$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft File: TKnrtNTELADG1a1ccPtrRXZYMXc.mft (raw, json) Hash identifier: gJLKZXljzx+L4YM3D0/83ugeUI/GmX4RbK0ISguaY+0= Subject key identifier: AD:D2:3B:B7:E0:3D:1C:25:2C:A7:A0:ED:D2:87:53:CB:C1:7D:86:62 Authority key identifier: 4C:A9:EB:B4:D4:C4:2C:00:C6:D5:AD:5C:70:FB:6B:45:76:58:31:77 Certificate issuer: /CN=4CA9EBB4D4C42C00C6D5AD5C70FB6B4576583177 Certificate serial: 47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKnrtNTELADG1a1ccPtrRXZYMXc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft Manifest number: 47 Signing time: Tue 03 Jun 2025 22:40:05 +0000 Manifest this update: Tue 03 Jun 2025 22:40:05 +0000 Manifest next update: Wed 04 Jun 2025 04:40:05 +0000 Files and hashes: 1: TKnrtNTELADG1a1ccPtrRXZYMXc.crl (hash: lGd0hOpqiXnUu5uBJjM1sjvgVHjR0VT1MVAlaXRpwWk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKnrtNTELADG1a1ccPtrRXZYMXc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA9EBB4D4C42C00C6D5AD5C70FB6B4576583177 Validity Not Before: Jun 3 22:40:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=ADD23BB7E03D1C252CA7A0EDD28753CBC17D8662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:7c:2a:59:0b:f4:f7:2c:ae:6f:07:1c:0a: ec:1a:4f:06:d5:0b:eb:2f:f0:a3:4d:9c:9e:a9:d4: ba:04:ba:01:35:0d:73:ff:81:12:ad:6d:0e:a8:0e: 73:2e:15:25:a1:54:eb:18:25:de:b1:25:6c:de:be: b0:b3:7c:7d:b4:46:d3:04:f9:6a:b0:6e:b7:3d:87: a6:6c:e7:49:d4:59:5a:77:f5:4b:96:8a:3e:31:da: 1a:15:dc:be:14:a6:74:74:a6:a0:83:0d:f4:a3:1b: db:2f:eb:55:c5:0f:84:b6:bf:de:96:a8:4d:c4:46: ca:35:3b:18:89:b4:9f:74:3b:23:20:fa:9c:61:0f: a4:58:5b:61:57:4d:88:ba:59:5e:b2:18:ad:96:eb: 10:15:b7:2b:a5:6a:3d:21:e2:70:19:ea:58:29:db: 00:fd:a1:4e:cc:27:5a:05:a9:91:38:ec:d7:f7:41: a2:f9:df:c0:d7:b4:dc:50:1a:b5:fb:cd:9c:a3:e9: c0:a3:89:17:dc:ff:1e:cd:f3:c6:a7:9d:0f:f5:c9: 66:fc:a9:99:b5:5a:88:26:7f:2e:b0:43:a1:0e:84: 80:a4:68:c2:b5:42:07:ca:14:b8:ee:49:b3:48:22: 36:59:b9:ae:40:25:6a:1f:44:34:91:af:30:68:64: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D2:3B:B7:E0:3D:1C:25:2C:A7:A0:ED:D2:87:53:CB:C1:7D:86:62 X509v3 Authority Key Identifier: keyid:4C:A9:EB:B4:D4:C4:2C:00:C6:D5:AD:5C:70:FB:6B:45:76:58:31:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKnrtNTELADG1a1ccPtrRXZYMXc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0e:9d:72:16:2d:52:e0:53:2a:97:e2:74:90:1d:d9:c3:0e: 