$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/RcETeUHqN99uEOBmZQ7kl13jll4.mft File: RcETeUHqN99uEOBmZQ7kl13jll4.mft (raw, json) Hash identifier: SybJxUuG5MzlT8teA4ahG5zJQjQ50SZG8INzsYAcl9M= Subject key identifier: A0:32:A9:35:DA:AF:6A:85:61:BE:F7:CE:1E:80:20:77:22:B5:5C:04 Authority key identifier: 45:C1:13:79:41:EA:37:DF:6E:10:E0:66:65:0E:E4:97:5D:E3:96:5E Certificate issuer: /CN=45C1137941EA37DF6E10E066650EE4975DE3965E Certificate serial: 01B2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RcETeUHqN99uEOBmZQ7kl13jll4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/RcETeUHqN99uEOBmZQ7kl13jll4.mft Manifest number: 01B2 Signing time: Fri 21 Feb 2025 08:28:08 +0000 Manifest this update: Fri 21 Feb 2025 08:28:08 +0000 Manifest next update: Fri 21 Feb 2025 14:28:08 +0000 Files and hashes: 1: RcETeUHqN99uEOBmZQ7kl13jll4.crl (hash: H/SpDvOpoWKrhK1tXMWFmAsbzwpEw1vO+cZcJHZ3+Jc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/RcETeUHqN99uEOBmZQ7kl13jll4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/RcETeUHqN99uEOBmZQ7kl13jll4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RcETeUHqN99uEOBmZQ7kl13jll4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 11:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C1137941EA37DF6E10E066650EE4975DE3965E Validity Not Before: Feb 21 08:28:08 2025 GMT Not After : Nov 26 01:04:53 2025 GMT Subject: CN=A032A935DAAF6A8561BEF7CE1E80207722B55C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:88:8a:12:1e:ae:ab:1a:ba:35:f8:79:b8: c3:bc:2a:00:31:d1:66:36:b0:50:9e:69:5f:ea:d7: 30:5e:08:e6:00:b1:f2:14:4c:7a:dd:0d:12:b0:f8: db:e8:18:11:ec:58:cc:a6:45:e5:28:d8:c5:1e:0d: 03:ed:19:3b:c9:16:dc:c5:8c:9f:23:15:b2:d9:b8: 0f:db:d7:c2:9d:d5:f7:2c:90:71:7c:01:16:9f:45: 1b:a5:7c:d8:5c:d9:a8:27:db:2a:af:e9:11:b1:59: b1:45:c0:fd:a5:40:78:6b:10:72:eb:c3:15:9f:be: 76:1c:54:98:d1:fd:7f:60:44:1e:88:b7:ba:b7:b7: 52:91:0d:7a:30:27:a6:49:91:5e:fa:45:b2:65:4b: 60:b6:2a:f5:c4:62:4b:4f:89:e7:ef:cd:8f:99:e4: 64:e2:7f:7a:9a:6f:6d:24:87:1b:a0:f0:74:1f:aa: 7b:43:50:52:79:cd:b0:ea:25:60:f1:4c:b5:10:4d: ae:55:94:8b:59:6e:83:dc:1a:60:ec:01:b5:ae:95: 5b:fa:26:d0:be:74:86:84:92:2d:e3:a5:08:74:3b: 48:4d:3a:5b:80:9e:f7:ac:ec:06:c4:bc:eb:f4:0f: 5d:10:84:fd:a2:f8:9d:e7:99:6c:13:ca:61:95:7b: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:32:A9:35:DA:AF:6A:85:61:BE:F7:CE:1E:80:20:77:22:B5:5C:04 X509v3 Authority Key Identifier: