$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft (raw, json) Hash identifier: FEIhGFBjb04whDv5i/91tw6Ji1PTDvmozotqRmDJqQ8= Subject key identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 Authority key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 Certificate issuer: /CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Certificate serial: 0552 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft Manifest number: 0552 Signing time: Fri 04 Apr 2025 14:06:16 +0000 Manifest this update: Fri 04 Apr 2025 14:06:16 +0000 Manifest next update: Fri 04 Apr 2025 20:06:16 +0000 Files and hashes: 1: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl (hash: BaLXXC8ogir29JDYgZZwAhJs6NsLcVeeKjCAhTrpVTw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Validity Not Before: Apr 4 14:06:16 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1F69946BDFFBCBE8EDE7A4D46B9143B895AB27A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:41:5e:8c:db:b0:01:a5:ed:6a:45:10:13: b3:1c:be:e8:22:60:92:bf:21:07:3e:da:14:e1:05: eb:85:b8:22:d8:0a:c7:80:5a:b1:3d:36:2d:78:db: ac:82:c7:fc:20:d1:37:c2:46:e2:c7:0e:7b:ea:7f: c8:c8:44:0c:f1:04:fb:6a:4d:c1:72:b6:58:a5:68: 0f:8f:99:2d:1b:9b:f8:e4:9b:61:b4:76:fb:36:07: f5:58:65:8c:fd:1d:be:8b:9a:42:a9:c6:19:32:ef: d6:7f:40:e3:1e:e8:ba:cd:f5:47:05:54:b0:9d:de: 9a:e9:93:1a:51:f1:b9:4f:34:f6:78:09:f4:f8:35: 32:41:52:75:fb:4d:43:e6:6f:10:27:bc:08:d4:0f: f5:a5:ea:fd:7c:e0:ee:d7:76:fd:f7:76:38:44:b5: d4:89:fb:e9:8d:f3:e8:27:2e:51:da:13:22:37:da: e4:d5:1b:ec:4a:51:88:75:d2:ea:73:8d:32:dc:54: a5:7c:81:39:e3:ae:04:d6:41:9a:0f:7b:92:c3:bf: 55:82:b7:ae:f3:91:0c:39:6a:67:db:c7:bb:c7:23: 19:e4:c1:c0:61:1c:35:15:ad:45:56:79:5f:28:9f: bd:f4:0c:60:e1:54:f7:40:e8:4b:8c:0b:a3:cb:5a: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 X509v3 Authority Key Identifier: keyid:32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6f:fc:40:0e:cd:3b:20:f3:09:0f:d9:1b:fb:9f:0e:de:d5: 40:b4:3b:6e:f1:1e:1b:67:5a:8b:1d:e9:d5:77:dd:ec:1b:13: f2:f1:fd:f2:b8:a7:53:a8:14:dd:4b:95:f6:82:e6:02:0a:ab: c9:a8:9e:46:ab:97:17:44:91:7a:0a:ab:91:25:be:7d:65:96: 12:30:1b:fa:6b:1e:92:8e:dd:33:e0:22:22:71:06:b8:51:ab: 88:43:cd:bc:ce:17:b7:71:56:ea:66:03:75:78:05:35:db:83: f3:59:1f:a7:38:38:98:b8:a6:f3:f8:a6:95:db:97:60:b8:19: 30:1c:17:17:7a:63:3f:d5:bd:15:12:52:fd:e3:96:fa:06:e1: c2:cb:6e:72:67:7d:56:bc:ff:ff:7c:81:9e:bf:31:51:b8:fc: ab:0c:84:23:f7:17:8b:23:c1:73:b5:1d:7a:5e:2f:e4:ac:4a: 4d:5b:1d:c0:45:54:f9:77:a3:61:91:ff:6a:98:7c:54:5e:a3: ac:e4:03:f8:3f:0a:33:a7:29:38:71:02:ec:0c:6d:52:f8:93: af:1d:e3:f5:35:85:e6:f2:4f:61:65:7a:a0:5e:8d:3f:17:d1: 76:f8:12:2e:85:10:68:49:ea:6b:24:39:7e:7c:df:93:3f:8d: 0c:5a:0d:2a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI5 RjJBRkM4NkZFOUYxRkFDOUYyRjhCQjMxMkI1QUI5QzkxOEMyNjAeFw0yNTA0MDQx NDA2MTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFGNjk5NDZCREZGQkNC RThFREU3QTRENDZCOTE0M0I4OTVBQjI3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLgkFejNuwAaXtakUQE7McvugiYJK/IQc+2hThBeuFuCLYCseA WrE9Ni1426yCx/wg0TfCRuLHDnvqf8jIRAzxBPtqTcFytlilaA+PmS0bm/jkm2G0 dvs2B/VYZYz9Hb6LmkKpxhky79Z/QOMe6LrN9UcFVLCd3prpkxpR8blPNPZ4CfT4 NTJBUnX7TUPmbxAnvAjUD/Wl6v184O7Xdv33djhEtdSJ++mN8+gnLlHaEyI32uTV G+xKUYh10upzjTLcVKV8gTnjrgTWQZoPe5LDv1WCt67zkQw5amfbx7vHIxnkwcBh HDUVrUVWeV8on730DGDhVPdA6EuMC6PLWlxVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUH2mUa9/7y+jt56TUa5FDuJWrJ6YwHwYDVR0jBBgwFoAUMp8q/Ib+nx+sny+L sxK1q5yRjCYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL01wOHFfSWItbngtc255LUxzeEsxcTV5UmpDWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDEvTXA4cV9JYi1ueC1z bnktTHN4SzFxNXlSakNZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE9v/EAOzTsg8wkP2Rv7nw7e1UC0O27xHhtnWosd6dV33ewbE/Lx/fK4p1Oo FN1LlfaC5gIKq8monkarlxdEkXoKq5Elvn1llhIwG/prHpKO3TPgIiJxBrhRq4hD zbzOF7dxVupmA3V4BTXbg/NZH6c4OJi4pvP4ppXbl2C4GTAcFxd6Yz/VvRUSUv3j lvoG4cLLbnJnfVa8//98gZ6/MVG4/KsMhCP3F4sjwXO1HXpeL+SsSk1bHcBFVPl3 o2GR/2qYfFReo6zkA/g/CjOnKThxAuwMbVL4k68d4/U1hebyT2FleqBejT8X0Xb4 Ei6FEGhJ6mskOX5835M/jQxaDSo= -----END CERTIFICATE-----Generated at Fri Apr 4 18:42:57 2025 by rpki-client