$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft File: xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft (raw, json) Hash identifier: XivbRajCd1lURUIPigWVZrrM2BFdtpJDzMR166YSq5A= Subject key identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF Authority key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 Certificate issuer: /CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Certificate serial: 02D2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft Manifest number: 02D2 Signing time: Sat 17 May 2025 22:42:35 +0000 Manifest this update: Sat 17 May 2025 22:42:35 +0000 Manifest next update: Sun 18 May 2025 04:42:35 +0000 Files and hashes: 1: xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl (hash: oo3Iz4ITTHRUrLedyMbVKREOJOA4X91cIqoCckfkjxM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Validity Not Before: May 17 22:42:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C8C318B9C83E4804C50DAC66D69EC0CF7B53E4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f9:65:02:d1:b2:6d:23:c0:76:39:83:3f:83: 20:cc:91:bf:45:aa:34:65:56:39:d5:f4:e4:42:d4: 66:59:3d:fc:17:45:43:b0:8b:97:34:e8:99:1c:71: 86:d5:e3:5e:39:92:60:63:d0:1a:37:46:a9:64:59: a9:d3:b9:f2:fb:31:42:5c:c5:e2:87:e5:1f:e3:81: 43:50:07:35:36:30:88:57:d6:31:d6:dc:7d:c3:f0: d9:57:e0:23:be:22:7d:1d:9f:e6:87:2c:a8:f8:50: 78:f6:e1:95:5c:82:65:1a:10:65:a8:29:49:a3:d1: 2b:a2:1a:38:0d:cb:36:18:3d:a9:9e:83:16:d5:45: d6:7c:de:9d:e7:d8:8b:a2:76:10:4f:c5:cd:38:68: 4a:b0:82:46:f7:5b:7e:d7:7b:ea:f1:69:5d:82:9f: c3:72:19:2f:93:c3:e7:c8:72:08:db:0b:2a:7e:07: 60:11:e2:d8:c7:02:10:91:e8:94:3f:f5:06:d9:4d: cb:fc:e9:9d:44:0a:05:c8:da:cd:ba:68:87:10:88: 31:41:3c:24:72:4a:00:18:bd:5a:55:94:79:ce:f3: ea:c5:f3:04:39:f2:53:ff:65:36:c6:5e:b2:68:b2: fd:02:f6:4a:d4:6d:41:23:88:15:5a:58:c3:1e:f8: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF X509v3 Authority Key Identifier: keyid:C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:08:e9:61:63:71:04:8e:f8:c1:a4:41:c2:ae:ce:ab:a7:a0: 81:8a:25:3c:19:d1:32:27:fc:8a:41:5c:c2:66:87:c0:f6:cb: 61:15:f0:ae:63:4a:e8:b2:e2:f9:8b:67:e8:0c:a3:3b:72:16: 8d:73:cf:26:cc:40:81:4e:c7:0c:fe:a3:d1:93:04:5f:f9:33: d3:a2:27:04:00:17:9e:0b:a8:e8:be:e8:c8:a0:40:28:9b:9b: be:cd:a5:b5:e0:0a:53:9d:34:94:f0:0b:15:33:f3:1e:74:af: 5c:d5:fc:8c:09:d4:3f:75:7c:f9:a5:35:18:5a:16:6e:8d:f7: 51:e8:ca:36:df:b5:8c:c3:ee:30:24:ca:68:df:e4:3f:04:40: 09:85:ad:fd:83:71:a4:bd:c1:78:86:a2:1e:07:5d:2c:f8:d1: 5e:0d:c1:a1:a9:c6:b5:80:91:be:5d:3c:1f:98:59:48:0e:ef: fa:2d:c3:8b:1b:96:d3:c9:29:7b:05:6e:5e:67:20:18:88:db: f3:23:12:62:6f:91:8f:a6:c4:69:4d:96:a4:90:2c:db:ba:6d: be:5c:5d:1d:42:9b:29:e7:bf:0e:82:f8:74:4d:03:dd:7c:2a: f6:5a:c5:db:0e:9c:58:fa:c7:3b:15:2e:86:8d:85:4a:16:f0: f6:39:b6:23 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzUz QUY0MDQzRkM0RDJCMDA4NTg4MjIyOUFCMjc1MDRCNkE4MjIzODAeFw0yNTA1MTcy MjQyMzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM4QzMxOEI5QzgzRTQ4 MDRDNTBEQUM2NkQ2OUVDMENGN0I1M0U0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp+WUC0bJtI8B2OYM/gyDMkb9FqjRlVjnV9ORC1GZZPfwXRUOw i5c06JkccYbV4145kmBj0Bo3RqlkWanTufL7MUJcxeKH5R/jgUNQBzU2MIhX1jHW 3H3D8NlX4CO+In0dn+aHLKj4UHj24ZVcgmUaEGWoKUmj0SuiGjgNyzYYPamegxbV RdZ83p3n2IuidhBPxc04aEqwgkb3W37Xe+rxaV2Cn8NyGS+Tw+fIcgjbCyp+B2AR 4tjHAhCR6JQ/9QbZTcv86Z1ECgXI2s26aIcQiDFBPCRySgAYvVpVlHnO8+rF8wQ5 8lP/ZTbGXrJosv0C9krUbUEjiBVaWMMe+PKpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyMMYucg+SATFDaxm1p7Az3tT5K8wHwYDVR0jBBgwFoAUxTr0BD/E0rAIWIIi mrJ1BLaoIjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 MS94VHIwQkRfRTByQUlXSUlpbXJKMUJMYW9JamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hUcjBCRF9FMHJBSVdJSWltckoxQkxhb0lqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDEveFRyMEJEX0UwckFJ V0lJaW1ySjFCTGFvSWpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHkI6WFjcQSO+MGkQcKuzqunoIGKJTwZ0TIn/IpBXMJmh8D2y2EV8K5jSuiy 4vmLZ+gMoztyFo1zzybMQIFOxwz+o9GTBF/5M9OiJwQAF54LqOi+6MigQCibm77N pbXgClOdNJTwCxUz8x50r1zV/IwJ1D91fPmlNRhaFm6N91HoyjbftYzD7jAkymjf 5D8EQAmFrf2DcaS9wXiGoh4HXSz40V4NwaGpxrWAkb5dPB+YWUgO7/otw4sbltPJ KXsFbl5nIBiI2/MjEmJvkY+mxGlNlqSQLNu6bb5cXR1Cmynnvw6C+HRNA918KvZa xdsOnFj6xzsVLoaNhUoW8PY5tiM= -----END CERTIFICATE-----Generated at Sun May 18 01:58:32 2025 by rpki-client