$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft File: 6ExiO8s49imh7IolaGifaOjftzI.mft (raw, json) Hash identifier: NO0olrsMeu8sLUdhW0GlPVUJNmI1DaWcDC3UEM0MxJA= Subject key identifier: 77:F7:8E:BE:9B:2B:77:40:78:DC:1C:A6:51:FB:CA:F0:31:47:2A:2F Authority key identifier: E8:4C:62:3B:CB:38:F6:29:A1:EC:8A:25:68:68:9F:68:E8:DF:B7:32 Certificate issuer: /CN=E84C623BCB38F629A1EC8A2568689F68E8DFB732 Certificate serial: 0572 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft Manifest number: 0572 Signing time: Fri 04 Apr 2025 14:08:38 +0000 Manifest this update: Fri 04 Apr 2025 14:08:38 +0000 Manifest next update: Fri 04 Apr 2025 20:08:38 +0000 Files and hashes: 1: 6ExiO8s49imh7IolaGifaOjftzI.crl (hash: tjcIg3lCBb8WcILQKtereNdOAlXFsmkFv/zsrqdq2Zw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E84C623BCB38F629A1EC8A2568689F68E8DFB732 Validity Not Before: Apr 4 14:08:38 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=77F78EBE9B2B774078DC1CA651FBCAF031472A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:b3:2e:96:ff:1b:eb:3d:7a:37:56:6e:e6: ea:bc:24:34:f7:c5:fc:90:55:dd:3b:bd:24:5b:25: 6a:da:56:d3:6a:f3:0e:f9:49:80:ca:5d:ff:90:f9: a8:ab:34:fa:51:b5:b3:9a:98:16:38:e3:f6:ea:23: 26:ca:7c:24:ca:37:ac:21:9a:0c:05:ba:bc:6b:d6: 35:55:4a:f0:8c:51:5f:11:d3:3e:7f:7f:08:1d:09: e9:f8:0b:ea:f5:25:cd:7e:0a:48:e8:3b:e0:90:d6: f1:16:a7:1b:15:80:dd:b0:fb:55:f3:f8:20:f1:3e: 20:77:eb:20:36:21:3a:99:33:fa:18:64:32:b7:3c: 2e:3c:38:eb:4a:a1:21:6a:06:e3:7d:b8:d2:ff:eb: 1c:67:24:95:16:a7:c5:be:71:37:1e:e3:03:d5:f2: c6:8a:86:ad:db:1f:d2:e1:e5:e6:5b:ea:87:3d:20: 30:d9:49:1f:71:c7:69:be:1c:51:c2:15:32:78:5c: 6c:be:e3:72:64:ed:46:d4:98:4f:45:29:a5:8a:7c: c7:6e:d6:42:04:d6:52:73:ca:bd:70:40:3e:52:0d: a3:02:d8:c2:4a:21:21:c2:00:36:80:04:3e:63:b1: 05:99:6b:d9:53:93:3a:16:16:49:0f:74:a4:36:f4: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F7:8E:BE:9B:2B:77:40:78:DC:1C:A6:51:FB:CA:F0:31:47:2A:2F X509v3 Authority Key Identifier: keyid:E8:4C:62:3B:CB:38:F6:29:A1:EC:8A:25:68:68:9F:68:E8:DF:B7:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e0:46:ab:57:c5:4d:4c:38:b6:95:60:33:4d:c6:f9:a4:ff: a3:9b:9a:85:0a:14:a1:a9:34:ba:3b:06:4d:e4:58:81:32:58: aa:4d:bf:08:93:43:63:c9:78:2f:71:52:12:aa:08:3e:9a:f7: bf:cf:d2:08:b2:ae:c2:98:95:43:b9:33:a3:88:11:c2:ba:b0: ad:55:d9:54:b3:5c:67:86:7d:e6:e5:ef:e0:a6:0e:02:d1:dc: 35:bc:02:ea:c9:eb:41:db:dc:44:2b:a9:e0:94:21:e3:7c:3a: 8a:f7:f5:4f:2f:23:3c:92:e0:07:24:f6:f5:cb:e1:41:bb:de: 43:24:50:e0:6d:3d:12:9d:6f:99:73:51:4e:1c:73:62:66:0d: 4d:32:b0:ab:91:8e:00:1d:b0:07:ae:04:f7:b4:37:08:e7:aa: 45:0e:f6:0e:13:b2:fd:63:a6:26:fc:30:a1:30:a7:8c:ff:db: d1:72:e4:c0:c8:eb:fa:c8:a5:0b:fe:5a:2d:54:ee:42:e3:fc: 71:00:cd:01:d2:6f:b4:74:54:46:bb:17:47:ed:2b:d8:c2:58: 75:cf:a0:1a:78:a7:e9:4c:e3:b1:f2:f1:b9:5f:72:1e:18:9e: cd:77:88:7d:4a:f5:e0:45:17:49:0b:82:6f:aa:ce:3a:2a:21: 0a:1c:ee:be -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTg0 QzYyM0JDQjM4RjYyOUExRUM4QTI1Njg2ODlGNjhFOERGQjczMjAeFw0yNTA0MDQx NDA4MzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc3Rjc4RUJFOUIyQjc3 NDA3OERDMUNBNjUxRkJDQUYwMzE0NzJBMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbt7Mulv8b6z16N1Zu5uq8JDT3xfyQVd07vSRbJWraVtNq8w75 SYDKXf+Q+airNPpRtbOamBY44/bqIybKfCTKN6whmgwFurxr1jVVSvCMUV8R0z5/ fwgdCen4C+r1Jc1+CkjoO+CQ1vEWpxsVgN2w+1Xz+CDxPiB36yA2ITqZM/oYZDK3 PC48OOtKoSFqBuN9uNL/6xxnJJUWp8W+cTce4wPV8saKhq3bH9Lh5eZb6oc9IDDZ SR9xx2m+HFHCFTJ4XGy+43Jk7UbUmE9FKaWKfMdu1kIE1lJzyr1wQD5SDaMC2MJK ISHCADaABD5jsQWZa9lTkzoWFkkPdKQ29AdXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUd/eOvpsrd0B43BymUfvK8DFHKi8wHwYDVR0jBBgwFoAU6ExiO8s49imh7Iol aGifaOjftzIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MC82RXhpTzhzNDlpbWg3SW9sYUdpZmFPamZ0ekkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzZFeGlPOHM0OWltaDdJb2xhR2lmYU9qZnR6SS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDAvNkV4aU84czQ5aW1o N0lvbGFHaWZhT2pmdHpJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC7gRqtXxU1MOLaVYDNNxvmk/6ObmoUKFKGpNLo7Bk3kWIEyWKpNvwiTQ2PJ eC9xUhKqCD6a97/P0giyrsKYlUO5M6OIEcK6sK1V2VSzXGeGfebl7+CmDgLR3DW8 AurJ60Hb3EQrqeCUIeN8Oor39U8vIzyS4Ack9vXL4UG73kMkUOBtPRKdb5lzUU4c c2JmDU0ysKuRjgAdsAeuBPe0NwjnqkUO9g4Tsv1jpib8MKEwp4z/29Fy5MDI6/rI pQv+Wi1U7kLj/HEAzQHSb7R0VEa7F0ftK9jCWHXPoBp4p+lM47Hy8blfch4Yns13 iH1K9eBFF0kLgm+qzjoqIQoc7r4= -----END CERTIFICATE-----Generated at Fri Apr 4 18:33:10 2025 by rpki-client