$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft File: rG7v4uYozkZswlwA92XMjVOKljE.mft (raw, json) Hash identifier: kqOcJ/SILJWh9mK53hNe88jiy3CRWkfuc5p+BTCGWDE= Subject key identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 Authority key identifier: AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 Certificate issuer: /CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Certificate serial: 051D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft Manifest number: 051D Signing time: Fri 04 Apr 2025 14:05:25 +0000 Manifest this update: Fri 04 Apr 2025 14:05:25 +0000 Manifest next update: Fri 04 Apr 2025 20:05:25 +0000 Files and hashes: 1: rG7v4uYozkZswlwA92XMjVOKljE.crl (hash: TrH/BChdyzZ7fftr70th6kJftFULSH0Y0fGQhUiWOmg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1309 (0x51d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Validity Not Before: Apr 4 14:05:25 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5DBC1774C216B68CB2FB36DF3273F6DA28545505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ad:ac:7b:44:6c:5d:ff:9e:5f:48:e2:5c:c2: 37:32:a8:5e:a5:34:31:87:30:f0:cf:f6:0b:4b:cc: ac:9c:37:fa:25:e8:d2:c0:e1:84:b2:39:ea:b5:63: 8d:f6:9c:1c:00:e6:13:0c:a8:1a:f0:33:39:ed:65: 24:bc:be:49:b0:50:8c:74:7b:e3:42:91:a1:21:f2: 70:2f:36:66:5e:41:b4:e2:bd:c6:cf:f1:0c:84:04: 12:a8:f2:ed:61:6c:b5:36:65:09:04:f0:a7:aa:82: cc:69:51:7b:c0:76:ef:12:65:50:2f:8b:71:3d:05: bd:d6:37:1e:8a:b7:82:ba:08:77:19:44:e1:31:f9: 82:3c:1a:83:73:e0:cf:e5:82:3d:25:f1:29:25:3d: e0:63:be:5d:d5:08:31:89:bb:3a:c4:53:02:72:18: 1d:4c:1f:40:4c:86:e0:a6:0c:14:f8:6a:e6:06:23: 77:3e:44:06:b1:aa:78:71:e7:22:9b:90:87:44:9d: 60:f9:cd:01:89:3e:43:11:61:ff:72:8a:a1:3e:01: ef:33:45:f3:e8:b0:08:4f:79:73:cd:85:fd:6b:57: ec:42:d9:83:61:77:22:ae:1d:26:b6:12:c3:fb:34: f7:4c:4e:54:00:4d:85:89:7a:cd:55:cf:58:c6:cc: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 X509v3 Authority Key Identifier: keyid:AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a9:3e:7c:91:65:ec:8f:31:c3:31:40:73:51:6a:89:08:ea: 44:5b:b8:a2:14:12:74:6e:c3:4a:df:d1:aa:a5:de:b4:c9:68: 6e:13:08:25:f4:08:6f:6b:60:e4:81:78:41:5f:94:f0:6e:70: a1:83:a0:40:37:47:f0:88:39:1e:d3:ef:3f:68:dd:ee:d2:53: 1a:56:0b:27:55:11:9e:08:ec:e4:1e:1d:c4:74:69:12:51:15: 92:0f:f0:fe:af:c1:a6:29:52:b6:8d:ad:ed:ec:01:49:f1:cc: eb:4f:19:96:6b:23:23:df:cb:99:95:28:79:fe:2f:66:77:5a: cf:59:5a:08:f5:b1:47:37:d9:80:93:d6:75:d2:49:b2:e4:15: ce:a6:2a:2b:16:28:e9:5b:f4:2c:6e:62:e6:2f:fe:24:3d:eb: 5d:d3:8d:6a:79:3e:b2:84:cf:af:16:07:20:eb:71:11:96:e3: 37:eb:99:22:46:db:26:bb:30:43:83:b5:d1:0a:d0:bf:7d:e8: 35:67:13:0a:91:9b:f2:b6:20:f4:18:d9:3e:81:41:29:90:bc: 38:e6:e4:31:ac:cd:a6:26:15:5b:cd:a4:86:1c:36:b6:1d:b6: de:42:64:dd:39:19:d9:fd:f3:5c:3c:96:e2:33:52:8c:9b:2b: 60:93:58:26 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUM2 RUVGRTJFNjI4Q0U0NjZDQzI1QzAwRjc2NUNDOEQ1MzhBOTYzMTAeFw0yNTA0MDQx NDA1MjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVEQkMxNzc0QzIxNkI2 OENCMkZCMzZERjMyNzNGNkRBMjg1NDU1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0rax7RGxd/55fSOJcwjcyqF6lNDGHMPDP9gtLzKycN/ol6NLA 4YSyOeq1Y432nBwA5hMMqBrwMzntZSS8vkmwUIx0e+NCkaEh8nAvNmZeQbTivcbP 8QyEBBKo8u1hbLU2ZQkE8KeqgsxpUXvAdu8SZVAvi3E9Bb3WNx6Kt4K6CHcZROEx +YI8GoNz4M/lgj0l8SklPeBjvl3VCDGJuzrEUwJyGB1MH0BMhuCmDBT4auYGI3c+ RAaxqnhx5yKbkIdEnWD5zQGJPkMRYf9yiqE+Ae8zRfPosAhPeXPNhf1rV+xC2YNh dyKuHSa2EsP7NPdMTlQATYWJes1Vz1jGzBWfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXbwXdMIWtoyy+zbfMnP22ihUVQUwHwYDVR0jBBgwFoAUrG7v4uYozkZswlwA 92XMjVOKljEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw Mi9yRzd2NHVZb3prWnN3bHdBOTJYTWpWT0tsakUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JHN3Y0dVlvemtac3dsd0E5MlhNalZPS2xqRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDIvckc3djR1WW96a1pz d2x3QTkyWE1qVk9LbGpFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFKpPnyRZeyPMcMxQHNRaokI6kRbuKIUEnRuw0rf0aql3rTJaG4TCCX0CG9r YOSBeEFflPBucKGDoEA3R/CIOR7T7z9o3e7SUxpWCydVEZ4I7OQeHcR0aRJRFZIP 8P6vwaYpUraNre3sAUnxzOtPGZZrIyPfy5mVKHn+L2Z3Ws9ZWgj1sUc32YCT1nXS SbLkFc6mKisWKOlb9CxuYuYv/iQ9613TjWp5PrKEz68WByDrcRGW4zfrmSJG2ya7 MEODtdEK0L996DVnEwqRm/K2IPQY2T6BQSmQvDjm5DGszaYmFVvNpIYcNrYdtt5C ZN05Gdn981w8luIzUoybK2CTWCY= -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:39 2025 by rpki-client