$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft File: VyVNn31j60IRhMWNAuBBlwWaag4.mft (raw, json) Hash identifier: 3e8K82VgiiHbbD02SwXNv2D9D9JTy9QVglBVpflo9ZY= Subject key identifier: 8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB Authority key identifier: 57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E Certificate issuer: /CN=57254D9F7D63EB421184C58D02E04197059A6A0E Certificate serial: 08B5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft Manifest number: 08B5 Signing time: Tue 03 Jun 2025 21:14:32 +0000 Manifest this update: Tue 03 Jun 2025 21:14:32 +0000 Manifest next update: Wed 04 Jun 2025 03:14:32 +0000 Files and hashes: 1: VyVNn31j60IRhMWNAuBBlwWaag4.crl (hash: JpYevy1/hKerNa9B8DgRYCgT/ZkfuL2a0/y5OjosZPQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57254D9F7D63EB421184C58D02E04197059A6A0E Validity Not Before: Jun 3 21:14:32 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8C0973127E8D45EBCEC8F7DEB61FDBF61CD5E2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:a3:56:2e:72:20:0b:b8:87:bc:20:2a:f8: e5:6a:81:f5:dc:d9:16:77:cd:f1:1d:03:a8:a6:59: 1f:7c:4c:0c:9e:1e:dc:9b:47:ef:a3:69:b4:8e:16: 2a:db:ab:2f:da:c9:f5:3a:8a:a9:43:f8:d7:59:76: 5d:0b:e5:83:af:e0:08:04:9a:51:ff:2e:78:64:cc: 12:f4:7f:f7:d8:01:11:8b:51:87:8a:5c:ca:a9:41: 5c:f2:36:ce:07:4a:2d:88:1d:64:d6:53:6d:0f:4d: fb:70:e9:17:c4:e9:b6:ac:39:77:b0:64:45:53:66: 25:19:f8:c5:35:83:2c:7b:4b:83:ea:98:74:03:a0: a9:cf:08:ba:47:6d:17:fa:56:a8:eb:f8:fd:2d:e6: cf:18:49:fa:7f:2e:1b:74:23:74:37:44:a7:61:77: 55:91:7a:1c:41:f1:df:61:c1:1d:47:9f:21:18:6f: ca:77:44:06:8f:0e:89:d2:67:12:e8:d0:b2:b2:62: 8f:49:21:65:cc:64:3f:8c:1f:79:f0:6f:8b:dd:94: 63:e2:d9:04:bc:42:fb:5a:38:c6:dd:33:00:b9:30: 07:15:70:5f:4a:0a:a8:d9:a6:dc:a5:98:5e:32:d1: 45:3a:96:e9:2e:d0:63:af:66:ca:3e:83:d0:53:86: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB X509v3 Authority Key Identifier: keyid:57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:09:0e:8e:4a:02:66:ca:fe:83:c5:5f:0a:ae:fd:af:80:6d: 98:4f:6c:a6:a0:f1:59:c2:f7:85:82:80:06:c4:96:13:ec:b6: c8:ed:4b:6d:c6:04:7b:5c:34:a2:f7:da:a1:49:68:50:3c:b4: 44:56:91:38:c2:4e:10:f0:87:3d:0f:88:63:2a:36:b7:b6:e7: 82:a8:97:48:69:52:ae:f5:2a:f6:09:71:9d:2b:8d:f6:81:cc: ca:31:79:04:ac:c8:2b:8a:6a:aa:98:17:a3:20:61:18:b9:0c: 46:22:b5:fb:7f:e3:f1:d7:82:e4:a1:ab:1e:8a:e0:63:6c:0b: 42:fa:83:5b:1f:a4:04:9a:76:fb:21:84:61:10:d1:83:2d:c0: 25:f6:a6:74:32:1c:3b:9f:14:6b:26:95:63:b6:36:61:bd:33: 89:19:6e:dc:ee:cd:46:56:9f:c4:ca:38:c8:77:5c:40:f1:45: f4:55:9a:4c:9a:f5:76:09:a2:c7:1c:8f:01:21:f4:35:7e:ba: 9e:87:63:c3:06:fb:d4:9c:06:a1:d1:ac:e4:88:fe:c5:00:d9: 84:e2:84:50:8a:26:12:b7:6c:62:e7:8b:40:90:51:a9:6b:b5: 74:9f:07:ea:70:05:a2:c3:a2:17:4f:8c:e8:97:5c:80:b4:51: 92:45:06:8e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTcy NTREOUY3RDYzRUI0MjExODRDNThEMDJFMDQxOTcwNTlBNkEwRTAeFw0yNTA2MDMy MTE0MzJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhDMDk3MzEyN0U4RDQ1 RUJDRUM4RjdERUI2MUZEQkY2MUNENUUyQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDThqNWLnIgC7iHvCAq+OVqgfXc2RZ3zfEdA6imWR98TAyeHtyb R++jabSOFirbqy/ayfU6iqlD+NdZdl0L5YOv4AgEmlH/LnhkzBL0f/fYARGLUYeK XMqpQVzyNs4HSi2IHWTWU20PTftw6RfE6basOXewZEVTZiUZ+MU1gyx7S4PqmHQD oKnPCLpHbRf6Vqjr+P0t5s8YSfp/Lht0I3Q3RKdhd1WRehxB8d9hwR1HnyEYb8p3 RAaPDonSZxLo0LKyYo9JIWXMZD+MH3nwb4vdlGPi2QS8QvtaOMbdMwC5MAcVcF9K CqjZptylmF4y0UU6luku0GOvZso+g9BThsAjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUjAlzEn6NRevOyPfeth/b9hzV4qswHwYDVR0jBBgwFoAUVyVNn31j60IRhMWN AuBBlwWaag4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC9WeVZObjMxajYwSVJoTVdOQXVCQmx3V2FhZzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1Z5Vk5uMzFqNjBJUmhNV05BdUJCbHdXYWFnNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzAvVnlWTm4zMWo2MElS aE1XTkF1QkJsd1dhYWc0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI0JDo5KAmbK/oPFXwqu/a+AbZhPbKag8VnC94WCgAbElhPstsjtS23GBHtc NKL32qFJaFA8tERWkTjCThDwhz0PiGMqNre254Kol0hpUq71KvYJcZ0rjfaBzMox eQSsyCuKaqqYF6MgYRi5DEYitft/4/HXguShqx6K4GNsC0L6g1sfpASadvshhGEQ 0YMtwCX2pnQyHDufFGsmlWO2NmG9M4kZbtzuzUZWn8TKOMh3XEDxRfRVmkya9XYJ osccjwEh9DV+up6HY8MG+9ScBqHRrOSI/sUA2YTihFCKJhK3bGLni0CQUalrtXSf B+pwBaLDohdPjOiXXIC0UZJFBo4= -----END CERTIFICATE-----Generated at Wed Jun 4 00:24:07 2025 by rpki-client