$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft File: DPxgVxKdypoWDypZIndlqeZ0lLs.mft (raw, json) Hash identifier: 2fHwm3UDY7D5tUFn5kfMte1j50ISAkTR9iTWnZG/NRA= Subject key identifier: 0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96 Authority key identifier: 0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB Certificate issuer: /CN=0CFC6057129DCA9A160F2A59227765A9E67494BB Certificate serial: 0519 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft Manifest number: 0519 Signing time: Fri 04 Apr 2025 17:06:37 +0000 Manifest this update: Fri 04 Apr 2025 17:06:37 +0000 Manifest next update: Fri 04 Apr 2025 23:06:37 +0000 Files and hashes: 1: DPxgVxKdypoWDypZIndlqeZ0lLs.crl (hash: 2aYOaIbALGTw4L3nAjnXRhjvWTb9RzYal+9buaSlAac=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CFC6057129DCA9A160F2A59227765A9E67494BB Validity Not Before: Apr 4 17:06:37 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0A119F57ACC03770F86C2A86F0217E60FDC14A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:1e:6b:8d:42:0c:34:04:f0:b7:a9:65:fc: 8d:7b:cf:4a:42:07:b3:5e:79:c5:a2:e5:77:99:f0: 18:22:f5:e0:40:8e:0e:d0:4b:21:f5:5d:d4:be:8d: 35:69:f2:59:18:69:fb:16:2f:11:47:30:4b:12:8f: 6c:15:4c:8a:dd:9c:38:96:d2:f0:b9:5c:73:2f:63: e0:90:89:d0:72:bf:15:60:ea:9d:59:7e:b9:04:d8: c2:99:f1:ba:c1:1c:c4:b9:64:b6:d1:c5:8c:df:ad: 88:2c:3e:e2:b6:07:94:5d:f6:fa:30:21:82:60:4c: f0:5d:4e:8b:7f:99:77:77:d7:2a:fb:1b:5f:7d:a9: 27:ab:9b:67:b8:c5:ce:cc:f2:84:5f:9d:cc:63:7a: b4:20:b0:d2:03:2c:de:1b:b9:2e:1e:08:4e:ec:2e: 77:dd:2e:74:33:21:78:39:ef:54:1b:89:9b:e0:2e: 1a:eb:63:0d:b0:e2:c1:8b:4e:10:a8:70:a3:d6:cd: 02:5a:8b:f0:af:4d:ef:e9:1f:4f:f2:a0:34:23:6d: 60:d5:1d:fd:8e:a5:c0:e2:45:9f:df:58:dc:68:96: c4:b7:ed:cb:b4:7f:61:b7:ad:e4:3b:ee:9e:f5:08: fb:44:26:8f:28:8d:9d:d4:4b:0b:14:d1:24:cf:fc: b4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96 X509v3 Authority Key Identifier: keyid:0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:6a:4c:32:c6:70:ae:a8:9b:60:b8:51:74:ed:f4:a6:77:0f: 62:8b:95:e4:c8:a0:8e:da:bb:d7:56:e6:5d:81:d0:40:3b:ef: 33:2c:23:69:56:b5:fb:ce:90:31:b9:bb:60:0c:62:0f:0f:e1: 23:00:fd:9e:26:d0:88:a4:6d:03:78:cd:9c:cf:52:d5:a5:57: e5:d8:a6:53:af:71:dd:80:79:bc:cf:2e:d8:47:1d:96:aa:b8: 15:58:71:37:96:e2:b2:e7:1f:19:82:7b:fb:6c:45:b9:2d:60: 6e:fa:b5:63:66:1a:7f:83:1e:b2:29:f0:10:4e:25:d7:bd:6d: 32:6c:76:be:22:30:f1:05:90:6a:f6:81:f3:38:ee:03:f6:d3: ad:60:cd:d5:89:c8:da:ab:f0:93:25:74:56:09:35:03:07:93: b6:31:17:4f:2e:dd:eb:76:3f:fa:69:a1:6f:d1:00:63:17:32: 73:b9:6a:a6:a9:37:35:9d:66:9c:fc:72:58:88:0c:b2:00:f8: d8:c7:7e:94:7e:d0:e0:94:58:d0:29:e1:c2:c1:ec:10:78:76: 43:af:96:82:68:40:1f:4c:8b:e6:7f:ae:9c:7f:bd:c8:5f:a2: b5:56:8f:a7:ea:13:46:b2:30:b1:18:9c:d7:5a:e9:b2:b0:53: 60:d9:b0:bf -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENG QzYwNTcxMjlEQ0E5QTE2MEYyQTU5MjI3NzY1QTlFNjc0OTRCQjAeFw0yNTA0MDQx NzA2MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBBMTE5RjU3QUNDMDM3 NzBGODZDMkE4NkYwMjE3RTYwRkRDMTRBOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8IB5rjUIMNATwt6ll/I17z0pCB7NeecWi5XeZ8Bgi9eBAjg7Q SyH1XdS+jTVp8lkYafsWLxFHMEsSj2wVTIrdnDiW0vC5XHMvY+CQidByvxVg6p1Z frkE2MKZ8brBHMS5ZLbRxYzfrYgsPuK2B5Rd9vowIYJgTPBdTot/mXd31yr7G199 qSerm2e4xc7M8oRfncxjerQgsNIDLN4buS4eCE7sLnfdLnQzIXg571QbiZvgLhrr Yw2w4sGLThCocKPWzQJai/CvTe/pH0/yoDQjbWDVHf2OpcDiRZ/fWNxolsS37cu0 f2G3reQ77p71CPtEJo8ojZ3USwsU0STP/LTnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUChGfV6zAN3D4bCqG8CF+YP3BSpYwHwYDVR0jBBgwFoAUDPxgVxKdypoWDypZ IndlqeZ0lLswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw NS9EUHhnVnhLZHlwb1dEeXBaSW5kbHFlWjBsTHMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RQeGdWeEtkeXBvV0R5cFpJbmRscWVaMGxMcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDUvRFB4Z1Z4S2R5cG9X RHlwWkluZGxxZVowbExzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIRqTDLGcK6om2C4UXTt9KZ3D2KLleTIoI7au9dW5l2B0EA77zMsI2lWtfvO kDG5u2AMYg8P4SMA/Z4m0IikbQN4zZzPUtWlV+XYplOvcd2AebzPLthHHZaquBVY cTeW4rLnHxmCe/tsRbktYG76tWNmGn+DHrIp8BBOJde9bTJsdr4iMPEFkGr2gfM4 7gP2061gzdWJyNqr8JMldFYJNQMHk7YxF08u3et2P/ppoW/RAGMXMnO5aqapNzWd Zpz8cliIDLIA+NjHfpR+0OCUWNAp4cLB7BB4dkOvloJoQB9Mi+Z/rpx/vchforVW j6fqE0ayMLEYnNda6bKwU2DZsL8= -----END CERTIFICATE-----Generated at Fri Apr 4 18:42:53 2025 by rpki-client