$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft File: AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft (raw, json) Hash identifier: 1PxEns4tuJOY35qKNxYgBd37Rk/+f0KTH90AfDVDXUE= Subject key identifier: 0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20 Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 2363 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft Manifest number: 2341 Signing time: Fri 04 Apr 2025 14:09:45 +0000 Manifest this update: Fri 04 Apr 2025 14:09:45 +0000 Manifest next update: Fri 04 Apr 2025 20:09:45 +0000 Files and hashes: 1: 5VxcwIzNajDMHEYME1Yi6C_m-58.roa (hash: dDLOAOOftWIbv5I88SwAUdDrKySq1imBz6NTsUXSYc8=) 2: AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl (hash: iiRKwoNlDYwBskobtW1xniaqwqS4/AygjiJxTuGWpCA=) 3: RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa (hash: 0/rtIA/CyHWaNlCG1HaTHIQcMOksE7XMp+JwopuZVL4=) 4: VGsDB4v3z34fgz6mTQpMiK6jV3E.roa (hash: ko073jVWr+L3zYWIN4KcfYIWAEUrrOH8DRWanxZK8OE=) 5: i9Wb0lXHusy29QdbWjgWITeMGUs.roa (hash: hVOE6xAI+JBYye91BoZfX5ItXD5PbDPtawX4vwL7d6k=) 6: mn_61Uh0dg5m8R77lzKSAlYF91o.roa (hash: 3ltxYACGJn82Squrtq08gjCr8hy92b30+efZms5okys=) 7: qp6Gf54HwcpxFNxE1V9IBQ1uTCc.roa (hash: +54+lOciLvOJSyFmNOuvRxquzUIP39hKyQLnLEeQ6lA=) 8: sfuB7dNVQ9f1FokZ_OrVFV_UCvI.roa (hash: i3ZyghyUgF4y+pkbHG5zVgIztn5YNrIiihQP1pglqiE=) 9: v76ZeUDL7XeuImG3Z6XfawB1r4s.roa (hash: 591TgDtgoDv30DyaGcx7qNWrjSUDGPFlI5TjhU5Rz0k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9059 (0x2363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Apr 4 14:09:45 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=0ACA00C337354773164EFA107456DA00F2479420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:6d:48:bc:f4:25:1f:b6:54:5a:ee:62:35: 84:9c:47:d7:7d:e3:39:fc:84:de:e4:9c:24:10:c4: 15:b7:6a:c7:11:c4:7a:8b:84:71:f9:fe:56:b0:a5: 55:e5:2c:e0:99:ec:1e:c2:20:1c:39:ff:aa:83:ba: 61:e1:52:d5:35:6b:a6:2d:39:a4:44:90:3f:e5:0c: 56:ec:4e:3f:c2:d9:77:be:01:06:66:00:c8:80:d0: bc:c2:e3:42:04:bb:38:ab:43:86:a8:97:53:18:6d: e9:4f:3d:56:6a:20:08:0d:dc:58:2f:f6:a9:ed:16: 1c:19:48:1a:b7:b9:47:ff:1c:c7:df:21:34:df:60: c9:d2:ae:fa:f4:ed:6c:a6:40:db:db:85:ae:42:1c: 87:4c:54:29:21:40:8b:e6:48:51:71:ba:a5:5a:5e: 75:55:fb:22:6e:af:74:49:cd:9b:50:46:a4:40:4c: fc:4b:8d:45:98:1f:29:ce:1a:ea:7e:56:df:7d:5b: fd:38:47:91:f1:20:47:12:aa:21:6b:30:12:eb:91: a2:b1:ed:36:b4:bd:26:0f:bf:8d:c0:de:7f:e5:70: b4:b4:8b:40:72:89:15:2a:55:81:12:a5:54:1c:e7: 28:5c:7c:f5:c0:de:43:07:f2:76:e1:c8:74:53:62: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d2:d1:b2:c7:98:46:fd:1a:a0:7d:7b:55:b5:e4:5a:a1:8b: ea:0d:b0:2f:8e:c7:20:d3:d2:23:94:8a:5b:85:6a:d6:92:8a: a9:9b:b4:28:64:9b:0d:cd:c2:e1:49:51:46:0d:d5:e4:ab:7b: 71:a9:56:87:a4:68:16:6d:5e:ee:78:3c:e5:1d:0f:70:76:a4: 2a:52:d0:4a:de:63:e7:b5:38:a3:64:35:fa:e2:51:ad:d4:79: 0d:75:90:d9:26:8c:78:12:52:07:c9:2a:09:c7:9b:36:00:f9: 07:e3:0f:ee:73:ae:c1:2f:15:8d:57:e9:3a:ff:cd:7a:fb:44: 7c:0d:15:ad:49:d2:c8:a5:1f:71:fa:5c:0a:c1:5a:6a:a8:50: 8d:dd:56:6c:35:1d:a9:50:40:61:d5:80:7d:99:61:20:8a:d8: 80:f1:7f:88:72:f3:a6:11:23:85:d8:a1:1c:9f:90:bd:90:51: e1:8b:c2:c2:6d:ae:b7:8a:33:48:a1:9c:2d:62:35:eb:f2:2d: cc:b8:b1:67:c8:a0:e2:87:a8:5e:6f:de:08:f6:13:da:5e:2c: d8:a1:64:d3:b2:3e:04:81:63:5b:4b:21:94:3f:46:46:c9:ae: ba:7e:81:f9:77:58:46:61:f2:cc:d4:41:55:e3:a8:79:ae:15: 1e:4b:c9:41 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICI2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNTA0MDQx NDA5NDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBBQ0EwMEMzMzczNTQ3 NzMxNjRFRkExMDc0NTZEQTAwRjI0Nzk0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjR21IvPQlH7ZUWu5iNYScR9d94zn8hN7knCQQxBW3ascRxHqL hHH5/lawpVXlLOCZ7B7CIBw5/6qDumHhUtU1a6YtOaREkD/lDFbsTj/C2Xe+AQZm AMiA0LzC40IEuzirQ4aol1MYbelPPVZqIAgN3Fgv9qntFhwZSBq3uUf/HMffITTf YMnSrvr07WymQNvbha5CHIdMVCkhQIvmSFFxuqVaXnVV+yJur3RJzZtQRqRATPxL jUWYHynOGup+Vt99W/04R5HxIEcSqiFrMBLrkaKx7Ta0vSYPv43A3n/lcLS0i0By iRUqVYESpVQc5yhcfPXA3kMH8nbhyHRTYrWbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUCsoAwzc1R3MWTvoQdFbaAPJHlCAwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvQVMxREY3eWhaZy1J Qm0tSkQ0d0VyMVZ3QU1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABnS0bLHmEb9GqB9e1W15Fqhi+oNsC+OxyDT0iOUiluFataSiqmbtChkmw3N wuFJUUYN1eSre3GpVoekaBZtXu54POUdD3B2pCpS0EreY+e1OKNkNfriUa3UeQ11 kNkmjHgSUgfJKgnHmzYA+QfjD+5zrsEvFY1X6Tr/zXr7RHwNFa1J0silH3H6XArB WmqoUI3dVmw1HalQQGHVgH2ZYSCK2IDxf4hy86YRI4XYoRyfkL2QUeGLwsJtrreK M0ihnC1iNevyLcy4sWfIoOKHqF5v3gj2E9peLNihZNOyPgSBY1tLIZQ/RkbJrrp+ gfl3WEZh8szUQVXjqHmuFR5LyUE= -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:05 2025 by rpki-client