Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft
File: lSqtrTxu0krJJnnelLaRzxfF67A.mft (raw, json)
Hash identifier: STiTTfUA3ihcp2HCbYi4QTtFouKn73QjkXBUPx+8zKE=
Subject key identifier: F3:C1:47:78:28:76:C8:C6:33:83:DD:CF:C1:8A:CC:DB:A3:D4:BC:51
Authority key identifier: 95:2A:AD:AD:3C:6E:D2:4A:C9:26:79:DE:94:B6:91:CF:17:C5:EB:B0
Certificate issuer: /CN=952AADAD3C6ED24AC92679DE94B691CF17C5EBB0
Certificate serial: 0914
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lSqtrTxu0krJJnnelLaRzxfF67A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft
Manifest number: 0914
Signing time: Mon 14 Apr 2025 17:36:42 +0000
Manifest this update: Mon 14 Apr 2025 17:36:42 +0000
Manifest next update: Mon 14 Apr 2025 23:36:42 +0000
Files and hashes: 1: lSqtrTxu0krJJnnelLaRzxfF67A.crl (hash: 874rqGL4o3RrJkhZQ2YnOnnNptfkfm9+3DR/TqEOYdY=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lSqtrTxu0krJJnnelLaRzxfF67A.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 23:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952AADAD3C6ED24AC92679DE94B691CF17C5EBB0
Validity
Not Before: Apr 14 17:36:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F3C147782876C8C63383DDCFC18ACCDBA3D4BC51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:0d:f9:16:66:8b:53:72:ae:97:de:41:dd:
e0:2c:e4:69:10:55:00:11:38:30:fe:ce:91:86:22:
5c:00:4e:fb:7b:b4:32:c7:bd:2a:eb:7a:81:5a:40:
03:00:eb:1a:6a:86:bc:9f:8b:28:7b:88:65:6b:49:
df:52:ef:0f:2b:95:5d:74:43:8e:6e:14:38:68:e2:
46:ba:68:76:c3:ea:ae:14:3a:b4:ac:0c:3f:28:95:
29:38:12:49:51:a6:fb:65:6f:8a:7e:fb:ed:a5:cc:
e9:24:34:ac:c8:05:bb:41:cf:9c:22:32:21:34:d3:
e7:c6:c9:e4:f6:da:58:df:7c:c8:25:db:30:3c:f3:
66:37:1f:35:cf:5b:52:bc:3b:c7:7b:79:4d:0f:bd:
a2:70:a1:b4:4a:c3:aa:eb:bd:33:76:4b:39:b7:bb:
db:10:f3:f8:26:ec:4f:7c:39:9c:77:f5:80:23:88:
6c:bd:1b:d2:c8:e3:eb:9b:bb:9a:9d:61:ff:68:9f:
4c:7c:34:04:9d:0f:ce:b7:2a:d7:13:c2:24:50:fa:
8f:70:73:da:0c:60:8e:c8:93:21:cf:d3:96:a0:37:
28:b2:f5:bf:b5:e4:8d:ab:a6:34:46:12:7c:ef:64:
4a:8f:d3:cf:fa:8e:77:a9:40:6a:e5:be:1d:e9:26:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C1:47:78:28:76:C8:C6:33:83:DD:CF:C1:8A:CC:DB:A3:D4:BC:51
X509v3 Authority Key Identifier:
keyid:95:2A:AD:AD:3C:6E:D2:4A:C9:26:79:DE:94:B6:91:CF:17:C5:EB:B0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lSqtrTxu0krJJnnelLaRzxfF67A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e9:c1:7b:52:4b:9b:30:d8:9e:c4:c8:c0:8a:c4:16:5c:81:
e3:e6:1e:79:f3:91:c0:e3:0c:79:65:ed:b9:b9:81:49:0c:ef:
a1:83:94:82:12:fd:eb:56:d4:3a:63:87:f9:79:83:7b:23:4e:
ab:e9:14:f7:f4:7b:34:0b:a5:b6:c3:f7:09:cd:00:87:cd:13:
0d:9c:b4:62:53:c8:01:22:5c:6b:48:02:0e:cd:f5:c6:0f:71:
9d:7a:22:39:e8:1b:87:7c:6d:4a:ea:d2:7b:34:7f:25:dc:f2:
53:55:6c:c9:cb:1b:d9:94:fd:07:91:4b:61:a9:78:92:74:cd:
9f:14:76:6a:41:ff:52:2d:10:64:74:7c:99:0c:63:66:44:63:
a3:d8:0b:e9:82:06:0e:d8:a5:99:4c:ce:3e:6b:12:8c:71:31:
6a:30:3b:4e:ab:a3:ab:16:e2:4d:82:29:79:cb:32:10:83:2a:
dd:d7:07:c2:ef:44:95:dc:2b:30:cc:ac:b2:e0:c9:31:6b:c6:
f2:fd:af:b1:06:3d:4b:33:f1:4e:9c:1d:32:f8:22:de:e2:9c:
ee:1e:df:20:0b:b2:0d:c6:07:26:57:be:17:5e:10:4e:19:91:
0a:b5:77:59:2e:ae:cb:bb:80:e4:fe:52:54:ff:31:38:b7:36:
4b:af:6b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:21:54 2025 by rpki-client