$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft File: yZxuUM1dFkZVP-VT5x64vu2RUKo.mft (raw, json) Hash identifier: otNKxq3acOROPV/PWkSqxzJSWfkcxJM53RTQbR2BRoc= Subject key identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D Authority key identifier: C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA Certificate issuer: /CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Certificate serial: 1E4C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft Manifest number: 1E4C Signing time: Tue 03 Jun 2025 21:11:20 +0000 Manifest this update: Tue 03 Jun 2025 21:11:20 +0000 Manifest next update: Wed 04 Jun 2025 03:11:20 +0000 Files and hashes: 1: yZxuUM1dFkZVP-VT5x64vu2RUKo.crl (hash: +6oxW6EKCykgcswZhJ1OyBp70/spQNU+oASTrfEPjHI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7756 (0x1e4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Validity Not Before: Jun 3 21:11:20 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=677201A6628230D0D633B6E41AA4EA04F127C18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:c7:7c:50:81:f4:7e:df:0b:fd:f4:0e:76: 24:1c:17:31:c1:3b:df:fe:96:84:35:f6:a5:1d:83: b6:df:67:63:94:53:eb:e3:1d:3b:a7:24:4b:c3:df: 09:fe:24:f4:f1:9e:27:7c:36:75:2b:ed:54:62:e9: 66:e3:14:7b:db:a7:d9:9e:1d:27:06:b7:9b:c7:84: e7:95:6c:78:68:d8:e9:ce:51:41:52:79:f2:1c:f1: 72:90:57:2b:05:a5:99:3a:ed:a9:e1:bb:3e:9b:f9: ff:da:34:39:a5:d2:56:fb:64:14:74:3f:86:cf:97: 7e:fb:89:38:af:f7:98:55:e1:d5:e3:61:5b:78:7e: 70:0f:9c:81:3b:37:fd:5e:db:9e:5f:e3:e8:0b:8f: 88:0b:d8:b4:fb:4e:22:96:cd:e2:d3:9a:7d:bd:8b: 8c:83:d7:e4:c3:7d:0a:e0:09:e8:fa:18:e0:db:f3: 8f:64:4b:21:e9:fa:57:88:21:82:de:6d:77:0f:fb: cb:69:12:d8:bf:87:7b:02:fc:77:b5:7a:ec:d0:93: c6:01:00:a6:a7:5a:bd:7d:fa:e4:ec:32:b7:47:e6: c0:42:f3:ef:df:84:9d:d0:1d:54:ff:51:9a:8e:d5: 5c:0d:f8:d7:11:b3:c2:16:a5:27:0d:01:3e:d2:c1: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D X509v3 Authority Key Identifier: keyid:C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:27:6f:26:f7:b7:5f:e5:38:8f:5f:4a:11:84:8e:9d:04:b7: a8:6e:55:32:39:e1:c3:5d:23:52:9c:4f:bc:fd:5b:07:00:b3: ef:bf:1e:29:97:e5:8e:d4:08:6f:33:24:8c:e7:c5:24:75:79: ff:da:9f:2c:67:df:81:31:09:70:ad:b1:91:8f:2b:ee:2e:5a: 3d:cb:e5:d6:f1:ee:9e:42:e4:d8:8e:fa:77:f1:8f:c3:e2:b7: 5f:99:11:1c:ad:f8:46:5f:aa:b6:c8:5f:19:90:c1:6d:e6:a9: a6:f9:3f:40:dd:69:97:be:e9:c7:06:bb:24:37:d8:02:40:73: 0c:bd:ab:ea:a3:90:cc:50:a1:76:7f:07:f2:32:1d:86:79:68: d6:0b:9f:16:fb:83:70:46:6c:c4:bd:f0:b3:9f:79:20:eb:16: 4c:4d:c2:f5:ba:1d:c5:9d:69:53:c3:c6:76:e6:60:aa:90:a0: 99:16:23:f0:39:57:6a:90:ef:91:2a:53:71:75:42:87:70:10: 16:ce:62:a8:bd:d4:f2:94:f7:4f:48:47:41:6a:52:c6:0b:f7: 1b:1b:36:43:23:c3:c0:47:a1:81:27:ab:72:96:d1:73:41:4c: 56:02:f7:3a:1d:1e:4e:2d:7f:1b:42:6a:b8:d3:ad:2c:28:21: b4:bd:11:93 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk5 QzZFNTBDRDVEMTY0NjU1M0ZFNTUzRTcxRUI4QkVFRDkxNTBBQTAeFw0yNTA2MDMy MTExMjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDY3NzIwMUE2NjI4MjMw RDBENjMzQjZFNDFBQTRFQTA0RjEyN0MxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXiMd8UIH0ft8L/fQOdiQcFzHBO9/+loQ19qUdg7bfZ2OUU+vj HTunJEvD3wn+JPTxnid8NnUr7VRi6WbjFHvbp9meHScGt5vHhOeVbHho2OnOUUFS efIc8XKQVysFpZk67anhuz6b+f/aNDml0lb7ZBR0P4bPl377iTiv95hV4dXjYVt4 fnAPnIE7N/1e255f4+gLj4gL2LT7TiKWzeLTmn29i4yD1+TDfQrgCej6GODb849k SyHp+leIIYLebXcP+8tpEti/h3sC/He1euzQk8YBAKanWr19+uTsMrdH5sBC8+/f hJ3QHVT/UZqO1VwN+NcRs8IWpScNAT7Swco5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ3IBpmKCMNDWM7bkGqTqBPEnwY0wHwYDVR0jBBgwFoAUyZxuUM1dFkZVP+VT 5x64vu2RUKowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy MC95Wnh1VU0xZEZrWlZQLVZUNXg2NHZ1MlJVS28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3laeHVVTTFkRmtaVlAtVlQ1eDY0dnUyUlVLby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjAveVp4dVVNMWRGa1pW UC1WVDV4NjR2dTJSVUtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAknbyb3t1/lOI9fShGEjp0Et6huVTI54cNdI1KcT7z9WwcAs++/HimX5Y7U CG8zJIznxSR1ef/anyxn34ExCXCtsZGPK+4uWj3L5dbx7p5C5NiO+nfxj8Pit1+Z ERyt+EZfqrbIXxmQwW3mqab5P0DdaZe+6ccGuyQ32AJAcwy9q+qjkMxQoXZ/B/Iy HYZ5aNYLnxb7g3BGbMS98LOfeSDrFkxNwvW6HcWdaVPDxnbmYKqQoJkWI/A5V2qQ 75EqU3F1QodwEBbOYqi91PKU909IR0FqUsYL9xsbNkMjw8BHoYEnq3KW0XNBTFYC 9zodHk4tfxtCarjTrSwoIbS9EZM= -----END CERTIFICATE-----Generated at Wed Jun 4 01:21:22 2025 by rpki-client