$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft File: jBp_tNDRawix7CtJn6KrIwEhaB8.mft (raw, json) Hash identifier: e6zg7Ep0yuDlwbmi6DNWQPq6ekGWiP1F9j1RKbz7DXo= Subject key identifier: 4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F Authority key identifier: 8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F Certificate issuer: /CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F Certificate serial: 0146 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft Manifest number: 0146 Signing time: Thu 05 Jun 2025 16:40:28 +0000 Manifest this update: Thu 05 Jun 2025 16:40:28 +0000 Manifest next update: Thu 05 Jun 2025 22:40:28 +0000 Files and hashes: 1: jBp_tNDRawix7CtJn6KrIwEhaB8.crl (hash: qkdir6+MsRfiPVZ6Qk5/3DKF/WxGbSSv5S8ZIX3xMn8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 22:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F Validity Not Before: Jun 5 16:40:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4E93D5B4B60FDE24CD4D953117CB16205463E80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:0f:64:73:4b:fc:42:4f:a8:3c:99:e7:36: 45:72:c0:9f:a3:34:dd:df:d7:45:b4:ed:a9:8b:ed: 8e:89:d7:6f:37:c6:42:9c:bd:90:e2:03:ee:67:3d: 60:c8:e2:45:18:0a:97:a8:50:cf:d9:b0:ee:b7:20: 09:19:b5:4d:45:dd:18:df:b2:18:d4:07:8d:aa:18: db:ed:aa:37:a9:92:82:b7:2a:8e:15:b6:13:43:80: 2e:15:0f:df:39:f3:20:f1:cd:a7:de:a1:32:e0:54: d4:37:26:9f:e8:68:ca:3e:af:fe:34:16:4d:fe:9a: 07:14:57:6d:4a:d8:8a:73:11:51:0a:61:cb:a4:1e: b5:c9:66:6c:80:8f:5f:f4:44:bb:9e:bb:9c:54:80: 05:c1:a1:be:b4:e5:1b:ae:7c:2b:bf:57:ad:98:a4: 65:be:bc:0e:61:3d:44:1c:68:f5:d5:cb:17:d2:02: 1a:66:35:d1:19:b7:a5:76:e6:78:28:7d:a3:83:31: 52:79:a3:8c:69:7d:d3:83:2d:af:90:b3:67:ed:1b: 13:79:b8:63:19:9b:66:36:dd:46:54:5d:8b:43:e4: 0a:ad:ef:e4:46:47:f0:b3:91:6a:e3:b8:3b:40:96: 5f:50:bd:19:0c:4d:5c:40:a0:c2:7c:53:6f:97:23: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F X509v3 Authority Key Identifier: keyid:8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f1:b6:ce:28:9f:69:e2:1a:b4:c1:71:07:f9:43:12:e5:fb: 0d:ab:d9:b1:1f:ab:de:c2:0a:0d:97:46:a0:23:a1:d1:1c:74: 11:b1:d7:0f:65:c4:bf:a8:a9:ba:d8:57:bc:74:c0:3d:94:e3: c4:39:1a:14:24:cc:06:58:4c:26:2c:50:5c:7f:18:5d:06:d4: bb:f9:95:8d:c8:62:cd:6f:6e:ef:c1:22:ed:29:d8:b3:7f:8c: ee:3e:61:69:7c:18:fc:5b:58:77:a5:de:1d:76:4a:cf:b2:00: a8:7e:67:ad:37:8b:2d:42:18:fb:f3:a7:1b:11:65:13:f8:17: 10:7d:f5:48:d6:28:09:02:dd:cf:50:e5:25:c2:67:d5:39:15: c4:7c:e3:f2:bb:6f:73:a0:a9:ce:35:46:e7:35:a1:26:f0:64: 9a:b4:54:3b:e1:f6:e0:01:f3:7f:70:4b:fc:51:b1:9f:d2:f7: 14:aa:5a:71:57:d6:d1:76:4e:1e:39:d2:9d:a4:d0:d5:f0:f3: 01:11:0f:91:03:59:31:77:7c:ad:dd:46:96:2a:91:a9:3c:7a: b5:3d:c8:bc:7f:3b:de:02:e5:41:97:1e:ba:87:9e:4e:45:e2: 3e:50:2c:8c:84:22:16:80:72:84:dd:5f:5c:97:dd:04:64:0a: 6b:be:35:38 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx QTdGQjREMEQxNkIwOEIxRUMyQjQ5OUZBMkFCMjMwMTIxNjgxRjAeFw0yNTA2MDUx NjQwMjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRFOTNENUI0QjYwRkRF MjRDRDREOTUzMTE3Q0IxNjIwNTQ2M0U4MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ/g9kc0v8Qk+oPJnnNkVywJ+jNN3f10W07amL7Y6J1283xkKc vZDiA+5nPWDI4kUYCpeoUM/ZsO63IAkZtU1F3RjfshjUB42qGNvtqjepkoK3Ko4V thNDgC4VD9858yDxzafeoTLgVNQ3Jp/oaMo+r/40Fk3+mgcUV21K2IpzEVEKYcuk HrXJZmyAj1/0RLueu5xUgAXBob605RuufCu/V62YpGW+vA5hPUQcaPXVyxfSAhpm NdEZt6V25ngofaODMVJ5o4xpfdODLa+Qs2ftGxN5uGMZm2Y23UZUXYtD5Aqt7+RG R/CzkWrjuDtAll9QvRkMTVxAoMJ8U2+XI8inAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTpPVtLYP3iTNTZUxF8sWIFRj6A8wHwYDVR0jBBgwFoAUjBp/tNDRawix7CtJ n6KrIwEhaB8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 OC9qQnBfdE5EUmF3aXg3Q3RKbjZLckl3RWhhQjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pCcF90TkRSYXdpeDdDdEpuNktySXdFaGFCOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTgvakJwX3RORFJhd2l4 N0N0Sm42S3JJd0VoYUI4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIHxts4on2niGrTBcQf5QxLl+w2r2bEfq97CCg2XRqAjodEcdBGx1w9lxL+o qbrYV7x0wD2U48Q5GhQkzAZYTCYsUFx/GF0G1Lv5lY3IYs1vbu/BIu0p2LN/jO4+ YWl8GPxbWHel3h12Ss+yAKh+Z603iy1CGPvzpxsRZRP4FxB99UjWKAkC3c9Q5SXC Z9U5FcR84/K7b3Ogqc41Ruc1oSbwZJq0VDvh9uAB839wS/xRsZ/S9xSqWnFX1tF2 Th450p2k0NXw8wERD5EDWTF3fK3dRpYqkak8erU9yLx/O94C5UGXHrqHnk5F4j5Q LIyEIhaAcoTdX1yX3QRkCmu+NTg= -----END CERTIFICATE-----Generated at Thu Jun 5 20:38:28 2025 by rpki-client