$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft File: U8kE5DbkCUsscVNNs_Vzviozvjk.mft (raw, json) Hash identifier: GgO4TvvQhpETh6jG9rHwOl6ew2mxD6SJKBGiENgHu2s= Subject key identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 Authority key identifier: 53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 Certificate issuer: /CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Certificate serial: 07D3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft Manifest number: 07D3 Signing time: Tue 03 Jun 2025 21:11:23 +0000 Manifest this update: Tue 03 Jun 2025 21:11:23 +0000 Manifest next update: Wed 04 Jun 2025 03:11:23 +0000 Files and hashes: 1: U8kE5DbkCUsscVNNs_Vzviozvjk.crl (hash: 5Gv/b1hHps5fGLcD9CzAz6zSejrROKvfZjD3fPmjxuo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Validity Not Before: Jun 3 21:11:23 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CC485786D4ADBCDBFD1672905DD43CF845F24440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:58:66:c3:97:42:5c:cf:b5:79:44:d3:e4: 72:f0:d7:db:1b:f8:1b:67:1c:16:1b:5f:8c:e6:2e: 5f:ba:fc:6a:2a:74:3c:8a:c5:54:cd:c8:6a:08:3d: 16:e0:6d:dd:d0:6c:66:0f:60:b6:dc:f1:47:69:c0: 6e:15:28:f5:76:ee:8c:43:00:fd:97:f9:8b:a1:ce: e6:06:8d:cc:23:7f:f2:4c:33:0a:92:ec:57:52:5f: f0:51:ea:3b:4c:bb:9e:fb:27:0a:47:1e:91:31:df: 9f:e4:6e:a8:58:6b:ef:9c:7d:cb:71:ea:4e:5b:e4: aa:e2:7f:5f:da:d5:f6:64:71:80:44:b5:30:ef:2b: 9e:5b:bd:37:4b:5e:88:a7:91:98:f7:d5:a0:37:ef: 42:da:ca:cd:0d:2c:01:7c:9e:93:3b:e0:ab:27:de: 14:76:f2:bc:67:62:5b:12:a2:c7:d4:d4:26:b6:dc: bf:64:c8:0a:c3:14:07:39:82:fb:45:5b:9b:8b:d6: b3:9a:22:e2:03:d2:3c:19:19:70:1a:3e:7c:4a:12: 56:a1:0e:b9:53:5a:98:6c:eb:43:3a:c3:ef:b0:34: 22:84:aa:47:6f:a4:0b:18:53:15:a7:73:a3:17:57: d3:79:45:b7:28:98:6f:6e:cf:3f:86:bd:e7:39:f0: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 X509v3 Authority Key Identifier: keyid:53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:2d:e2:c2:81:7a:cf:fb:ab:69:5e:dd:a7:30:78:ed:31:dc: 48:37:2f:09:53:3f:8a:96:22:c2:64:39:b9:04:c5:c5:a9:99: fe:4f:88:4f:43:b4:5f:41:11:f5:92:82:4a:5d:71:56:04:30: 46:cd:e7:48:58:e0:23:12:48:79:fa:b8:44:9b:b3:14:23:77: a0:9b:a7:22:8a:b7:5d:26:3e:0b:9f:3d:09:11:09:00:66:0d: 1b:8e:59:30:4d:7e:4f:6a:c7:c2:69:5f:ac:06:22:51:dd:9e: 97:1b:4c:28:c6:2b:ec:ba:16:ba:44:9e:cb:1a:b1:4b:59:80: fa:01:3d:c1:f9:e5:25:3b:be:03:81:6f:ff:4e:10:f4:a0:5e: 24:8f:7b:81:d8:51:23:13:ab:69:53:fd:ee:54:c9:f8:27:8a: 10:62:c2:b7:c5:72:a1:28:2f:48:58:18:32:03:ac:86:00:a9: 38:45:85:22:b9:04:eb:52:0b:b8:dd:fe:9c:a2:38:b5:bb:a3: 49:ed:c9:aa:99:ef:05:2d:1a:b2:c0:ff:f8:9b:89:b2:34:94: be:a6:76:61:91:5b:34:b3:31:bf:32:05:20:a3:5f:b0:6f:44: ac:aa:aa:96:4e:58:d6:3a:95:b8:87:32:19:97:03:83:4e:3b: a9:eb:70:9f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTND OTA0RTQzNkU0MDk0QjJDNzE1MzREQjNGNTczQkUyQTMzQkUzOTAeFw0yNTA2MDMy MTExMjNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENDNDg1Nzg2RDRBREJD REJGRDE2NzI5MDVERDQzQ0Y4NDVGMjQ0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGWlhmw5dCXM+1eUTT5HLw19sb+BtnHBYbX4zmLl+6/GoqdDyK xVTNyGoIPRbgbd3QbGYPYLbc8UdpwG4VKPV27oxDAP2X+YuhzuYGjcwjf/JMMwqS 7FdSX/BR6jtMu577JwpHHpEx35/kbqhYa++cfctx6k5b5Krif1/a1fZkcYBEtTDv K55bvTdLXoinkZj31aA370Lays0NLAF8npM74Ksn3hR28rxnYlsSosfU1Ca23L9k yArDFAc5gvtFW5uL1rOaIuID0jwZGXAaPnxKElahDrlTWphs60M6w++wNCKEqkdv pAsYUxWnc6MXV9N5RbcomG9uzz+Gvec58OZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzEhXhtStvNv9FnKQXdQ8+EXyREAwHwYDVR0jBBgwFoAUU8kE5DbkCUsscVNN s/VzviozvjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OC9VOGtFNURia0NVc3NjVk5Oc19WenZpb3p2amsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1U4a0U1RGJrQ1Vzc2NWTk5zX1Z6dmlvenZqay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzgvVThrRTVEYmtDVXNz Y1ZOTnNfVnp2aW96dmprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAIt4sKBes/7q2le3acweO0x3Eg3LwlTP4qWIsJkObkExcWpmf5PiE9DtF9B EfWSgkpdcVYEMEbN50hY4CMSSHn6uESbsxQjd6CbpyKKt10mPgufPQkRCQBmDRuO WTBNfk9qx8JpX6wGIlHdnpcbTCjGK+y6FrpEnssasUtZgPoBPcH55SU7vgOBb/9O EPSgXiSPe4HYUSMTq2lT/e5UyfgnihBiwrfFcqEoL0hYGDIDrIYAqThFhSK5BOtS C7jd/pyiOLW7o0ntyaqZ7wUtGrLA//ibibI0lL6mdmGRWzSzMb8yBSCjX7BvRKyq qpZOWNY6lbiHMhmXA4NOO6nrcJ8= -----END CERTIFICATE-----Generated at Wed Jun 4 02:04:48 2025 by rpki-client