$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft File: LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft (raw, json) Hash identifier: ZAg5ULAdtiVLUcwtUtfRFYA1Sf+emQ47VNFUlrI2Nmc= Subject key identifier: 3B:F1:B4:C4:CC:5F:75:AE:31:36:9F:EA:60:3F:5A:F1:FE:7C:27:BB Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22 Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022 Certificate serial: 1D90 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft Manifest number: 1D63 Signing time: Fri 04 Apr 2025 14:06:55 +0000 Manifest this update: Fri 04 Apr 2025 14:06:55 +0000 Manifest next update: Fri 04 Apr 2025 20:06:55 +0000 Files and hashes: 1: LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl (hash: LQEoy9dzm8jBPOMstVyl+jnhrJjrHFd1rLMjiiSRcLo=) 2: MOpfOKLakKUbD4Yvc6IMEETsYXU.roa (hash: zY3Mu8k0ptEbOfDum8sFDQMosox9jQVr7fMV8zYO27o=) 3: Vu7gpDVlWiePAXgf0pHp7u_cN9k.roa (hash: +OZE90GJjEGLc0YSJ3MKSYZDq2hjWW252HrT6Aj+hKY=) 4: ZjUAXw2vJyrv-E0IOVs4xXxpF_o.roa (hash: gJGxh859+jE7wgqaAF8/RndQfrxprblkT1TjJF3sT54=) 5: iJVJvcnXuKNFI9GtmipWn6rh_nU.roa (hash: xqpd9HPnh8PjBNNRGO/tkvxC87Vb3FHNaEPqdhWxxt8=) 6: kFq6PeZfE0EEFhDuCy93d7VYH3A.roa (hash: EBhwZCv6thWeEBufuvdoCNNvOuTc2q/xd/SoCakoqmY=) 7: mLygT07bsPXyMhSB7dYVubjMrR0.roa (hash: LNtyMviZ7C3D1tBvV3qAzxQU+QGTsqC8HClJmei0gnU=) 8: oed8Tlosroh-HEjKFL7ljpvar38.roa (hash: E/YmAsJIXKibJl3R+dATO9pn0upR1NSoP0lW/JU0+tY=) 9: ppHf14MzECzhrMYjBEgv5bsQX-w.roa (hash: wSF2eIYSzbb9GWp1Z2yFVWOEMNlDEJ7hbzYQcpR1Tjc=) 10: v6deB1Mwqvdm_8Ivnuccd4SudKU.roa (hash: 6bTSALhEXWierWH616UMZsVUcs+OnE+TjZIRHBk8Xck=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7568 (0x1d90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022 Validity Not Before: Apr 4 14:06:55 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3BF1B4C4CC5F75AE31369FEA603F5AF1FE7C27BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:38:4d:20:c0:de:68:1a:99:f1:0a:ca:8e: cc:17:f1:34:6d:3a:99:43:99:9d:96:9c:9a:47:63: 9d:b9:13:32:e9:79:b4:2d:0c:73:46:41:47:1a:5a: b9:97:4f:8d:99:43:04:b3:ff:53:97:ba:74:ab:f3: 58:05:53:04:5f:18:40:99:1f:40:7b:eb:42:85:91: c0:77:98:29:cf:6f:6e:63:4a:c8:fe:38:e8:32:c6: 90:49:a8:fa:34:db:24:8e:e4:a7:f2:bc:c4:52:69: 23:96:2a:82:08:88:46:75:1a:21:14:b0:9c:f7:b9: 85:75:0c:77:02:6b:16:d2:e3:5a:70:41:7b:ca:39: 3c:d6:10:71:e3:5e:ec:44:a3:1c:88:cd:6d:ec:bb: 94:f6:f8:ea:86:da:44:0a:ba:4e:f1:09:02:3e:b9: 74:14:1e:47:a4:72:db:f7:29:69:55:38:47:0b:94: 66:fd:c4:6a:79:67:89:2f:ee:76:78:d6:7a:5a:d3: 54:c6:36:a1:03:a8:f3:7f:d8:80:ec:05:75:c7:74: 15:b1:28:df:93:6f:6c:95:aa:5a:4c:e7:a7:49:53: 