$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft File: TS1a-PNilt7eZELYEcBKdAhswCk.mft (raw, json) Hash identifier: J03MAALZqTDxbIIYhv8qBMNjcwMLrZiJ3rUlsZ4fAs8= Subject key identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 Authority key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 Certificate issuer: /CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Certificate serial: 1C2E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft Manifest number: 1C2E Signing time: Fri 04 Apr 2025 14:09:52 +0000 Manifest this update: Fri 04 Apr 2025 14:09:52 +0000 Manifest next update: Fri 04 Apr 2025 20:09:52 +0000 Files and hashes: 1: TS1a-PNilt7eZELYEcBKdAhswCk.crl (hash: l03Ic+WGtd1JVTVa95e5PB641uwzqWfDeSFDYu/GAT4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7214 (0x1c2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Validity Not Before: Apr 4 14:09:52 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=FB05EB7D2AA945F23FDF3EE47C8BEE704F06A134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:4f:7d:fc:28:2d:d7:cd:f1:6e:6e:4e:d9: d7:54:74:5a:df:76:cd:82:70:0b:4d:ee:b7:b7:8a: 50:8a:b1:fd:c2:a7:0e:ac:0d:35:a3:59:47:52:b8: da:5c:4c:59:79:1d:ae:1f:06:ce:31:bb:67:03:b6: 18:7e:e6:6f:b9:2d:27:2b:59:a3:bd:d1:b7:7a:f2: c5:8f:5a:14:3c:c4:51:a6:7f:4b:42:fb:76:88:0d: 7f:f8:2d:36:29:1b:73:31:02:b2:f6:2f:84:c0:17: 67:5c:9e:b7:db:48:f1:e1:f9:1d:53:15:38:19:5e: 9e:3b:65:09:3d:2d:2b:14:9e:e9:44:ee:5c:fb:4c: 6d:31:68:42:0f:12:1f:f5:d2:50:57:ee:dc:a3:77: c4:e0:1c:65:0a:c3:fc:6d:98:0f:25:b7:51:c6:88: 34:3f:65:e9:e9:5b:8d:6e:64:75:b1:50:74:51:59: e7:21:fe:84:62:ef:e2:e4:8f:95:08:7e:7e:2f:b3: b7:d6:09:18:c8:aa:3b:86:c9:89:66:76:c6:c6:07: 8e:d9:19:9f:90:61:8e:3d:27:fb:d9:bc:21:3b:7e: f5:25:c9:e2:00:6e:22:09:21:da:1e:b3:8d:cd:73: 4c:a5:38:1f:4d:7e:47:0f:6d:cc:38:75:61:6a:b8: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 X509v3 Authority Key Identifier: keyid:4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:db:8e:32:8b:e2:cb:74:b8:9c:f1:f1:6d:01:8f:00:77:ec: 48:8c:91:ea:4c:62:22:81:be:e5:a8:ef:82:73:57:b3:a6:85: 94:c6:07:53:d3:79:1f:d9:22:05:50:e3:67:2c:90:3d:5c:c1: 97:9b:af:0f:73:75:9e:e0:c9:d9:24:db:2a:bf:b7:f5:c6:e8: e9:b7:53:2d:7b:7b:7c:e2:26:01:b3:c3:3f:d0:74:f1:9c:04: f0:aa:c0:d4:a2:79:68:19:b9:e8:0a:2f:b0:99:94:48:97:0e: 0c:42:b0:41:53:2e:fe:74:c4:35:74:a6:81:bd:ce:4f:1e:4c: 9f:aa:4f:99:ba:da:db:9c:45:e4:d2:f3:ba:96:86:86:27:93: fd:d2:bb:db:90:39:73:52:91:69:c2:3d:ea:a5:3a:0d:2e:6d: ea:e6:b3:69:4d:37:13:e0:a5:7e:12:57:ca:dd:b1:a2:70:79: 2b:d2:08:7e:5b:cf:ad:5d:06:fb:ea:41:41:5c:34:7c:02:2e: 2c:74:7a:14:61:9f:b2:79:e8:05:24:5b:74:b0:38:6e:65:d4: 40:43:da:74:47:a3:9b:86:fe:e0:c5:e4:46:b5:f9:2a:96:63: cb:4f:51:0e:c6:01:c0:c3:06:e6:86:f7:98:c1:1d:78:52:1f: c6:69:91:6d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEQy RDVBRjhGMzYyOTZERURFNjQ0MkQ4MTFDMDRBNzQwODZDQzAyOTAeFw0yNTA0MDQx NDA5NTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZCMDVFQjdEMkFBOTQ1 RjIzRkRGM0VFNDdDOEJFRTcwNEYwNkExMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLMk99/Cgt183xbm5O2ddUdFrfds2CcAtN7re3ilCKsf3Cpw6s DTWjWUdSuNpcTFl5Ha4fBs4xu2cDthh+5m+5LScrWaO90bd68sWPWhQ8xFGmf0tC +3aIDX/4LTYpG3MxArL2L4TAF2dcnrfbSPHh+R1TFTgZXp47ZQk9LSsUnulE7lz7 TG0xaEIPEh/10lBX7tyjd8TgHGUKw/xtmA8lt1HGiDQ/ZenpW41uZHWxUHRRWech /oRi7+Lkj5UIfn4vs7fWCRjIqjuGyYlmdsbGB47ZGZ+QYY49J/vZvCE7fvUlyeIA biIJIdoes43Nc0ylOB9NfkcPbcw4dWFquOJtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+wXrfSqpRfI/3z7kfIvucE8GoTQwHwYDVR0jBBgwFoAUTS1a+PNilt7eZELY EcBKdAhswCkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc5 MC9UUzFhLVBOaWx0N2VaRUxZRWNCS2RBaHN3Q2suY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RTMWEtUE5pbHQ3ZVpFTFlFY0JLZEFoc3dDay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3OTAvVFMxYS1QTmlsdDdl WkVMWUVjQktkQWhzd0NrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKbbjjKL4st0uJzx8W0BjwB37EiMkepMYiKBvuWo74JzV7OmhZTGB1PTeR/Z IgVQ42cskD1cwZebrw9zdZ7gydkk2yq/t/XG6Om3Uy17e3ziJgGzwz/QdPGcBPCq wNSieWgZuegKL7CZlEiXDgxCsEFTLv50xDV0poG9zk8eTJ+qT5m62tucReTS87qW hoYnk/3Su9uQOXNSkWnCPeqlOg0uberms2lNNxPgpX4SV8rdsaJweSvSCH5bz61d BvvqQUFcNHwCLix0ehRhn7J56AUkW3SwOG5l1EBD2nRHo5uG/uDF5Ea1+SqWY8tP UQ7GAcDDBuaG95jBHXhSH8ZpkW0= -----END CERTIFICATE-----Generated at Fri Apr 4 18:33:04 2025 by rpki-client