$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft File: BFagwwe9oIjxq3j2p-wFemB5Yy4.mft (raw, json) Hash identifier: 9LCCYEaCVKd7/kgfnEqlxuUW88aUXAqShfsH46s83EE= Subject key identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 Authority key identifier: 04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E Certificate issuer: /CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Certificate serial: 3225 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft Manifest number: 3225 Signing time: Sun 18 May 2025 01:07:27 +0000 Manifest this update: Sun 18 May 2025 01:07:27 +0000 Manifest next update: Sun 18 May 2025 07:07:27 +0000 Files and hashes: 1: BFagwwe9oIjxq3j2p-wFemB5Yy4.crl (hash: +4DQ9EZJnPHnZ7EoP6PJVibXzch10EifU3GnTh6nTQ4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12837 (0x3225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Validity Not Before: May 18 01:07:27 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=458891FA790C06BC3506F01EC58C2286F412A8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:bc:c9:e8:e6:04:bb:64:b8:68:bb:18:11: 8b:8d:7e:fc:53:d0:c1:e4:bb:57:e3:e0:48:ec:3a: 3d:fb:a6:04:d4:97:f3:f3:9c:be:f8:19:0e:60:7a: 56:bb:35:09:d7:90:56:0d:db:4b:0b:de:8d:98:83: af:fc:0f:80:17:f2:13:72:5a:5e:34:02:c5:7d:c9: 97:81:89:9d:43:8a:8f:51:13:34:e0:1a:8e:94:dc: 8c:12:4f:6c:1e:f1:2d:c2:7e:5f:62:88:40:96:c4: 93:5e:bb:4b:9b:08:ce:36:da:15:6b:40:d3:b0:38: 1d:52:78:09:1f:87:df:1e:0c:27:e1:fa:75:b8:07: b1:2a:2e:19:cf:80:28:b4:24:f8:bc:56:5b:cb:06: d7:64:27:0f:6b:fa:05:ed:94:2e:a8:94:3c:d7:fe: 0c:21:30:53:a3:07:c6:5a:36:48:d3:ca:81:fd:49: 2c:88:93:b5:9e:11:3f:f6:a1:cd:bf:27:71:0c:23: e7:23:f2:f6:ff:4b:50:77:17:23:ab:40:c5:5e:6f: dd:5b:0e:8f:a8:84:a8:2a:cf:9e:b5:b3:ba:62:61: f2:17:3e:00:9a:d2:82:a9:2a:a6:bf:5f:0c:72:30: d6:0e:a7:33:18:fe:aa:ff:8c:38:42:54:2f:b3:af: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 X509v3 Authority Key Identifier: keyid:04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:9d:b6:24:11:ae:29:06:6b:74:a9:d5:00:bf:51:45:03:f7: 28:99:bb:c3:b7:f4:b9:9a:c0:b9:c3:43:e4:74:a4:e7:76:3e: d8:6f:f4:73:5f:6d:1c:6f:4d:82:14:b0:98:ec:0e:39:c2:f1: 76:c4:5c:17:0f:2e:d8:04:31:ad:d0:12:77:c7:29:f6:f9:1b: 0b:db:51:ba:8c:c7:4a:25:b5:4a:b4:46:60:cc:1f:cc:4a:fe: 95:a9:7a:0f:34:21:b0:84:ab:9e:b0:c7:a0:47:b3:8f:d2:ca: 99:26:5f:50:5b:a5:43:18:8f:90:09:7a:51:25:01:15:35:88: ec:9e:ed:76:fa:a7:a8:4f:ef:aa:0e:00:e5:d6:b9:85:60:56: 82:b6:67:1a:1f:41:8b:93:75:ab:b6:87:0d:44:ab:11:a5:84: b7:09:bc:73:62:a0:f0:0a:8f:7a:52:e4:81:f7:04:be:24:04: a1:7b:71:e4:bd:19:fe:51:b2:b0:0d:5b:00:ec:2f:55:25:42: ee:ee:8f:20:45:4e:40:ad:ca:02:ac:c9:c4:a4:13:b9:72:77: e9:b2:56:33:d6:f0:2e:d0:3e:9b:fc:0c:08:3c:ab:33:65:65: 42:7b:d8:c1:f2:88:cf:b9:09:a6:b6:ef:e1:9e:4c:ba:80:de: a2:fc:8c:c7 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICMiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ1 NkEwQzMwN0JEQTA4OEYxQUI3OEY2QTdFQzA1N0E2MDc5NjMyRTAeFw0yNTA1MTgw MTA3MjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ1ODg5MUZBNzkwQzA2 QkMzNTA2RjAxRUM1OEMyMjg2RjQxMkE4QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVvbzJ6OYEu2S4aLsYEYuNfvxT0MHku1fj4EjsOj37pgTUl/Pz nL74GQ5gela7NQnXkFYN20sL3o2Yg6/8D4AX8hNyWl40AsV9yZeBiZ1Dio9REzTg Go6U3IwST2we8S3Cfl9iiECWxJNeu0ubCM422hVrQNOwOB1SeAkfh98eDCfh+nW4 B7EqLhnPgCi0JPi8VlvLBtdkJw9r+gXtlC6olDzX/gwhMFOjB8ZaNkjTyoH9SSyI k7WeET/2oc2/J3EMI+cj8vb/S1B3FyOrQMVeb91bDo+ohKgqz561s7piYfIXPgCa 0oKpKqa/XwxyMNYOpzMY/qr/jDhCVC+zr7L/AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQURYiR+nkMBrw1BvAexYwihvQSqKMwHwYDVR0jBBgwFoAUBFagwwe9oIjxq3j2 p+wFemB5Yy4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzcv QkZhZ3d3ZTlvSWp4cTNqMnAtd0ZlbUI1WXk0LmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9CRmFnd3dlOW9JanhxM2oycC13RmVtQjVZeTQuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ny9CRmFnd3dlOW9JanhxM2oy cC13RmVtQjVZeTQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA dJ22JBGuKQZrdKnVAL9RRQP3KJm7w7f0uZrAucND5HSk53Y+2G/0c19tHG9NghSw mOwOOcLxdsRcFw8u2AQxrdASd8cp9vkbC9tRuozHSiW1SrRGYMwfzEr+lal6DzQh sISrnrDHoEezj9LKmSZfUFulQxiPkAl6USUBFTWI7J7tdvqnqE/vqg4A5da5hWBW grZnGh9Bi5N1q7aHDUSrEaWEtwm8c2Kg8AqPelLkgfcEviQEoXtx5L0Z/lGysA1b AOwvVSVC7u6PIEVOQK3KAqzJxKQTuXJ36bJWM9bwLtA+m/wMCDyrM2VlQnvYwfKI z7kJprbv4Z5MuoDeovyMxw== -----END CERTIFICATE-----Generated at Sun May 18 03:52:02 2025 by rpki-client