keyid:45:C1:13:79:41:EA:37:DF:6E:10:E0:66:65:0E:E4:97:5D:E3:96:5E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/RcETeUHqN99uEOBmZQ7kl13jll4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RcETeUHqN99uEOBmZQ7kl13jll4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/RcETeUHqN99uEOBmZQ7kl13jll4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:6b:5c:7b:5f:f8:72:46:90:5d:80:30:3c:20:d8:d2:75: 35:20:7f:22:86:8d:01:58:69:a4:86:92:d6:05:63:1c:40:23: 5e:5f:6a:8d:50:8b:fe:71:c2:94:b8:36:f8:72:e3:9d:82:76: f7:27:4d:7e:83:ce:f2:10:bb:98:1f:65:58:2b:e6:de:7d:cb: ce:7c:de:ec:04:fb:3e:ee:6f:fc:85:c4:b1:5a:49:c1:61:03: cb:c0:fc:18:e0:e5:72:12:5c:a8:80:74:6d:a4:70:ef:64:35: 31:e5:9e:45:5b:94:50:68:3c:0d:90:04:5a:24:4d:f6:b1:ec: cc:dd:77:b1:36:0e:0a:12:fc:4e:c8:3f:ec:32:cd:8f:51:b7: ce:d0:35:28:12:30:5d:90:fc:35:ab:7c:41:75:fa:ff:b9:aa: 03:53:31:9a:39:c7:12:98:e3:82:bc:55:5c:27:6c:ab:f3:ac: c7:e0:68:f7:34:91:ba:a0:84:63:f1:93:d1:73:81:9a:a1:cf: 39:0e:e8:fd:50:ff:5f:93:e1:9f:79:d5:f1:bb:7b:b4:07:e4: 08:01:0f:2f:d3:12:85:b2:ae:2c:9d:07:02:95:d9:72:77:99: 0d:0d:ee:af:35:45:f3:97:46:46:5c:4f:98:39:13:eb:a2:91: dd:6c:f0:b3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDVD MTEzNzk0MUVBMzdERjZFMTBFMDY2NjUwRUU0OTc1REUzOTY1RTAeFw0yNTAyMjEw ODI4MDhaFw0yNTExMjYwMTA0NTNaMDMxMTAvBgNVBAMTKEEwMzJBOTM1REFBRjZB ODU2MUJFRjdDRTFFODAyMDc3MjJCNTVDMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqvoiKEh6uqxq6Nfh5uMO8KgAx0WY2sFCeaV/q1zBeCOYAsfIU THrdDRKw+NvoGBHsWMymReUo2MUeDQPtGTvJFtzFjJ8jFbLZuA/b18Kd1fcskHF8 ARafRRulfNhc2agn2yqv6RGxWbFFwP2lQHhrEHLrwxWfvnYcVJjR/X9gRB6It7q3 t1KRDXowJ6ZJkV76RbJlS2C2KvXEYktPiefvzY+Z5GTif3qab20khxug8HQfqntD UFJ5zbDqJWDxTLUQTa5VlItZboPcGmDsAbWulVv6JtC+dIaEki3jpQh0O0hNOluA nves7AbEvOv0D10QhP2i+J3nmWwTymGVe4p1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUoDKpNdqvaoVhvvfOHoAgdyK1XAQwHwYDVR0jBBgwFoAURcETeUHqN99uEOBm ZQ7kl13jll4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MS9SY0VUZVVIcU45OXVFT0JtWlE3a2wxM2psbDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JjRVRlVUhxTjk5dUVPQm1aUTdrbDEzamxsNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvUmNFVGVVSHFOOTl1 RU9CbVpRN2tsMTNqbGw0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADuea1x7X/hyRpBdgDA8INjSdTUgfyKGjQFYaaSGktYFYxxAI15fao1Qi/5x wpS4Nvhy452CdvcnTX6DzvIQu5gfZVgr5t59y8583uwE+z7ub/yFxLFaScFhA8vA /Bjg5XISXKiAdG2kcO9kNTHlnkVblFBoPA2QBFokTfax7Mzdd7E2DgoS/E7IP+wy zY9Rt87QNSgSMF2Q/DWrfEF1+v+5qgNTMZo5xxKY44K8VVwnbKvzrMfgaPc0kbqg hGPxk9FzgZqhzzkO6P1Q/1+T4Z951fG7e7QH5AgBDy/TEoWyriydBwKV2XJ3mQ0N 7q81RfOXRkZcT5g5E+uikd1s8LM= -----END CERTIFICATE-----Generated at Fri Feb 21 10:28:01 2025 by rpki-client