$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft File: BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft (raw, json) Hash identifier: 8Ac2JLUgebDxhtBhsBnIYubfCKZUfZsSNUWLXHFlMvk= Subject key identifier: 5D:42:79:BC:0A:39:3D:12:95:72:C4:60:EA:C3:EC:24:D5:7E:40:C8 Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Certificate serial: 13C7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft Manifest number: 1373 Signing time: Sun 16 Feb 2025 19:55:29 +0000 Manifest this update: Sun 16 Feb 2025 19:55:29 +0000 Manifest next update: Mon 17 Feb 2025 01:55:29 +0000 Files and hashes: 1: 1bhwsUtbiQdLDBfnox3-3zkbwWo.roa (hash: gqIHRU1MS3errlkahAkxfB2oyymacUQJ8xVRYk2LhZE=) 2: A5JTKb0vZnDvo8UpkVya-cognAk.roa (hash: CatxJSbWJ7+LP6IwzCOTxH/un/wX5sS84QqKLcPwfp0=) 3: BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl (hash: Q2JSFXuWwTAt6ZfBAomqxpj8eH9S+T9HGaOuaXuKacE=) 4: BxI2yCMaK3NjzZYHxh0NUTMSJZw.roa (hash: VRCnmMi4IRTS0vcXxMn2bzi8EHUF39M3GwWSAH96gC8=) 5: Mn3aulxcz9cRwvVy-OdzDLLEjN8.roa (hash: RyZ7UDCzQP8lEOcOe2YqzsH2R43s9P1o0X7uFc309d0=) 6: P7yG7EH_lru5WZOmH05-MybVOeI.roa (hash: Ex1GOcmqwC8VhMygwQSDIdTq8VDfD/xVpG/AMDcqfxM=) 7: iC0FcQxssnSZ09gKew8DzrA3Evk.roa (hash: 4OXiUYOXWQeabT7QovNoO6YeSOSP7kzo0U8JTKNO9Lw=) 8: pAdIfVD4TegvN15N0-A-Mxh9usg.roa (hash: C45rYV9sN1M1gbfL4obwJbBATaptOZqCUW2XXRNtiEI=) 9: sNqux4mN7rIskkyyueIIJWD8CCo.roa (hash: X34hX4uRqiuSQ58UT5nRUZsFh25H9gSvUfa0fvcp1ZA=) 10: ttEgkm_ITLlVN8H4AjZQBFs40Fk.roa (hash: r0aNuhJ74ZVzwaQQ3EFPIXADTU60WmW/tYCNTKuFZTg=) 11: wG1FxjoQkcIuBHHXQd1OQosYA2A.roa (hash: 4ppmtoXMaFGLkwzf9Nk7vf0gkZZCJMB34fdwJ2h927Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Feb 2025 22:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5063 (0x13c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Validity Not Before: Feb 16 19:55:29 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5D4279BC0A393D129572C460EAC3EC24D57E40C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:e2:68:2e:18:73:b7:fd:9d:69:1a:31:3c: 64:95:18:19:fd:85:66:89:7b:01:1e:a3:5a:c3:37: 94:9c:4e:d5:b5:89:c6:74:15:85:e3:2d:55:dd:88: 74:18:0c:8e:63:76:d9:97:01:d8:7b:42:2c:bb:4d: 96:0e:ec:08:c5:c7:7f:63:34:d5:92:ab:d7:97:04: 81:29:78:2a:06:85:46:5d:b9:56:be:b3:f7:a1:a5: a9:79:31:94:95:00:8d:77:06:a7:12:08:8e:49:df: da:fc:4f:eb:1d:d1:38:9f:e0:2d:e3:aa:9b:f7:4b: b9:0e:e3:4b:80:09:ab:af:ee:d3:56:86:30:3a:9f: b1:fc:7e:32:78:c8:7f:f3:a5:1f:eb:2c:54:0d:17: 41:db:24:50:a5:e6:19:af:de:4b:6b:b8:c2:80:74: f8:41:78:84:64:81:68:3e:36:16:3e:00:eb:8c:8c: 29:21:3b:83:a1:74:8e:97:57:5e:7a:27:81:20:e1: e6:3a:35:45:6c:34:58:60:a5:c0:2a:37:5a:f7:36: 5a:44:01:3e:d5:f1:1a:33:30:dc:e9:68:62:a7:59: 