$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft File: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft (raw, json) Hash identifier: qaSh1K/+5F9H0XjyXTmQswQjuug++xJi+Uh6zthOEOw= Subject key identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 Authority key identifier: 6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB Certificate issuer: /CN=6FE13AA555489412B2892267A49DAEC44693A6AB Certificate serial: 0841 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft Manifest number: 0841 Signing time: Fri 04 Apr 2025 14:07:28 +0000 Manifest this update: Fri 04 Apr 2025 14:07:28 +0000 Manifest next update: Fri 04 Apr 2025 20:07:28 +0000 Files and hashes: 1: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl (hash: 3wO93s+C6aKwhYV4wuiCppOWGf0E1wcSDFCaGbq+V7U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FE13AA555489412B2892267A49DAEC44693A6AB Validity Not Before: Apr 4 14:07:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=62AED79DED1AD2E1327501BE06B5E7C5A4F1CFD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:e8:18:68:cb:77:75:de:fd:11:52:33:a7: 9f:bb:ca:56:d9:e1:7e:e1:c3:f3:97:1d:8b:73:fc: 24:6b:ef:6e:8a:6a:05:0a:ca:70:b2:2c:3f:11:a7: e0:ac:8f:4d:5c:35:6e:43:ad:b1:96:82:1d:ba:d2: f5:bf:03:36:d4:13:60:6a:a0:87:09:71:95:f6:77: bc:6c:18:00:80:72:7c:31:ef:9c:03:50:2e:32:d5: 95:b0:a7:67:9e:b1:a5:01:b7:7d:c7:e9:bd:1c:0b: f9:0c:b5:7f:e1:e7:b7:a7:a6:75:04:5c:1b:ea:eb: 14:9d:f6:88:22:d1:a8:d9:5e:56:82:a5:a3:29:12: 80:7d:8a:ea:26:7f:e4:76:dc:52:06:84:d8:87:6e: f6:70:92:e9:cb:23:95:a1:4c:36:1c:b7:70:96:85: 1f:78:08:87:dc:d4:cf:87:09:a1:a7:5e:b7:ba:c6: 6c:93:77:3f:50:76:fe:f0:5c:b5:27:75:1a:bb:52: 77:63:9c:70:ed:47:b5:a5:d3:cb:f2:6c:69:9a:2d: 5f:b2:62:4c:5e:e7:5b:4a:a3:44:7b:f8:e3:b4:3a: 23:f3:46:6e:c5:92:91:43:1a:0f:f0:39:00:d5:72: 40:e0:9c:0a:3f:9b:1b:a7:ee:28:f8:34:45:f7:31: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 X509v3 Authority Key Identifier: keyid:6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:c4:7c:c8:0e:c2:9f:09:ac:6f:06:8e:20:62:3b:bd:c2:40: 50:ef:8d:80:dd:b7:2b:58:85:51:58:5f:48:20:2d:41:e7:eb: 43:a8:5d:3d:ca:1d:c2:14:41:7e:61:fa:43:ea:ad:61:8a:b1: ba:aa:34:38:8d:51:47:da:75:62:fd:a8:0a:8d:ab:bd:20:9f: a5:c6:e0:d9:04:65:97:f4:6d:64:c9:46:9d:20:2f:bf:f5:f2: e7:6d:cf:fc:9a:7e:91:9b:c5:7f:22:e1:3d:29:14:61:38:13: c6:1a:2e:53:ba:65:b2:b9:c6:aa:ab:83:a1:2a:00:75:c2:6f: 37:0f:2c:cd:6b:4a:97:da:d7:b8:be:4c:23:ef:ea:71:81:97: 4a:36:4b:d4:fc:d4:fe:f2:1a:35:a9:a0:86:04:e4:a5:70:30: d1:48:12:f2:42:25:10:50:cb:15:7a:5a:28:ea:cb:c1:9d:10: 07:81:c8:dc:fa:b4:c5:77:a0:ff:d7:1c:0b:19:f0:4f:47:69: 12:ed:03:89:32:41:ab:75:58:e5:b6:a6:d6:01:41:19:43:43: fe:52:74:7b:9a:91:df:4d:34:a2:8e:12:62:b6:65:53:7e:2e: df:5f:8b:d9:66:ca:76:74:1d:39:f6:0a:c5:fc:7a:e5:05:9e: c4:ea:98:de -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZF MTNBQTU1NTQ4OTQxMkIyODkyMjY3QTQ5REFFQzQ0NjkzQTZBQjAeFw0yNTA0MDQx NDA3MjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYyQUVENzlERUQxQUQy RTEzMjc1MDFCRTA2QjVFN0M1QTRGMUNGRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS7+gYaMt3dd79EVIzp5+7ylbZ4X7hw/OXHYtz/CRr726KagUK ynCyLD8Rp+Csj01cNW5DrbGWgh260vW/AzbUE2BqoIcJcZX2d7xsGACAcnwx75wD UC4y1ZWwp2eesaUBt33H6b0cC/kMtX/h57enpnUEXBvq6xSd9ogi0ajZXlaCpaMp EoB9iuomf+R23FIGhNiHbvZwkunLI5WhTDYct3CWhR94CIfc1M+HCaGnXre6xmyT dz9Qdv7wXLUndRq7UndjnHDtR7Wl08vybGmaLV+yYkxe51tKo0R7+OO0OiPzRm7F kpFDGg/wOQDVckDgnAo/mxun7ij4NEX3MRT/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUYq7Xne0a0uEydQG+BrXnxaTxz9kwHwYDVR0jBBgwFoAUb+E6pVVIlBKyiSJn pJ2uxEaTpqswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni9iLUU2cFZWSWxCS3lpU0pucEoydXhFYVRwcXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ItRTZwVlZJbEJLeWlTSm5wSjJ1eEVhVHBxcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvYi1FNnBWVklsQkt5 aVNKbnBKMnV4RWFUcHFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKfEfMgOwp8JrG8GjiBiO73CQFDvjYDdtytYhVFYX0ggLUHn60OoXT3KHcIU QX5h+kPqrWGKsbqqNDiNUUfadWL9qAqNq70gn6XG4NkEZZf0bWTJRp0gL7/18udt z/yafpGbxX8i4T0pFGE4E8YaLlO6ZbK5xqqrg6EqAHXCbzcPLM1rSpfa17i+TCPv 6nGBl0o2S9T81P7yGjWpoIYE5KVwMNFIEvJCJRBQyxV6Wijqy8GdEAeByNz6tMV3 oP/XHAsZ8E9HaRLtA4kyQat1WOW2ptYBQRlDQ/5SdHuakd9NNKKOEmK2ZVN+Lt9f i9lmynZ0HTn2CsX8euUFnsTqmN4= -----END CERTIFICATE-----Generated at Fri Apr 4 18:43:20 2025 by rpki-client