Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft
File: h5M3g18FYrKaaQsbUBKsbiS66D8.mft (raw, json)
Hash identifier: tggaAWAEYbStwArT3UAWlraDNoHyALHYGppz2m0VuCQ=
Subject key identifier: 90:AC:03:B2:DE:2A:2F:15:4B:B4:10:D6:6C:6D:B7:82:3C:CD:1C:FF
Authority key identifier: 87:93:37:83:5F:05:62:B2:9A:69:0B:1B:50:12:AC:6E:24:BA:E8:3F
Certificate issuer: /CN=879337835F0562B29A690B1B5012AC6E24BAE83F
Certificate serial: 02AC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h5M3g18FYrKaaQsbUBKsbiS66D8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft
Manifest number: 02AC
Signing time: Mon 14 Apr 2025 14:08:05 +0000
Manifest this update: Mon 14 Apr 2025 14:08:05 +0000
Manifest next update: Mon 14 Apr 2025 20:08:05 +0000
Files and hashes: 1: h5M3g18FYrKaaQsbUBKsbiS66D8.crl (hash: 0vgeclPXG6UjUQOWKPtPAGUZuwwH+pKmXCtddZ8/bTs=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h5M3g18FYrKaaQsbUBKsbiS66D8.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 20:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879337835F0562B29A690B1B5012AC6E24BAE83F
Validity
Not Before: Apr 14 14:08:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=90AC03B2DE2A2F154BB410D66C6DB7823CCD1CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:ba:1a:42:41:3f:5b:52:14:f1:99:a4:e3:
a1:8f:a8:c1:dc:5d:25:0a:96:d6:d7:f3:4f:64:c7:
89:bd:76:69:99:0f:cd:0f:0a:42:62:87:88:6a:61:
42:dc:bc:e8:64:30:61:ce:49:a9:d8:88:ab:d1:a8:
c5:9c:dd:0a:b1:76:56:44:88:a1:29:f7:cf:bb:3f:
e1:6c:ba:a1:d2:44:44:fd:87:dc:8e:38:33:47:52:
5d:71:45:3d:1f:a5:2d:cb:14:3c:ca:be:7f:02:10:
ec:44:d1:61:f6:de:5d:0d:57:56:59:0e:43:87:61:
41:ee:f7:dd:99:40:75:b3:60:94:c6:86:62:d7:f3:
b2:6a:b8:52:bc:21:10:3a:c9:0b:dd:67:10:44:d4:
ff:3f:cc:c8:92:58:fb:b9:82:db:38:af:77:ad:47:
b9:19:89:4e:c0:33:f9:ba:27:11:f9:08:ad:fc:cf:
b3:88:c9:aa:48:32:4b:83:67:52:f3:0d:b3:e9:6e:
f6:4d:21:ec:49:33:42:32:e7:1e:10:ff:e4:57:46:
fa:74:39:b9:bd:08:39:2a:35:97:f8:46:bc:95:22:
90:10:97:ce:17:96:77:3b:59:8c:3a:82:ef:55:b6:
0c:17:27:ff:87:1f:43:75:28:c8:1c:16:e9:58:b7:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AC:03:B2:DE:2A:2F:15:4B:B4:10:D6:6C:6D:B7:82:3C:CD:1C:FF
X509v3 Authority Key Identifier:
keyid:87:93:37:83:5F:05:62:B2:9A:69:0B:1B:50:12:AC:6E:24:BA:E8:3F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h5M3g18FYrKaaQsbUBKsbiS66D8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:1a:b5:bb:6d:0a:4e:91:75:f4:a7:4b:3f:b9:f8:d5:2b:8f:
61:78:71:8d:ba:a2:11:57:1d:73:4b:58:b4:36:aa:c5:86:64:
08:4e:2f:35:47:9c:88:c8:2c:22:e2:d2:93:8e:92:2d:85:91:
c7:a7:ab:11:52:43:32:b1:09:b7:a3:01:80:f7:8a:ee:f2:19:
2e:7b:86:9c:83:f3:c1:de:ea:ce:07:40:01:51:16:48:b7:8f:
44:d4:7e:cf:20:a6:e1:81:47:f5:30:68:84:45:af:3b:bb:28:
48:5d:ee:e4:51:ee:2e:7c:5a:48:81:55:74:ff:a4:f1:ba:c7:
a5:6f:24:9c:de:c5:a5:2c:18:92:c6:a0:3e:f1:39:74:e7:c5:
04:6b:41:8a:d3:87:77:f2:41:30:a4:a7:78:9e:7a:bf:0d:73:
2e:4c:99:38:13:48:47:d9:a0:eb:70:9f:0a:58:21:08:52:08:
32:69:ed:5b:75:26:7e:47:d9:88:95:3d:3a:6a:0d:4e:5c:95:
29:dc:c7:f7:ed:81:e7:63:74:bc:2e:a7:f6:73:f4:8a:c7:0c:
8a:fc:84:b7:93:b2:90:e2:7d:48:e3:03:83:24:b4:d9:df:f7:
b6:16:31:ac:06:23:91:16:ad:ba:8d:cc:fc:22:64:b4:b8:ba:
20:b9:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:38:10 2025 by rpki-client