1a:18:e0:f1:07:24:83:2c:7e:0b:1e:49:75:ad:35:49:2b:27: 4a:8b:fa:2c:86:05:a2:a1:2e:1c:fb:cf:d5:5e:4a:b6:97:2f: c9:70:b6:16:69:9a:96:20:f4:d8:1f:13:0e:0d:02:af:a3:cb: 9d:16:b1:27:b5:27:73:4e:84:6f:0d:7e:a1:5f:d7:25:d0:d0: 79:4f:e8:9d:b2:98:ab:c1:5d:ea:4a:3f:0f:6e:a6:98:01:5b: 72:d4:5d:e5:a2:18:84:26:6a:df:b8:86:7a:c3:6c:ef:76:f0: c9:21:e2:17:bb:af:b1:0c:30:6c:ac:d1:4f:45:81:40:25:7d: 6d:c9:ed:5a:79:13:06:13:b1:f5:ad:de:c5:c7:9c:41:39:c0: 32:95:a3:6a:f3:d9:29:2c:b5:2b:84:0e:ea:2f:29:42:af:41: a6:f4:01:66:99:76:71:f8:a6:4e:03:06:1e:aa:b0:23:0b:23: 10:62:67:90:96:33:9b:ae:ad:12:a4:b7:55:18:53:d8:f0:54: a6:4e:bd:9c:11:d4:02:bc:35:c6:55:23:9a:65:ee:66:32:90: 14:e2:1f:d3:2b:22:ae:19:62:87:72:ce:0b:f2:43:a4:93:d3: 62:38:13:b2 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Q0E5 RUJCNEQ0QzQyQzAwQzZENUFENUM3MEZCNkI0NTc2NTgzMTc3MB4XDTI1MDYwMzIy NDAwNVoXDTI2MDQwMzA4MDAwOVowMzExMC8GA1UEAxMoQUREMjNCQjdFMDNEMUMy NTJDQTdBMEVERDI4NzUzQ0JDMTdEODY2MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMk8fCpZC/T3LK5vBxwK7BpPBtUL6y/wo02cnqnUugS6ATUNc/+B Eq1tDqgOcy4VJaFU6xgl3rElbN6+sLN8fbRG0wT5arButz2HpmznSdRZWnf1S5aK PjHaGhXcvhSmdHSmoIMN9KMb2y/rVcUPhLa/3paoTcRGyjU7GIm0n3Q7IyD6nGEP pFhbYVdNiLpZXrIYrZbrEBW3K6VqPSHicBnqWCnbAP2hTswnWgWpkTjs1/dBovnf wNe03FAatfvNnKPpwKOJF9z/Hs3zxqedD/XJZvypmbVaiCZ/LrBDoQ6EgKRowrVC B8oUuO5Js0giNlm5rkAlah9ENJGvMGhkrtMCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSt0ju34D0cJSynoO3Sh1PLwX2GYjAfBgNVHSMEGDAWgBRMqeu01MQsAMbVrVxw +2tFdlgxdzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMjgy L1RLbnJ0TlRFTEFERzFhMWNjUHRyUlhaWU1YYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVEtucnROVEVMQURHMWExY2NQdHJSWFpZTVhjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4Mi9US25ydE5URUxBREcx YTFjY1B0clJYWllNWGMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADQ6dchYtUuBTKpfidJAd2cMOGhjg8Qckgyx+Cx5Jda01SSsnSov6LIYFoqEu HPvP1V5KtpcvyXC2FmmaliD02B8TDg0Cr6PLnRaxJ7Unc06Ebw1+oV/XJdDQeU/o nbKYq8Fd6ko/D26mmAFbctRd5aIYhCZq37iGesNs73bwySHiF7uvsQwwbKzRT0WB QCV9bcntWnkTBhOx9a3excecQTnAMpWjavPZKSy1K4QO6i8pQq9BpvQBZpl2cfim TgMGHqqwIwsjEGJnkJYzm66tEqS3VRhT2PBUpk69nBHUArw1xlUjmmXuZjKQFOIf 0ysirhlih3LOC/JDpJPTYjgTsg== -----END CERTIFICATE-----Generated at Wed Jun 4 00:40:54 2025 by rpki-client