$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft File: bHGFaWGICFmFIGtbw8RT4SftD94.mft (raw, json) Hash identifier: CHdODp5ktoMEECthJTs4ma4T35WPxHEjJe8/yEhUXj4= Subject key identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D Authority key identifier: 6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE Certificate issuer: /CN=6C7185696188085985206B5BC3C453E127ED0FDE Certificate serial: 0354 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft Manifest number: 0354 Signing time: Sat 17 May 2025 17:42:35 +0000 Manifest this update: Sat 17 May 2025 17:42:35 +0000 Manifest next update: Sat 17 May 2025 23:42:35 +0000 Files and hashes: 1: bHGFaWGICFmFIGtbw8RT4SftD94.crl (hash: bOWlkaNGQr6WRC80X8ohpSlHSSrd1t/7c73/4ziJmVY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C7185696188085985206B5BC3C453E127ED0FDE Validity Not Before: May 17 17:42:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=EBD0975A7BEC6943E8DF5934276DEB7EDD3A0A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:43:31:63:6a:f6:8a:7d:c3:cf:84:c1:85: 81:04:6f:3d:bf:3a:c9:34:64:5f:2b:3f:24:76:db: 0d:dc:01:fe:7b:bc:11:e5:2d:5f:3b:de:e7:87:14: 70:a5:35:bf:7d:29:a0:b8:16:16:5d:de:ad:c3:b2: 0f:0f:39:ff:1d:32:0d:f4:c5:6f:19:9e:62:c9:d6: 90:bf:33:57:c3:60:ea:8b:06:54:6f:5f:31:7a:9d: de:68:26:c3:2c:d2:5a:e0:9e:d8:c7:b6:8f:90:e1: 97:29:7b:aa:28:8b:1d:e1:0c:4c:50:f9:cc:a0:6b: d3:a6:a3:23:63:09:e9:4f:7d:0e:de:19:0e:76:00: 4c:17:04:d5:35:3e:3e:87:20:1c:46:bf:ca:34:b4: 9d:40:af:26:97:9e:8c:24:31:54:59:8e:6c:04:59: fe:c1:05:dc:1d:d3:6e:47:8d:55:7a:d6:45:87:b1: e8:f3:84:03:47:4a:60:83:e1:d4:c4:c8:81:e5:e9: ed:b5:20:e1:03:87:7d:5d:13:89:77:3d:81:a6:14: 06:b3:c4:92:09:8a:e2:76:28:48:b9:2e:b3:61:85: c0:dd:96:22:bf:85:d3:cd:7a:9b:e0:55:c5:6c:8f: 1b:86:69:74:8e:f5:90:5a:7c:89:2e:95:76:b3:60: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D X509v3 Authority Key Identifier: keyid:6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:70:b4:47:d3:c8:c8:32:93:7f:b2:fc:d9:1a:66:41:68:91: ca:df:45:7e:28:74:d9:2f:ef:10:10:3f:6d:bf:28:db:02:ab: 67:8a:d9:43:0e:3b:cd:13:14:f5:74:e5:da:52:1b:10:be:1b: 68:bb:b7:60:07:71:93:42:27:f7:58:29:9e:6b:48:02:0b:61: f8:cc:3d:92:0c:3f:c6:3d:b2:bd:e6:ab:cf:43:af:7c:e4:1a: 8b:7c:4b:ae:fc:20:f8:18:e4:aa:e2:c5:da:e7:53:f1:b9:a3: 75:2e:28:95:d4:21:a3:e8:98:37:d5:7f:f6:e9:63:32:ab:d8: 33:68:51:66:9e:87:60:44:65:93:e3:8b:4c:80:bc:2f:f8:cf: 92:52:b0:3e:8f:81:06:8a:ea:86:b5:4b:4b:01:2b:14:eb:6a: cf:15:c7:ba:4b:f0:ab:dc:d2:5a:1a:9c:2a:82:50:78:dc:bb: 37:22:66:f2:0d:74:3e:59:e9:f6:64:2d:d1:8a:2b:3c:55:4e: c0:a2:74:c0:da:39:09:73:ab:c0:3b:61:60:2e:9d:54:ba:5a: 2b:37:2e:75:1f:14:be:ed:e6:72:d7:11:ec:52:61:08:bd:bf: d8:f7:4d:9e:8e:c6:17:f5:74:e9:7d:3d:fb:38:9a:62:9a:58: 1a:7a:a2:82 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkM3 MTg1Njk2MTg4MDg1OTg1MjA2QjVCQzNDNDUzRTEyN0VEMEZERTAeFw0yNTA1MTcx NzQyMzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVCRDA5NzVBN0JFQzY5 NDNFOERGNTkzNDI3NkRFQjdFREQzQTBBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOlEMxY2r2in3Dz4TBhYEEbz2/Osk0ZF8rPyR22w3cAf57vBHl LV873ueHFHClNb99KaC4FhZd3q3Dsg8POf8dMg30xW8ZnmLJ1pC/M1fDYOqLBlRv XzF6nd5oJsMs0lrgntjHto+Q4Zcpe6ooix3hDExQ+cyga9OmoyNjCelPfQ7eGQ52 AEwXBNU1Pj6HIBxGv8o0tJ1AryaXnowkMVRZjmwEWf7BBdwd025HjVV61kWHsejz hANHSmCD4dTEyIHl6e21IOEDh31dE4l3PYGmFAazxJIJiuJ2KEi5LrNhhcDdliK/ hdPNepvgVcVsjxuGaXSO9ZBafIkulXazYGtPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU69CXWnvsaUPo31k0J23rft06Ci0wHwYDVR0jBBgwFoAUbHGFaWGICFmFIGtb w8RT4SftD94wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz My9iSEdGYVdHSUNGbUZJR3RidzhSVDRTZnREOTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2JIR0ZhV0dJQ0ZtRklHdGJ3OFJUNFNmdEQ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzMvYkhHRmFXR0lDRm1G SUd0Ync4UlQ0U2Z0RDk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHNwtEfTyMgyk3+y/NkaZkFokcrfRX4odNkv7xAQP22/KNsCq2eK2UMOO80T FPV05dpSGxC+G2i7t2AHcZNCJ/dYKZ5rSAILYfjMPZIMP8Y9sr3mq89Dr3zkGot8 S678IPgY5KrixdrnU/G5o3UuKJXUIaPomDfVf/bpYzKr2DNoUWaeh2BEZZPji0yA vC/4z5JSsD6PgQaK6oa1S0sBKxTras8Vx7pL8Kvc0loanCqCUHjcuzciZvINdD5Z 6fZkLdGKKzxVTsCidMDaOQlzq8A7YWAunVS6Wis3LnUfFL7t5nLXEexSYQi9v9j3 TZ6Oxhf1dOl9Pfs4mmKaWBp6ooI= -----END CERTIFICATE-----Generated at Sat May 17 19:57:57 2025 by rpki-client