$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft File: Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft (raw, json) Hash identifier: GVDOFqofnxgXJocKa91i95BR5ai4puAzUp4IeRBMx9Q= Subject key identifier: FE:35:9E:A0:1E:07:AC:81:A1:FE:55:71:69:D6:C7:CC:95:DB:89:DA Authority key identifier: 4A:BD:40:77:86:47:33:21:29:CF:2A:1E:FD:FF:2B:1F:A9:5F:56:96 Certificate issuer: /CN=4ABD40778647332129CF2A1EFDFF2B1FA95F5696 Certificate serial: 066A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft Manifest number: 066A Signing time: Fri 04 Apr 2025 13:06:08 +0000 Manifest this update: Fri 04 Apr 2025 13:06:08 +0000 Manifest next update: Fri 04 Apr 2025 19:06:08 +0000 Files and hashes: 1: Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.crl (hash: 4p4THGXOMnebKGWZva2mN2a+R4cVr2uXN6ziFmiiAU0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ABD40778647332129CF2A1EFDFF2B1FA95F5696 Validity Not Before: Apr 4 13:06:08 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FE359EA01E07AC81A1FE557169D6C7CC95DB89DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:46:62:3f:88:41:64:4f:85:de:02:fd:32:77: af:a1:c7:3b:36:f8:8f:75:80:d3:5d:cd:cd:05:81: c3:86:f4:2b:43:0d:82:c3:ed:ae:9e:86:92:85:be: 3b:13:d7:12:5f:45:0c:9f:39:c1:29:c9:2a:78:0c: 0e:a5:be:0f:d8:19:ba:7c:8a:6b:ca:50:f8:8d:25: 37:d6:02:e2:7a:c8:94:23:e4:43:7b:ae:13:04:2e: 83:4d:07:67:fe:ae:e1:f3:87:91:a4:54:61:89:e4: f3:bc:bb:2b:fd:95:48:3c:0d:9d:4b:60:2d:c4:b8: f4:71:74:f2:ea:4b:ff:0d:24:dd:4b:d5:47:bf:ef: 38:80:36:57:cd:80:ff:46:97:a3:1a:e9:c4:d6:aa: cc:d9:ab:c1:6e:0e:bc:32:30:9b:4f:74:7b:5c:39: 03:a1:01:fd:b1:c5:5d:41:5e:dc:af:77:5f:a6:4f: 77:b1:3e:ee:a7:6b:2f:01:40:eb:f8:f5:93:bd:3c: f0:3b:85:cb:78:09:56:74:41:4f:cd:be:da:6a:e0: 9a:27:af:20:6a:2d:d1:91:8f:50:ef:e9:a2:a2:dd: 92:52:06:a3:2d:1c:29:f4:58:33:8f:19:e8:20:d2: 8d:85:fa:83:d9:ad:16:2c:c2:58:95:72:c0:ef:53: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:35:9E:A0:1E:07:AC:81:A1:FE:55:71:69:D6:C7:CC:95:DB:89:DA X509v3 Authority Key Identifier: keyid:4A:BD:40:77:86:47:33:21:29:CF:2A:1E:FD:FF:2B:1F:A9:5F:56:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:41:e4:69:a3:2b:02:5c:1c:7d:c6:f5:a2:f5:ec:2a:9b:e5: 0f:d7:46:e1:4c:76:f4:c6:bb:63:a8:41:b8:ab:53:9e:04:ad: a2:ab:a2:c2:0b:a1:af:fd:63:6c:fc:f0:6b:0e:e4:8f:90:a0: 0f:28:7f:17:2d:fa:e8:7c:b6:c5:3b:08:1a:9c:c3:dd:18:c1: ea:bd:e4:8e:83:b2:0b:30:bc:7e:9e:e3:e1:44:8d:29:6d:90: d7:3b:5f:4d:6b:15:26:69:6c:84:d6:5a:ba:dd:8a:e9:b1:42: 8f:5a:33:92:d6:6c:1c:b9:8b:06:eb:bd:e5:79:b9:b8:50:67: 9a:84:8c:a1:16:53:db:b9:2b:5f:66:e8:d7:17:c5:8e:7a:d7: 19:5d:a4:67:d3:5d:64:46:11:61:c8:52:a4:df:b9:8a:c6:63: 65:4d:f0:53:03:a6:ff:35:a3:b4:68:d9:d5:c5:8e:de:8e:fa: d9:64:53:89:4a:d0:40:af:da:a7:09:1e:bd:00:32:37:e6:98: 63:8e:4e:44:15:bc:62:e2:fa:8a:ff:ce:af:ae:51:72:1c:4d: 7b:7a:45:a0:37:15:38:75:67:2d:48:ec:48:fd:f9:b2:31:00: 7b:e7:53:83:62:d1:40:32:33:7a:a1:7c:47:2b:3b:46:71:78: f1:ee:f0:c1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEFC RDQwNzc4NjQ3MzMyMTI5Q0YyQTFFRkRGRjJCMUZBOTVGNTY5NjAeFw0yNTA0MDQx MzA2MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZFMzU5RUEwMUUwN0FD ODFBMUZFNTU3MTY5RDZDN0NDOTVEQjg5REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7RmI/iEFkT4XeAv0yd6+hxzs2+I91gNNdzc0FgcOG9CtDDYLD 7a6ehpKFvjsT1xJfRQyfOcEpySp4DA6lvg/YGbp8imvKUPiNJTfWAuJ6yJQj5EN7 rhMELoNNB2f+ruHzh5GkVGGJ5PO8uyv9lUg8DZ1LYC3EuPRxdPLqS/8NJN1L1Ue/ 7ziANlfNgP9Gl6Ma6cTWqszZq8FuDrwyMJtPdHtcOQOhAf2xxV1BXtyvd1+mT3ex Pu6nay8BQOv49ZO9PPA7hct4CVZ0QU/Nvtpq4JonryBqLdGRj1Dv6aKi3ZJSBqMt HCn0WDOPGegg0o2F+oPZrRYswliVcsDvU+cbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU/jWeoB4HrIGh/lVxadbHzJXbidowHwYDVR0jBBgwFoAUSr1Ad4ZHMyEpzyoe /f8rH6lfVpYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OS9TcjFBZDRaSE15RXB6eW9lX2Y4ckg2bGZWcFkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NyMUFkNFpITXlFcHp5b2VfZjhySDZsZlZwWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzkvU3IxQWQ0WkhNeUVw enlvZV9mOHJINmxmVnBZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACJB5GmjKwJcHH3G9aL17Cqb5Q/XRuFMdvTGu2OoQbirU54EraKrosILoa/9 Y2z88GsO5I+QoA8ofxct+uh8tsU7CBqcw90Yweq95I6DsgswvH6e4+FEjSltkNc7 X01rFSZpbITWWrrdiumxQo9aM5LWbBy5iwbrveV5ubhQZ5qEjKEWU9u5K19m6NcX xY561xldpGfTXWRGEWHIUqTfuYrGY2VN8FMDpv81o7Ro2dXFjt6O+tlkU4lK0ECv 2qcJHr0AMjfmmGOOTkQVvGLi+or/zq+uUXIcTXt6RaA3FTh1Zy1I7Ej9+bIxAHvn U4Ni0UAyM3qhfEcrO0ZxePHu8ME= -----END CERTIFICATE-----Generated at Fri Apr 4 18:41:27 2025 by rpki-client