$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft File: 89605Z7lMyYp7F4LaGZtNuKXN2s.mft (raw, json) Hash identifier: OIvOUEoRv4QB6EK3YguBiyIxqhjfKU3uhycP0J4C47A= Subject key identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 Authority key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B Certificate issuer: /CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Certificate serial: 049A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft Manifest number: 049A Signing time: Tue 03 Jun 2025 21:14:21 +0000 Manifest this update: Tue 03 Jun 2025 21:14:21 +0000 Manifest next update: Wed 04 Jun 2025 03:14:21 +0000 Files and hashes: 1: 89605Z7lMyYp7F4LaGZtNuKXN2s.crl (hash: EPyLkR8K/5W3k716O00x2ddjN/IB0Y5QlNG9I5L1EQI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Validity Not Before: Jun 3 21:14:21 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=52797665E566FA8A9E8ACF2100B20A2E63FDF8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:22:b1:13:d3:08:92:e7:1f:ab:59:2f:b3: a1:ea:34:eb:d1:89:c7:1a:14:19:ec:00:38:d6:36: 20:7b:1c:77:cf:d1:60:76:50:d9:4e:84:9d:1c:c2: be:ca:bf:9a:fe:a3:af:dc:26:2f:87:5a:4c:2f:23: 1a:95:b3:31:ce:5c:69:04:ba:33:d5:cf:1a:82:e0: f2:44:9c:fc:6d:7e:a8:9c:46:1f:69:b6:3b:a0:0c: 15:9e:82:1c:71:23:fb:0c:7e:e4:95:12:bf:c0:11: 3b:56:e2:0d:f2:71:72:b0:b5:cb:4c:0c:bf:7c:42: 80:92:a8:63:cb:c0:9a:e1:62:85:35:3d:03:56:b5: ef:74:cf:d6:e3:bc:30:be:e2:f0:57:a0:49:55:74: 0a:5c:4a:d7:1c:c8:4c:24:ed:51:a6:36:1c:0c:db: a1:7c:9f:d0:d5:54:e7:26:70:b1:63:f6:4f:a9:ca: 70:0a:bb:d9:f8:d2:ee:f7:94:4c:c9:05:f1:03:34: 2a:4e:37:8e:ea:08:58:da:3d:2d:42:10:3c:5b:26: f0:2f:5c:06:cc:ca:d8:7b:4b:09:f8:5f:c7:25:fd: 5f:8a:38:50:bc:b6:c3:ff:3a:76:f6:dc:c0:41:76: b6:dc:68:54:1d:1c:46:17:ac:eb:3c:26:e7:c3:5c: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1 X509v3 Authority Key Identifier: keyid:F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:d2:e9:0c:74:64:79:35:ce:4d:2c:26:05:b1:dc:c8:e8:8e: 64:5b:5f:b1:50:ea:6e:8b:a5:de:d4:9b:2c:c0:8d:fd:59:04: da:b6:20:54:35:fb:b4:8f:53:15:f0:5f:c7:58:19:b8:ff:c7: 50:88:9a:a2:5f:a7:84:01:46:7a:11:5e:c8:0c:91:76:8c:09: 9e:08:71:86:06:99:04:c6:5c:a9:b7:51:dd:90:05:f8:cc:ea: c9:1c:7f:17:4b:af:4d:6f:66:55:0c:32:72:5a:86:d1:20:cb: c4:01:4a:46:c9:0c:f6:02:0d:fd:3d:87:be:3d:22:06:7b:18: 8a:00:c6:b3:c7:90:42:ee:28:d3:6d:1f:fe:f1:8d:d6:44:50: 9b:c1:8c:26:b9:44:67:37:38:40:f0:67:6a:74:f1:c1:1f:27: 3f:b9:a0:3c:21:52:21:20:63:6e:76:19:9e:a0:9d:5b:5d:a5: 2f:70:0b:f9:fb:24:d3:87:64:03:cd:b7:dc:01:53:e5:f9:d5: d7:11:1c:11:29:66:6a:a4:41:b9:5a:2a:b7:09:9b:bf:74:f5: d2:92:2a:c7:22:f9:80:c4:a0:3c:70:74:cc:d2:d7:e2:35:e6: 31:83:61:5c:99:c9:71:32:a0:3c:7c:78:a1:75:5b:77:6f:55: b7:c8:20:7b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjNE RUI0RTU5RUU1MzMyNjI5RUM1RTBCNjg2NjZEMzZFMjk3Mzc2QjAeFw0yNTA2MDMy MTE0MjFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUyNzk3NjY1RTU2NkZB OEE5RThBQ0YyMTAwQjIwQTJFNjNGREY4QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpJiKxE9MIkucfq1kvs6HqNOvRiccaFBnsADjWNiB7HHfP0WB2 UNlOhJ0cwr7Kv5r+o6/cJi+HWkwvIxqVszHOXGkEujPVzxqC4PJEnPxtfqicRh9p tjugDBWeghxxI/sMfuSVEr/AETtW4g3ycXKwtctMDL98QoCSqGPLwJrhYoU1PQNW te90z9bjvDC+4vBXoElVdApcStccyEwk7VGmNhwM26F8n9DVVOcmcLFj9k+pynAK u9n40u73lEzJBfEDNCpON47qCFjaPS1CEDxbJvAvXAbMyth7Swn4X8cl/V+KOFC8 tsP/Onb23MBBdrbcaFQdHEYXrOs8JufDXGmRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUnl2ZeVm+oqeis8hALIKLmP9+LEwHwYDVR0jBBgwFoAU89605Z7lMyYp7F4L aGZtNuKXN2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OS84OTYwNVo3bE15WXA3RjRMYUdadE51S1hOMnMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzg5NjA1WjdsTXlZcDdGNExhR1p0TnVLWE4ycy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTkvODk2MDVaN2xNeVlw N0Y0TGFHWnROdUtYTjJzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALvS6Qx0ZHk1zk0sJgWx3MjojmRbX7FQ6m6Lpd7UmyzAjf1ZBNq2IFQ1+7SP UxXwX8dYGbj/x1CImqJfp4QBRnoRXsgMkXaMCZ4IcYYGmQTGXKm3Ud2QBfjM6skc fxdLr01vZlUMMnJahtEgy8QBSkbJDPYCDf09h749IgZ7GIoAxrPHkELuKNNtH/7x jdZEUJvBjCa5RGc3OEDwZ2p08cEfJz+5oDwhUiEgY252GZ6gnVtdpS9wC/n7JNOH ZAPNt9wBU+X51dcRHBEpZmqkQblaKrcJm7909dKSKsci+YDEoDxwdMzS1+I15jGD YVyZyXEyoDx8eKF1W3dvVbfIIHs= -----END CERTIFICATE-----Generated at Wed Jun 4 01:29:26 2025 by rpki-client