$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft File: DqwT6V7p4IXk3eST4sWV7hZQy5E.mft (raw, json) Hash identifier: TW+Wf/i43EiDqUwdK0fJIzZVGs4qCq8nTzdrFRScyNo= Subject key identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA Authority key identifier: 0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 Certificate issuer: /CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Certificate serial: 08C2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft Manifest number: 08C2 Signing time: Fri 06 Jun 2025 12:14:46 +0000 Manifest this update: Fri 06 Jun 2025 12:14:46 +0000 Manifest next update: Fri 06 Jun 2025 18:14:46 +0000 Files and hashes: 1: DqwT6V7p4IXk3eST4sWV7hZQy5E.crl (hash: +pT8kEXYJ+njheZ0UX148KqR1qd56LSDCUua22Spsq4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Validity Not Before: Jun 6 12:14:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C130BB42761CDC64A0C4FD8C24857C4C71BC9EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:65:ae:fa:dc:ed:29:cc:7f:ec:48:ba:c1: 9d:87:25:fe:64:4b:9c:6c:2a:24:71:70:03:66:73: 7c:55:a3:90:51:c8:1f:fd:d8:a0:24:ab:d1:6c:30: a3:ab:ca:97:29:6b:2c:87:0b:ef:8c:13:16:78:86: 05:6c:15:00:bf:76:66:55:9d:e9:6a:a9:c4:ce:73: b3:8a:23:7b:5c:bf:6d:33:d8:86:94:09:27:ab:0b: 23:46:a7:f4:a6:ab:c1:9c:40:1c:bc:e0:21:ec:c4: c7:3b:97:aa:98:a3:8d:c1:e0:ba:6a:5a:63:41:7b: 36:75:55:d4:4e:5a:bb:2f:a5:c4:f2:c0:82:ad:dc: eb:9f:cc:37:c8:e4:35:3f:21:f2:c9:7d:d0:17:6f: fa:90:b4:c8:e1:44:ca:f3:2e:81:50:a4:38:41:ef: 7b:fd:c1:d9:35:86:ee:92:bc:0a:ca:8c:51:b4:17: af:58:74:38:84:04:93:c8:82:e5:b6:51:a8:48:a9: 75:ed:af:75:02:37:20:62:4e:e7:95:2c:fa:62:4e: 53:ee:cc:ad:8a:d9:27:6e:64:fb:04:0c:8f:b2:fa: 24:c5:b0:91:c2:83:21:79:98:c5:3f:b5:87:43:96: ec:95:18:f5:40:8a:43:51:02:fb:f0:b4:0e:88:59: 75:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA X509v3 Authority Key Identifier: keyid:0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:47:0c:13:b2:f1:0b:75:cb:89:e9:e1:41:ab:b4:ba:2c:9c: 30:18:2c:2e:f6:1f:5d:3a:ee:9e:7c:c8:98:57:91:e6:87:b9: b1:8b:1e:aa:95:3d:e0:b2:ff:13:6a:c2:bd:6a:33:20:81:0c: c0:c2:ce:e1:92:ed:a1:07:65:de:24:1e:10:5b:6c:4f:c6:ed: 87:9a:73:26:e9:f8:90:92:8d:03:f8:93:2b:ad:c4:1e:fd:fa: f6:6c:b5:47:05:e4:5f:39:e0:e1:34:03:a3:02:11:06:67:0f: 86:13:fe:8c:dd:73:24:3c:e5:76:19:25:a0:81:0c:88:d1:15: 32:23:92:a0:bb:ed:43:c6:7d:4c:3b:2a:e0:92:2f:56:57:0c: 55:f8:84:dc:a3:ef:aa:a1:cd:58:33:fb:9c:32:e5:80:07:61: d0:f6:bc:89:7f:b2:fa:e1:8b:0a:1e:36:f0:83:47:60:be:f3: f0:73:78:aa:33:49:35:94:45:5c:f2:fb:77:99:08:ed:e4:65: b6:b5:8f:29:46:78:a5:4f:42:40:0b:ca:07:c8:c7:43:d9:00: cd:9a:12:41:cb:69:52:d3:a0:47:8b:95:41:93:30:b6:88:c5: 89:a8:bc:9a:0b:af:40:9b:d5:b2:fd:11:96:5f:5a:14:4f:8d: 3b:b9:84:f6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB QzEzRTk1RUU5RTA4NUU0RERFNDkzRTJDNTk1RUUxNjUwQ0I5MTAeFw0yNTA2MDYx MjE0NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMxMzBCQjQyNzYxQ0RD NjRBMEM0RkQ4QzI0ODU3QzRDNzFCQzlFRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIrWWu+tztKcx/7Ei6wZ2HJf5kS5xsKiRxcANmc3xVo5BRyB/9 2KAkq9FsMKOrypcpayyHC++MExZ4hgVsFQC/dmZVnelqqcTOc7OKI3tcv20z2IaU CSerCyNGp/Smq8GcQBy84CHsxMc7l6qYo43B4LpqWmNBezZ1VdROWrsvpcTywIKt 3OufzDfI5DU/IfLJfdAXb/qQtMjhRMrzLoFQpDhB73v9wdk1hu6SvArKjFG0F69Y dDiEBJPIguW2UahIqXXtr3UCNyBiTueVLPpiTlPuzK2K2SduZPsEDI+y+iTFsJHC gyF5mMU/tYdDluyVGPVAikNRAvvwtA6IWXXxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUwTC7QnYc3GSgxP2MJIV8THG8nvowHwYDVR0jBBgwFoAUDqwT6V7p4IXk3eST 4sWV7hZQy5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC9EcXdUNlY3cDRJWGszZVNUNHNXVjdoWlF5NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Rxd1Q2VjdwNElYazNlU1Q0c1dWN2haUXk1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzAvRHF3VDZWN3A0SVhr M2VTVDRzV1Y3aFpReTVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAZHDBOy8Qt1y4np4UGrtLosnDAYLC72H1067p58yJhXkeaHubGLHqqVPeCy /xNqwr1qMyCBDMDCzuGS7aEHZd4kHhBbbE/G7Yeacybp+JCSjQP4kyutxB79+vZs tUcF5F854OE0A6MCEQZnD4YT/ozdcyQ85XYZJaCBDIjRFTIjkqC77UPGfUw7KuCS L1ZXDFX4hNyj76qhzVgz+5wy5YAHYdD2vIl/svrhiwoeNvCDR2C+8/BzeKozSTWU RVzy+3eZCO3kZba1jylGeKVPQkALygfIx0PZAM2aEkHLaVLToEeLlUGTMLaIxYmo vJoLr0Cb1bL9EZZfWhRPjTu5hPY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:17 2025 by rpki-client