$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft File: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft (raw, json) Hash identifier: Mop37ppBPsZzOd5K7TeL6LMV1iz3zjyBOEfSlhoWLA0= Subject key identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC Authority key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F Certificate issuer: /CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Certificate serial: 1E05 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft Manifest number: 1E05 Signing time: Sat 17 May 2025 20:07:39 +0000 Manifest this update: Sat 17 May 2025 20:07:39 +0000 Manifest next update: Sun 18 May 2025 02:07:39 +0000 Files and hashes: 1: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl (hash: hlLogxYI+FvmeL3xcO7lEI/tLNaiTSD9J+f2+hqSEQw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7685 (0x1e05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Validity Not Before: May 17 20:07:39 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=642E96922B46BF24EF102575A5DAA715488004CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:78:97:a8:9d:3f:e3:16:18:d4:df:23:a0: 92:64:4b:c9:36:9c:fd:be:09:98:fc:24:f7:23:77: 54:1b:52:12:55:f3:cc:82:81:53:99:fd:b4:ad:74: 6c:c6:fe:5b:df:bf:95:4d:77:68:71:a6:28:2a:b7: 84:3c:ec:50:d3:53:fe:7e:10:03:0a:87:7c:92:a4: ba:0e:5d:78:29:a5:54:dc:5b:a7:5a:95:3e:2e:d4: da:70:91:e6:1c:7b:c5:cf:fe:e0:5e:01:8a:69:9c: b0:30:55:0c:66:67:55:72:1f:69:14:9e:7f:50:fc: ba:99:d6:ad:d0:48:bb:0b:be:95:2d:06:30:d0:37: c7:db:13:86:aa:bf:d9:88:6c:a4:2a:d0:97:ec:32: 86:d1:48:b2:e6:5c:87:a9:10:06:89:62:df:52:67: 64:92:2b:8c:f5:77:4a:2d:5c:68:ef:4a:08:d6:ec: bf:1c:50:24:71:90:13:6a:95:6b:2b:63:72:d3:02: f3:16:b3:dd:62:33:75:5b:d6:63:34:fb:db:d5:96: 3c:04:22:89:a3:be:a5:6b:11:81:fe:30:13:b4:0e: 7b:be:b4:06:b2:be:81:01:24:51:96:9a:a9:f3:57: c2:20:d1:18:ce:e3:9b:0d:97:33:a9:23:51:e0:e6: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC X509v3 Authority Key Identifier: keyid:F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:dc:20:6a:77:35:93:09:a8:ce:de:17:3d:53:ab:56:5a:b6: e0:84:43:db:a1:67:10:cc:77:bf:60:07:f5:df:36:49:08:a2: dc:06:d7:74:39:93:f6:a2:0c:4c:39:f0:24:70:0d:48:2c:be: dc:14:35:0d:3f:69:75:37:c5:16:fa:02:91:24:cd:bb:38:6c: 46:25:6f:64:e0:fb:6e:4a:ab:12:e6:a2:1b:a8:3c:7a:4a:76: 43:8b:11:e9:ea:67:58:81:af:60:42:96:37:f1:fa:66:fc:dd: bc:8c:cf:fb:93:22:75:5d:3a:61:a5:b9:91:d0:d0:fe:76:01: b1:d7:45:dd:3f:27:7f:74:96:37:7d:66:11:b4:92:91:fe:06: a8:da:0f:21:63:46:30:0f:04:1e:88:d2:54:7c:fa:3c:27:42: ca:f2:09:bb:eb:cf:82:9f:b0:f9:d7:ee:cf:e7:01:44:0f:44: f9:89:82:3a:4e:92:c2:39:06:23:1b:16:34:8e:8a:1c:11:6a: cf:97:12:0e:23:ca:84:9c:5f:ed:63:1f:b7:d6:0a:7c:0b:4d: e9:90:6e:93:0c:03:52:38:88:4d:9f:27:88:fe:75:fc:16:ba: 5a:62:c0:24:55:ca:1b:04:4c:99:bd:af:3d:05:4e:a4:2c:92: c3:65:09:63 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjJF ODQ4MkJGMTBCNEVFNjczNkY0MDFBRkZGMzcxMkZCNDQ2QkYyRjAeFw0yNTA1MTcy MDA3MzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDY0MkU5NjkyMkI0NkJG MjRFRjEwMjU3NUE1REFBNzE1NDg4MDA0Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDco3iXqJ0/4xYY1N8joJJkS8k2nP2+CZj8JPcjd1QbUhJV88yC gVOZ/bStdGzG/lvfv5VNd2hxpigqt4Q87FDTU/5+EAMKh3ySpLoOXXgppVTcW6da lT4u1NpwkeYce8XP/uBeAYppnLAwVQxmZ1VyH2kUnn9Q/LqZ1q3QSLsLvpUtBjDQ N8fbE4aqv9mIbKQq0JfsMobRSLLmXIepEAaJYt9SZ2SSK4z1d0otXGjvSgjW7L8c UCRxkBNqlWsrY3LTAvMWs91iM3Vb1mM0+9vVljwEIomjvqVrEYH+MBO0Dnu+tAay voEBJFGWmqnzV8Ig0RjO45sNlzOpI1Hg5lHJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUZC6WkitGvyTvECV1pdqnFUiABMwwHwYDVR0jBBgwFoAU8uhIK/ELTuZzb0Aa //NxL7RGvy8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMw Lzh1aElLX0VMVHVaemIwQWFfX054TDdSR3Z5OC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOHVoSUtfRUxUdVp6YjBBYV9fTnhMN1JHdnk4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMwLzh1aElLX0VMVHVaemIw QWFfX054TDdSR3Z5OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAy3CBqdzWTCajO3hc9U6tWWrbghEPboWcQzHe/YAf13zZJCKLcBtd0OZP2ogxM OfAkcA1ILL7cFDUNP2l1N8UW+gKRJM27OGxGJW9k4PtuSqsS5qIbqDx6SnZDixHp 6mdYga9gQpY38fpm/N28jM/7kyJ1XTphpbmR0ND+dgGx10XdPyd/dJY3fWYRtJKR /gao2g8hY0YwDwQeiNJUfPo8J0LK8gm768+Cn7D51+7P5wFED0T5iYI6TpLCOQYj GxY0joocEWrPlxIOI8qEnF/tYx+31gp8C03pkG6TDANSOIhNnyeI/nX8FrpaYsAk VcobBEyZva89BU6kLJLDZQlj -----END CERTIFICATE-----Generated at Sat May 17 23:37:31 2025 by rpki-client