$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft File: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft (raw, json) Hash identifier: 44mBFj9Q22Qy2TK1QAxY+yDsuu7u3LToEgpnWHx1/Bk= Subject key identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 Authority key identifier: 60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 Certificate issuer: /CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Certificate serial: 0D83 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft Manifest number: 0D83 Signing time: Wed 04 Jun 2025 02:09:54 +0000 Manifest this update: Wed 04 Jun 2025 02:09:54 +0000 Manifest next update: Wed 04 Jun 2025 08:09:54 +0000 Files and hashes: 1: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl (hash: HU6NqrI6rJsl12UEgK6JznpHW7vXaOn8KlTLUq+sF40=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3459 (0xd83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Validity Not Before: Jun 4 02:09:54 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4417D6FBFFB0DC025A87456F40A5FEAD98D1BAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:b3:11:0c:da:e4:3c:97:50:8b:7c:6d:03: b5:6c:ca:8e:44:3c:8b:55:d7:96:cc:6a:28:e2:a2: ea:14:25:db:38:84:83:92:2d:26:f8:6e:0f:9e:4a: c5:17:05:51:fa:ed:c5:11:aa:0b:f5:ec:d6:26:64: f6:37:df:19:04:18:2b:87:35:b9:76:6c:78:52:44: de:96:23:8e:da:82:8a:a8:63:60:1a:5f:e3:f6:c4: 5e:da:ab:fa:c2:c7:60:89:fb:29:f0:38:90:ff:e3: df:02:6b:c6:f0:c3:fe:ee:a5:68:95:ad:58:8d:ba: db:a5:03:34:b1:d6:74:e4:c1:30:6c:07:b7:6f:29: b0:60:91:70:a1:8a:ce:89:e8:39:a9:26:3a:98:f7: 87:63:6f:d6:b7:42:38:a5:e6:72:4f:f5:52:07:4e: 85:5a:2e:6a:a5:1a:7f:e5:4f:7a:94:61:be:22:52: b3:ec:86:fe:50:fa:c0:18:5a:a5:27:95:8f:10:f4: 19:fd:18:2b:8c:0b:91:70:fb:d6:59:77:b1:c7:7c: c0:57:2e:b8:2c:8f:4b:46:04:ad:46:90:9a:73:dc: 0d:7d:41:a7:f0:0d:8a:6c:50:89:5f:b4:36:3a:8e: 6a:52:89:ac:46:b5:10:bd:0f:7e:7b:38:4f:df:52: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 X509v3 Authority Key Identifier: keyid:60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:de:94:55:35:b5:59:2d:67:09:4c:4e:de:29:0d:c0:62:f5: fc:92:68:09:c7:65:ae:2a:7a:a1:fb:e9:8b:7a:b0:46:7b:05: 07:f7:ee:90:96:71:06:db:8b:e1:90:ed:ba:6f:7c:e3:cf:0e: 9c:81:bf:5f:30:ee:ff:6a:71:1a:f8:a7:a2:34:38:09:30:ce: 3f:64:ef:7d:a1:7f:d0:ea:c0:ad:82:7f:2d:9c:41:60:02:86: b1:89:e3:43:35:2b:53:f5:2b:0a:9c:93:a7:b3:d9:18:65:6d: f6:e5:da:5d:90:11:aa:82:81:d1:37:ef:bc:0d:22:8a:ba:03: d5:8e:5e:b7:2b:d1:fe:76:3e:a4:5a:2e:31:fd:dc:a7:fd:1b: 87:df:a4:cc:f2:4b:0b:05:81:b6:c8:7b:4e:5d:42:aa:83:1d: 3c:f7:ed:73:64:c3:e3:c3:b2:66:3d:f7:ba:8b:be:e8:ec:5c: 09:85:6f:85:df:ae:ba:c4:dd:44:01:5a:94:60:24:90:83:13: 15:80:50:7a:fc:2f:7e:71:7d:60:a7:53:ea:3a:03:5c:63:48: 3c:d6:ea:c3:67:f1:f7:89:9c:d7:4e:56:4f:e3:02:53:d4:55: 8c:09:65:0e:6a:1c:d4:3c:8c:35:1f:e8:89:c9:5b:33:34:ad: e6:0f:73:d5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjBC MkQ4RjkwRDIxMDVDOEVCODc2ODU2QUE5NzVCNTNDNDMyNjk5NjAeFw0yNTA2MDQw MjA5NTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ0MTdENkZCRkZCMERD MDI1QTg3NDU2RjQwQTVGRUFEOThEMUJBRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk07MRDNrkPJdQi3xtA7Vsyo5EPItV15bMaijiouoUJds4hIOS LSb4bg+eSsUXBVH67cURqgv17NYmZPY33xkEGCuHNbl2bHhSRN6WI47agoqoY2Aa X+P2xF7aq/rCx2CJ+ynwOJD/498Ca8bww/7upWiVrViNutulAzSx1nTkwTBsB7dv KbBgkXChis6J6DmpJjqY94djb9a3Qjil5nJP9VIHToVaLmqlGn/lT3qUYb4iUrPs hv5Q+sAYWqUnlY8Q9Bn9GCuMC5Fw+9ZZd7HHfMBXLrgsj0tGBK1GkJpz3A19Qafw DYpsUIlftDY6jmpSiaxGtRC9D357OE/fUoIxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQURBfW+/+w3AJah0VvQKX+rZjRuuEwHwYDVR0jBBgwFoAUYLLY+Q0hBcjrh2hW qpdbU8QyaZYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy Ny9ZTExZLVEwaEJjanJoMmhXcXBkYlU4UXlhWlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1lMTFktUTBoQmNqcmgyaFdxcGRiVThReWFaWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjcvWUxMWS1RMGhCY2py aDJoV3FwZGJVOFF5YVpZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFXelFU1tVktZwlMTt4pDcBi9fySaAnHZa4qeqH76Yt6sEZ7BQf37pCWcQbb i+GQ7bpvfOPPDpyBv18w7v9qcRr4p6I0OAkwzj9k732hf9DqwK2Cfy2cQWAChrGJ 40M1K1P1Kwqck6ez2Rhlbfbl2l2QEaqCgdE377wNIoq6A9WOXrcr0f52PqRaLjH9 3Kf9G4ffpMzySwsFgbbIe05dQqqDHTz37XNkw+PDsmY997qLvujsXAmFb4XfrrrE 3UQBWpRgJJCDExWAUHr8L35xfWCnU+o6A1xjSDzW6sNn8feJnNdOVk/jAlPUVYwJ ZQ5qHNQ8jDUf6InJWzM0reYPc9U= -----END CERTIFICATE-----Generated at Wed Jun 4 03:56:45 2025 by rpki-client