$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft File: xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft (raw, json) Hash identifier: EyWPKM9reGF8qXmu3PIAX5vDVwI5qsJnmivQa8Sh3uQ= Subject key identifier: 9F:9F:D7:7C:42:8A:22:10:D4:59:6D:86:9B:62:A5:3F:EA:4E:5B:36 Authority key identifier: C6:72:8F:33:8C:FF:81:21:5A:8A:84:51:30:FF:53:8C:51:78:C7:46 Certificate issuer: /CN=C6728F338CFF81215A8A845130FF538C5178C746 Certificate serial: 01ED Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xnKPM4z_gSFaioRRMP9TjFF4x0Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft Manifest number: 01ED Signing time: Tue 15 Apr 2025 23:05:46 +0000 Manifest this update: Tue 15 Apr 2025 23:05:46 +0000 Manifest next update: Wed 16 Apr 2025 05:05:46 +0000 Files and hashes: 1: xnKPM4z_gSFaioRRMP9TjFF4x0Y.crl (hash: HnFeYtUFNkzSvA7Igb4rTKWgMTpZdWKtXtPNkiqgvoc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xnKPM4z_gSFaioRRMP9TjFF4x0Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6728F338CFF81215A8A845130FF538C5178C746 Validity Not Before: Apr 15 23:05:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=9F9FD77C428A2210D4596D869B62A53FEA4E5B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:db:33:d6:35:7f:68:1e:7f:57:9d:12:42: 4e:97:69:b3:31:72:51:da:99:ca:52:f1:c6:ef:5f: 39:2c:28:a8:d3:45:36:29:d3:b4:c7:eb:3c:e5:b5: af:72:59:8c:0f:9c:05:d4:3c:2f:6f:d4:03:85:67: 5b:fc:a6:54:2c:c1:a1:35:7f:aa:8c:4d:79:da:f3: cc:13:e9:78:bb:47:66:1c:ca:29:74:d1:e6:cc:6e: 29:94:c1:d9:ec:6f:b5:15:98:83:00:5c:24:0d:c8: 21:22:cf:e0:ae:16:6e:77:be:88:f2:48:49:f1:e1: ba:b8:ef:e0:db:8d:5e:a7:7d:a4:5a:22:12:95:c4: 47:8a:6b:83:cc:4c:03:33:8a:48:4c:1b:ab:e5:aa: 21:17:d3:28:33:c9:0a:eb:00:4f:82:0a:8b:e2:6c: a6:7c:61:95:3b:ef:01:07:41:01:bf:12:1d:f9:b6: 33:3f:6e:88:0b:4d:d2:91:74:38:a8:27:b7:f4:f4: 2d:8f:0a:eb:70:67:81:f0:d7:5a:75:e1:d6:66:c2: f3:84:9e:04:6b:dd:5a:a1:2b:9b:0e:6f:62:1e:15: cd:93:a0:d5:34:99:35:fa:0f:28:62:ac:46:4e:48: 56:3c:db:07:d0:6b:01:64:65:41:07:2e:7a:d5:8c: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:D7:7C:42:8A:22:10:D4:59:6D:86:9B:62:A5:3F:EA:4E:5B:36 X509v3 Authority Key Identifier: keyid:C6:72:8F:33:8C:FF:81:21:5A:8A:84:51:30:FF:53:8C:51:78:C7:46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xnKPM4z_gSFaioRRMP9TjFF4x0Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b6:93:e9:a5:a4:22:0c:e4:bd:16:d5:d6:c7:6a:76:26:9a: 81:aa:a0:c9:a9:84:47:48:54:2f:54:fe:28:7a:dc:d9:e2:33: 77:e0:6c:53:ec:21:8d:38:fe:8e:bf:30:80:06:72:d5:43:02: d4:87:e4:63:65:ce:d4:ff:0d:51:66:c2:4f:27:41:57:b8:e9: f2:5d:a8:af:86:9e:ed:51:43:30:b1:a7:e7:e5:1a:22:01:dd: df:3e:4d:c7:a3:a3:e0:23:ca:59:4f:b0:c1:fc:bb:32:b1:50: e4:fa:ab:c3:62:3f:66:ba:83:a6:7b:93:65:95:eb:26:c1:c6: 01:fe:cd:10:cb:8a:7f:2f:c2:13:72:59:71:51:df:d2:0f:1e: 1a:6c:2c:cf:c7:2e:20:12:69:34:d8:12:c1:46:66:37:bf:b7: 37:46:30:cf:a2:95:32:32:3c:a3:ec:3e:e4:73:16:5b:1c:83: 7c:c8:39:08:5e:43:74:85:eb:25:16:d3:7e:50:02:26:ce:fe: 7e:6d:3a:a9:ee:2c:e3:d9:03:f8:70:c4:65:61:cc:4d:58:29: ec:a0:41:0e:57:0f:87:84:d7:b3:5c:bb:0a:07:17:9a:9c:53: b7:74:68:72:b5:4b:d5:d9:28:c9:82:22:72:53:6f:95:81:ea: 7c:63:52:ec -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY3 MjhGMzM4Q0ZGODEyMTVBOEE4NDUxMzBGRjUzOEM1MTc4Qzc0NjAeFw0yNTA0MTUy MzA1NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlGOUZENzdDNDI4QTIy MTBENDU5NkQ4NjlCNjJBNTNGRUE0RTVCMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsm9sz1jV/aB5/V50SQk6XabMxclHamcpS8cbvXzksKKjTRTYp 07TH6zzlta9yWYwPnAXUPC9v1AOFZ1v8plQswaE1f6qMTXna88wT6Xi7R2Ycyil0 0ebMbimUwdnsb7UVmIMAXCQNyCEiz+CuFm53vojySEnx4bq47+DbjV6nfaRaIhKV xEeKa4PMTAMzikhMG6vlqiEX0ygzyQrrAE+CCovibKZ8YZU77wEHQQG/Eh35tjM/ bogLTdKRdDioJ7f09C2PCutwZ4Hw11p14dZmwvOEngRr3VqhK5sOb2IeFc2ToNU0 mTX6DyhirEZOSFY82wfQawFkZUEHLnrVjAS9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUn5/XfEKKIhDUWW2Gm2KlP+pOWzYwHwYDVR0jBBgwFoAUxnKPM4z/gSFaioRR MP9TjFF4x0YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 OS94bktQTTR6X2dTRmFpb1JSTVA5VGpGRjR4MFkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3huS1BNNHpfZ1NGYWlvUlJNUDlUakZGNHgwWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDkveG5LUE00el9nU0Zh aW9SUk1QOVRqRkY0eDBZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACq2k+mlpCIM5L0W1dbHanYmmoGqoMmphEdIVC9U/ih63NniM3fgbFPsIY04 /o6/MIAGctVDAtSH5GNlztT/DVFmwk8nQVe46fJdqK+Gnu1RQzCxp+flGiIB3d8+ Tcejo+AjyllPsMH8uzKxUOT6q8NiP2a6g6Z7k2WV6ybBxgH+zRDLin8vwhNyWXFR 39IPHhpsLM/HLiASaTTYEsFGZje/tzdGMM+ilTIyPKPsPuRzFlscg3zIOQheQ3SF 6yUW035QAibO/n5tOqnuLOPZA/hwxGVhzE1YKeygQQ5XD4eE17NcuwoHF5qcU7d0 aHK1S9XZKMmCInJTb5WB6nxjUuw= -----END CERTIFICATE-----Generated at Wed Apr 16 04:17:58 2025 by rpki-client