$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft File: oSxs0hrGVXPbWxQ4_6vayraf5iM.mft (raw, json) Hash identifier: +7/lPzjz3NJEGB/9kroWl5YdaUzsiewNfPyzjI6TRFw= Subject key identifier: 3F:DB:5E:8F:A3:C5:11:FB:A2:D7:6C:6F:0A:3D:F4:9A:7B:4D:47:66 Authority key identifier: A1:2C:6C:D2:1A:C6:55:73:DB:5B:14:38:FF:AB:DA:CA:B6:9F:E6:23 Certificate issuer: /CN=A12C6CD21AC65573DB5B1438FFABDACAB69FE623 Certificate serial: 01AD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oSxs0hrGVXPbWxQ4_6vayraf5iM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft Manifest number: 01AD Signing time: Fri 21 Feb 2025 06:28:13 +0000 Manifest this update: Fri 21 Feb 2025 06:28:13 +0000 Manifest next update: Fri 21 Feb 2025 12:28:13 +0000 Files and hashes: 1: oSxs0hrGVXPbWxQ4_6vayraf5iM.crl (hash: 5rBZ3mx7kadIX0zZrUkkGPK6PgonZuNEzcxDIesvxcA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oSxs0hrGVXPbWxQ4_6vayraf5iM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 11:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A12C6CD21AC65573DB5B1438FFABDACAB69FE623 Validity Not Before: Feb 21 06:28:13 2025 GMT Not After : Nov 27 00:59:02 2025 GMT Subject: CN=3FDB5E8FA3C511FBA2D76C6F0A3DF49A7B4D4766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d3:fc:88:e3:33:99:53:0e:7f:db:76:02:ae: a9:d3:ae:60:28:96:a3:6d:cd:90:4d:c7:03:c9:a0: b2:f0:18:ca:1d:b2:58:d7:f7:fc:c4:91:53:ce:24: 72:d3:b0:36:22:96:cc:a7:c1:29:2d:5a:d6:23:07: 10:f9:e0:9a:9e:14:96:c5:ef:f1:b5:c2:e7:3d:63: b2:9d:91:84:49:e6:0f:66:2c:5f:e9:1e:51:ae:ae: 18:37:bf:5e:63:a1:ab:df:0d:c2:fe:2d:7f:48:50: fb:05:4f:9d:df:5a:07:63:2e:ab:0d:c1:3b:c2:5a: df:bb:96:6e:2d:0f:2a:ac:9d:7c:0b:3c:75:f1:1c: 7f:59:4f:17:d4:c7:32:f6:e2:d5:cc:15:f1:9f:46: 25:f6:b3:62:44:7a:16:5c:26:a9:c4:83:30:16:fa: 34:c7:33:04:77:f2:fd:a7:b8:9d:f1:7e:b5:af:1f: a9:24:55:bf:a5:43:9c:ca:d0:ce:e6:ae:52:2e:0b: 20:28:81:88:73:fe:18:31:c4:9e:22:4d:49:33:b1: 5a:ae:3f:ea:99:f9:a1:e6:24:48:73:ec:16:44:cf: 1e:a9:dd:ae:a8:62:82:ac:ed:f3:ea:58:7b:11:90: e8:ea:9f:c6:08:4d:e7:ab:87:00:6a:7d:13:f8:f0: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DB:5E:8F:A3:C5:11:FB:A2:D7:6C:6F:0A:3D:F4:9A:7B:4D:47:66 X509v3 Authority Key Identifier: keyid:A1:2C:6C:D2:1A:C6:55:73:DB:5B:14:38:FF:AB:DA:CA:B6:9F:E6:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oSxs0hrGVXPbWxQ4_6vayraf5iM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/oSxs0hrGVXPbWxQ4_6vayraf5iM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:33:96:fd:45:ac:b3:2a:9e:5c:79:8b:1d:1a:53:f4:0c:7b: 