$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft File: TS1a-PNilt7eZELYEcBKdAhswCk.mft (raw, json) Hash identifier: hUs4faa3NSVy1UCvQ747724u91FPmUyDEpuSSEaiADw= Subject key identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 Authority key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 Certificate issuer: /CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Certificate serial: 1D64 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft Manifest number: 1D64 Signing time: Fri 06 Jun 2025 12:13:57 +0000 Manifest this update: Fri 06 Jun 2025 12:13:57 +0000 Manifest next update: Fri 06 Jun 2025 18:13:57 +0000 Files and hashes: 1: TS1a-PNilt7eZELYEcBKdAhswCk.crl (hash: qD5LooH9CM+BdKPg0WdtSsz2ixFdfPMTUNHstUSyGSw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7524 (0x1d64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Validity Not Before: Jun 6 12:13:57 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=FB05EB7D2AA945F23FDF3EE47C8BEE704F06A134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:4f:7d:fc:28:2d:d7:cd:f1:6e:6e:4e:d9: d7:54:74:5a:df:76:cd:82:70:0b:4d:ee:b7:b7:8a: 50:8a:b1:fd:c2:a7:0e:ac:0d:35:a3:59:47:52:b8: da:5c:4c:59:79:1d:ae:1f:06:ce:31:bb:67:03:b6: 18:7e:e6:6f:b9:2d:27:2b:59:a3:bd:d1:b7:7a:f2: c5:8f:5a:14:3c:c4:51:a6:7f:4b:42:fb:76:88:0d: 7f:f8:2d:36:29:1b:73:31:02:b2:f6:2f:84:c0:17: 67:5c:9e:b7:db:48:f1:e1:f9:1d:53:15:38:19:5e: 9e:3b:65:09:3d:2d:2b:14:9e:e9:44:ee:5c:fb:4c: 6d:31:68:42:0f:12:1f:f5:d2:50:57:ee:dc:a3:77: c4:e0:1c:65:0a:c3:fc:6d:98:0f:25:b7:51:c6:88: 34:3f:65:e9:e9:5b:8d:6e:64:75:b1:50:74:51:59: e7:21:fe:84:62:ef:e2:e4:8f:95:08:7e:7e:2f:b3: b7:d6:09:18:c8:aa:3b:86:c9:89:66:76:c6:c6:07: 8e:d9:19:9f:90:61:8e:3d:27:fb:d9:bc:21:3b:7e: f5:25:c9:e2:00:6e:22:09:21:da:1e:b3:8d:cd:73: 4c:a5:38:1f:4d:7e:47:0f:6d:cc:38:75:61:6a:b8: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 X509v3 Authority Key Identifier: keyid:4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:16:a7:42:8d:e0:f8:89:3c:c4:7d:c1:ac:20:54:6f:ac:70: 87:1e:4e:15:a7:ae:f2:de:62:9b:a5:23:19:ad:ce:0b:65:6f: ab:54:eb:64:e0:09:ab:9a:7d:54:9c:cb:dd:2b:20:d7:f2:40: c5:ed:b6:b0:d4:6b:8f:77:25:6b:86:65:bf:3d:ba:4e:06:29: 36:0a:90:8f:05:8b:33:48:2b:5f:1b:ba:a5:6c:7e:62:96:47: 7f:b5:3c:08:6b:51:d4:6b:37:38:97:9a:31:51:84:5d:6a:48: a2:72:7c:35:ff:21:c4:58:4b:29:bd:75:ca:e4:14:ca:d3:ca: 71:9f:08:ca:0d:85:9d:17:c6:9e:fb:8d:7c:ae:92:f2:dc:6a: f3:1c:26:89:7e:ba:99:27:87:c0:a5:3f:e8:f6:d5:37:c2:b5: ec:27:6b:b8:bc:11:c4:07:77:37:ec:c6:da:4a:05:16:eb:7c: 72:6b:c0:23:b2:1d:8f:e6:57:fa:ce:c6:cb:40:cd:ee:3d:f9: db:6c:52:a5:22:55:ac:64:9f:75:b8:d5:66:14:ad:c4:28:2b: b9:d1:d9:5e:ba:bd:55:cc:27:f1:0c:7e:fe:f0:e2:e2:1f:bb: 78:39:38:3e:1e:b4:1c:96:d7:eb:3d:86:13:63:f1:0b:42:97: 34:ec:e2:1c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEQy RDVBRjhGMzYyOTZERURFNjQ0MkQ4MTFDMDRBNzQwODZDQzAyOTAeFw0yNTA2MDYx MjEzNTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZCMDVFQjdEMkFBOTQ1 RjIzRkRGM0VFNDdDOEJFRTcwNEYwNkExMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLMk99/Cgt183xbm5O2ddUdFrfds2CcAtN7re3ilCKsf3Cpw6s DTWjWUdSuNpcTFl5Ha4fBs4xu2cDthh+5m+5LScrWaO90bd68sWPWhQ8xFGmf0tC +3aIDX/4LTYpG3MxArL2L4TAF2dcnrfbSPHh+R1TFTgZXp47ZQk9LSsUnulE7lz7 TG0xaEIPEh/10lBX7tyjd8TgHGUKw/xtmA8lt1HGiDQ/ZenpW41uZHWxUHRRWech /oRi7+Lkj5UIfn4vs7fWCRjIqjuGyYlmdsbGB47ZGZ+QYY49J/vZvCE7fvUlyeIA biIJIdoes43Nc0ylOB9NfkcPbcw4dWFquOJtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+wXrfSqpRfI/3z7kfIvucE8GoTQwHwYDVR0jBBgwFoAUTS1a+PNilt7eZELY EcBKdAhswCkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc5 MC9UUzFhLVBOaWx0N2VaRUxZRWNCS2RBaHN3Q2suY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RTMWEtUE5pbHQ3ZVpFTFlFY0JLZEFoc3dDay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3OTAvVFMxYS1QTmlsdDdl WkVMWUVjQktkQWhzd0NrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAG8Wp0KN4PiJPMR9wawgVG+scIceThWnrvLeYpulIxmtzgtlb6tU62TgCaua fVScy90rINfyQMXttrDUa493JWuGZb89uk4GKTYKkI8FizNIK18buqVsfmKWR3+1 PAhrUdRrNziXmjFRhF1qSKJyfDX/IcRYSym9dcrkFMrTynGfCMoNhZ0Xxp77jXyu kvLcavMcJol+upknh8ClP+j21TfCtewna7i8EcQHdzfsxtpKBRbrfHJrwCOyHY/m V/rOxstAze49+dtsUqUiVaxkn3W41WYUrcQoK7nR2V66vVXMJ/EMfv7w4uIfu3g5 OD4etByW1+s9hhNj8QtClzTs4hw= -----END CERTIFICATE-----Generated at Fri Jun 6 17:29:23 2025 by rpki-client