$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft File: wrEFUbAKIe7r4enJQLSZntFcIfM.mft (raw, json) Hash identifier: fNLMdKU/DkUB29ovzAApkkXTFVS5cs1h6yOQlH4avFk= Subject key identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A Authority key identifier: C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 Certificate issuer: /CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Certificate serial: 26BC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft Manifest number: 26BC Signing time: Tue 03 Jun 2025 20:08:45 +0000 Manifest this update: Tue 03 Jun 2025 20:08:45 +0000 Manifest next update: Wed 04 Jun 2025 02:08:45 +0000 Files and hashes: 1: wrEFUbAKIe7r4enJQLSZntFcIfM.crl (hash: 88bSiWNM5/MivNcuZE9oJlrmcKkMgR7hvLsJp30KrU4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 02:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9916 (0x26bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Validity Not Before: Jun 3 20:08:45 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=74C6E5BCFCAD2046F375D2A8B10240F7DCCAF44A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:25:a7:70:ec:92:88:a7:f5:83:b7:60:f5: e2:e1:8b:dd:20:b0:fe:13:2f:66:4c:3f:65:f2:25: 16:b7:98:d6:07:9b:6b:03:e9:67:0b:53:cd:0a:ad: 05:36:29:bb:39:d9:82:6a:0f:c1:8d:61:7f:30:d8: 8a:b1:f0:1b:ec:ff:a0:6c:ff:61:d9:12:50:fa:e0: af:0d:32:88:e1:23:85:86:f8:66:29:00:0b:2f:b5: 9d:aa:d1:17:7e:3f:81:df:47:9c:29:0e:3e:ab:5e: 50:d6:a3:36:c1:16:16:4b:f8:d3:b4:5a:0a:21:20: 1a:60:e8:56:8f:04:64:8d:e8:59:28:2c:f6:54:d5: 0a:56:b8:dd:23:ec:c1:2b:8f:5f:8f:24:6b:4a:74: 3e:65:09:c7:d0:95:5b:db:07:15:57:d0:52:a1:4c: 69:a9:02:42:e1:95:a4:0c:a1:1e:ec:b6:92:71:7f: 73:83:ed:80:07:33:10:9c:8d:93:ce:f3:e4:e1:ac: 45:5c:ed:80:70:4e:ca:0b:bd:97:ad:28:93:d6:68: bc:2e:85:38:2f:57:89:58:88:9d:5e:ec:79:fe:32: 3c:79:a9:62:aa:b6:9d:1e:1f:27:db:5f:fe:b5:54: e0:b9:1c:bf:58:20:d3:87:d7:eb:9e:5f:8b:f0:c2: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A X509v3 Authority Key Identifier: keyid:C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:29:5a:f6:82:11:76:b1:dd:e7:12:3d:7a:e4:fe:c9:51:dc: 3c:d1:df:19:08:22:60:d5:8f:a0:7e:e1:5c:70:0f:c7:03:0e: 66:f7:09:f0:2c:d3:75:b1:59:0a:e4:69:32:1d:ca:b6:7d:ea: de:55:d1:11:7f:00:5e:fc:47:7e:98:b3:d0:6d:1f:96:5b:47: 7f:ac:5c:08:f6:2b:11:7b:7a:18:5c:8a:4d:0c:34:b9:84:0b: b0:15:4e:46:92:2c:98:32:f0:df:33:9c:17:c8:90:72:3c:18: ee:36:c4:21:90:81:e4:d6:eb:2f:71:24:09:f4:e5:b4:e0:68: b4:e6:dc:53:31:1f:2a:04:75:92:ab:f9:3c:ec:b2:5e:a3:ac: 3b:7a:4e:f1:11:a2:0a:b5:7a:75:b8:42:17:7f:2d:20:90:e1: 48:2c:a8:12:1a:6a:5b:08:9c:4e:4b:26:cf:f6:a9:00:e8:69: 9e:e3:7a:10:60:8e:e6:de:45:e3:8f:36:ea:32:90:29:6e:6e: 20:43:ef:c2:67:9a:66:05:02:5e:4b:6a:7e:57:b8:4c:bd:8c: d4:92:9d:fe:5a:a8:02:db:e9:46:45:7a:88:c4:db:7f:13:45: b4:67:be:21:47:e3:aa:98:39:1c:36:3f:b7:12:38:66:25:f5: 1c:fd:30:c0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICJrwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzJC MTA1NTFCMDBBMjFFRUVCRTFFOUM5NDBCNDk5OUVEMTVDMjFGMzAeFw0yNTA2MDMy MDA4NDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0QzZFNUJDRkNBRDIw NDZGMzc1RDJBOEIxMDI0MEY3RENDQUY0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJyWncOySiKf1g7dg9eLhi90gsP4TL2ZMP2XyJRa3mNYHm2sD 6WcLU80KrQU2Kbs52YJqD8GNYX8w2Iqx8Bvs/6Bs/2HZElD64K8NMojhI4WG+GYp AAsvtZ2q0Rd+P4HfR5wpDj6rXlDWozbBFhZL+NO0WgohIBpg6FaPBGSN6FkoLPZU 1QpWuN0j7MErj1+PJGtKdD5lCcfQlVvbBxVX0FKhTGmpAkLhlaQMoR7stpJxf3OD 7YAHMxCcjZPO8+ThrEVc7YBwTsoLvZetKJPWaLwuhTgvV4lYiJ1e7Hn+Mjx5qWKq tp0eHyfbX/61VOC5HL9YINOH1+ueX4vwwgsZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdMblvPytIEbzddKosQJA99zK9EowHwYDVR0jBBgwFoAUwrEFUbAKIe7r4enJ QLSZntFcIfMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 Ny93ckVGVWJBS0llN3I0ZW5KUUxTWm50RmNJZk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dyRUZVYkFLSWU3cjRlbkpRTFNabnRGY0lmTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTcvd3JFRlViQUtJZTdy NGVuSlFMU1pudEZjSWZNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGUpWvaCEXax3ecSPXrk/slR3DzR3xkIImDVj6B+4VxwD8cDDmb3CfAs03Wx WQrkaTIdyrZ96t5V0RF/AF78R36Ys9BtH5ZbR3+sXAj2KxF7ehhcik0MNLmEC7AV TkaSLJgy8N8znBfIkHI8GO42xCGQgeTW6y9xJAn05bTgaLTm3FMxHyoEdZKr+Tzs sl6jrDt6TvERogq1enW4Qhd/LSCQ4UgsqBIaalsInE5LJs/2qQDoaZ7jehBgjube ReOPNuoykClubiBD78JnmmYFAl5Lan5XuEy9jNSSnf5aqALb6UZFeojE238TRbRn viFH46qYORw2P7cSOGYl9Rz9MMA= -----END CERTIFICATE-----Generated at Wed Jun 4 00:18:03 2025 by rpki-client