$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft File: UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft (raw, json) Hash identifier: qm4expQ2GDTeSvzWPnd0LGm7jvBxOLahzCqmmpjdxiQ= Subject key identifier: 08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11 Authority key identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74 Certificate issuer: /CN=51EAB28F238FD7407C2F663960489DD6D951DA74 Certificate serial: 30D4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft Manifest number: 30D4 Signing time: Fri 04 Apr 2025 13:07:51 +0000 Manifest this update: Fri 04 Apr 2025 13:07:51 +0000 Manifest next update: Fri 04 Apr 2025 19:07:51 +0000 Files and hashes: 1: UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl (hash: /FJ60ZdBhtP0aKoe/88tqMn6BQqFoforaVdn7MUQG5s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12500 (0x30d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51EAB28F238FD7407C2F663960489DD6D951DA74 Validity Not Before: Apr 4 13:07:51 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=08D414593F3DC69E2F070FCA2F84007D00761911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:2a:8f:06:e1:ae:0c:1c:3b:78:88:4e:d3: ca:38:21:47:26:7c:7d:0f:c0:b3:c3:90:a9:d0:63: c8:23:3c:2b:af:71:3f:50:04:09:b0:ae:cb:2b:5b: ae:d9:aa:b3:2a:a3:fc:82:51:0e:c0:09:a9:a9:24: c2:3c:b7:e2:78:40:dc:6e:46:ce:b2:bc:ec:e2:66: 4a:d1:22:9e:1d:1a:03:6f:0d:7b:a8:e2:3f:5e:ee: 97:86:12:6e:bc:49:b9:2e:48:82:71:cd:1c:f9:9f: 5e:c7:9e:0f:fd:7e:b2:35:d2:0d:16:3a:4f:a5:c2: 17:fb:fd:37:ad:00:45:88:a9:86:d8:85:00:00:c2: cc:aa:83:2f:cf:75:5c:d4:02:43:8e:f3:a9:53:b2: 9c:0d:81:b4:63:24:6a:0a:6d:ae:bb:ae:5d:be:3e: 23:21:ce:52:9c:be:1e:b0:72:94:a6:b5:90:25:c2: 71:ee:44:98:22:64:26:c8:1a:e6:3c:81:fb:63:25: f3:88:17:e0:b4:f1:7b:88:ed:eb:66:bc:8d:a2:d2: 1c:99:7a:3e:db:ed:48:98:00:a8:4e:8d:64:08:31: 3d:6d:f8:9b:7a:03:f2:dd:86:9a:97:93:c6:f3:86: c6:a7:32:59:5f:bb:5c:9b:2d:52:75:ab:1b:23:02: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11 X509v3 Authority Key Identifier: keyid:51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:7e:b7:69:36:6b:32:39:5d:78:6c:a1:65:58:e7:2c:8a:85: 63:80:40:27:30:2c:e6:f9:fe:48:94:ea:ff:75:cd:a2:43:d4: cb:14:bf:71:f2:ba:6a:c9:e6:3f:f5:dd:26:55:fa:c5:29:5c: 35:f4:40:74:4e:8f:ea:88:f4:3f:9a:f0:16:93:05:56:f7:0f: 8d:13:26:da:03:08:3f:a8:9b:f3:d8:c1:40:cc:d1:73:ff:06: 05:42:96:1b:9c:5e:a6:29:6c:61:8c:f1:46:3c:ea:24:13:4a: fd:c3:18:67:7e:66:fa:08:b3:f6:b1:9c:11:a2:a8:86:e3:cf: 4c:6b:bf:76:a7:4e:4b:0c:08:da:37:54:0d:7c:57:d7:fb:42: 95:ab:15:e3:73:ba:78:c6:95:2c:c6:d5:bb:08:7d:80:02:95: 96:04:f6:ad:9c:db:65:c2:c1:99:50:4a:61:86:4f:25:a2:ae: 4c:37:51:c1:21:68:2b:b3:c6:77:35:74:5b:c3:20:50:ed:05: 1f:67:fd:c3:85:27:df:51:c0:28:fa:ff:c0:54:2b:f2:37:65: 53:fc:9a:eb:eb:ad:50:39:81:6c:40:cb:9e:b4:a6:00:27:35: 5c:f0:15:d9:29:f1:62:2b:1e:47:17:58:8e:62:d8:32:f5:96: 3c:9f:13:03 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICMNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTFF QUIyOEYyMzhGRDc0MDdDMkY2NjM5NjA0ODlERDZEOTUxREE3NDAeFw0yNTA0MDQx MzA3NTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA4RDQxNDU5M0YzREM2 OUUyRjA3MEZDQTJGODQwMDdEMDA3NjE5MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRFyqPBuGuDBw7eIhO08o4IUcmfH0PwLPDkKnQY8gjPCuvcT9Q BAmwrssrW67ZqrMqo/yCUQ7ACampJMI8t+J4QNxuRs6yvOziZkrRIp4dGgNvDXuo 4j9e7peGEm68SbkuSIJxzRz5n17Hng/9frI10g0WOk+lwhf7/TetAEWIqYbYhQAA wsyqgy/PdVzUAkOO86lTspwNgbRjJGoKba67rl2+PiMhzlKcvh6wcpSmtZAlwnHu RJgiZCbIGuY8gftjJfOIF+C08XuI7etmvI2i0hyZej7b7UiYAKhOjWQIMT1t+Jt6 A/LdhpqXk8bzhsanMllfu1ybLVJ1qxsjAgcDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUCNQUWT89xp4vBw/KL4QAfQB2GREwHwYDVR0jBBgwFoAUUeqyjyOP10B8L2Y5 YEid1tlR2nQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQw My9VZXF5anlPUDEwQjhMMlk1WUVpZDF0bFIyblEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1VlcXlqeU9QMTBCOEwyWTVZRWlkMXRsUjJuUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0MDMvVWVxeWp5T1AxMEI4 TDJZNVlFaWQxdGxSMm5RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMN+t2k2azI5XXhsoWVY5yyKhWOAQCcwLOb5/kiU6v91zaJD1MsUv3HyumrJ 5j/13SZV+sUpXDX0QHROj+qI9D+a8BaTBVb3D40TJtoDCD+om/PYwUDM0XP/BgVC lhucXqYpbGGM8UY86iQTSv3DGGd+ZvoIs/axnBGiqIbjz0xrv3anTksMCNo3VA18 V9f7QpWrFeNzunjGlSzG1bsIfYAClZYE9q2c22XCwZlQSmGGTyWirkw3UcEhaCuz xnc1dFvDIFDtBR9n/cOFJ99RwCj6/8BUK/I3ZVP8muvrrVA5gWxAy560pgAnNVzw Fdkp8WIrHkcXWI5i2DL1ljyfEwM= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:51 2025 by rpki-client