$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft File: C5DqYM7V_TVorFTKqMxHleSGroY.mft (raw, json) Hash identifier: 55Y4M+r7h/21o97H99AmU86Q8FduYFJTUsIN681TQ/k= Subject key identifier: 79:15:97:E3:0D:A8:91:55:E9:44:81:DA:7E:2E:44:06:6F:20:50:C2 Authority key identifier: 0B:90:EA:60:CE:D5:FD:35:68:AC:54:CA:A8:CC:47:95:E4:86:AE:86 Certificate issuer: /CN=0B90EA60CED5FD3568AC54CAA8CC4795E486AE86 Certificate serial: 1A26 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5DqYM7V_TVorFTKqMxHleSGroY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft Manifest number: 1A26 Signing time: Fri 04 Apr 2025 14:10:07 +0000 Manifest this update: Fri 04 Apr 2025 14:10:07 +0000 Manifest next update: Fri 04 Apr 2025 20:10:07 +0000 Files and hashes: 1: C5DqYM7V_TVorFTKqMxHleSGroY.crl (hash: WRs5YbkCRZnhAvSh9oE+gAioop3B+8zy7Q2RnXSG4So=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5DqYM7V_TVorFTKqMxHleSGroY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6694 (0x1a26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B90EA60CED5FD3568AC54CAA8CC4795E486AE86 Validity Not Before: Apr 4 14:10:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=791597E30DA89155E94481DA7E2E44066F2050C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:e7:55:e4:a7:ee:40:b6:48:0a:36:31:99: 45:7f:67:63:ab:61:34:b1:d1:5d:a4:da:d2:c5:0d: a7:e9:3a:c1:7e:18:23:70:3e:d8:55:a5:4d:06:56: 08:ae:d6:e7:2f:c9:a0:9c:67:ca:00:14:00:e8:87: c0:a6:32:a5:16:66:77:4f:96:93:2b:f2:65:17:93: da:f6:a8:ed:5b:d0:b1:9e:ab:53:c3:61:c3:76:a0: 9b:9b:71:2d:7a:51:20:63:f6:54:02:2e:03:e0:93: ba:f1:71:97:50:30:76:c7:0d:3a:23:40:82:0a:1d: 2f:a2:1a:d9:83:d2:5b:3c:49:04:f7:62:e9:a1:be: 33:05:9d:7d:c4:70:3a:e9:9b:e8:ca:f9:17:39:87: 20:a4:b2:56:d3:eb:4c:f7:db:f5:44:b7:3f:88:1c: 44:9c:69:9e:d8:4c:51:2a:1b:99:af:61:cf:98:2e: 39:cd:c8:eb:65:3d:8c:2f:ba:2c:38:8d:d3:94:f5: 45:c0:96:a8:da:1a:05:7d:a6:07:2a:2f:37:34:80: c6:01:88:b7:56:e7:31:81:a2:80:8a:99:d4:81:74: 1c:5a:43:96:cd:91:9b:b6:31:a2:c1:4a:74:77:ec: b8:dd:3b:c8:f7:02:48:32:3c:6b:95:19:59:60:92: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:15:97:E3:0D:A8:91:55:E9:44:81:DA:7E:2E:44:06:6F:20:50:C2 X509v3 Authority Key Identifier: keyid:0B:90:EA:60:CE:D5:FD:35:68:AC:54:CA:A8:CC:47:95:E4:86:AE:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5DqYM7V_TVorFTKqMxHleSGroY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c8:54:b6:eb:fd:48:68:0f:c7:35:3f:2f:a7:28:e9:ea:5b: 6d:ea:4b:d8:2f:26:64:3b:12:a6:bd:e0:d2:0d:9d:35:7b:c6: 0c:59:f1:cc:ad:de:33:8c:86:e8:76:bc:cf:c1:8e:68:13:2c: 9e:6f:c8:85:cc:e8:26:fc:cd:e5:7c:32:04:94:9a:97:0b:c7: 04:4a:03:7d:ab:be:05:d9:49:6d:5c:6a:fc:cc:ab:9a:7c:81: 14:6e:bb:2a:5a:da:97:e3:22:ce:5b:92:b5:92:82:f5:93:9d: 24:8a:4a:4d:99:45:9d:1d:c8:27:1a:c5:92:e8:7f:7a:86:58: 4f:9f:63:fd:8d:6c:ab:ce:27:4a:20:10:5e:1f:0c:b9:96:61: 86:4f:b1:7b:2d:b2:80:d4:e3:69:db:2a:86:41:b2:a5:dc:f1: 90:d0:43:6b:ca:ee:17:03:7a:f8:aa:14:eb:72:7a:9f:8e:92: 7c:4b:7f:49:67:15:a2:08:42:f8:c4:9b:4c:7a:0b:15:09:cf: b1:2a:3c:5c:87:79:75:80:62:cb:83:06:84:aa:d1:55:e8:b7: e7:54:7b:98:85:c0:29:0e:34:e3:db:cf:7f:e5:64:2f:49:bd: 10:96:19:54:b1:9c:3e:35:0e:8a:1a:fe:4b:59:82:0d:9f:27: 44:d9:63:16 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEI5 MEVBNjBDRUQ1RkQzNTY4QUM1NENBQThDQzQ3OTVFNDg2QUU4NjAeFw0yNTA0MDQx NDEwMDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc5MTU5N0UzMERBODkx NTVFOTQ0ODFEQTdFMkU0NDA2NkYyMDUwQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7G+dV5KfuQLZICjYxmUV/Z2OrYTSx0V2k2tLFDafpOsF+GCNw PthVpU0GVgiu1ucvyaCcZ8oAFADoh8CmMqUWZndPlpMr8mUXk9r2qO1b0LGeq1PD YcN2oJubcS16USBj9lQCLgPgk7rxcZdQMHbHDTojQIIKHS+iGtmD0ls8SQT3Yumh vjMFnX3EcDrpm+jK+Rc5hyCkslbT60z32/VEtz+IHEScaZ7YTFEqG5mvYc+YLjnN yOtlPYwvuiw4jdOU9UXAlqjaGgV9pgcqLzc0gMYBiLdW5zGBooCKmdSBdBxaQ5bN kZu2MaLBSnR37LjdO8j3AkgyPGuVGVlgkq5jAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUeRWX4w2okVXpRIHafi5EBm8gUMIwHwYDVR0jBBgwFoAUC5DqYM7V/TVorFTK qMxHleSGroYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDM0 L0M1RHFZTTdWX1RWb3JGVEtxTXhIbGVTR3JvWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQzVEcVlNN1ZfVFZvckZUS3FNeEhsZVNHcm9ZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDM0L0M1RHFZTTdWX1RWb3JG VEtxTXhIbGVTR3JvWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCwyFS26/1IaA/HNT8vpyjp6ltt6kvYLyZkOxKmveDSDZ01e8YMWfHMrd4zjIbo drzPwY5oEyyeb8iFzOgm/M3lfDIElJqXC8cESgN9q74F2UltXGr8zKuafIEUbrsq WtqX4yLOW5K1koL1k50kikpNmUWdHcgnGsWS6H96hlhPn2P9jWyrzidKIBBeHwy5 lmGGT7F7LbKA1ONp2yqGQbKl3PGQ0ENryu4XA3r4qhTrcnqfjpJ8S39JZxWiCEL4 xJtMegsVCc+xKjxch3l1gGLLgwaEqtFV6LfnVHuYhcApDjTj289/5WQvSb0QlhlU sZw+NQ6KGv5LWYINnydE2WMW -----END CERTIFICATE-----Generated at Fri Apr 4 18:45:00 2025 by rpki-client