$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft File: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft (raw, json) Hash identifier: sj6m0c52j+L4nLPHk97JH+lth+hTqlbY7duj7wpg5GQ= Subject key identifier: 33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53 Certificate serial: 4EA1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft Manifest number: 4E90 Signing time: Fri 04 Apr 2025 14:07:40 +0000 Manifest this update: Fri 04 Apr 2025 14:07:40 +0000 Manifest next update: Fri 04 Apr 2025 20:07:40 +0000 Files and hashes: 1: 5xiBP9oAgtPkPbuqp_jQN04CKOk.roa (hash: tceHGoGymQUtpl0azpN7OzZGjav6xnOi9XVl7tk4RAQ=) 2: 62dLcW3plavrpsIbNHqw720lfPk.roa (hash: gCTxCmZ8gdoRjQKUaCHDH/9k8CDn24niIaIerASZoKo=) 3: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl (hash: fA4YtNBM+RKXUtQvNFvVLOvnui6+awp9RTrMGZB5idg=) 4: a4Xn34YD_SY_z4d7kRm1aLb5xSo.roa (hash: O0NyOV0UC0NpDn6gKD43mD7tWOO7tpD0289aGPnpmeU=) 5: qhqQ6XGpQKke9iH_XzcMeWU6yJs.roa (hash: SYubhtFtKwSFcNFEuS+OIUJ6kBhpjBEexfpRrZUfZr8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20129 (0x4ea1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53 Validity Not Before: Apr 4 14:07:40 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=339CE041528F9C61F954C6F0EBB8166EFB62E93A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e6:45:9a:5e:6f:d5:e6:df:34:4a:eb:9c:c4: 81:f4:30:d4:e4:49:ab:f8:bc:e5:31:7c:db:aa:97: 31:91:30:9f:12:80:99:cb:5a:5f:c4:27:6b:ff:98: 04:b1:a1:72:03:32:10:d4:8a:4f:15:6c:f9:a6:dc: e9:7a:3c:4b:e9:3f:4a:06:90:33:ef:9a:76:36:87: 12:62:7d:94:07:fa:4e:d0:ee:c4:f5:00:b7:90:55: aa:a5:79:23:32:36:02:0b:f3:98:c3:7c:fc:2e:90: d3:c6:f4:e8:93:b7:f3:54:84:b1:ea:58:82:f0:9d: 6b:10:91:18:df:67:81:8b:c7:2c:6f:51:8d:b8:35: cd:29:e7:09:5e:91:3b:4c:33:9a:3b:96:08:6d:96: a1:0d:00:d2:27:04:6c:d1:1f:40:8a:7c:4f:c0:a8: 92:65:1c:41:32:41:37:bc:67:f4:6c:10:94:51:b1: 07:be:ec:21:57:6a:0e:4d:ac:26:1f:aa:c5:19:11: f3:1a:8b:28:f7:a0:67:25:b5:b5:62:fa:14:9f:5c: fe:ab:b5:25:c0:eb:c0:f4:c2:57:0f:14:82:e9:7f: 2b:b8:97:cd:4e:3e:53:b5:d8:2c:a2:6d:73:69:3f: 5f:56:4a:94:3b:d3:ff:b7:ff:9f:8f:d8:94:9b:d1: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A X509v3 Authority Key Identifier: keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5d:24:39:b6:d7:87:7f:21:35:05:ba:b2:4d:15:c5:bd:b9: b0:5a:a1:1d:bc:50:7b:79:c8:3b:90:e5:23:79:2f:d4:3a:85: 98:19:a4:91:1d:97:50:b5:6e:87:56:f5:0a:59:e4:c9:ad:e5: 61:cb:19:90:9b:1e:fa:e1:2e:8e:79:2f:70:84:54:83:74:26: d7:6a:1b:22:14:68:9c:ca:ae:94:20:52:98:23:a2:17:df:c7: 44:44:7a:5f:7b:c7:02:b0:06:40:84:9c:82:e5:4a:ec:a9:37: 07:54:cb:85:79:1d:12:f2:1e:da:a8:70:1d:11:01:b3:cc:3d: 69:48:9d:60:b1:43:85:c0:88:cb:a3:ca:bd:50:5f:35:10:be: a2:af:08:3f:84:c1:70:b2:6e:98:f4:30:90:1c:a6:c1:56:6b: 84:dd:e5:dc:40:0c:1c:7d:a1:6b:55:5e:60:80:9e:8e:4b:24: ae:0f:ef:3f:8a:81:e8:b2:0d:95:94:fe:c8:ff:17:44:8d:8f: 1f:f4:bb:76:30:3c:99:3b:84:52:3f:32:b3:76:8b:3f:8e:71: 73:ce:19:5d:13:7f:88:08:8b:39:a0:e4:48:5f:73:5f:c8:a5: 85:06:c6:52:da:fc:26:9f:d9:4c:15:08:a3:5e:0b:cb:a4:6f: 8c:5d:ce:71 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICTqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTk4 QTU5NTg2NjVGMzRBMjZBM0RDQUY5NEM2M0IzM0EwNzA1OUE1MzAeFw0yNTA0MDQx NDA3NDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMzOUNFMDQxNTI4RjlD NjFGOTU0QzZGMEVCQjgxNjZFRkI2MkU5M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDo5kWaXm/V5t80SuucxIH0MNTkSav4vOUxfNuqlzGRMJ8SgJnL Wl/EJ2v/mASxoXIDMhDUik8VbPmm3Ol6PEvpP0oGkDPvmnY2hxJifZQH+k7Q7sT1 ALeQVaqleSMyNgIL85jDfPwukNPG9OiTt/NUhLHqWILwnWsQkRjfZ4GLxyxvUY24 Nc0p5wlekTtMM5o7lghtlqENANInBGzRH0CKfE/AqJJlHEEyQTe8Z/RsEJRRsQe+ 7CFXag5NrCYfqsUZEfMaiyj3oGcltbVi+hSfXP6rtSXA68D0wlcPFILpfyu4l81O PlO12CyibXNpP19WSpQ70/+3/5+P2JSb0QItAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUM5zgQVKPnGH5VMbw67gWbvti6TowHwYDVR0jBBgwFoAU6YpZWGZfNKJqPcr5 TGOzOgcFmlMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA3 NS82WXBaV0daZk5LSnFQY3I1VEdPek9nY0ZtbE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzZZcFpXR1pmTktKcVBjcjVUR096T2djRm1sTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNzUvNllwWldHWmZOS0px UGNyNVRHT3pPZ2NGbWxNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA5dJDm214d/ITUFurJNFcW9ubBaoR28UHt5yDuQ5SN5L9Q6hZgZpJEdl1C1 bodW9QpZ5Mmt5WHLGZCbHvrhLo55L3CEVIN0JtdqGyIUaJzKrpQgUpgjohffx0RE el97xwKwBkCEnILlSuypNwdUy4V5HRLyHtqocB0RAbPMPWlInWCxQ4XAiMujyr1Q XzUQvqKvCD+EwXCybpj0MJAcpsFWa4Td5dxADBx9oWtVXmCAno5LJK4P7z+Kgeiy DZWU/sj/F0SNjx/0u3YwPJk7hFI/MrN2iz+OcXPOGV0Tf4gIizmg5Ehfc1/IpYUG xlLa/Caf2UwVCKNeC8ukb4xdznE= -----END CERTIFICATE-----Generated at Fri Apr 4 18:40:08 2025 by rpki-client