$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft File: nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft (raw, json) Hash identifier: Q+pSpnb72elP1un+DuEyNFtUrWrX3/J1H4Az8XJXDZo= Subject key identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 Authority key identifier: 9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 Certificate issuer: /CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Certificate serial: 50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft Manifest number: 50 Signing time: Thu 05 Jun 2025 14:08:41 +0000 Manifest this update: Thu 05 Jun 2025 14:08:41 +0000 Manifest next update: Thu 05 Jun 2025 20:08:41 +0000 Files and hashes: 1: nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl (hash: BZsxZZ9jIdT/O7SYe8P9pHIUtQH73XQoMkJEcHtlwfQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 19:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Validity Not Before: Jun 5 14:08:41 2025 GMT Not After : May 21 00:12:30 2026 GMT Subject: CN=C6279EA9F47099A4B320B69DB6EBFCDCFBAEA616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:b6:23:03:35:f1:e9:a2:c2:c0:d2:60:9e: 33:93:a0:b3:93:60:ed:5a:02:d8:97:10:15:23:02: 06:bc:53:bd:f8:8d:ed:29:95:fe:4d:d7:c2:d4:58: a0:7d:d0:ea:31:55:83:bf:8f:1b:f3:89:42:ef:db: 71:b7:5f:ac:c9:38:33:9a:4c:24:e8:9e:15:d0:32: d9:4b:3c:c1:17:73:89:dc:0f:35:9e:b7:b9:8a:a4: 96:34:8a:08:8e:b1:27:e2:8a:c0:df:ee:ec:3b:7e: 25:6a:02:9b:4c:5f:47:60:b7:24:92:02:e6:50:48: 46:cf:cd:51:d6:d1:94:c6:78:50:b1:22:b4:f2:ab: 0e:d2:84:2a:8a:12:05:bd:c0:1a:d0:44:35:2a:67: f5:db:9a:f7:b3:f1:fc:33:b0:77:fa:bf:cc:37:28: ab:8e:33:69:10:b9:9a:99:16:e6:67:89:1a:2b:52: 01:59:f8:6f:4d:b3:93:74:89:d5:66:59:d8:2b:b4: d5:1d:5f:b5:23:b1:2c:07:80:53:d0:22:4b:56:25: 02:da:71:d6:e5:84:1c:78:a2:7e:84:37:fc:c6:9d: a1:72:e9:b4:3a:d3:3f:4e:27:fa:97:9e:73:a2:fc: e8:9b:21:7f:df:41:e9:04:a1:a6:ec:f3:3a:ec:8b: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 X509v3 Authority Key Identifier: keyid:9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:3b:0b:ab:8f:7c:a3:76:9d:05:8b:d6:3c:5e:35:c6:36:eb: 76:fd:2c:47:a5:78:1f:f3:f5:5b:11:3a:fa:91:b8:b4:e5:36: a0:72:69:54:4b:c2:9e:10:f7:37:cc:57:2b:3e:65:82:af:71: b5:cf:1c:7a:29:c5:08:47:1f:bb:21:27:88:74:d6:31:d8:84: ef:c8:3a:e0:80:73:1f:cb:bc:c3:af:8c:59:25:d5:c8:aa:64: 9d:7d:f9:06:d9:cb:64:06:4d:09:07:3d:19:c7:93:68:eb:3b: ad:93:21:ac:44:6c:4d:f4:17:5e:0a:f4:0d:8e:d6:79:ac:db: 3c:58:6c:9a:09:bb:f2:95:f8:16:b5:02:1f:59:96:2c:11:1f: ae:5e:53:b4:0a:93:df:54:1d:d2:2e:2a:e9:f3:9d:ef:94:6e: 54:6e:72:7a:fa:07:cb:9d:64:b5:19:87:91:6b:fc:a9:2d:dd: 7c:a0:e6:8d:4e:35:2d:ef:c6:14:37:41:27:50:41:eb:4d:a4: 7c:54:d0:0c:72:f4:e8:cc:1a:17:8d:3e:3f:39:2d:32:a8:e0: 70:ff:04:82:61:59:5d:da:a4:ad:31:63:e6:d3:2e:6f:98:dc: 68:1f:ff:48:e3:55:13:f9:61:66:7f:7f:a0:92:51:cb:5f:0a: 1d:a8:0b:62 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REY4 RUZBODhFMkFCQ0UxOTNFNEVERjBFMUQ2QThBQTg0Qjk1QkU0MB4XDTI1MDYwNTE0 MDg0MVoXDTI2MDUyMTAwMTIzMFowMzExMC8GA1UEAxMoQzYyNzlFQTlGNDcwOTlB NEIzMjBCNjlEQjZFQkZDRENGQkFFQTYxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMbktiMDNfHposLA0mCeM5Ogs5Ng7VoC2JcQFSMCBrxTvfiN7SmV /k3XwtRYoH3Q6jFVg7+PG/OJQu/bcbdfrMk4M5pMJOieFdAy2Us8wRdzidwPNZ63 uYqkljSKCI6xJ+KKwN/u7Dt+JWoCm0xfR2C3JJIC5lBIRs/NUdbRlMZ4ULEitPKr DtKEKooSBb3AGtBENSpn9dua97Px/DOwd/q/zDcoq44zaRC5mpkW5meJGitSAVn4 b02zk3SJ1WZZ2Cu01R1ftSOxLAeAU9AiS1YlAtpx1uWEHHiifoQ3/MadoXLptDrT P04n+peec6L86Jshf99B6QShpuzzOuyLZRcCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTGJ56p9HCZpLMgtp226/zc+66mFjAfBgNVHSMEGDAWgBSd+O+ojiq84ZPk7fDh 1qiqhLlb5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzcx L25manZxSTRxdk9HVDVPM3c0ZGFvcW9TNVctUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbmZqdnFJNHF2T0dUNU8zdzRkYW9xb1M1Vy1RLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3MS9uZmp2cUk0cXZPR1Q1 TzN3NGRhb3FvUzVXLVEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyTsLq498o3adBYvWPF41xjbrdv0sR6V4H/P1WxE6+pG4tOU2oHJpVEvCnhD3 N8xXKz5lgq9xtc8ceinFCEcfuyEniHTWMdiE78g64IBzH8u8w6+MWSXVyKpknX35 BtnLZAZNCQc9GceTaOs7rZMhrERsTfQXXgr0DY7WeazbPFhsmgm78pX4FrUCH1mW LBEfrl5TtAqT31Qd0i4q6fOd75RuVG5yevoHy51ktRmHkWv8qS3dfKDmjU41Le/G FDdBJ1BB602kfFTQDHL06MwaF40+PzktMqjgcP8EgmFZXdqkrTFj5tMub5jcaB// SONVE/lhZn9/oJJRy18KHagLYg== -----END CERTIFICATE-----Generated at Thu Jun 5 19:26:10 2025 by rpki-client