMkQ4MkY2QzA4 MTE2QUMxNEUxNUQ5MTBBQTQxOTAyRkIwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwttbpSmlZiTWbw8CdAZabhJca0Hpj7VqoEMccy1LpqwFcLbK2 oGZQ4sU/Q8D/Ec1bxvUO8/61eAgmZrs/4TaC7n/DYBB2BI4mEBOoDzA/DhaHRaYb MyHrAhJYKrNclmSQjcgaoF6K8qyVxfrgq9caiZhFTasgPxhDLQIrVpW5cwWimuzV IN0bDnjOpmbrukevTTUp1P7QwwoHPx20DPJILcn9gaU7PymmP0I/AKb04O5Kq4RL VovbJNJUS8pO46tNcgg0Rxvi975m1a2JutRSym3UajBI4LwTVIJNTztgGLoVTlbA iychJhFMD3E7JM/0V/6T6OZpJQkL29OAZ/FLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUohkC2C9sCBFqwU4V2RCqQZAvsAkwHwYDVR0jBBgwFoAURJgA4NOab6QpLdGw Zto9qI0i+rwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy NC9SSmdBNE5PYWI2UXBMZEd3WnRvOXFJMGktcncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JKZ0E0Tk9hYjZRcExkR3dadG85cUkwaS1ydy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjQvUkpnQTROT2FiNlFw TGRHd1p0bzlxSTBpLXJ3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADEOSnAk+8OO9CMNUMzUAF4TLbdBTK8mv5hylBR829IEYytNF0k7XEm4TmLk 1f+L2+wPx0e8rSE0OU3KjlPWwNQ/mjPXYAew1eLzpWrfv6a7FMm4qfXVbwUHSejn dnD0jdl24kl8i3Rqxk2drnAs25MUzjMLhfLAulaJKJ6fOB9dZVQ8G45Gul5Dntxq u4imPusFrvO7+Gg04KEHDVWzfu1lrHW0U5f5laj+IacMuTBP4lIqf7RGJVi/rZWF wzp3mlKtrwDWef6l9X/dpLPqsznTBfxO5nGOX0+Ht4sOp2tlCKswIz1kHUpQmWx+ tfA4Ki8WZYPR/AbAqVlzujM/6qo= -----END CERTIFICATE-----Generated at Sat May 17 22:41:23 2025 by rpki-client