$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft File: jm3DpYneR53ZjpODO_zBYddCgiQ.mft (raw, json) Hash identifier: 5YbzhzoDfiovzhZJEIBExX+Wky67ckqxos3XJl7KKdI= Subject key identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 Authority key identifier: 8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 Certificate issuer: /CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Certificate serial: 1E37 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft Manifest number: 1E37 Signing time: Sat 17 May 2025 13:12:07 +0000 Manifest this update: Sat 17 May 2025 13:12:07 +0000 Manifest next update: Sat 17 May 2025 19:12:07 +0000 Files and hashes: 1: jm3DpYneR53ZjpODO_zBYddCgiQ.crl (hash: 8u+AwnWfRqtvtwuNNWBvKtb9QNpGWtXR+RbpyYxQI+M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7735 (0x1e37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Validity Not Before: May 17 13:12:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D75FB06620B70BA3A0FF0F4FA2329D1AAC8F2131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:79:5d:b6:9a:ea:98:0e:97:0d:79:e7:b8: 2b:a6:e9:eb:40:e9:2f:31:d5:3b:8f:4e:74:ce:64: c0:8c:71:e7:75:d1:44:47:5b:88:d6:d8:32:2a:e6: 7c:56:0e:f3:a6:89:10:14:70:4d:fa:7f:9b:c0:26: 19:d7:c2:9a:c2:cf:74:26:90:25:69:0c:4a:26:63: 86:10:65:78:e9:60:7f:5e:61:10:75:cf:b6:b2:d7: d0:72:52:5d:16:61:7d:00:be:18:f4:0d:04:ea:13: 89:9b:74:56:b7:c4:8c:20:81:27:ef:e6:e7:35:fe: fe:3e:b4:c0:fa:1d:d1:d7:60:3c:56:1d:bc:b9:92: 44:47:27:a4:5a:12:9e:4f:c4:72:01:d7:be:48:ca: 43:a8:a0:19:4e:e6:07:a8:13:39:26:20:61:5b:ed: 6f:6d:a3:d1:da:64:5d:1b:6e:9d:dc:ba:b5:38:09: a7:f4:49:a6:b0:49:3f:ef:57:81:0c:13:a8:2f:58: 50:38:45:90:74:3a:4b:5a:b3:f3:b3:01:05:e7:07: 01:85:24:71:76:f1:6a:37:36:d5:d1:3d:82:65:51: c8:66:93:fa:12:7d:57:c7:a3:8c:86:e7:51:f9:73: 1f:ba:a8:db:d5:2a:10:d4:e6:dd:cd:e7:e4:8d:9b: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 X509v3 Authority Key Identifier: keyid:8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:00:5b:dc:56:1c:71:33:a7:a9:39:eb:fb:29:17:da:73:a0: fa:d3:20:9a:16:a9:f7:b6:b3:a3:2e:b1:95:81:e6:90:d2:98: f1:1d:67:bd:02:2c:22:7e:ed:6f:36:98:de:a8:ae:55:ac:93: 9c:4e:98:2f:45:23:95:1d:b9:ec:2c:3b:d2:de:9d:5c:3b:6d: a2:05:64:9d:ca:49:4d:d1:4b:f8:27:f1:71:24:d4:7f:51:aa: 7d:42:57:32:79:18:83:2b:fe:01:83:a0:de:46:48:88:5f:21: c7:16:04:18:d0:68:85:10:ee:89:0f:3a:12:0d:82:b0:59:21: 6c:62:8d:f8:d4:c2:7a:f3:3b:10:96:ad:70:cb:05:44:a3:b2: 1e:fa:85:a7:5b:e0:04:8b:97:8f:35:b1:a6:72:78:c7:68:fa: 9b:7e:b8:b7:9e:b8:f3:de:e1:39:e4:00:f3:9e:07:99:a2:0a: 14:bc:7d:ef:38:03:da:27:14:fe:e9:7f:bc:67:bd:87:7e:a0: 25:5c:f4:05:e9:9c:e3:3b:01:1b:89:e1:05:e5:c1:c1:a6:a4: 4d:0d:23:07:e9:e6:4e:b3:d3:3c:a9:59:9e:32:4d:eb:d1:d5: 0d:ff:17:78:0f:90:e4:b6:3b:50:f5:fd:a9:0f:9d:64:9d:e3: 92:c3:a3:46 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU2 REMzQTU4OURFNDc5REQ5OEU5MzgzM0JGQ0MxNjFENzQyODIyNDAeFw0yNTA1MTcx MzEyMDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ3NUZCMDY2MjBCNzBC QTNBMEZGMEY0RkEyMzI5RDFBQUM4RjIxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVg3ldtprqmA6XDXnnuCum6etA6S8x1TuPTnTOZMCMced10URH W4jW2DIq5nxWDvOmiRAUcE36f5vAJhnXwprCz3QmkCVpDEomY4YQZXjpYH9eYRB1 z7ay19ByUl0WYX0Avhj0DQTqE4mbdFa3xIwggSfv5uc1/v4+tMD6HdHXYDxWHby5 kkRHJ6RaEp5PxHIB175IykOooBlO5geoEzkmIGFb7W9to9HaZF0bbp3curU4Caf0 SaawST/vV4EME6gvWFA4RZB0Oktas/OzAQXnBwGFJHF28Wo3NtXRPYJlUchmk/oS fVfHo4yG51H5cx+6qNvVKhDU5t3N5+SNm27rAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU11+wZiC3C6Og/w9PojKdGqyPITEwHwYDVR0jBBgwFoAUjm3DpYneR53ZjpOD O/zBYddCgiQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1 L2ptM0RwWW5lUjUzWmpwT0RPX3pCWWRkQ2dpUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvam0zRHBZbmVSNTNaanBPRE9fekJZZGRDZ2lRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1L2ptM0RwWW5lUjUzWmpw T0RPX3pCWWRkQ2dpUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBBAFvcVhxxM6epOev7KRfac6D60yCaFqn3trOjLrGVgeaQ0pjxHWe9Aiwifu1v NpjeqK5VrJOcTpgvRSOVHbnsLDvS3p1cO22iBWSdyklN0Uv4J/FxJNR/Uap9Qlcy eRiDK/4Bg6DeRkiIXyHHFgQY0GiFEO6JDzoSDYKwWSFsYo341MJ68zsQlq1wywVE o7Ie+oWnW+AEi5ePNbGmcnjHaPqbfri3nrjz3uE55ADzngeZogoUvH3vOAPaJxT+ 6X+8Z72HfqAlXPQF6ZzjOwEbieEF5cHBpqRNDSMH6eZOs9M8qVmeMk3r0dUN/xd4 D5DktjtQ9f2pD51kneOSw6NG -----END CERTIFICATE-----Generated at Sat May 17 14:59:54 2025 by rpki-client