$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft File: bHGFaWGICFmFIGtbw8RT4SftD94.mft (raw, json) Hash identifier: M+lXvA903/3fmh2RdZKtQjZR18UJCakKzJUcv3MhvQo= Subject key identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D Authority key identifier: 6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE Certificate issuer: /CN=6C7185696188085985206B5BC3C453E127ED0FDE Certificate serial: 0280 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft Manifest number: 0280 Signing time: Fri 04 Apr 2025 14:10:01 +0000 Manifest this update: Fri 04 Apr 2025 14:10:01 +0000 Manifest next update: Fri 04 Apr 2025 20:10:01 +0000 Files and hashes: 1: bHGFaWGICFmFIGtbw8RT4SftD94.crl (hash: iMxyKrnwyVzTLiBkL+8F/UfMLHWex36i6whlkA1l9ck=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C7185696188085985206B5BC3C453E127ED0FDE Validity Not Before: Apr 4 14:10:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=EBD0975A7BEC6943E8DF5934276DEB7EDD3A0A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:43:31:63:6a:f6:8a:7d:c3:cf:84:c1:85: 81:04:6f:3d:bf:3a:c9:34:64:5f:2b:3f:24:76:db: 0d:dc:01:fe:7b:bc:11:e5:2d:5f:3b:de:e7:87:14: 70:a5:35:bf:7d:29:a0:b8:16:16:5d:de:ad:c3:b2: 0f:0f:39:ff:1d:32:0d:f4:c5:6f:19:9e:62:c9:d6: 90:bf:33:57:c3:60:ea:8b:06:54:6f:5f:31:7a:9d: de:68:26:c3:2c:d2:5a:e0:9e:d8:c7:b6:8f:90:e1: 97:29:7b:aa:28:8b:1d:e1:0c:4c:50:f9:cc:a0:6b: d3:a6:a3:23:63:09:e9:4f:7d:0e:de:19:0e:76:00: 4c:17:04:d5:35:3e:3e:87:20:1c:46:bf:ca:34:b4: 9d:40:af:26:97:9e:8c:24:31:54:59:8e:6c:04:59: fe:c1:05:dc:1d:d3:6e:47:8d:55:7a:d6:45:87:b1: e8:f3:84:03:47:4a:60:83:e1:d4:c4:c8:81:e5:e9: ed:b5:20:e1:03:87:7d:5d:13:89:77:3d:81:a6:14: 06:b3:c4:92:09:8a:e2:76:28:48:b9:2e:b3:61:85: c0:dd:96:22:bf:85:d3:cd:7a:9b:e0:55:c5:6c:8f: 1b:86:69:74:8e:f5:90:5a:7c:89:2e:95:76:b3:60: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D X509v3 Authority Key Identifier: keyid:6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7d:45:63:dc:ce:21:24:f0:94:18:ce:fb:20:57:bf:88:5b: 70:fb:20:6d:c0:cc:10:d3:79:99:45:2b:7a:52:d5:aa:bb:23: 3a:0d:e7:a2:53:39:ab:83:97:47:36:bc:07:e4:e8:11:f4:f2: fd:f7:f5:12:85:bc:76:89:ef:cf:59:17:01:43:1f:1b:dc:9e: 3b:55:c9:8a:8a:57:b9:dc:07:7b:24:8d:e9:64:ae:e5:61:a0: 37:87:2b:e6:07:1f:f0:1f:63:67:42:d9:a4:dc:5e:c7:65:0d: 81:d4:b1:51:70:83:91:76:a1:a9:c1:e6:ab:e5:1e:cb:2a:ae: 84:0e:bb:70:e8:a0:e4:fb:b8:ef:a5:d2:ff:5a:f2:4e:d1:cc: b4:06:20:48:71:e9:a6:d0:c8:84:79:47:15:7b:64:3c:80:c8: 8e:c4:fa:e3:2a:75:f5:39:cc:06:dc:5b:8b:60:35:82:e0:54: 28:c9:23:42:aa:26:11:0c:2c:a2:79:ef:78:41:3c:ae:29:1b: b0:64:27:7a:8f:a6:ab:82:92:c3:99:f7:3f:68:21:89:f1:0e: 2d:fc:9f:7d:13:8a:a4:9a:0b:c8:80:2d:d4:d7:3c:04:1d:69: f2:b8:b2:b1:04:9c:f3:ed:e2:36:89:80:52:23:ab:a7:16:8b: 5f:db:11:79 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkM3 MTg1Njk2MTg4MDg1OTg1MjA2QjVCQzNDNDUzRTEyN0VEMEZERTAeFw0yNTA0MDQx NDEwMDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVCRDA5NzVBN0JFQzY5 NDNFOERGNTkzNDI3NkRFQjdFREQzQTBBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOlEMxY2r2in3Dz4TBhYEEbz2/Osk0ZF8rPyR22w3cAf57vBHl LV873ueHFHClNb99KaC4FhZd3q3Dsg8POf8dMg30xW8ZnmLJ1pC/M1fDYOqLBlRv XzF6nd5oJsMs0lrgntjHto+Q4Zcpe6ooix3hDExQ+cyga9OmoyNjCelPfQ7eGQ52 AEwXBNU1Pj6HIBxGv8o0tJ1AryaXnowkMVRZjmwEWf7BBdwd025HjVV61kWHsejz hANHSmCD4dTEyIHl6e21IOEDh31dE4l3PYGmFAazxJIJiuJ2KEi5LrNhhcDdliK/ hdPNepvgVcVsjxuGaXSO9ZBafIkulXazYGtPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU69CXWnvsaUPo31k0J23rft06Ci0wHwYDVR0jBBgwFoAUbHGFaWGICFmFIGtb w8RT4SftD94wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz My9iSEdGYVdHSUNGbUZJR3RidzhSVDRTZnREOTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2JIR0ZhV0dJQ0ZtRklHdGJ3OFJUNFNmdEQ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzMvYkhHRmFXR0lDRm1G SUd0Ync4UlQ0U2Z0RDk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADN9RWPcziEk8JQYzvsgV7+IW3D7IG3AzBDTeZlFK3pS1aq7IzoN56JTOauD l0c2vAfk6BH08v339RKFvHaJ789ZFwFDHxvcnjtVyYqKV7ncB3skjelkruVhoDeH K+YHH/AfY2dC2aTcXsdlDYHUsVFwg5F2oanB5qvlHssqroQOu3DooOT7uO+l0v9a 8k7RzLQGIEhx6abQyIR5RxV7ZDyAyI7E+uMqdfU5zAbcW4tgNYLgVCjJI0KqJhEM LKJ573hBPK4pG7BkJ3qPpquCksOZ9z9oIYnxDi38n30TiqSaC8iALdTXPAQdafK4 srEEnPPt4jaJgFIjq6cWi1/bEXk= -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:24 2025 by rpki-client