$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft File: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft (raw, json) Hash identifier: nM61xnVBAlqfsCXJr+CHqftpEoohXqWOKDaed7w/HLM= Subject key identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 Authority key identifier: 60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 Certificate issuer: /CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Certificate serial: 0C58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft Manifest number: 0C58 Signing time: Fri 04 Apr 2025 14:06:38 +0000 Manifest this update: Fri 04 Apr 2025 14:06:38 +0000 Manifest next update: Fri 04 Apr 2025 20:06:38 +0000 Files and hashes: 1: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl (hash: ksZZiPng/JM94jQvnkbm9zQGCBol9zDTr1UgKg1LsPU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Validity Not Before: Apr 4 14:06:38 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4417D6FBFFB0DC025A87456F40A5FEAD98D1BAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:b3:11:0c:da:e4:3c:97:50:8b:7c:6d:03: b5:6c:ca:8e:44:3c:8b:55:d7:96:cc:6a:28:e2:a2: ea:14:25:db:38:84:83:92:2d:26:f8:6e:0f:9e:4a: c5:17:05:51:fa:ed:c5:11:aa:0b:f5:ec:d6:26:64: f6:37:df:19:04:18:2b:87:35:b9:76:6c:78:52:44: de:96:23:8e:da:82:8a:a8:63:60:1a:5f:e3:f6:c4: 5e:da:ab:fa:c2:c7:60:89:fb:29:f0:38:90:ff:e3: df:02:6b:c6:f0:c3:fe:ee:a5:68:95:ad:58:8d:ba: db:a5:03:34:b1:d6:74:e4:c1:30:6c:07:b7:6f:29: b0:60:91:70:a1:8a:ce:89:e8:39:a9:26:3a:98:f7: 87:63:6f:d6:b7:42:38:a5:e6:72:4f:f5:52:07:4e: 85:5a:2e:6a:a5:1a:7f:e5:4f:7a:94:61:be:22:52: b3:ec:86:fe:50:fa:c0:18:5a:a5:27:95:8f:10:f4: 19:fd:18:2b:8c:0b:91:70:fb:d6:59:77:b1:c7:7c: c0:57:2e:b8:2c:8f:4b:46:04:ad:46:90:9a:73:dc: 0d:7d:41:a7:f0:0d:8a:6c:50:89:5f:b4:36:3a:8e: 6a:52:89:ac:46:b5:10:bd:0f:7e:7b:38:4f:df:52: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 X509v3 Authority Key Identifier: keyid:60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:e2:e8:32:35:af:8d:83:87:f6:5a:3a:a9:37:cb:c9:b6:aa: 2d:1a:2e:c0:6e:ab:32:56:93:4c:df:e0:75:4b:88:05:2d:10: d6:c0:6c:50:b5:70:8e:9a:02:e2:a7:d6:e1:30:55:3c:e5:3c: 19:a9:10:e1:75:1e:08:ab:6e:6d:5a:9f:18:d5:f2:b4:51:76: 13:f5:5e:9b:15:a8:aa:f9:b1:a2:69:41:08:22:31:d1:14:4d: ca:3b:e0:22:5b:06:e0:16:e5:bf:83:20:d1:0f:93:b0:cf:36: eb:1a:fc:8a:94:e5:05:e8:32:d0:3b:41:a9:df:3a:ce:aa:e9: e8:dc:03:c0:43:f9:28:1e:a0:38:e6:33:fc:28:92:99:e0:32: aa:05:33:99:a9:a1:5c:cb:85:8a:dd:59:1c:39:f1:18:64:8c: 9a:f4:d8:66:85:df:a2:cf:92:76:a8:9d:96:5d:98:46:2e:6e: d2:00:f8:76:4a:b4:b5:d1:7f:c0:81:e8:05:19:92:1d:ca:89: 53:44:80:84:e7:a6:2c:56:7c:2e:7c:26:cc:de:99:02:7c:e3: 20:70:e4:d1:dd:a1:d6:d5:2c:d7:25:72:58:2a:c6:7e:b1:dd: 4e:c5:66:e3:88:3c:6a:a6:0f:d3:2e:d5:b4:09:5b:11:a2:25: 5e:30:16:b0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjBC MkQ4RjkwRDIxMDVDOEVCODc2ODU2QUE5NzVCNTNDNDMyNjk5NjAeFw0yNTA0MDQx NDA2MzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ0MTdENkZCRkZCMERD MDI1QTg3NDU2RjQwQTVGRUFEOThEMUJBRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk07MRDNrkPJdQi3xtA7Vsyo5EPItV15bMaijiouoUJds4hIOS LSb4bg+eSsUXBVH67cURqgv17NYmZPY33xkEGCuHNbl2bHhSRN6WI47agoqoY2Aa X+P2xF7aq/rCx2CJ+ynwOJD/498Ca8bww/7upWiVrViNutulAzSx1nTkwTBsB7dv KbBgkXChis6J6DmpJjqY94djb9a3Qjil5nJP9VIHToVaLmqlGn/lT3qUYb4iUrPs hv5Q+sAYWqUnlY8Q9Bn9GCuMC5Fw+9ZZd7HHfMBXLrgsj0tGBK1GkJpz3A19Qafw DYpsUIlftDY6jmpSiaxGtRC9D357OE/fUoIxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQURBfW+/+w3AJah0VvQKX+rZjRuuEwHwYDVR0jBBgwFoAUYLLY+Q0hBcjrh2hW qpdbU8QyaZYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy Ny9ZTExZLVEwaEJjanJoMmhXcXBkYlU4UXlhWlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1lMTFktUTBoQmNqcmgyaFdxcGRiVThReWFaWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjcvWUxMWS1RMGhCY2py aDJoV3FwZGJVOFF5YVpZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAN/i6DI1r42Dh/ZaOqk3y8m2qi0aLsBuqzJWk0zf4HVLiAUtENbAbFC1cI6a AuKn1uEwVTzlPBmpEOF1Hgirbm1anxjV8rRRdhP1XpsVqKr5saJpQQgiMdEUTco7 4CJbBuAW5b+DINEPk7DPNusa/IqU5QXoMtA7QanfOs6q6ejcA8BD+SgeoDjmM/wo kpngMqoFM5mpoVzLhYrdWRw58RhkjJr02GaF36LPknaonZZdmEYubtIA+HZKtLXR f8CB6AUZkh3KiVNEgITnpixWfC58JszemQJ84yBw5NHdodbVLNclclgqxn6x3U7F ZuOIPGqmD9Mu1bQJWxGiJV4wFrA= -----END CERTIFICATE-----Generated at Fri Apr 4 18:48:20 2025 by rpki-client