$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft File: Abqns7epjYr5LS2VVnUO4m3D7pk.mft (raw, json) Hash identifier: 0qYkWDQAKW5JVoCuvqg2vA46uHzm2AuyI55WTSuDwqA= Subject key identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 Authority key identifier: 01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 Certificate issuer: /CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Certificate serial: 41 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft Manifest number: 41 Signing time: Tue 03 Jun 2025 21:08:35 +0000 Manifest this update: Tue 03 Jun 2025 21:08:35 +0000 Manifest next update: Wed 04 Jun 2025 03:08:35 +0000 Files and hashes: 1: Abqns7epjYr5LS2VVnUO4m3D7pk.crl (hash: 9BaiaehwWsS1yFdY/2ej3iis/dI6LyboQLoSbFOcgqs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Validity Not Before: Jun 3 21:08:35 2025 GMT Not After : May 22 08:46:04 2026 GMT Subject: CN=67E18440F931EBE2EE9A7C99A430455C87EFACE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:f8:b1:c8:11:df:fb:17:31:b3:15:a1:51: dd:64:77:f7:47:83:44:72:2e:46:82:30:e5:80:1e: 3b:88:bd:16:ad:12:9f:38:0e:f8:53:3c:4c:e9:3c: 1d:9e:20:08:ed:81:15:e3:b8:1f:55:c3:e6:2c:61: 9e:2a:70:da:47:eb:ce:eb:e0:89:6a:2a:5c:51:5d: 20:b4:08:47:69:e7:0b:1f:a8:b8:d2:1c:5e:b8:05: 7c:0e:3d:92:9e:1e:89:63:53:d6:81:ca:58:5c:9f: f1:37:ce:59:eb:73:36:0e:db:8f:f1:45:29:54:d6: 8c:08:25:34:c1:88:0b:6b:d2:c0:3a:a7:7b:ba:e3: fb:ce:27:38:98:8a:6d:5f:56:89:59:5c:8e:1f:2d: 33:ed:9b:ea:ce:9c:36:fb:76:a8:c1:ea:80:4f:8f: 4e:a2:75:be:11:05:7b:91:fa:cc:14:85:b7:2d:a7: 22:8f:7d:cf:9b:fa:26:5a:48:95:8b:62:4e:a3:a6: 31:3c:0f:60:09:51:14:84:e2:21:9d:6c:7d:7d:1c: aa:42:61:e5:e2:10:11:9a:46:4b:8e:b6:e1:d6:16: 6e:39:f7:d4:64:8d:a2:fa:51:b5:45:82:1c:64:05: cb:2d:62:eb:cd:19:76:86:91:c4:8e:44:c4:6e:26: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 X509v3 Authority Key Identifier: keyid:01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a6:30:87:72:18:f6:95:25:09:e7:a0:bb:90:17:ce:99:05: fe:62:ad:70:71:bd:bd:91:06:02:5b:bf:c6:9b:ff:02:22:4b: 1d:70:a8:f4:5d:9b:01:2e:47:82:d8:ab:6e:06:01:30:04:d4: 69:30:b4:9b:11:18:5a:41:41:b5:91:a2:32:d6:35:44:56:86: 8d:c4:e6:03:37:75:5c:62:cc:d1:90:6f:17:d7:7f:a2:47:d6: 38:06:47:38:29:f5:c8:da:ad:c7:a2:09:b5:07:6d:b6:6e:5b: c9:93:53:1d:40:53:42:1c:a7:ff:01:0b:b4:29:ae:67:f9:39: 48:99:79:69:95:b9:b8:84:1d:9f:f1:af:da:88:b4:b6:e5:54: a6:56:77:2c:ab:4b:60:bf:27:b1:23:87:70:18:1d:56:ee:af: 9b:92:83:59:11:12:da:cf:dd:e0:b2:4d:c1:54:b6:65:88:b7: 20:d9:7d:c0:ad:cb:f1:88:e2:11:ac:63:20:e2:18:9e:66:7f: bc:1b:c4:7a:1b:8a:f6:8c:7c:9e:02:ee:12:7c:e3:53:3d:26: 78:be:6b:f4:e9:d1:3b:f7:bc:95:db:c8:a8:d4:1d:a4:aa:c8: 64:96:5b:02:a4:a6:c6:86:78:a4:8d:6c:1f:31:6a:d7:2e:ee: 35:83:7e:83 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMUJB QTdCM0I3QTk4RDhBRjkyRDJEOTU1Njc1MEVFMjZEQzNFRTk5MB4XDTI1MDYwMzIx MDgzNVoXDTI2MDUyMjA4NDYwNFowMzExMC8GA1UEAxMoNjdFMTg0NDBGOTMxRUJF MkVFOUE3Qzk5QTQzMDQ1NUM4N0VGQUNFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANGp+LHIEd/7FzGzFaFR3WR390eDRHIuRoIw5YAeO4i9Fq0SnzgO +FM8TOk8HZ4gCO2BFeO4H1XD5ixhnipw2kfrzuvgiWoqXFFdILQIR2nnCx+ouNIc XrgFfA49kp4eiWNT1oHKWFyf8TfOWetzNg7bj/FFKVTWjAglNMGIC2vSwDqne7rj +84nOJiKbV9WiVlcjh8tM+2b6s6cNvt2qMHqgE+PTqJ1vhEFe5H6zBSFty2nIo99 z5v6JlpIlYtiTqOmMTwPYAlRFITiIZ1sfX0cqkJh5eIQEZpGS4624dYWbjn31GSN ovpRtUWCHGQFyy1i680ZdoaRxI5ExG4m8OsCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRn4YRA+THr4u6afJmkMEVch++s6TAfBgNVHSMEGDAWgBQBuqezt6mNivktLZVW dQ7ibcPumTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzcy L0FicW5zN2VwallyNUxTMlZWblVPNG0zRDdway5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQWJxbnM3ZXBqWXI1TFMyVlZuVU80bTNEN3BrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3Mi9BYnFuczdlcGpZcjVM UzJWVm5VTzRtM0Q3cGsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALKYwh3IY9pUlCeegu5AXzpkF/mKtcHG9vZEGAlu/xpv/AiJLHXCo9F2bAS5H gtirbgYBMATUaTC0mxEYWkFBtZGiMtY1RFaGjcTmAzd1XGLM0ZBvF9d/okfWOAZH OCn1yNqtx6IJtQdttm5byZNTHUBTQhyn/wELtCmuZ/k5SJl5aZW5uIQdn/Gv2oi0 tuVUplZ3LKtLYL8nsSOHcBgdVu6vm5KDWRES2s/d4LJNwVS2ZYi3INl9wK3L8Yji EaxjIOIYnmZ/vBvEehuK9ox8ngLuEnzjUz0meL5r9OnRO/e8ldvIqNQdpKrIZJZb AqSmxoZ4pI1sHzFq1y7uNYN+gw== -----END CERTIFICATE-----Generated at Wed Jun 4 01:18:13 2025 by rpki-client