$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft File: jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft (raw, json) Hash identifier: xxJ8F1yewTUu/uPNUov4SZ3NPy3rBton98+a9tqnq+A= Subject key identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 Authority key identifier: 8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 Certificate issuer: /CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Certificate serial: 09B2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft Manifest number: 09B2 Signing time: Tue 03 Jun 2025 21:14:24 +0000 Manifest this update: Tue 03 Jun 2025 21:14:24 +0000 Manifest next update: Wed 04 Jun 2025 03:14:24 +0000 Files and hashes: 1: jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl (hash: 3N/U64EIY8g+WP2hQ1kzVHdAOxbImdwQqsuDgwGiSRc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Validity Not Before: Jun 3 21:14:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=022DFCC8B8C58BCB6CA52C397D4F721AEEFB22F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:36:0a:02:16:fd:27:bb:ee:28:4b:34:c2: c3:be:b8:6d:d8:bc:e4:71:40:84:97:df:29:b5:23: 42:29:fe:6e:ec:3d:a9:f6:98:bb:c9:4c:3f:4f:12: ba:d6:89:77:92:25:5b:fa:af:16:ff:c5:5c:4e:67: 06:5b:a0:64:ac:a8:9b:f7:ea:ef:7a:44:a8:fd:32: 16:b5:d7:28:1f:a2:aa:84:91:15:64:a8:3b:fa:b1: 4f:73:c3:0b:c0:43:8c:a4:16:59:d7:e6:4e:de:7f: c4:e7:b4:db:f5:7f:c5:e9:38:74:d9:cb:92:d3:1a: e0:3e:a2:9f:66:5d:91:1c:a4:91:bf:07:08:a6:42: ab:41:44:05:eb:5a:14:c2:dd:80:78:38:50:d5:d6: 90:ec:e5:87:2c:8b:b3:c7:44:eb:e4:45:e5:6d:b7: d2:c2:aa:f9:08:0a:2c:43:32:27:f2:93:77:dd:61: 17:ec:3e:df:bd:50:ae:a5:19:4a:5a:a5:0b:f9:fa: e4:6b:88:2e:92:02:be:8d:22:6c:98:9b:ff:1e:9f: 53:07:b7:32:91:14:d1:8e:13:fb:e8:06:16:8e:d7: 45:58:d6:39:57:3e:ba:17:e1:ad:73:ac:85:08:9b: c1:00:68:ff:9c:2b:2b:09:89:11:cc:c3:fe:b7:78: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 X509v3 Authority Key Identifier: keyid:8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:01:a0:50:b4:b3:c8:33:50:77:02:0a:a2:b5:70:78:4e:3c: 2e:ef:a3:be:b8:48:1a:40:ad:df:54:63:01:42:25:43:f7:43: 39:4d:a4:59:83:1f:4c:57:5c:72:f6:a2:98:9e:ca:85:63:b0: f6:e4:45:65:c4:75:bc:25:bf:ee:3e:5b:5f:b3:f9:69:94:4f: 60:63:15:26:33:8a:93:49:1b:c9:84:67:fd:47:a2:97:b7:c0: cb:aa:65:fe:ed:82:f6:c2:cc:92:a1:05:f5:5f:13:3a:23:57: 7d:23:22:fb:6e:fa:92:f5:97:af:08:5f:de:0c:a1:9c:e1:9e: 42:5e:cd:71:56:5b:f7:a5:14:1b:f3:d1:b9:17:2d:54:5e:4b: a3:d5:ea:8a:14:de:07:74:4a:d3:ef:46:f1:19:3e:27:27:4a: 37:2c:0c:91:dc:fc:06:cd:5c:d1:fd:ed:ad:9a:a6:e5:2f:51: b8:68:94:9e:04:a4:50:3d:6a:60:57:f4:2a:54:c8:ff:7a:ec: 66:32:74:f6:7f:29:3b:cd:8c:be:53:56:78:7b:a4:f8:9b:75: c2:a2:f8:58:62:c9:1e:59:fd:ef:58:7f:2d:b9:6e:ad:58:c3: f1:bf:e0:89:00:e0:be:c5:b3:93:59:25:53:3a:91:52:fa:2c: 0d:9f:84:d5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQw QUFEQzM1MTg1MDY1RDg3QkM0RjIwRDhDNEE2Qjg4OTMxQThCOTAeFw0yNTA2MDMy MTE0MjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAyMkRGQ0M4QjhDNThC Q0I2Q0E1MkMzOTdENEY3MjFBRUVGQjIyRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEMjYKAhb9J7vuKEs0wsO+uG3YvORxQISX3ym1I0Ip/m7sPan2 mLvJTD9PErrWiXeSJVv6rxb/xVxOZwZboGSsqJv36u96RKj9Mha11ygfoqqEkRVk qDv6sU9zwwvAQ4ykFlnX5k7ef8TntNv1f8XpOHTZy5LTGuA+op9mXZEcpJG/Bwim QqtBRAXrWhTC3YB4OFDV1pDs5Ycsi7PHROvkReVtt9LCqvkICixDMifyk3fdYRfs Pt+9UK6lGUpapQv5+uRriC6SAr6NImyYm/8en1MHtzKRFNGOE/voBhaO10VY1jlX ProX4a1zrIUIm8EAaP+cKysJiRHMw/63eIfjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAi38yLjFi8tspSw5fU9yGu77IvMwHwYDVR0jBBgwFoAUjQqtw1GFBl2HvE8g 2MSmuIkxqLkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OC9qUXF0dzFHRkJsMkh2RThnMk1TbXVJa3hxTGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pRcXR3MUdGQmwySHZFOGcyTVNtdUlreHFMay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTgvalFxdHcxR0ZCbDJI dkU4ZzJNU211SWt4cUxrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABABoFC0s8gzUHcCCqK1cHhOPC7vo764SBpArd9UYwFCJUP3QzlNpFmDH0xX XHL2opieyoVjsPbkRWXEdbwlv+4+W1+z+WmUT2BjFSYzipNJG8mEZ/1Hope3wMuq Zf7tgvbCzJKhBfVfEzojV30jIvtu+pL1l68IX94MoZzhnkJezXFWW/elFBvz0bkX LVReS6PV6ooU3gd0StPvRvEZPicnSjcsDJHc/AbNXNH97a2apuUvUbholJ4EpFA9 amBX9CpUyP967GYydPZ/KTvNjL5TVnh7pPibdcKi+FhiyR5Z/e9Yfy25bq1Yw/G/ 4IkA4L7Fs5NZJVM6kVL6LA2fhNU= -----END CERTIFICATE-----Generated at Wed Jun 4 00:23:58 2025 by rpki-client