$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft File: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft (raw, json) Hash identifier: H8F3KJjpVhX/tdqqsJbxP72w6slcyGimdpBmFVZKys4= Subject key identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1 Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Certificate serial: 1D45 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft Manifest number: 1D31 Signing time: Fri 04 Apr 2025 14:08:53 +0000 Manifest this update: Fri 04 Apr 2025 14:08:53 +0000 Manifest next update: Fri 04 Apr 2025 20:08:53 +0000 Files and hashes: 1: 4GBpvI2rZ3KgMp2TXs52wMjJ0yE.roa (hash: WUXgzF8/7vTpS4uvfiiFvOe2HOADwHJYR8UuxjhNVm0=) 2: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl (hash: yZpV1Ww2olvMC1xuckL5ShFmBKj2CyJqWVx993htbME=) 3: NMHb2UFwO_I-h1asoM3p_Xf7X-c.roa (hash: rNnKVfauMNkQjQMCBnzbua+dEEBtDwfUeKuVVJYIlHk=) 4: snw-NI25N0Ia9kFy4kqbaf1-Dz8.roa (hash: MZ8UlnboUaU3f+1a6FsBRFwSkOPQ7Y4u/AxUpRNGThk=) 5: tcNYjLabfsgNtY7A28BVLcZRkQA.roa (hash: VUZerhSHKXntthuMx1ErUjEcpUO2cjj7+J4Ad/TWPuc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7493 (0x1d45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Validity Not Before: Apr 4 14:08:53 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1794218645C7CCC4535A9526D8E2540877324BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:34:6d:ce:47:f1:95:a2:61:f6:f5:f5:c1: 65:10:2c:cd:2c:2c:92:49:21:25:4f:88:4d:68:34: ae:ae:de:64:4b:2a:6b:c1:d5:6e:a6:80:0e:4e:01: 66:ff:de:82:b5:99:11:9f:2b:e7:38:e7:29:0d:d3: 3f:6b:a7:71:c3:1f:8a:c3:41:9d:a8:d3:14:15:70: 0e:02:fb:99:5e:8d:01:50:4f:76:11:b6:0e:1d:ff: dd:05:89:97:b2:57:89:c1:ef:0f:e0:ef:b1:25:19: c4:5f:79:ac:45:ed:6f:c6:f2:a5:2a:45:ce:bb:5f: a0:b0:9b:9f:ce:39:58:c0:c5:49:2e:7b:07:f9:39: d2:06:b1:75:6e:a4:f4:b3:a2:e4:69:e7:1c:92:29: fd:8d:8e:56:d2:da:f9:b5:6d:8f:36:f2:2a:8b:da: fd:c0:eb:c9:b8:14:c4:b4:df:d9:a1:1b:c8:e2:4f: 52:aa:90:6f:af:aa:aa:87:4f:01:e8:5c:29:98:3a: 24:82:10:3b:82:c0:b9:89:c6:67:93:51:1a:2c:00: 4b:55:2e:44:d3:38:a2:8a:72:95:e0:0c:3f:e0:ef: da:d3:4a:65:a6:7e:c8:68:9b:82:ea:86:f5:3c:ed: 97:f2:db:e4:07:de:22:11:f8:72:5b:62:14:f4:60: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1 X509v3 Authority Key Identifier: keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f9:89:53:8d:51:3b:73:8b:ea:bc:06:49:10:cf:e2:d5:07: 85:fd:17:83:15:23:72:ed:23:c7:fb:09:2d:46:84:f2:30:ef: e9:a2:95:2d:54:5b:f1:3e:63:2c:54:1d:6d:6e:d5:5a:82:f6: 86:ac:6a:f6:91:65:f2:cc:93:f3:17:e1:cc:06:da:1b:c9:ea: 2d:1b:fb:69:c4:83:31:46:06:7c:13:af:f3:45:d1:87:c1:0a: 8c:b2:c8:ec:d8:9a:ce:1a:ac:d4:38:fb:f6:56:39:1f:ed:9b: 46:2d:fd:78:63:12:cc:ca:b2:70:ec:cb:50:b4:fc:c8:5e:c5: 5e:5b:e5:4c:7b:61:85:eb:20:fd:11:c8:d3:e4:c8:02:3f:0a: 2a:b7:98:95:1d:a0:9a:fe:c4:fa:6a:31:e6:94:37:e3:7c:85: af:95:5b:24:5a:98:10:78:8e:53:56:85:c5:13:f0:46:5b:a3: f2:ae:8d:51:c1:53:e4:e8:48:90:05:f7:ac:44:78:21:e9:b4: 9a:d8:1b:4b:cc:2b:f3:56:86:49:24:fb:1a:34:ce:d2:f2:f6: c5:4d:66:e2:61:95:4a:71:5d:6e:84:e8:79:c2:56:ca:b4:f7: a9:c6:05:d7:d3:70:4a:8e:71:61:3e:69:a1:11:a9:ca:c3:ca: 2c:57:70:e4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjZE NUFGMjE5NTlCN0Y5QzFCMjMwRDcyNTg5OEYxMTFBQUEzRjlBRTAeFw0yNTA0MDQx NDA4NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE3OTQyMTg2NDVDN0ND QzQ1MzVBOTUyNkQ4RTI1NDA4NzczMjRCRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvrDRtzkfxlaJh9vX1wWUQLM0sLJJJISVPiE1oNK6u3mRLKmvB 1W6mgA5OAWb/3oK1mRGfK+c45ykN0z9rp3HDH4rDQZ2o0xQVcA4C+5lejQFQT3YR tg4d/90FiZeyV4nB7w/g77ElGcRfeaxF7W/G8qUqRc67X6Cwm5/OOVjAxUkuewf5 OdIGsXVupPSzouRp5xySKf2NjlbS2vm1bY828iqL2v3A68m4FMS039mhG8jiT1Kq kG+vqqqHTwHoXCmYOiSCEDuCwLmJxmeTURosAEtVLkTTOKKKcpXgDD/g79rTSmWm fshom4LqhvU87Zfy2+QH3iIR+HJbYhT0YCEZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUF5QhhkXHzMRTWpUm2OJUCHcyS9EwHwYDVR0jBBgwFoAU9tWvIZWbf5wbIw1y WJjxEaqj+a4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky Lzl0V3ZJWldiZjV3Ykl3MXlXSmp4RWFxai1hNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXRXdklaV2JmNXdiSXcxeVdKanhFYXFqLWE0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyLzl0V3ZJWldiZjV3Ykl3 MXlXSmp4RWFxai1hNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBV+YlTjVE7c4vqvAZJEM/i1QeF/ReDFSNy7SPH+wktRoTyMO/popUtVFvxPmMs VB1tbtVagvaGrGr2kWXyzJPzF+HMBtobyeotG/tpxIMxRgZ8E6/zRdGHwQqMssjs 2JrOGqzUOPv2Vjkf7ZtGLf14YxLMyrJw7MtQtPzIXsVeW+VMe2GF6yD9EcjT5MgC Pwoqt5iVHaCa/sT6ajHmlDfjfIWvlVskWpgQeI5TVoXFE/BGW6Pyro1RwVPk6EiQ BfesRHgh6bSa2BtLzCvzVoZJJPsaNM7S8vbFTWbiYZVKcV1uhOh5wlbKtPepxgXX 03BKjnFhPmmhEanKw8osV3Dk -----END CERTIFICATE-----Generated at Fri Apr 4 18:39:20 2025 by rpki-client