$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft File: jADfzi10-W1xE_7xW2z4zSGqJm4.mft (raw, json) Hash identifier: d2RAF71VY0QdfbLFcHLGe7WLzHHBrKurAoyZ7NeHofQ= Subject key identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D Authority key identifier: 8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E Certificate issuer: /CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Certificate serial: 1DAC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft Manifest number: 1DAC Signing time: Tue 03 Jun 2025 21:09:32 +0000 Manifest this update: Tue 03 Jun 2025 21:09:32 +0000 Manifest next update: Wed 04 Jun 2025 03:09:32 +0000 Files and hashes: 1: jADfzi10-W1xE_7xW2z4zSGqJm4.crl (hash: BB4ualHk4f1tvX10JR/m2iVHv2+1bc6mKOjImhDPTlg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7596 (0x1dac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Validity Not Before: Jun 3 21:09:32 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2DBDCE5D957056DAF5725D4EF0B8D9FD9FA84F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:78:49:97:ff:78:07:ae:27:3d:db:c3:d3: 5f:d9:dc:5f:b7:bd:f8:d4:f2:0e:89:b1:8e:be:53: c2:b0:5a:a3:5d:61:4e:b4:01:1b:2f:7d:5e:6e:7f: b7:31:62:eb:a4:c6:5e:4d:47:60:9d:80:d4:e9:36: 24:32:5e:3d:4d:23:94:c2:c6:a0:47:9d:f5:5d:d9: 13:c0:e2:81:5b:56:1a:ff:92:4e:ec:fc:b8:4f:4e: a7:52:de:f8:79:47:1c:29:c1:77:1b:0b:93:71:65: 41:7f:38:0e:af:e3:96:67:a4:cd:50:db:e5:5e:97: 90:22:5d:6a:23:69:8e:72:35:27:ff:8b:ed:ea:33: 71:cc:aa:96:e7:cc:18:43:05:8b:4c:ac:15:47:99: ef:c2:46:61:88:a2:58:33:38:40:de:59:05:f8:f0: fd:99:dd:08:a6:2c:ce:23:b5:f3:a3:45:f5:3c:60: 53:29:71:e5:5b:26:30:50:51:25:e2:5f:10:db:0a: ca:cb:26:9a:59:26:c7:c3:c6:48:3b:1f:1f:cd:48: 6b:0e:c2:1b:6e:48:71:ba:3c:7e:c3:c3:bc:42:38: cb:d3:2b:86:2d:75:7e:0f:5f:74:bf:5d:d6:00:61: fb:3e:30:05:7d:86:71:a0:b4:ec:f4:de:60:da:d1: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D X509v3 Authority Key Identifier: keyid:8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:30:a1:52:ac:eb:a9:4a:ae:1c:a1:e8:1d:3a:e6:dc:6e:ed: f6:42:e3:70:85:34:9b:89:cf:fd:00:8e:03:49:96:34:21:10: fd:07:c5:f6:19:05:e7:4d:e5:50:99:0e:85:56:48:0b:be:67: 03:e0:c6:68:74:3a:39:ea:70:db:f9:85:50:d8:85:f2:13:cd: e5:67:47:cb:02:c4:d6:fd:da:29:89:2b:64:cf:44:52:75:c3: 5c:d8:16:3c:43:1b:fa:56:6d:ae:5a:d2:81:43:4b:7f:07:19: f4:58:bc:c5:35:17:bb:eb:6f:75:91:84:50:bb:b4:0b:4b:86: 2b:94:1d:b6:1b:18:4b:6c:b6:4a:d6:be:b6:b5:4a:28:b1:e2: 47:e7:19:02:ec:48:5d:45:ec:84:54:4c:19:3d:a8:5a:d8:ba: 73:89:03:a9:3d:9a:53:61:ff:4d:43:1b:1d:92:1e:cf:f0:84: ca:1c:49:c4:b1:55:68:e2:29:8b:f2:8d:a1:60:50:e6:82:da: 6f:fe:b0:3b:15:98:9c:bf:03:43:bb:9e:0d:4e:11:87:88:2d: 5d:2f:69:60:d0:72:23:63:eb:60:85:21:bb:47:72:a2:86:9a: 5e:36:20:85:18:04:0e:e9:2f:3d:d0:a1:14:92:76:38:73:4d: 2c:a1:94:bb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMw MERGQ0UyRDc0Rjk2RDcxMTNGRUYxNUI2Q0Y4Q0QyMUFBMjY2RTAeFw0yNTA2MDMy MTA5MzJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJEQkRDRTVEOTU3MDU2 REFGNTcyNUQ0RUYwQjhEOUZEOUZBODRGM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV4nhJl/94B64nPdvD01/Z3F+3vfjU8g6JsY6+U8KwWqNdYU60 ARsvfV5uf7cxYuukxl5NR2CdgNTpNiQyXj1NI5TCxqBHnfVd2RPA4oFbVhr/kk7s /LhPTqdS3vh5RxwpwXcbC5NxZUF/OA6v45ZnpM1Q2+Vel5AiXWojaY5yNSf/i+3q M3HMqpbnzBhDBYtMrBVHme/CRmGIolgzOEDeWQX48P2Z3QimLM4jtfOjRfU8YFMp ceVbJjBQUSXiXxDbCsrLJppZJsfDxkg7Hx/NSGsOwhtuSHG6PH7Dw7xCOMvTK4Yt dX4PX3S/XdYAYfs+MAV9hnGgtOz03mDa0Ut5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQULb3OXZVwVtr1cl1O8LjZ/Z+oTz0wHwYDVR0jBBgwFoAUjADfzi10+W1xE/7x W2z4zSGqJm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OC9qQURmemkxMC1XMXhFXzd4VzJ6NHpTR3FKbTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pBRGZ6aTEwLVcxeEVfN3hXMno0elNHcUptNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTgvakFEZnppMTAtVzF4 RV83eFcyejR6U0dxSm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGgwoVKs66lKrhyh6B065txu7fZC43CFNJuJz/0AjgNJljQhEP0HxfYZBedN 5VCZDoVWSAu+ZwPgxmh0OjnqcNv5hVDYhfITzeVnR8sCxNb92imJK2TPRFJ1w1zY FjxDG/pWba5a0oFDS38HGfRYvMU1F7vrb3WRhFC7tAtLhiuUHbYbGEtstkrWvra1 Siix4kfnGQLsSF1F7IRUTBk9qFrYunOJA6k9mlNh/01DGx2SHs/whMocScSxVWji KYvyjaFgUOaC2m/+sDsVmJy/A0O7ng1OEYeILV0vaWDQciNj62CFIbtHcqKGml42 IIUYBA7pLz3QoRSSdjhzTSyhlLs= -----END CERTIFICATE-----Generated at Wed Jun 4 00:12:37 2025 by rpki-client