4e:e5:29:21:eb:e0:40:07:76:d3:8b:c8:63:80:f1: 17:50:da:9f:10:9d:80:31:0b:cb:85:fc:8b:b4:a9: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F1:B4:C4:CC:5F:75:AE:31:36:9F:EA:60:3F:5A:F1:FE:7C:27:BB X509v3 Authority Key Identifier: keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:3c:67:42:ca:65:ed:46:a6:26:e0:9b:e0:3c:65:59:e2:b7: 3d:95:db:f1:d6:a6:e9:22:eb:e0:9d:e1:81:27:84:d2:86:3f: 7c:38:33:a7:3b:b3:2d:6e:b1:38:fe:64:43:fa:83:3b:4a:58: a3:5b:85:39:f5:62:df:c0:e6:84:82:52:72:ad:9c:f2:4d:02: 06:2d:d0:e0:f9:23:14:92:65:93:ab:63:8e:9a:80:95:14:e9: f2:0a:40:aa:a0:8b:a4:cc:7e:e9:7b:1d:ff:c8:4d:66:e2:c7: 1e:de:2c:6c:fe:22:61:9e:fd:76:58:a4:97:4a:1a:d4:2d:dd: bb:71:a4:5d:09:13:eb:c8:96:1f:51:67:56:67:24:d1:af:11: 4f:54:8e:5e:79:b6:0f:e8:2a:8e:26:aa:46:78:65:72:dc:b7: aa:6b:29:86:67:63:e3:b9:7b:9f:fc:c9:2f:ac:56:74:3d:a3: ed:f7:15:37:6d:26:f2:e4:c4:e8:4f:e7:11:f1:7b:94:29:70: 49:e4:e3:6c:13:9d:b6:be:58:bd:a9:2d:ca:61:46:53:ef:62: a0:5f:58:3d:2b:08:53:be:5f:b8:af:fb:3a:f4:ac:80:89:c1: 6a:96:04:2d:ea:91:30:af:ff:a5:0d:81:e5:08:32:64:15:98: fa:65:41:f8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF MTRGMkFDN0YwMjM4MTM3MDUyRUFBMzE1QzVCRDY0MzEzNDAyMjAeFw0yNTA0MDQx NDA2NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNCRjFCNEM0Q0M1Rjc1 QUUzMTM2OUZFQTYwM0Y1QUYxRkU3QzI3QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWGThNIMDeaBqZ8QrKjswX8TRtOplDmZ2WnJpHY525EzLpebQt DHNGQUcaWrmXT42ZQwSz/1OXunSr81gFUwRfGECZH0B760KFkcB3mCnPb25jSsj+ OOgyxpBJqPo02ySO5KfyvMRSaSOWKoIIiEZ1GiEUsJz3uYV1DHcCaxbS41pwQXvK OTzWEHHjXuxEoxyIzW3su5T2+OqG2kQKuk7xCQI+uXQUHkekctv3KWlVOEcLlGb9 xGp5Z4kv7nZ41npa01TGNqEDqPN/2IDsBXXHdBWxKN+Tb2yVqlpM56dJU07lKSHr 4EAHdtOLyGOA8RdQ2p8QnYAxC8uF/Iu0qfIbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUO/G0xMxfda4xNp/qYD9a8f58J7swHwYDVR0jBBgwFoAULeFPKsfwI4E3BS6q MVxb1kMTQCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9MZUZQS3Nmd0k0RTNCUzZxTVZ4YjFrTVRRQ0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xlRlBLc2Z3STRFM0JTNnFNVnhiMWtNVFFDSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvTGVGUEtzZndJNEUz QlM2cU1WeGIxa01UUUNJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGc8Z0LKZe1Gpibgm+A8ZVnitz2V2/HWpuki6+Cd4YEnhNKGP3w4M6c7sy1u sTj+ZEP6gztKWKNbhTn1Yt/A5oSCUnKtnPJNAgYt0OD5IxSSZZOrY46agJUU6fIK QKqgi6TMful7Hf/ITWbixx7eLGz+ImGe/XZYpJdKGtQt3btxpF0JE+vIlh9RZ1Zn JNGvEU9Ujl55tg/oKo4mqkZ4ZXLct6prKYZnY+O5e5/8yS+sVnQ9o+33FTdtJvLk xOhP5xHxe5QpcEnk42wTnba+WL2pLcphRlPvYqBfWD0rCFO+X7iv+zr0rICJwWqW BC3qkTCv/6UNgeUIMmQVmPplQfg= -----END CERTIFICATE-----Generated at Fri Apr 4 18:42:11 2025 by rpki-client