$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft File: OpXd7iyMGeRxgIou20cqqm_g9Jg.mft (raw, json) Hash identifier: m7bP/ky7UyXZbENOX/PDZ2PZgVp8mnMrAsVamgmp7Hk= Subject key identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 Authority key identifier: 3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 Certificate issuer: /CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Certificate serial: 06AD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft Manifest number: 06AD Signing time: Tue 03 Jun 2025 20:38:32 +0000 Manifest this update: Tue 03 Jun 2025 20:38:32 +0000 Manifest next update: Wed 04 Jun 2025 02:38:32 +0000 Files and hashes: 1: OpXd7iyMGeRxgIou20cqqm_g9Jg.crl (hash: raPpSVWx3i+EFqXgAPZ9YJ8+69c4IGEOF7a152omYS4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 02:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Validity Not Before: Jun 3 20:38:32 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=024B9897BA27D76C6D9B8F9C57C997D19875C2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9a:fb:3f:3b:ce:94:d2:81:30:cb:cc:a5:ce: e3:ad:a8:f0:a2:da:6f:11:37:7a:4b:db:83:6e:5b: b2:87:05:0a:37:9b:0d:12:08:f1:cf:a6:99:d7:3d: 13:cc:9e:48:88:0b:43:5e:7c:0f:b3:d3:11:b3:65: ea:db:89:23:e3:79:1f:2a:05:2e:d3:d1:37:d9:30: 6d:1d:ab:a2:2b:fc:7b:93:72:42:42:e2:24:30:ee: 3d:4e:27:fe:90:f8:d1:1b:81:17:1a:56:5a:55:50: e8:ec:ff:93:aa:4a:2f:f0:ad:25:96:3e:83:9d:bd: 66:17:0b:5b:03:ee:92:f3:08:71:44:c1:b5:0b:59: 56:81:b4:e3:de:b6:a7:36:0a:8c:d3:97:2b:ef:aa: 72:5a:bb:d4:47:d3:ed:c1:e5:14:b6:b8:3d:3d:36: 46:06:63:a9:4a:0c:74:c2:25:f9:fd:90:a1:83:24: db:f9:69:2f:61:1d:dc:f7:c5:46:38:ff:96:98:97: 4f:3f:a4:00:f7:db:1d:57:95:b1:3b:90:29:36:7a: e2:bb:99:09:85:89:d2:ad:05:6a:78:a2:7f:5f:ea: 83:8d:cf:c3:46:9f:39:87:39:de:00:46:9f:12:a8: 4e:3a:7d:66:49:5e:98:ba:ef:1d:55:9c:6d:c5:cb: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 X509v3 Authority Key Identifier: keyid:3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:42:d4:87:65:3a:48:0a:cd:b9:a0:c9:3a:6f:f3:14:99:43: d7:8f:95:e0:dc:83:c7:d0:22:0a:62:b3:02:06:fd:15:0b:65: 02:2c:b2:35:6b:76:dd:c5:e3:82:02:df:b2:7d:e0:ef:71:da: ff:0d:85:8c:5d:21:7d:e3:73:f3:67:3f:be:00:47:7b:bb:a3: 77:4f:56:0b:94:61:4f:d6:7a:f5:ee:63:8f:1b:06:3c:a6:e2: 80:52:26:dd:a2:05:c6:97:50:df:30:5c:0c:03:f1:70:13:8d: 0a:c2:7e:15:d8:35:8e:ef:44:17:4a:5e:48:2b:0b:3f:35:12: c5:e0:17:ed:54:f6:58:58:8b:28:1b:c4:bc:db:6c:0f:8a:b3: d1:c5:fe:59:26:23:26:76:97:63:08:e6:1b:9a:8a:cf:e0:a5: 8c:38:39:78:43:ff:44:92:10:f3:e3:3d:32:18:1a:b8:72:c4: 93:77:45:5a:ce:e8:f5:dd:99:63:bb:ee:a6:7e:49:b1:9b:31: e7:94:ef:d0:d3:5c:9b:05:7f:6d:21:b6:d3:da:75:b2:2b:8a: c3:4b:93:81:be:a2:d3:12:88:3c:7a:48:1b:0b:98:31:74:6e: 80:f4:57:0c:4d:4d:5e:cd:9c:ba:58:22:01:06:ca:10:a8:b9: 60:c0:5d:86 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E5 NURERUUyQzhDMTlFNDcxODA4QTJFREI0NzJBQUE2RkUwRjQ5ODAeFw0yNTA2MDMy MDM4MzJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAyNEI5ODk3QkEyN0Q3 NkM2RDlCOEY5QzU3Qzk5N0QxOTg3NUMyRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpmvs/O86U0oEwy8ylzuOtqPCi2m8RN3pL24NuW7KHBQo3mw0S CPHPppnXPRPMnkiIC0NefA+z0xGzZerbiSPjeR8qBS7T0TfZMG0dq6Ir/HuTckJC 4iQw7j1OJ/6Q+NEbgRcaVlpVUOjs/5OqSi/wrSWWPoOdvWYXC1sD7pLzCHFEwbUL WVaBtOPetqc2CozTlyvvqnJau9RH0+3B5RS2uD09NkYGY6lKDHTCJfn9kKGDJNv5 aS9hHdz3xUY4/5aYl08/pAD32x1XlbE7kCk2euK7mQmFidKtBWp4on9f6oONz8NG nzmHOd4ARp8SqE46fWZJXpi67x1VnG3FyzHfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAkuYl7on12xtm4+cV8mX0Zh1wvAwHwYDVR0jBBgwFoAUOpXd7iyMGeRxgIou 20cqqm/g9JgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9PcFhkN2l5TUdlUnhnSW91MjBjcXFtX2c5SmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09wWGQ3aXlNR2VSeGdJb3UyMGNxcW1fZzlKZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvT3BYZDdpeU1HZVJ4 Z0lvdTIwY3FxbV9nOUpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKVC1IdlOkgKzbmgyTpv8xSZQ9ePleDcg8fQIgpiswIG/RULZQIssjVrdt3F 44IC37J94O9x2v8NhYxdIX3jc/NnP74AR3u7o3dPVguUYU/WevXuY48bBjym4oBS Jt2iBcaXUN8wXAwD8XATjQrCfhXYNY7vRBdKXkgrCz81EsXgF+1U9lhYiygbxLzb bA+Ks9HF/lkmIyZ2l2MI5huais/gpYw4OXhD/0SSEPPjPTIYGrhyxJN3RVrO6PXd mWO77qZ+SbGbMeeU79DTXJsFf20httPadbIrisNLk4G+otMSiDx6SBsLmDF0boD0 VwxNTV7NnLpYIgEGyhCouWDAXYY= -----END CERTIFICATE-----Generated at Wed Jun 4 00:55:26 2025 by rpki-client