$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft File: 43TDfhgAlB4aNVhdEMhLffz80nA.mft (raw, json) Hash identifier: hLqFitNiacaNR6jJSp+JRD3TfqQXlg0BUUYvRDTgabc= Subject key identifier: 11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6 Authority key identifier: E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70 Certificate issuer: /CN=E374C37E1800941E1A35585D10C84B7DFCFCD270 Certificate serial: 0640 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft Manifest number: 0640 Signing time: Fri 04 Apr 2025 19:08:28 +0000 Manifest this update: Fri 04 Apr 2025 19:08:28 +0000 Manifest next update: Sat 05 Apr 2025 01:08:28 +0000 Files and hashes: 1: 43TDfhgAlB4aNVhdEMhLffz80nA.crl (hash: RcLJL648eTDJAefBHLazrbI3wktfD5Momv48FOsuT0w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E374C37E1800941E1A35585D10C84B7DFCFCD270 Validity Not Before: Apr 4 19:08:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=11520E6037D0A611A827119800481055018824E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:3c:14:d4:b4:c9:b8:5b:fc:8f:0f:f1:7e: b7:3a:11:64:67:35:74:a7:b6:fa:2b:74:ad:96:63: 76:be:a2:ec:3a:10:f5:d4:d3:45:3d:6a:96:76:5d: 61:c6:3e:91:97:c9:5f:83:fa:ab:c0:ce:04:b6:f4: 4a:53:2a:72:12:28:13:c0:58:49:7e:82:7c:80:20: 22:6b:04:4e:ac:f6:31:cc:1b:e9:eb:0c:8a:65:b0: 60:1e:dd:f5:0f:a0:61:e0:9e:98:c8:1f:11:9b:2c: 62:18:5e:e4:4e:47:cc:53:a9:21:5e:b5:22:5d:a2: 84:29:fe:76:ae:f9:e2:de:a1:0f:5d:c5:09:0b:7f: 54:18:3b:c5:34:77:58:20:70:2f:61:43:0c:cd:e2: bd:fb:c1:dc:9b:15:d4:06:15:af:bc:43:03:80:60: 87:e8:4b:aa:9c:c2:b9:e6:fb:26:0b:57:5e:c5:82: 03:bf:88:6f:dc:a9:77:f0:46:98:d3:ec:ed:d6:f2: 3c:38:4e:02:52:28:7e:23:71:79:f9:09:60:e9:70: 8f:c8:a4:96:81:9d:22:c3:5d:37:a1:b5:6c:42:53: 71:c8:0b:14:ba:1e:34:cf:60:8d:33:5e:38:77:ea: e3:06:a5:a8:1f:36:19:61:89:e3:b1:de:3b:ec:54: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6 X509v3 Authority Key Identifier: keyid:E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a0:79:93:5e:c4:cf:7d:6e:79:3a:9a:fd:eb:55:72:c0:36: 6c:b7:fa:c5:b5:f7:58:43:a1:36:ef:ef:ce:93:c9:56:44:3e: 27:4f:1f:b3:d5:bb:24:ba:14:9c:cb:75:06:8d:91:6b:54:5f: 4d:61:67:1a:48:f5:43:5f:a8:ab:dc:b9:85:45:a2:49:53:dd: 6a:24:67:cf:3b:e6:1f:ee:36:96:1d:fc:b2:72:94:85:b0:a1: 0b:c3:ca:d9:a1:1a:92:af:91:73:ec:21:06:08:ec:52:df:ba: e9:24:30:3f:2a:b8:d4:88:42:c7:c9:39:d1:66:15:bb:ec:d8: 69:cd:03:2a:ff:fa:eb:78:df:6c:2e:ae:1b:e9:a2:7c:5e:aa: 0c:88:4e:29:39:8c:7b:5b:8b:90:e0:44:0a:5b:ad:70:f8:f0: 0c:67:c0:f4:08:43:e7:fe:2c:c3:d3:96:03:94:63:9e:1d:77: b5:de:44:b7:b3:4d:6c:25:a8:7f:e3:82:b9:41:70:e0:33:13: de:bd:f2:21:f3:56:82:49:aa:3f:98:48:22:8b:01:2b:a1:51: 53:34:3a:69:f4:5e:50:96:de:70:3d:7c:6f:76:f2:46:a4:27: 20:70:e7:9c:f3:55:df:e7:c6:67:01:56:ef:73:09:35:0d:ae: 1e:d1:b7:4a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTM3 NEMzN0UxODAwOTQxRTFBMzU1ODVEMTBDODRCN0RGQ0ZDRDI3MDAeFw0yNTA0MDQx OTA4MjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDExNTIwRTYwMzdEMEE2 MTFBODI3MTE5ODAwNDgxMDU1MDE4ODI0RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCesDwU1LTJuFv8jw/xfrc6EWRnNXSntvordK2WY3a+ouw6EPXU 00U9apZ2XWHGPpGXyV+D+qvAzgS29EpTKnISKBPAWEl+gnyAICJrBE6s9jHMG+nr DIplsGAe3fUPoGHgnpjIHxGbLGIYXuROR8xTqSFetSJdooQp/nau+eLeoQ9dxQkL f1QYO8U0d1ggcC9hQwzN4r37wdybFdQGFa+8QwOAYIfoS6qcwrnm+yYLV17FggO/ iG/cqXfwRpjT7O3W8jw4TgJSKH4jcXn5CWDpcI/IpJaBnSLDXTehtWxCU3HICxS6 HjTPYI0zXjh36uMGpagfNhlhieOx3jvsVOLzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUEVIOYDfQphGoJxGYAEgQVQGIJOYwHwYDVR0jBBgwFoAU43TDfhgAlB4aNVhd EMhLffz80nAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 My80M1REZmhnQWxCNGFOVmhkRU1oTGZmejgwbkEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzQzVERmaGdBbEI0YU5WaGRFTWhMZmZ6ODBuQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODMvNDNURGZoZ0FsQjRh TlZoZEVNaExmZno4MG5BLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABOgeZNexM99bnk6mv3rVXLANmy3+sW191hDoTbv786TyVZEPidPH7PVuyS6 FJzLdQaNkWtUX01hZxpI9UNfqKvcuYVFoklT3WokZ8875h/uNpYd/LJylIWwoQvD ytmhGpKvkXPsIQYI7FLfuukkMD8quNSIQsfJOdFmFbvs2GnNAyr/+ut432wurhvp onxeqgyITik5jHtbi5DgRApbrXD48AxnwPQIQ+f+LMPTlgOUY54dd7XeRLezTWwl qH/jgrlBcOAzE9698iHzVoJJqj+YSCKLASuhUVM0Omn0XlCW3nA9fG928kakJyBw 55zzVd/nxmcBVu9zCTUNrh7Rt0o= -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:13 2025 by rpki-client