$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft File: xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft (raw, json) Hash identifier: UbyprkYRi+egWlCK684jyx6CuVD5UAwt36rhizERjuU= Subject key identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF Authority key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 Certificate issuer: /CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Certificate serial: 0333 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft Manifest number: 0333 Signing time: Fri 06 Jun 2025 12:14:11 +0000 Manifest this update: Fri 06 Jun 2025 12:14:11 +0000 Manifest next update: Fri 06 Jun 2025 18:14:11 +0000 Files and hashes: 1: xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl (hash: x7zOxbb3zUk63ykz+0iFwmmj9ZMOxZzGNix+g0z/TWE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Validity Not Before: Jun 6 12:14:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C8C318B9C83E4804C50DAC66D69EC0CF7B53E4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f9:65:02:d1:b2:6d:23:c0:76:39:83:3f:83: 20:cc:91:bf:45:aa:34:65:56:39:d5:f4:e4:42:d4: 66:59:3d:fc:17:45:43:b0:8b:97:34:e8:99:1c:71: 86:d5:e3:5e:39:92:60:63:d0:1a:37:46:a9:64:59: a9:d3:b9:f2:fb:31:42:5c:c5:e2:87:e5:1f:e3:81: 43:50:07:35:36:30:88:57:d6:31:d6:dc:7d:c3:f0: d9:57:e0:23:be:22:7d:1d:9f:e6:87:2c:a8:f8:50: 78:f6:e1:95:5c:82:65:1a:10:65:a8:29:49:a3:d1: 2b:a2:1a:38:0d:cb:36:18:3d:a9:9e:83:16:d5:45: d6:7c:de:9d:e7:d8:8b:a2:76:10:4f:c5:cd:38:68: 4a:b0:82:46:f7:5b:7e:d7:7b:ea:f1:69:5d:82:9f: c3:72:19:2f:93:c3:e7:c8:72:08:db:0b:2a:7e:07: 60:11:e2:d8:c7:02:10:91:e8:94:3f:f5:06:d9:4d: cb:fc:e9:9d:44:0a:05:c8:da:cd:ba:68:87:10:88: 31:41:3c:24:72:4a:00:18:bd:5a:55:94:79:ce:f3: ea:c5:f3:04:39:f2:53:ff:65:36:c6:5e:b2:68:b2: fd:02:f6:4a:d4:6d:41:23:88:15:5a:58:c3:1e:f8: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C3:18:B9:C8:3E:48:04:C5:0D:AC:66:D6:9E:C0:CF:7B:53:E4:AF X509v3 Authority Key Identifier: keyid:C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:64:e5:44:40:13:1d:e6:a3:b8:0e:cd:3b:00:75:f4:a9:17: 08:44:db:43:3e:70:98:ae:49:63:a8:b2:8a:a3:e9:4a:ef:3e: 86:08:70:1f:ed:e8:46:e4:45:4f:55:7b:79:7e:af:9c:4d:a1: 2e:a0:b8:8b:ce:4a:5d:b3:e5:da:34:c8:b1:d6:91:cc:6c:b0: 05:a8:20:6c:c6:6d:2e:32:3a:cd:39:13:30:5f:15:78:0d:c6: 22:e7:4c:e3:12:d7:cc:02:ff:dd:75:9e:50:85:5f:46:68:24: d7:0d:d1:9e:75:a1:c8:66:fe:51:a5:1c:69:bb:82:a4:67:ad: 66:70:bb:76:f3:33:00:13:fc:94:93:be:e3:69:52:cf:48:f3: 11:da:41:9f:ec:f5:9a:a9:e2:9b:4c:50:5b:58:fd:5f:cf:a4: 07:8d:69:a7:ac:07:59:80:79:38:f3:2b:a0:52:53:0f:4a:64: a0:f6:fc:70:5e:2a:eb:b5:86:18:50:ed:6e:be:88:d2:9a:4d: 34:8a:5d:d8:b0:8e:7a:9a:0d:5a:25:6b:a0:b9:11:08:03:f1: 2a:a3:5d:c5:e4:69:7d:a0:ea:11:c4:4c:2e:e2:fe:1d:2b:87: 61:c7:0b:28:06:92:aa:f5:24:f5:be:05:e9:ca:1d:e2:b1:be: 54:78:1a:2c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzUz QUY0MDQzRkM0RDJCMDA4NTg4MjIyOUFCMjc1MDRCNkE4MjIzODAeFw0yNTA2MDYx MjE0MTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM4QzMxOEI5QzgzRTQ4 MDRDNTBEQUM2NkQ2OUVDMENGN0I1M0U0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp+WUC0bJtI8B2OYM/gyDMkb9FqjRlVjnV9ORC1GZZPfwXRUOw i5c06JkccYbV4145kmBj0Bo3RqlkWanTufL7MUJcxeKH5R/jgUNQBzU2MIhX1jHW 3H3D8NlX4CO+In0dn+aHLKj4UHj24ZVcgmUaEGWoKUmj0SuiGjgNyzYYPamegxbV RdZ83p3n2IuidhBPxc04aEqwgkb3W37Xe+rxaV2Cn8NyGS+Tw+fIcgjbCyp+B2AR 4tjHAhCR6JQ/9QbZTcv86Z1ECgXI2s26aIcQiDFBPCRySgAYvVpVlHnO8+rF8wQ5 8lP/ZTbGXrJosv0C9krUbUEjiBVaWMMe+PKpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyMMYucg+SATFDaxm1p7Az3tT5K8wHwYDVR0jBBgwFoAUxTr0BD/E0rAIWIIi mrJ1BLaoIjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 MS94VHIwQkRfRTByQUlXSUlpbXJKMUJMYW9JamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hUcjBCRF9FMHJBSVdJSWltckoxQkxhb0lqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDEveFRyMEJEX0UwckFJ V0lJaW1ySjFCTGFvSWpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH9k5URAEx3mo7gOzTsAdfSpFwhE20M+cJiuSWOosoqj6UrvPoYIcB/t6Ebk RU9Ve3l+r5xNoS6guIvOSl2z5do0yLHWkcxssAWoIGzGbS4yOs05EzBfFXgNxiLn TOMS18wC/911nlCFX0ZoJNcN0Z51ochm/lGlHGm7gqRnrWZwu3bzMwAT/JSTvuNp Us9I8xHaQZ/s9Zqp4ptMUFtY/V/PpAeNaaesB1mAeTjzK6BSUw9KZKD2/HBeKuu1 hhhQ7W6+iNKaTTSKXdiwjnqaDVola6C5EQgD8SqjXcXkaX2g6hHETC7i/h0rh2HH CygGkqr1JPW+BenKHeKxvlR4Giw= -----END CERTIFICATE-----Generated at Fri Jun 6 17:35:00 2025 by rpki-client