17:e0:af:a6:cb:00:8e:ce:31:5c:47:7c:e5:97:fa: 12:57:f8:8e:1c:32:ab:79:bb:32:7b:eb:02:a5:b9: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:42:79:BC:0A:39:3D:12:95:72:C4:60:EA:C3:EC:24:D5:7E:40:C8 X509v3 Authority Key Identifier: keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:da:5a:59:09:17:42:a2:28:c1:f8:cb:3a:df:cf:81:06:8a: f5:75:92:33:bc:77:d9:2e:ea:b6:94:57:0f:5c:6c:e2:74:17: 02:91:89:11:1a:4d:cd:e6:1c:12:2d:47:19:78:9a:ca:27:38: f2:33:99:fd:a0:8a:8e:e0:16:ec:f6:22:47:0e:82:68:4e:32: 84:a2:17:07:24:c7:29:4c:1f:54:0d:cc:f3:a0:f0:3a:fd:f3: 88:9b:58:f5:d9:d1:9b:02:71:75:4d:bf:bd:b5:35:80:f6:4e: fc:01:1b:09:05:5a:aa:0a:76:0f:04:e7:94:3f:1b:aa:ae:6e: cb:7a:3f:30:33:f8:dd:fe:a2:98:e6:0e:32:c7:ae:da:59:c5: 92:26:92:f0:ee:c8:6d:b9:3f:de:58:42:42:f8:4e:a6:16:74: 31:2c:3e:4b:c8:42:e0:8b:61:61:65:98:7b:94:87:4b:a2:c1: 68:77:29:b5:bd:13:9f:a7:f2:5d:a8:81:14:c9:62:39:17:28: 46:e0:59:80:08:b6:f4:5a:c4:2b:ad:76:b7:f1:52:00:5e:ff: 35:8f:b2:9a:c3:90:33:67:8d:6a:37:3d:3b:53:c4:a0:b5:5e: 27:04:1b:55:32:d4:43:37:58:ac:0b:19:2a:c4:b1:16:41:10: 51:40:6f:41 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICE8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYw QzAwQkYxN0E1NUZEQjg1Q0FGNDU3OEJFODMzMDU2RTAyOEI0MzAeFw0yNTAyMTYx OTU1MjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVENDI3OUJDMEEzOTNE MTI5NTcyQzQ2MEVBQzNFQzI0RDU3RTQwQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDETuJoLhhzt/2daRoxPGSVGBn9hWaJewEeo1rDN5ScTtW1icZ0 FYXjLVXdiHQYDI5jdtmXAdh7Qiy7TZYO7AjFx39jNNWSq9eXBIEpeCoGhUZduVa+ s/ehpal5MZSVAI13BqcSCI5J39r8T+sd0Tif4C3jqpv3S7kO40uACauv7tNWhjA6 n7H8fjJ4yH/zpR/rLFQNF0HbJFCl5hmv3ktruMKAdPhBeIRkgWg+NhY+AOuMjCkh O4OhdI6XV156J4Eg4eY6NUVsNFhgpcAqN1r3NlpEAT7V8RozMNzpaGKnWRfgr6bL AI7OMVxHfOWX+hJX+I4cMqt5uzJ76wKlueZvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXUJ5vAo5PRKVcsRg6sPsJNV+QMgwHwYDVR0jBBgwFoAUBgwAvxelX9uFyvRX i+gzBW4Ci0MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS9CZ3dBdnhlbFg5dUZ5dlJYaS1nekJXNENpME0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Jnd0F2eGVsWDl1Rnl2UlhpLWd6Qlc0Q2kwTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvQmd3QXZ4ZWxYOXVG eXZSWGktZ3pCVzRDaTBNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAK3aWlkJF0KiKMH4yzrfz4EGivV1kjO8d9ku6raUVw9cbOJ0FwKRiREaTc3m HBItRxl4msonOPIzmf2gio7gFuz2IkcOgmhOMoSiFwckxylMH1QNzPOg8Dr984ib WPXZ0ZsCcXVNv721NYD2TvwBGwkFWqoKdg8E55Q/G6qubst6PzAz+N3+opjmDjLH rtpZxZImkvDuyG25P95YQkL4TqYWdDEsPkvIQuCLYWFlmHuUh0uiwWh3KbW9E5+n 8l2ogRTJYjkXKEbgWYAItvRaxCutdrfxUgBe/zWPsprDkDNnjWo3PTtTxKC1XicE G1Uy1EM3WKwLGSrEsRZBEFFAb0E= -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:04 2025 by rpki-client