$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft File: CZkX2MUTgArhbVggcgZ8KTd8Jik.mft (raw, json) Hash identifier: XI21oiR841X0B0punJqmgKwHblAQ9bOFjtzUrOmn1gM= Subject key identifier: A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6 Authority key identifier: 09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29 Certificate issuer: /CN=099917D8C513800AE16D582072067C29377C2629 Certificate serial: 0113 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft Manifest number: 0113 Signing time: Tue 03 Jun 2025 22:08:46 +0000 Manifest this update: Tue 03 Jun 2025 22:08:46 +0000 Manifest next update: Wed 04 Jun 2025 04:08:46 +0000 Files and hashes: 1: CZkX2MUTgArhbVggcgZ8KTd8Jik.crl (hash: RvzvkEO671y0tuOp/5w3k4XVmA/3fYFrcYyWNCoMuTM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099917D8C513800AE16D582072067C29377C2629 Validity Not Before: Jun 3 22:08:46 2025 GMT Not After : Apr 10 01:10:05 2026 GMT Subject: CN=A3FF29CFD23BB00C4218F91914122C83CB18F8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:5e:98:92:b3:79:0e:37:55:5d:95:bf:18: 53:30:b8:fb:e5:ce:b8:5b:8f:83:37:66:a1:2e:84: 4b:23:1f:6a:f1:52:80:f7:a3:08:f1:8c:d3:75:94: 4c:18:f8:07:3f:97:1c:a5:3b:6c:f7:19:0d:80:1e: b4:aa:4b:b6:4f:cf:37:de:9f:e8:02:3a:45:95:ac: 54:98:55:de:cb:2b:79:5e:e5:d2:8a:05:f9:38:b3: 80:35:9f:cd:a4:0b:b4:3b:2e:1c:ae:ba:5f:fd:02: 0a:23:8d:b7:4c:45:28:a3:7d:f4:41:0e:ef:2e:bb: 83:00:06:ce:e7:8d:12:34:c9:ba:32:56:52:1b:8b: 6f:e7:ea:fd:61:f6:54:6c:cd:73:25:a2:18:85:1f: 62:b9:27:13:dc:be:1b:be:9c:63:6c:8c:44:23:aa: 43:a4:46:e9:68:19:af:54:07:c0:f1:2d:7a:d5:d2: 82:cc:05:b0:f4:31:38:0c:83:15:98:fa:19:10:9e: ba:ec:67:e9:b9:38:27:20:1a:2c:ae:28:21:89:87: 6b:aa:c8:00:ef:60:60:ae:7d:fa:d6:78:ad:b7:14: 5a:ba:f1:ea:17:d9:16:4f:b8:e0:9f:66:4d:be:66: 31:77:fc:35:72:f8:cf:cb:9b:f3:5e:2c:c3:cd:b9: 3a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6 X509v3 Authority Key Identifier: keyid:09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:0e:47:70:2f:a5:a5:88:a5:b4:a5:10:b2:6b:98:09:48:e3: 66:bc:3d:61:27:30:43:db:76:3c:7a:14:6a:e4:4d:24:54:d5: 14:c1:e1:17:98:78:d5:90:5c:ae:cb:df:b4:19:8f:de:5d:68: 8f:76:18:f0:98:fc:e5:74:3b:cd:ce:d8:31:a0:31:12:74:11: 15:d5:e7:66:ce:61:b6:dc:3c:34:ec:2e:b6:1c:4f:34:02:01: b6:32:6b:bf:5a:72:7d:47:f4:21:2d:72:d7:ef:b3:cc:ab:f9: b7:05:37:5c:f5:f4:44:c6:a0:e0:fa:b2:32:34:81:00:a7:db: 66:41:ba:f2:e1:d1:33:b4:9a:de:1b:da:9d:87:57:e4:a5:f6: 0d:2a:4f:6d:8b:5c:2f:9a:6a:6f:c5:e6:0e:32:29:15:78:53: bf:9c:09:08:d3:68:5a:70:c4:5f:67:04:7a:c1:d7:4c:97:b6: 23:aa:f4:f6:2f:91:b9:a5:d2:48:37:1c:8f:4c:21:c1:3e:cc: 9c:fc:b3:52:7f:1b:76:8a:6f:78:18:d2:d4:36:1c:d4:36:cb: 3e:13:6c:b5:4c:2e:f6:f1:5b:df:07:ec:21:b8:19:82:ce:7f: b1:d9:2b:44:4b:10:2b:f3:da:6e:df:14:1c:42:9f:db:cf:75: c9:09:92:d4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICARMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk5 OTE3RDhDNTEzODAwQUUxNkQ1ODIwNzIwNjdDMjkzNzdDMjYyOTAeFw0yNTA2MDMy MjA4NDZaFw0yNjA0MTAwMTEwMDVaMDMxMTAvBgNVBAMTKEEzRkYyOUNGRDIzQkIw MEM0MjE4RjkxOTE0MTIyQzgzQ0IxOEY4RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr4l6YkrN5DjdVXZW/GFMwuPvlzrhbj4M3ZqEuhEsjH2rxUoD3 owjxjNN1lEwY+Ac/lxylO2z3GQ2AHrSqS7ZPzzfen+gCOkWVrFSYVd7LK3le5dKK Bfk4s4A1n82kC7Q7Lhyuul/9AgojjbdMRSijffRBDu8uu4MABs7njRI0yboyVlIb i2/n6v1h9lRszXMlohiFH2K5JxPcvhu+nGNsjEQjqkOkRuloGa9UB8DxLXrV0oLM BbD0MTgMgxWY+hkQnrrsZ+m5OCcgGiyuKCGJh2uqyADvYGCuffrWeK23FFq68eoX 2RZPuOCfZk2+ZjF3/DVy+M/Lm/NeLMPNuTpPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUo/8pz9I7sAxCGPkZFBIsg8sY+PYwHwYDVR0jBBgwFoAUCZkX2MUTgArhbVgg cgZ8KTd8JikwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 MC9DWmtYMk1VVGdBcmhiVmdnY2daOEtUZDhKaWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Naa1gyTVVUZ0FyaGJWZ2djZ1o4S1RkOEppay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjAvQ1prWDJNVVRnQXJo YlZnZ2NnWjhLVGQ4SmlrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKwOR3AvpaWIpbSlELJrmAlI42a8PWEnMEPbdjx6FGrkTSRU1RTB4ReYeNWQ XK7L37QZj95daI92GPCY/OV0O83O2DGgMRJ0ERXV52bOYbbcPDTsLrYcTzQCAbYy a79acn1H9CEtctfvs8yr+bcFN1z19ETGoOD6sjI0gQCn22ZBuvLh0TO0mt4b2p2H V+Sl9g0qT22LXC+aam/F5g4yKRV4U7+cCQjTaFpwxF9nBHrB10yXtiOq9PYvkbml 0kg3HI9MIcE+zJz8s1J/G3aKb3gY0tQ2HNQ2yz4TbLVMLvbxW98H7CG4GYLOf7HZ K0RLECvz2m7fFBxCn9vPdckJktQ= -----END CERTIFICATE-----Generated at Wed Jun 4 01:20:07 2025 by rpki-client