$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft File: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft (raw, json) Hash identifier: Vj1WTcQiN8Exs2dpw7soBrW84NUzco4FefMdO9XTnPc= Subject key identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC Authority key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F Certificate issuer: /CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Certificate serial: 1E5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft Manifest number: 1E5A Signing time: Tue 03 Jun 2025 22:38:47 +0000 Manifest this update: Tue 03 Jun 2025 22:38:47 +0000 Manifest next update: Wed 04 Jun 2025 04:38:47 +0000 Files and hashes: 1: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl (hash: XPw8ouI/1C9MHCjHauC+Qx3ynpoES47pSLPWZQRDbtI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7770 (0x1e5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Validity Not Before: Jun 3 22:38:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=642E96922B46BF24EF102575A5DAA715488004CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:78:97:a8:9d:3f:e3:16:18:d4:df:23:a0: 92:64:4b:c9:36:9c:fd:be:09:98:fc:24:f7:23:77: 54:1b:52:12:55:f3:cc:82:81:53:99:fd:b4:ad:74: 6c:c6:fe:5b:df:bf:95:4d:77:68:71:a6:28:2a:b7: 84:3c:ec:50:d3:53:fe:7e:10:03:0a:87:7c:92:a4: ba:0e:5d:78:29:a5:54:dc:5b:a7:5a:95:3e:2e:d4: da:70:91:e6:1c:7b:c5:cf:fe:e0:5e:01:8a:69:9c: b0:30:55:0c:66:67:55:72:1f:69:14:9e:7f:50:fc: ba:99:d6:ad:d0:48:bb:0b:be:95:2d:06:30:d0:37: c7:db:13:86:aa:bf:d9:88:6c:a4:2a:d0:97:ec:32: 86:d1:48:b2:e6:5c:87:a9:10:06:89:62:df:52:67: 64:92:2b:8c:f5:77:4a:2d:5c:68:ef:4a:08:d6:ec: bf:1c:50:24:71:90:13:6a:95:6b:2b:63:72:d3:02: f3:16:b3:dd:62:33:75:5b:d6:63:34:fb:db:d5:96: 3c:04:22:89:a3:be:a5:6b:11:81:fe:30:13:b4:0e: 7b:be:b4:06:b2:be:81:01:24:51:96:9a:a9:f3:57: c2:20:d1:18:ce:e3:9b:0d:97:33:a9:23:51:e0:e6: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC X509v3 Authority Key Identifier: keyid:F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:11:ef:ac:e6:9d:59:a0:e9:d7:4b:4c:5a:7b:21:fb:78:fe: cb:7b:df:5a:75:23:46:20:5f:56:27:44:bb:0d:1f:e7:7a:7e: 32:d7:2d:7d:9e:f1:92:36:1c:ef:89:d9:1b:bb:a0:33:3b:e4: 73:d6:fa:19:78:27:4b:a8:8a:42:f3:a1:e0:8d:ba:c2:3c:1b: 6b:56:18:cd:21:03:27:6f:77:ce:6d:6b:be:d6:a8:2e:3f:3e: c3:d0:2c:43:43:07:47:0c:5c:69:82:f4:5a:ab:07:f4:ab:63: 74:cd:13:11:ad:47:e0:e0:19:fc:b6:21:27:63:d0:5b:89:02: e6:65:93:90:10:55:41:ff:86:2e:6f:ae:fc:38:7f:51:12:bb: ea:d8:b1:e8:17:ef:2b:e5:94:a0:8a:3b:2e:52:96:1c:9a:e5: 09:2c:6b:29:33:e8:98:43:3d:0c:4b:c0:a3:d3:95:05:81:28: 88:50:b4:3e:28:95:e4:ea:e6:f9:5c:2e:74:43:a2:48:e2:aa: 74:7d:d1:b9:dc:b4:ba:2b:bf:02:e5:cc:52:7e:5a:a6:17:7b: 0e:fe:01:4e:e0:44:de:d3:9a:a7:84:9e:37:65:e4:2e:bc:8d: e4:7f:0c:ae:22:fe:ea:a7:53:f5:1a:b4:c4:52:a1:50:df:8a: 17:65:e2:cd -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjJF ODQ4MkJGMTBCNEVFNjczNkY0MDFBRkZGMzcxMkZCNDQ2QkYyRjAeFw0yNTA2MDMy MjM4NDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDY0MkU5NjkyMkI0NkJG MjRFRjEwMjU3NUE1REFBNzE1NDg4MDA0Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDco3iXqJ0/4xYY1N8joJJkS8k2nP2+CZj8JPcjd1QbUhJV88yC gVOZ/bStdGzG/lvfv5VNd2hxpigqt4Q87FDTU/5+EAMKh3ySpLoOXXgppVTcW6da lT4u1NpwkeYce8XP/uBeAYppnLAwVQxmZ1VyH2kUnn9Q/LqZ1q3QSLsLvpUtBjDQ N8fbE4aqv9mIbKQq0JfsMobRSLLmXIepEAaJYt9SZ2SSK4z1d0otXGjvSgjW7L8c UCRxkBNqlWsrY3LTAvMWs91iM3Vb1mM0+9vVljwEIomjvqVrEYH+MBO0Dnu+tAay voEBJFGWmqnzV8Ig0RjO45sNlzOpI1Hg5lHJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUZC6WkitGvyTvECV1pdqnFUiABMwwHwYDVR0jBBgwFoAU8uhIK/ELTuZzb0Aa //NxL7RGvy8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMw Lzh1aElLX0VMVHVaemIwQWFfX054TDdSR3Z5OC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOHVoSUtfRUxUdVp6YjBBYV9fTnhMN1JHdnk4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMwLzh1aElLX0VMVHVaemIw QWFfX054TDdSR3Z5OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXEe+s5p1ZoOnXS0xaeyH7eP7Le99adSNGIF9WJ0S7DR/nen4y1y19nvGSNhzv idkbu6AzO+Rz1voZeCdLqIpC86HgjbrCPBtrVhjNIQMnb3fObWu+1qguPz7D0CxD QwdHDFxpgvRaqwf0q2N0zRMRrUfg4Bn8tiEnY9BbiQLmZZOQEFVB/4Yub678OH9R Ervq2LHoF+8r5ZSgijsuUpYcmuUJLGspM+iYQz0MS8Cj05UFgSiIULQ+KJXk6ub5 XC50Q6JI4qp0fdG53LS6K78C5cxSflqmF3sO/gFO4ETe05qnhJ43ZeQuvI3kfwyu Iv7qp1P1GrTEUqFQ34oXZeLN -----END CERTIFICATE-----Generated at Wed Jun 4 01:23:47 2025 by rpki-client