$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft File: K6tMFwMvC3Tx01c-eeloid-ypu4.mft (raw, json) Hash identifier: GrHdHXulopvGL8ECDg6rX+9EixLgPqsYw5YS3r5laX4= Subject key identifier: BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0 Authority key identifier: 2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE Certificate issuer: /CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE Certificate serial: 0309 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft Manifest number: 0309 Signing time: Sat 17 May 2025 17:42:11 +0000 Manifest this update: Sat 17 May 2025 17:42:11 +0000 Manifest next update: Sat 17 May 2025 23:42:11 +0000 Files and hashes: 1: K6tMFwMvC3Tx01c-eeloid-ypu4.crl (hash: FlCRpomcY17LDvxPABBbFohNRRNdxybdbSN0ZbbswiU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 777 (0x309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE Validity Not Before: May 17 17:42:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=BE671BA73B86480189EF54ED7FEF88040D02D1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:18:79:57:d3:51:87:19:64:d4:2b:23:54: 8a:ac:f2:88:6d:a0:42:74:e0:65:b1:3b:ac:60:e5: 27:5b:40:9c:f9:f1:72:9b:0f:d0:ae:dd:56:b9:d3: e0:f1:02:16:eb:b1:33:50:44:94:2c:d7:09:11:c5: d0:bb:39:c1:09:55:17:68:ec:d0:69:25:42:b0:a8: 65:ec:e8:80:0c:0e:e5:2f:5c:d6:b3:5d:ae:24:9e: 45:97:66:32:17:b2:82:3f:6f:7b:94:54:d2:58:7e: a7:50:23:74:2d:52:24:6e:73:51:95:71:d0:bc:fd: f3:c3:41:d2:84:41:a9:65:82:fb:1d:df:bd:08:a9: 83:29:47:d0:76:fc:a7:f3:04:2f:e2:4f:f7:3e:92: 8d:84:db:0d:eb:71:7e:d6:d8:7e:de:2c:44:d0:53: 3c:36:d6:1f:63:5d:01:bb:53:89:e9:da:d8:e2:0c: 7b:3c:ed:a6:8d:91:9c:55:e7:33:7e:ad:7e:46:9c: 54:c4:c3:b8:f0:8e:68:f9:4e:9d:f6:aa:fc:b9:d0: 9f:a8:be:a4:22:4f:72:15:98:47:c7:fc:38:f4:d3: 3b:56:d5:02:ea:ca:7b:80:63:a5:5a:f7:0d:97:0d: 30:fd:e2:4e:ba:23:23:81:db:dd:28:9c:ee:76:fe: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0 X509v3 Authority Key Identifier: keyid:2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d4:b7:03:9e:10:42:eb:cd:ca:9a:ba:d6:e8:04:98:ac:40: ce:38:51:27:ab:70:14:d4:0d:b4:94:72:0e:03:c4:c8:21:bc: 9e:f0:7f:e9:1f:c7:a2:71:86:fc:dd:c6:ee:f2:bf:18:1c:61: c2:f5:05:58:42:36:8b:6a:2a:5e:f0:1d:e1:41:2c:ea:16:35: 9a:ed:71:9b:1e:03:13:a8:36:ba:b3:c1:a4:48:e9:e6:0c:cd: e8:7c:2d:65:a2:e0:24:4f:52:cb:2c:fb:5a:49:bd:16:2c:ce: 4e:05:e7:89:74:d1:1b:67:4e:7c:1c:62:03:e2:bb:fa:86:c2: f5:74:d1:fc:43:e7:4f:25:5c:57:e5:eb:59:e2:15:74:2a:33: ca:6e:48:e9:ca:eb:9c:e3:d3:f6:57:30:9f:a3:80:39:71:30: 61:9a:a8:33:94:6a:2f:55:79:a0:2c:ea:be:97:26:5d:0e:28: 5a:2e:ed:2d:9b:e4:df:f2:4b:9c:cd:4b:d5:70:80:c8:ee:cc: 29:30:05:e4:81:03:56:37:89:42:10:6d:85:11:dc:b9:68:ea: 6d:aa:10:8d:5c:56:6b:83:be:df:d8:8b:aa:35:75:cc:c5:8e: 2a:01:8a:63:39:b5:c0:e6:ca:9d:6d:da:ee:6c:b5:df:ee:db: 8b:ec:7a:18 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkJB QjRDMTcwMzJGMEI3NEYxRDM1NzNFNzlFOTY4ODlERkIyQTZFRTAeFw0yNTA1MTcx NzQyMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEJFNjcxQkE3M0I4NjQ4 MDE4OUVGNTRFRDdGRUY4ODA0MEQwMkQxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL2xh5V9NRhxlk1CsjVIqs8ohtoEJ04GWxO6xg5SdbQJz58XKb D9Cu3Va50+DxAhbrsTNQRJQs1wkRxdC7OcEJVRdo7NBpJUKwqGXs6IAMDuUvXNaz Xa4knkWXZjIXsoI/b3uUVNJYfqdQI3QtUiRuc1GVcdC8/fPDQdKEQallgvsd370I qYMpR9B2/KfzBC/iT/c+ko2E2w3rcX7W2H7eLETQUzw21h9jXQG7U4np2tjiDHs8 7aaNkZxV5zN+rX5GnFTEw7jwjmj5Tp32qvy50J+ovqQiT3IVmEfH/Dj00ztW1QLq ynuAY6Va9w2XDTD94k66IyOB290onO52/p/NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUvmcbpzuGSAGJ71Ttf++IBA0C0cAwHwYDVR0jBBgwFoAUK6tMFwMvC3Tx01c+ eeloid+ypu4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OC9LNnRNRndNdkMzVHgwMWMtZWVsb2lkLXlwdTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0s2dE1Gd012QzNUeDAxYy1lZWxvaWQteXB1NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzgvSzZ0TUZ3TXZDM1R4 MDFjLWVlbG9pZC15cHU0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH3UtwOeEELrzcqautboBJisQM44USercBTUDbSUcg4DxMghvJ7wf+kfx6Jx hvzdxu7yvxgcYcL1BVhCNotqKl7wHeFBLOoWNZrtcZseAxOoNrqzwaRI6eYMzeh8 LWWi4CRPUsss+1pJvRYszk4F54l00RtnTnwcYgPiu/qGwvV00fxD508lXFfl61ni FXQqM8puSOnK65zj0/ZXMJ+jgDlxMGGaqDOUai9VeaAs6r6XJl0OKFou7S2b5N/y S5zNS9VwgMjuzCkwBeSBA1Y3iUIQbYUR3Llo6m2qEI1cVmuDvt/Yi6o1dczFjioB imM5tcDmyp1t2u5std/u24vsehg= -----END CERTIFICATE-----Generated at Sat May 17 19:42:20 2025 by rpki-client