51:25:36:9f:32:b6:67:c5:7d:ca:31:fe:09:da:ed:23:66:f4: d1:b7:c9:b5:79:35:16:27:04:ae:c3:ba:53:f4:a8:4a:d2:59: bf:25:d4:c0:17:bd:fb:02:fc:db:f1:38:83:dd:76:8d:55:14: ef:20:29:ed:c5:aa:e3:04:33:97:fa:a4:f8:93:60:67:33:9c: 6d:0b:4e:5f:78:61:09:55:12:67:a3:ea:1d:00:66:65:e7:86: 5a:7f:aa:17:0a:1c:6e:b0:d0:0e:21:cd:3d:15:09:2b:b3:68: e1:d4:cd:11:b9:80:43:f0:1d:04:d6:91:d6:c1:25:20:4d:69: 49:a1:88:d8:94:14:ec:7d:bc:d2:c7:dc:b1:0d:c3:ff:c2:89: b1:f4:8d:52:94:fc:0d:81:be:6b:bc:8d:66:23:15:7f:43:d7: 6a:63:5f:d7:84:f6:c6:43:ee:e3:fd:61:50:c5:90:83:2b:00: b7:70:ab:5f:91:44:f1:55:f2:15:d2:c8:10:85:8c:13:f7:ad: 17:76:52:c8:48:df:a7:6d:fe:5e:0b:61:96:6c:a1:27:8b:9e: 2c:09:83:01:fd:d4:81:a8:82:43:af:d9:db:02:5f:c9:47:8b: b8:0c:c2:6b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTEy QzZDRDIxQUM2NTU3M0RCNUIxNDM4RkZBQkRBQ0FCNjlGRTYyMzAeFw0yNTAyMjEw NjI4MTNaFw0yNTExMjcwMDU5MDJaMDMxMTAvBgNVBAMTKDNGREI1RThGQTNDNTEx RkJBMkQ3NkM2RjBBM0RGNDlBN0I0RDQ3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd0/yI4zOZUw5/23YCrqnTrmAolqNtzZBNxwPJoLLwGModsljX 9/zEkVPOJHLTsDYilsynwSktWtYjBxD54JqeFJbF7/G1wuc9Y7KdkYRJ5g9mLF/p HlGurhg3v15joavfDcL+LX9IUPsFT53fWgdjLqsNwTvCWt+7lm4tDyqsnXwLPHXx HH9ZTxfUxzL24tXMFfGfRiX2s2JEehZcJqnEgzAW+jTHMwR38v2nuJ3xfrWvH6kk Vb+lQ5zK0M7mrlIuCyAogYhz/hgxxJ4iTUkzsVquP+qZ+aHmJEhz7BZEzx6p3a6o YoKs7fPqWHsRkOjqn8YITeerhwBqfRP48J1zAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUP9tej6PFEfui12xvCj30mntNR2YwHwYDVR0jBBgwFoAUoSxs0hrGVXPbWxQ4 /6vayraf5iMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi9vU3hzMGhyR1ZYUGJXeFE0XzZ2YXlyYWY1aU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL29TeHMwaHJHVlhQYld4UTRfNnZheXJhZjVpTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzIvb1N4czBockdWWFBi V3hRNF82dmF5cmFmNWlNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJczlv1FrLMqnlx5ix0aU/QMe1ElNp8ytmfFfcox/gna7SNm9NG3ybV5NRYn BK7DulP0qErSWb8l1MAXvfsC/NvxOIPddo1VFO8gKe3FquMEM5f6pPiTYGcznG0L Tl94YQlVEmej6h0AZmXnhlp/qhcKHG6w0A4hzT0VCSuzaOHUzRG5gEPwHQTWkdbB JSBNaUmhiNiUFOx9vNLH3LENw//CibH0jVKU/A2Bvmu8jWYjFX9D12pjX9eE9sZD 7uP9YVDFkIMrALdwq1+RRPFV8hXSyBCFjBP3rRd2UshI36dt/l4LYZZsoSeLniwJ gwH91IGogkOv2dsCX8lHi7gMwms= -----END CERTIFICATE-----Generated at Fri Feb 21 10:07:29 2025 by rpki-client