$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft File: C5DqYM7V_TVorFTKqMxHleSGroY.mft (raw, json) Hash identifier: 7YgJjDedq0Axk6haKGFuuOyOR87E6Bqtk/Mc7HUYOiA= Subject key identifier: 79:15:97:E3:0D:A8:91:55:E9:44:81:DA:7E:2E:44:06:6F:20:50:C2 Authority key identifier: 0B:90:EA:60:CE:D5:FD:35:68:AC:54:CA:A8:CC:47:95:E4:86:AE:86 Certificate issuer: /CN=0B90EA60CED5FD3568AC54CAA8CC4795E486AE86 Certificate serial: 1AFB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5DqYM7V_TVorFTKqMxHleSGroY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft Manifest number: 1AFB Signing time: Sat 17 May 2025 22:42:42 +0000 Manifest this update: Sat 17 May 2025 22:42:42 +0000 Manifest next update: Sun 18 May 2025 04:42:42 +0000 Files and hashes: 1: C5DqYM7V_TVorFTKqMxHleSGroY.crl (hash: daVhvYNRN+XReWuEIAJZaPVodvO840YVEfQfRWZgSBY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5DqYM7V_TVorFTKqMxHleSGroY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6907 (0x1afb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B90EA60CED5FD3568AC54CAA8CC4795E486AE86 Validity Not Before: May 17 22:42:42 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=791597E30DA89155E94481DA7E2E44066F2050C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:e7:55:e4:a7:ee:40:b6:48:0a:36:31:99: 45:7f:67:63:ab:61:34:b1:d1:5d:a4:da:d2:c5:0d: a7:e9:3a:c1:7e:18:23:70:3e:d8:55:a5:4d:06:56: 08:ae:d6:e7:2f:c9:a0:9c:67:ca:00:14:00:e8:87: c0:a6:32:a5:16:66:77:4f:96:93:2b:f2:65:17:93: da:f6:a8:ed:5b:d0:b1:9e:ab:53:c3:61:c3:76:a0: 9b:9b:71:2d:7a:51:20:63:f6:54:02:2e:03:e0:93: ba:f1:71:97:50:30:76:c7:0d:3a:23:40:82:0a:1d: 2f:a2:1a:d9:83:d2:5b:3c:49:04:f7:62:e9:a1:be: 33:05:9d:7d:c4:70:3a:e9:9b:e8:ca:f9:17:39:87: 20:a4:b2:56:d3:eb:4c:f7:db:f5:44:b7:3f:88:1c: 44:9c:69:9e:d8:4c:51:2a:1b:99:af:61:cf:98:2e: 39:cd:c8:eb:65:3d:8c:2f:ba:2c:38:8d:d3:94:f5: 45:c0:96:a8:da:1a:05:7d:a6:07:2a:2f:37:34:80: c6:01:88:b7:56:e7:31:81:a2:80:8a:99:d4:81:74: 1c:5a:43:96:cd:91:9b:b6:31:a2:c1:4a:74:77:ec: b8:dd:3b:c8:f7:02:48:32:3c:6b:95:19:59:60:92: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:15:97:E3:0D:A8:91:55:E9:44:81:DA:7E:2E:44:06:6F:20:50:C2 X509v3 Authority Key Identifier: keyid:0B:90:EA:60:CE:D5:FD:35:68:AC:54:CA:A8:CC:47:95:E4:86:AE:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5DqYM7V_TVorFTKqMxHleSGroY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6b:6a:27:95:35:22:a1:fe:91:0e:87:7d:7c:b4:93:93:e9: f8:33:fe:7d:14:ef:f2:9e:67:5e:4e:4b:ef:d2:25:b6:b7:eb: 9b:91:f8:cc:76:94:17:2e:25:41:a1:12:c1:39:43:ec:ff:46: 8d:a7:10:f3:07:54:fd:ca:3e:26:8d:e8:50:41:3d:2f:34:47: 2f:18:06:af:5a:01:60:3f:35:24:f4:b4:67:dc:19:47:65:fb: ad:0c:1c:56:2b:6d:bd:ba:d3:95:ba:8c:97:0b:df:98:9c:76: 66:6e:e0:0b:f6:38:e7:6a:5c:8c:58:27:d9:5e:e1:bd:aa:dc: a4:ab:6b:bb:66:01:d3:78:27:ca:e5:a0:4a:67:3a:43:6a:1f: 52:2e:ae:ef:19:18:b9:d1:88:eb:40:56:79:ae:f9:cb:ca:4f: c9:96:3b:b6:7e:29:9f:f7:bc:85:0e:4a:da:db:08:16:d4:59: a7:87:d4:57:e7:8c:14:b5:b9:66:bd:77:43:4f:5e:b6:5d:76: 02:5c:c5:59:99:99:52:ff:5a:66:e3:91:2f:5e:6b:78:97:61: 92:fa:b0:37:c1:a4:4f:9c:86:ec:0a:56:d6:2b:bb:14:96:a2: 70:f1:b2:db:6f:79:a8:2f:3a:13:9d:dc:c0:11:36:e3:64:34: c9:96:f5:41 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEI5 MEVBNjBDRUQ1RkQzNTY4QUM1NENBQThDQzQ3OTVFNDg2QUU4NjAeFw0yNTA1MTcy MjQyNDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc5MTU5N0UzMERBODkx NTVFOTQ0ODFEQTdFMkU0NDA2NkYyMDUwQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7G+dV5KfuQLZICjYxmUV/Z2OrYTSx0V2k2tLFDafpOsF+GCNw PthVpU0GVgiu1ucvyaCcZ8oAFADoh8CmMqUWZndPlpMr8mUXk9r2qO1b0LGeq1PD YcN2oJubcS16USBj9lQCLgPgk7rxcZdQMHbHDTojQIIKHS+iGtmD0ls8SQT3Yumh vjMFnX3EcDrpm+jK+Rc5hyCkslbT60z32/VEtz+IHEScaZ7YTFEqG5mvYc+YLjnN yOtlPYwvuiw4jdOU9UXAlqjaGgV9pgcqLzc0gMYBiLdW5zGBooCKmdSBdBxaQ5bN kZu2MaLBSnR37LjdO8j3AkgyPGuVGVlgkq5jAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUeRWX4w2okVXpRIHafi5EBm8gUMIwHwYDVR0jBBgwFoAUC5DqYM7V/TVorFTK qMxHleSGroYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDM0 L0M1RHFZTTdWX1RWb3JGVEtxTXhIbGVTR3JvWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQzVEcVlNN1ZfVFZvckZUS3FNeEhsZVNHcm9ZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDM0L0M1RHFZTTdWX1RWb3JG VEtxTXhIbGVTR3JvWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANa2onlTUiof6RDod9fLSTk+n4M/59FO/ynmdeTkvv0iW2t+ubkfjMdpQXLiVB oRLBOUPs/0aNpxDzB1T9yj4mjehQQT0vNEcvGAavWgFgPzUk9LRn3BlHZfutDBxW K229utOVuoyXC9+YnHZmbuAL9jjnalyMWCfZXuG9qtykq2u7ZgHTeCfK5aBKZzpD ah9SLq7vGRi50YjrQFZ5rvnLyk/Jlju2fimf97yFDkra2wgW1Fmnh9RX54wUtblm vXdDT162XXYCXMVZmZlS/1pm45EvXmt4l2GS+rA3waRPnIbsClbWK7sUlqJw8bLb b3moLzoTndzAETbjZDTJlvVB -----END CERTIFICATE-----Generated at Sun May 18 03:11:06 2025 by rpki-client