$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft File: WBE1OPP_XM76JqEG222MbLwCoZ8.mft (raw, json) Hash identifier: tBYDtoHIdt4GRM14LuoAhKrXLdHSv5KcoU/ZELABQ6Q= Subject key identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 Authority key identifier: 58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F Certificate issuer: /CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Certificate serial: 0592 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft Manifest number: 0592 Signing time: Fri 04 Apr 2025 19:07:28 +0000 Manifest this update: Fri 04 Apr 2025 19:07:28 +0000 Manifest next update: Sat 05 Apr 2025 01:07:28 +0000 Files and hashes: 1: WBE1OPP_XM76JqEG222MbLwCoZ8.crl (hash: xewVt5eJmA2VoarUOWC8NPrr+mRQdGr21secr8m2JGE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Validity Not Before: Apr 4 19:07:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=22397420AA3CFFCFBCE8B2FD94D32408B1688B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:d9:3e:3e:32:2a:ec:41:f4:fc:57:14:a9: 88:cc:43:6a:cd:85:32:04:bd:91:0d:88:7a:fc:79: 3f:50:4c:68:e9:49:ea:36:50:53:5a:ee:96:31:ee: 6e:3a:ac:2c:e2:98:7c:11:16:1e:bc:b5:b3:82:38: b3:04:99:4b:b7:a5:8f:3c:bc:d2:c9:43:53:62:1b: 89:d1:ff:5f:0f:65:5d:35:fc:88:d7:86:d4:41:08: ec:f0:4f:06:d6:f4:1c:bf:51:4a:e9:08:66:50:c7: bd:2d:c3:50:44:de:3b:9d:fd:33:00:ec:7f:42:2e: ec:a1:00:d3:ec:43:d6:2c:8a:90:10:62:87:77:cf: 6b:b6:56:77:7f:76:11:f7:25:72:d5:70:d7:32:bc: c9:35:e5:30:94:38:c1:2b:63:a4:56:eb:14:89:03: 88:d5:d7:1a:ef:cc:ab:97:8c:95:7b:06:ff:1a:ba: d5:46:48:f9:50:98:33:db:cd:eb:76:e0:7f:9c:e3: dd:4c:1b:18:32:cb:21:0d:f3:03:09:97:ef:31:f0: 6c:10:3b:46:73:7f:c5:1c:54:9c:97:d0:36:f3:99: 89:60:98:c5:ed:a5:61:56:d3:ce:dd:38:f2:6f:56: 20:5a:6b:95:7a:9b:fd:86:4f:81:a4:27:33:40:13: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 X509v3 Authority Key Identifier: keyid:58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:bf:6a:d8:de:15:17:81:1b:85:0c:85:82:3e:25:0c:4c:bd: 97:85:6a:76:86:9a:39:97:0b:e2:25:f2:51:8d:25:97:fc:39: dc:18:1b:f8:42:82:ba:30:76:f3:99:ce:f1:9e:5a:26:4e:63: bc:b0:b3:65:09:77:28:01:7b:6a:ec:97:4e:84:a0:cd:cd:52: aa:ca:c7:4e:bf:3b:68:26:1c:49:83:f9:4b:92:78:e7:56:4a: b8:70:69:6d:74:b4:0d:f0:0f:ac:3e:61:2b:23:4c:a5:f5:fd: 07:7e:cb:30:6d:b8:11:e0:c9:57:6d:71:62:06:10:d4:bc:08: df:05:0d:37:ab:34:5e:15:09:2f:3e:0a:7c:1e:1d:c8:fb:5d: b7:91:4c:ac:43:07:14:b8:34:a2:b5:c2:a9:09:71:1c:c1:1f: 6a:7d:34:f8:4b:3d:78:fe:32:07:83:4f:10:a8:55:96:7a:b7: c1:be:c8:e8:10:f2:99:27:3f:de:2d:bd:a0:df:c5:83:e8:fa: 74:31:2e:8d:7a:98:3b:6b:7b:4d:3d:7b:87:72:41:a0:18:c4: eb:ce:5d:eb:72:12:12:01:bd:b9:91:d0:c2:c1:48:8f:5a:89: 0f:ad:c6:02:ce:2d:55:af:20:0f:4b:9d:dd:3b:c6:9c:ef:44: bd:01:f1:f4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgx MTM1MzhGM0ZGNUNDRUZBMjZBMTA2REI2RDhDNkNCQzAyQTE5RjAeFw0yNTA0MDQx OTA3MjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIyMzk3NDIwQUEzQ0ZG Q0ZCQ0U4QjJGRDk0RDMyNDA4QjE2ODhCMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiP9k+PjIq7EH0/FcUqYjMQ2rNhTIEvZENiHr8eT9QTGjpSeo2 UFNa7pYx7m46rCzimHwRFh68tbOCOLMEmUu3pY88vNLJQ1NiG4nR/18PZV01/IjX htRBCOzwTwbW9By/UUrpCGZQx70tw1BE3jud/TMA7H9CLuyhANPsQ9YsipAQYod3 z2u2Vnd/dhH3JXLVcNcyvMk15TCUOMErY6RW6xSJA4jV1xrvzKuXjJV7Bv8autVG SPlQmDPbzet24H+c491MGxgyyyEN8wMJl+8x8GwQO0Zzf8UcVJyX0DbzmYlgmMXt pWFW087dOPJvViBaa5V6m/2GT4GkJzNAE7+BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIjl0IKo8/8+86LL9lNMkCLFoiwYwHwYDVR0jBBgwFoAUWBE1OPP/XM76JqEG 222MbLwCoZ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9XQkUxT1BQX1hNNzZKcUVHMjIyTWJMd0NvWjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dCRTFPUFBfWE03NkpxRUcyMjJNYkx3Q29aOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvV0JFMU9QUF9YTTc2 SnFFRzIyMk1iTHdDb1o4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACa/atjeFReBG4UMhYI+JQxMvZeFanaGmjmXC+Il8lGNJZf8OdwYG/hCgrow dvOZzvGeWiZOY7yws2UJdygBe2rsl06EoM3NUqrKx06/O2gmHEmD+UuSeOdWSrhw aW10tA3wD6w+YSsjTKX1/Qd+yzBtuBHgyVdtcWIGENS8CN8FDTerNF4VCS8+Cnwe Hcj7XbeRTKxDBxS4NKK1wqkJcRzBH2p9NPhLPXj+MgeDTxCoVZZ6t8G+yOgQ8pkn P94tvaDfxYPo+nQxLo16mDtre009e4dyQaAYxOvOXetyEhIBvbmR0MLBSI9aiQ+t xgLOLVWvIA9Lnd07xpzvRL0B8fQ= -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:04 2025 by rpki-client