$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft File: hPLNDLUaQjf34fOuhRnjzCZEi38.mft (raw, json) Hash identifier: KEHfuOX8IyFAu/q5KMQmVwhwvvrLKLBMlH9luJ4xY6Q= Subject key identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 Authority key identifier: 84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F Certificate issuer: /CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Certificate serial: 154F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft Manifest number: 154F Signing time: Tue 03 Jun 2025 21:15:05 +0000 Manifest this update: Tue 03 Jun 2025 21:15:05 +0000 Manifest next update: Wed 04 Jun 2025 03:15:05 +0000 Files and hashes: 1: hPLNDLUaQjf34fOuhRnjzCZEi38.crl (hash: AZQxwrrbZmzYgus3wzB60pB8MjA9Zb04P/XzuMbFHzA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5455 (0x154f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Validity Not Before: Jun 3 21:15:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=45D7AFE026C8570C156C22E7C7BB2BA905E91F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:81:29:9b:33:04:d8:e0:06:be:7b:f6:7f: c6:b1:b8:45:75:d2:d8:ba:d8:83:ce:d8:e2:f7:e9: 30:9b:ba:8e:82:1a:4b:6c:f3:c2:11:24:d1:0a:d4: 42:b5:91:00:a8:ff:1c:0d:26:a7:74:21:dc:50:3e: 7b:5c:fe:01:d6:32:15:54:12:e5:08:02:19:4c:c1: b2:04:ad:76:0a:35:04:a3:9d:37:f7:7e:66:a0:9b: b5:08:a5:6d:66:65:97:57:3f:47:8c:03:59:db:55: da:14:e5:84:43:00:91:be:e2:44:b5:cc:a9:30:7f: 5e:e6:25:fb:7d:89:ec:2d:b6:f1:f9:c1:dc:9b:b7: da:d7:81:e5:d9:2e:a9:54:2f:8d:3d:bf:39:b6:e3: a1:b7:4b:85:57:f4:87:ba:79:21:0d:62:9e:60:d0: 9e:fe:a6:8a:c2:04:22:aa:2b:8a:fc:41:dc:c9:48: f5:74:fe:d8:25:73:d3:40:d9:f0:a1:1a:6a:7d:54: f1:04:53:ea:bd:a2:48:4d:a8:3d:ad:bd:d4:1f:7d: 89:3d:51:70:7c:3e:ef:ef:b2:90:86:55:07:37:66: f2:a8:17:9c:1d:93:41:5e:e4:1b:40:84:6a:87:fe: 68:02:df:a0:40:10:47:6d:39:c4:44:ce:53:2d:0e: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 X509v3 Authority Key Identifier: keyid:84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0e:34:0c:a5:12:7b:d2:b3:7d:38:20:c9:8b:e7:8b:c2:4a: 3b:dd:68:a2:5d:2a:4b:a8:76:d2:d4:b0:b3:93:fe:e3:1a:21: f1:89:df:78:71:b0:ce:8d:7e:e3:e3:6e:05:f1:cc:72:75:64: 6f:08:ab:1a:8e:20:02:af:fa:1d:63:b3:ed:db:33:fb:f5:ea: a0:21:51:69:11:b3:32:aa:96:3c:96:0a:1b:57:9f:95:e3:50: 5c:73:b4:35:c4:c5:2c:e5:98:5c:79:10:09:0d:c6:b9:60:d4: 22:fb:16:a6:06:87:71:6a:d2:5e:ef:9b:b5:b1:e1:0e:a0:ff: 83:25:d4:29:69:b9:42:1c:b4:e5:92:e1:5d:d3:d8:73:55:9e: 5c:37:bd:99:c6:f4:6a:47:2d:04:59:99:e7:92:30:3b:39:13: fd:7a:bf:02:94:46:e1:95:94:2a:86:f4:ca:8a:68:ed:3f:b0: 25:8e:e1:a3:64:fd:43:08:8f:f4:e3:26:1f:c7:f9:23:ec:9a: 87:76:05:9a:7f:0b:31:ef:09:11:68:28:c1:20:fe:c8:a0:e5: c7:42:91:33:19:f2:9b:19:87:0b:e5:b8:64:f2:16:2a:4c:9b: 12:c6:16:0e:a6:67:b5:19:7d:0b:13:0a:99:3f:2e:9a:e3:db: ca:b0:96:19 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRG MkNEMENCNTFBNDIzN0Y3RTFGM0FFODUxOUUzQ0MyNjQ0OEI3RjAeFw0yNTA2MDMy MTE1MDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ1RDdBRkUwMjZDODU3 MEMxNTZDMjJFN0M3QkIyQkE5MDVFOTFGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+ZIEpmzME2OAGvnv2f8axuEV10ti62IPO2OL36TCbuo6CGkts 88IRJNEK1EK1kQCo/xwNJqd0IdxQPntc/gHWMhVUEuUIAhlMwbIErXYKNQSjnTf3 fmagm7UIpW1mZZdXP0eMA1nbVdoU5YRDAJG+4kS1zKkwf17mJft9iewttvH5wdyb t9rXgeXZLqlUL409vzm246G3S4VX9Ie6eSENYp5g0J7+porCBCKqK4r8QdzJSPV0 /tglc9NA2fChGmp9VPEEU+q9okhNqD2tvdQffYk9UXB8Pu/vspCGVQc3ZvKoF5wd k0Fe5BtAhGqH/mgC36BAEEdtOcREzlMtDsjJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURdev4CbIVwwVbCLnx7srqQXpHxQwHwYDVR0jBBgwFoAUhPLNDLUaQjf34fOu hRnjzCZEi38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1 L2hQTE5ETFVhUWpmMzRmT3VoUm5qekNaRWkzOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFBMTkRMVWFRamYzNGZPdWhSbmp6Q1pFaTM4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1L2hQTE5ETFVhUWpmMzRm T3VoUm5qekNaRWkzOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA2DjQMpRJ70rN9OCDJi+eLwko73WiiXSpLqHbS1LCzk/7jGiHxid94cbDOjX7j 424F8cxydWRvCKsajiACr/odY7Pt2zP79eqgIVFpEbMyqpY8lgobV5+V41Bcc7Q1 xMUs5ZhceRAJDca5YNQi+xamBodxatJe75u1seEOoP+DJdQpablCHLTlkuFd09hz VZ5cN72ZxvRqRy0EWZnnkjA7ORP9er8ClEbhlZQqhvTKimjtP7AljuGjZP1DCI/0 4yYfx/kj7JqHdgWafwsx7wkRaCjBIP7IoOXHQpEzGfKbGYcL5bhk8hYqTJsSxhYO pme1GX0LEwqZPy6a49vKsJYZ -----END CERTIFICATE-----Generated at Wed Jun 4 01:07:57 2025 by rpki-client