$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft File: yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft (raw, json) Hash identifier: vZTSYWbruV3QxXoP5I+92cbNyYfWgnjpta+NJXKUHiU= Subject key identifier: 53:11:FA:57:08:82:FE:DA:A7:AC:8D:38:C3:F3:25:9B:3B:D0:32:4E Authority key identifier: C8:15:BD:19:A6:7E:7F:43:0C:91:0C:A3:A8:B6:CE:93:82:83:6F:40 Certificate issuer: /CN=C815BD19A67E7F430C910CA3A8B6CE9382836F40 Certificate serial: 01AC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft Manifest number: 01AC Signing time: Fri 21 Feb 2025 08:28:09 +0000 Manifest this update: Fri 21 Feb 2025 08:28:09 +0000 Manifest next update: Fri 21 Feb 2025 14:28:09 +0000 Files and hashes: 1: yBW9GaZ-f0MMkQyjqLbOk4KDb0A.crl (hash: 0QtmXp+rAa0YSe828xWh/8nrT6nJ8LMM5JQVDDvgF2Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 11:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C815BD19A67E7F430C910CA3A8B6CE9382836F40 Validity Not Before: Feb 21 08:28:09 2025 GMT Not After : Nov 15 08:24:41 2025 GMT Subject: CN=5311FA570882FEDAA7AC8D38C3F3259B3BD0324E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:97:04:be:99:47:4c:0e:d6:44:94:aa:4a: c7:2e:18:92:f2:87:8f:19:13:81:fc:5e:7c:ea:69: 7a:a8:34:ac:f4:8c:1b:5e:28:b1:da:86:a7:00:89: b0:62:a2:37:cd:2c:2e:a1:4b:fa:8a:e0:cf:fe:c6: b4:70:8d:bd:a0:93:f3:da:2e:96:ff:fd:2f:1b:11: 11:fa:b9:70:06:59:e6:f2:17:87:da:ad:97:6e:93: 47:82:2a:bd:ff:82:dc:79:f7:17:30:33:e5:d4:ee: dc:c8:51:27:15:65:86:23:1e:ff:29:d8:b9:03:2d: b9:96:02:ec:fc:c3:b2:09:13:09:ee:81:8b:0c:be: a3:d4:f3:6b:04:69:bc:da:ec:c5:7e:13:be:c9:26: f6:79:51:b1:2f:68:e9:43:59:11:28:a4:35:f5:0d: 53:34:43:50:c6:2e:03:57:90:d8:e9:d8:c3:a1:6c: 48:2a:4f:a6:02:64:d6:d1:50:1d:12:d4:f0:25:9f: 6c:a6:f3:31:8c:0e:49:43:d7:6f:1a:ce:20:08:50: b1:6b:23:71:32:68:a9:c9:34:57:1f:1e:1e:38:09: d1:d2:9f:9b:e3:37:ce:2c:dd:38:be:69:ac:4f:c4: 52:c8:21:97:d0:1b:e7:00:c2:6f:d9:1a:a6:89:71: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:11:FA:57:08:82:FE:DA:A7:AC:8D:38:C3:F3:25:9B:3B:D0:32:4E X509v3 Authority Key Identifier: keyid:C8:15:BD:19:A6:7E:7F:43:0C:91:0C:A3:A8:B6:CE:93:82:83:6F:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:76:92:c6:a5:80:30:c4:b3:dc:b2:18:19:10:e4:7e:7b:47: 90:f5:de:80:f2:27:44:f1:e3:05:79:19:7c:60:9f:05:b1:6b: 0a:6b:1b:06:bf:79:f1:9e:24:ea:56:5b:f6:9b:48:5e:d2:79: 11:ae:cf:9b:08:b8:eb:fa:a0:df:b1:4e:11:41:d0:84:d4:f4: 6e:cb:36:16:87:1b:3c:db:cd:36:81:1d:65:a6:42:93:ce:7e: 6a:84:af:95:64:a2:8f:b3:29:d4:13:c7:c1:92:a9:57:60:a8: 09:2e:9d:5c:1f:2b:5b:1b:2b:6d:ca:57:1a:8e:d1:1e:c9:72: b6:ba:60:f5:cf:d3:28:d9:50:48:ab:21:5d:10:08:ef:62:64: f0:89:89:0f:c2:42:0c:1c:93:c3:6e:f1:e0:3e:04:6e:30:1a: 3e:45:8d:4b:40:9c:46:e7:bb:96:75:d4:63:5e:b5:23:93:c2: eb:4a:5e:7a:7b:f9:a3:19:41:5c:0e:e4:68:24:12:57:90:2d: 0c:7d:a6:89:d5:55:73:29:f9:d5:83:6a:d3:07:bb:d9:c7:1d: 35:dc:73:19:14:d8:92:35:9a:b0:1e:5c:40:05:dc:21:3e:fa: a5:e7:59:f8:41:1d:dc:e0:b1:6d:b3:59:07:e3:15:ea:14:3a: 6e:4c:d9:0a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzgx NUJEMTlBNjdFN0Y0MzBDOTEwQ0EzQThCNkNFOTM4MjgzNkY0MDAeFw0yNTAyMjEw ODI4MDlaFw0yNTExMTUwODI0NDFaMDMxMTAvBgNVBAMTKDUzMTFGQTU3MDg4MkZF REFBN0FDOEQzOEMzRjMyNTlCM0JEMDMyNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmypcEvplHTA7WRJSqSscuGJLyh48ZE4H8XnzqaXqoNKz0jBte KLHahqcAibBiojfNLC6hS/qK4M/+xrRwjb2gk/PaLpb//S8bERH6uXAGWebyF4fa rZduk0eCKr3/gtx59xcwM+XU7tzIUScVZYYjHv8p2LkDLbmWAuz8w7IJEwnugYsM vqPU82sEabza7MV+E77JJvZ5UbEvaOlDWREopDX1DVM0Q1DGLgNXkNjp2MOhbEgq T6YCZNbRUB0S1PAln2ym8zGMDklD128aziAIULFrI3EyaKnJNFcfHh44CdHSn5vj N84s3Ti+aaxPxFLIIZfQG+cAwm/ZGqaJcS2XAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUxH6VwiC/tqnrI04w/MlmzvQMk4wHwYDVR0jBBgwFoAUyBW9GaZ+f0MMkQyj qLbOk4KDb0AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MC95Qlc5R2FaLWYwTU1rUXlqcUxiT2s0S0RiMEEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3lCVzlHYVotZjBNTWtReWpxTGJPazRLRGIwQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzAveUJXOUdhWi1mME1N a1F5anFMYk9rNEtEYjBBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHB2ksalgDDEs9yyGBkQ5H57R5D13oDyJ0Tx4wV5GXxgnwWxawprGwa/efGe JOpWW/abSF7SeRGuz5sIuOv6oN+xThFB0ITU9G7LNhaHGzzbzTaBHWWmQpPOfmqE r5Vkoo+zKdQTx8GSqVdgqAkunVwfK1sbK23KVxqO0R7Jcra6YPXP0yjZUEirIV0Q CO9iZPCJiQ/CQgwck8Nu8eA+BG4wGj5FjUtAnEbnu5Z11GNetSOTwutKXnp7+aMZ QVwO5GgkEleQLQx9ponVVXMp+dWDatMHu9nHHTXccxkU2JI1mrAeXEAF3CE++qXn WfhBHdzgsW2zWQfjFeoUOm5M2Qo= -----END CERTIFICATE-----Generated at Fri Feb 21 10:22:23 2025 by rpki-client