$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft File: G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft (raw, json) Hash identifier: bGB8fYY9VPF3gq+TQA9cEydCPznX+3mqtD6vJYDnnHg= Subject key identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 0591 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft Manifest number: 0588 Signing time: Fri 04 Apr 2025 14:07:47 +0000 Manifest this update: Fri 04 Apr 2025 14:07:47 +0000 Manifest next update: Fri 04 Apr 2025 20:07:47 +0000 Files and hashes: 1: 5OEuFKPxJaq1YidFs9FhBAB9P64.roa (hash: ai6iEpYFHCC4+YcYY1ILAHS+XendDmfNBlH2O+XrO30=) 2: 5iA-h01FgjAaC-DPAOpdAAX_FUQ.roa (hash: 6Xo71nk33XT6X/k3IVsNNARD6WK9MRPdCpAx2+YpPBY=) 3: 7GZTK5QwS8vnTmYs4X-8-_ZS4PM.roa (hash: Fypc5S3wysoSbXk7yh6NHgb67GpfLGm2tLs4epy1xF8=) 4: G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl (hash: 48TpVWdCC12P1OqR1GliJkDYDwUKkFPHWAMpWrtzweA=) 5: LH2PyxaebTwUWCqIBs1Kq9jLOjU.roa (hash: L04+TBCa3SIZMlFAdOVBBd3Gf27YDwcU8ancEUoAIfY=) 6: Y2ZKD-A30k3bDBgJvwCgTOSEfgE.roa (hash: 9hA3D9MXarvGgUQCQ8E1yH6YN9fGRixIrfBTcD/M2r0=) 7: dTMFnNYS9LqVMpJIioge2ooc5gE.roa (hash: pCXNC0r3wfXitDNymXsPE77AREO+Pz310OZK4OIzz2Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Apr 4 14:07:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C92091CD704E8E01CB5621F4BFAA3A3F31DF49B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:a9:d9:1e:ae:44:4e:64:08:03:b8:dd:8f: d0:cf:76:8f:f3:30:8d:92:2d:f5:31:26:2c:cb:16: 3d:e4:53:4a:25:55:f4:0c:08:a7:0b:fd:7c:cb:6d: a2:dd:92:63:9b:79:f3:49:82:2c:07:00:ff:8c:46: b5:22:11:04:49:70:35:97:40:f3:6f:f3:35:ab:c1: 3b:26:2b:e6:4a:7a:5e:06:d7:eb:a7:23:7a:c4:ee: 07:38:38:23:35:dc:83:3d:f3:50:e8:69:c9:05:f4: b5:43:13:94:78:2d:49:57:dd:7d:10:05:57:f1:5c: a4:8a:cf:83:13:08:25:fd:7f:cb:b6:71:0b:36:9c: 0a:53:35:51:f5:fd:48:73:7e:f6:61:5b:00:54:14: c0:48:10:74:88:1d:1f:11:0d:f7:c6:81:7c:b9:66: 25:3c:0e:52:cd:9a:7f:9c:f9:e9:6e:dd:49:ca:c9: 3d:57:2a:5e:53:9f:fa:6a:1e:23:49:f1:01:67:5e: 2c:a1:70:bc:18:73:ea:2d:2d:ce:c6:d8:c4:5d:b0: ef:1f:1a:27:e0:f4:c8:49:d0:19:81:44:51:a5:67: d1:43:ed:c1:97:9b:69:72:3c:c2:c9:64:6c:d2:a2: 1f:d5:ef:dc:17:ea:8d:4e:a7:d9:0e:79:e6:65:d9: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:a8:48:48:6b:7c:6f:65:75:5b:7d:30:f1:ce:09:67:c9:0d: a3:e4:1a:e1:73:69:21:0e:f8:d4:d7:64:57:c7:bb:8a:36:1a: c3:5b:14:e1:60:1c:3c:59:26:03:07:07:f0:da:e6:dc:03:39: b9:eb:dd:ef:99:1d:f2:7e:d5:ce:9a:d5:df:fa:82:19:ca:33: e7:a0:c9:1e:57:44:18:4b:bf:c4:6a:e5:c6:b6:ca:f9:5c:10: 2b:3a:83:f4:58:bd:4a:37:5b:29:a5:19:ce:14:f1:ab:10:87: 49:69:9f:3b:c6:e9:d0:61:3a:bf:4c:23:11:37:70:b6:7b:ed: 83:d7:a7:ae:c9:22:3b:60:f6:fb:d0:c5:3c:e5:82:ac:d0:5c: f8:2d:2e:2f:72:d7:31:e1:ae:dc:b9:8b:ae:a2:66:47:d0:93: 61:22:78:c3:16:48:a9:e3:9a:62:b7:11:4b:b4:53:ff:98:e7: 45:b0:d8:10:b0:05:09:13:57:3d:9f:85:84:7c:62:1e:16:dd: a2:ca:70:66:c3:1e:9f:c7:57:03:24:3c:93:85:d6:9a:2d:81: 21:c9:24:62:5f:fa:0a:6e:28:42:e1:64:6e:87:32:8a:98:d8: 6b:e5:cb:b4:f5:83:53:59:ad:7c:a4:32:8d:ba:65:f0:2f:da: 00:7a:33:6a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA0MDQx NDA3NDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM5MjA5MUNENzA0RThF MDFDQjU2MjFGNEJGQUEzQTNGMzFERjQ5QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLiqnZHq5ETmQIA7jdj9DPdo/zMI2SLfUxJizLFj3kU0olVfQM CKcL/XzLbaLdkmObefNJgiwHAP+MRrUiEQRJcDWXQPNv8zWrwTsmK+ZKel4G1+un I3rE7gc4OCM13IM981DoackF9LVDE5R4LUlX3X0QBVfxXKSKz4MTCCX9f8u2cQs2 nApTNVH1/UhzfvZhWwBUFMBIEHSIHR8RDffGgXy5ZiU8DlLNmn+c+elu3UnKyT1X Kl5Tn/pqHiNJ8QFnXiyhcLwYc+otLc7G2MRdsO8fGifg9MhJ0BmBRFGlZ9FD7cGX m2lyPMLJZGzSoh/V79wX6o1Op9kOeeZl2QOjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUySCRzXBOjgHLViH0v6o6PzHfSbcwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvRzhiWnFmU2lKcVlm WDZHcEZqbEIxTE5ibzFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANKoSEhrfG9ldVt9MPHOCWfJDaPkGuFzaSEO+NTXZFfHu4o2GsNbFOFgHDxZ JgMHB/Da5twDObnr3e+ZHfJ+1c6a1d/6ghnKM+egyR5XRBhLv8Rq5ca2yvlcECs6 g/RYvUo3WymlGc4U8asQh0lpnzvG6dBhOr9MIxE3cLZ77YPXp67JIjtg9vvQxTzl gqzQXPgtLi9y1zHhrty5i66iZkfQk2EieMMWSKnjmmK3EUu0U/+Y50Ww2BCwBQkT Vz2fhYR8Yh4W3aLKcGbDHp/HVwMkPJOF1potgSHJJGJf+gpuKELhZG6HMoqY2Gvl y7T1g1NZrXykMo26ZfAv2gB6M2o= -----END CERTIFICATE-----Generated at Fri Apr 4 18:40:16 2025 by rpki-client