$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft File: QZthcvWyvCKKx7p4s58CMyghqKg.mft (raw, json) Hash identifier: 6BN1peMPVv3bcN0fFFL+073StA+C/Wk2cZnbO7zd8NE= Subject key identifier: 18:CB:0F:98:CA:04:AC:25:C7:1A:5C:E2:22:5B:38:C8:6D:85:10:90 Authority key identifier: 41:9B:61:72:F5:B2:BC:22:8A:C7:BA:78:B3:9F:02:33:28:21:A8:A8 Certificate issuer: /CN=419B6172F5B2BC228AC7BA78B39F02332821A8A8 Certificate serial: 012B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QZthcvWyvCKKx7p4s58CMyghqKg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft Manifest number: 012B Signing time: Fri 21 Feb 2025 06:28:20 +0000 Manifest this update: Fri 21 Feb 2025 06:28:20 +0000 Manifest next update: Fri 21 Feb 2025 12:28:20 +0000 Files and hashes: 1: QZthcvWyvCKKx7p4s58CMyghqKg.crl (hash: bp/WGfrkpHQrYf2wF5GaaQAbe2omMjH4uU2gbfbhFkQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QZthcvWyvCKKx7p4s58CMyghqKg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 11:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419B6172F5B2BC228AC7BA78B39F02332821A8A8 Validity Not Before: Feb 21 06:28:20 2025 GMT Not After : Dec 23 06:03:57 2025 GMT Subject: CN=18CB0F98CA04AC25C71A5CE2225B38C86D851090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0d:5f:64:1e:37:c7:69:0d:8f:08:d7:81:7f: 1f:53:13:6f:8a:e9:d0:ca:24:ad:16:4f:9b:c7:d1: 60:2b:13:8f:ad:20:66:d6:4d:a1:26:1c:87:09:fa: 18:05:1b:40:21:92:7e:04:c2:d8:f2:ad:75:49:dc: 62:6d:f5:cd:de:be:81:d0:9b:1a:eb:2d:83:06:f7: ba:10:d8:69:30:d0:bd:8e:54:a6:df:35:4a:30:cd: 5e:e5:49:8e:4a:07:7a:1e:23:0a:67:18:d7:0c:fe: 88:18:20:d7:e5:2f:43:62:3a:02:8f:4e:cf:7b:fc: 92:db:b8:ca:1b:3e:00:f4:a3:92:56:25:21:24:6b: c2:5a:05:8e:ea:bd:b2:f9:a2:10:0b:57:cd:8e:ab: 24:8b:51:97:c3:dd:ee:d2:04:1f:79:f7:7c:05:f6: 67:e2:fd:c8:3d:85:cf:00:7e:f9:21:9f:d0:e5:c6: f8:32:70:5a:ec:ed:83:8e:30:ce:32:59:b3:95:9d: 6c:7f:94:b6:b7:56:1c:41:51:de:27:29:bd:c0:39: 62:bc:e5:ca:7b:f8:72:af:aa:ea:74:73:73:49:81: df:50:d6:b0:4c:d7:ef:85:a4:fe:72:9f:a0:7f:5c: 0a:a7:3d:cf:1b:aa:b7:3f:3d:7d:c5:f7:4d:d8:e1: 27:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CB:0F:98:CA:04:AC:25:C7:1A:5C:E2:22:5B:38:C8:6D:85:10:90 X509v3 Authority Key Identifier: keyid:41:9B:61:72:F5:B2:BC:22:8A:C7:BA:78:B3:9F:02:33:28:21:A8:A8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QZthcvWyvCKKx7p4s58CMyghqKg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/QZthcvWyvCKKx7p4s58CMyghqKg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f7:bb:6a:b6:f7:d8:05:01:1a:b8:9f:7b:d4:3c:a1:9a:42: 78:09:a4:2e:0e:47:d0:e6:67:25:2b:dd:e8:6b:51:2d:98:1a: 6a:12:b6:27:d5:49:6c:a1:71:9d:0b:37:6a:72:42:2e:6b:dd: 61:73:08:2f:9b:1f:0e:68:79:01:75:67:64:93:12:3b:41:58: 91:0f:a9:3a:d2:3c:82:f0:45:1e:79:41:36:d7:1e:04:4d:5f: 1f:b2:16:51:0d:b1:4a:fa:45:c0:df:ad:ba:d2:1e:c2:38:b6: 19:f0:b0:c0:12:75:00:07:dd:b7:4a:d9:08:0a:62:de:07:36: 7e:3c:87:a5:68:f0:df:28:e1:a8:ee:21:24:bd:c8:92:88:00: 3c:82:a5:85:df:30:73:c1:64:50:ff:ac:5f:74:b9:30:15:5c: 5d:b8:1c:cc:5c:8c:fb:7c:c9:00:79:08:be:77:16:4f:47:7e: 86:0c:be:53:c7:2e:52:c2:7e:4f:38:de:3b:ba:2f:fa:ba:7b: 67:e7:ee:27:1c:b0:72:bd:9d:69:66:ee:24:25:4e:9e:e9:1a: 2f:eb:01:d4:df:09:1d:3a:f8:1f:16:00:d4:ca:d1:12:74:e0: 5b:02:e9:42:fa:57:e1:e6:0d:7b:09:6e:fb:72:cc:fe:22:7d: 34:8d:75:41 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICASswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDE5 QjYxNzJGNUIyQkMyMjhBQzdCQTc4QjM5RjAyMzMyODIxQThBODAeFw0yNTAyMjEw NjI4MjBaFw0yNTEyMjMwNjAzNTdaMDMxMTAvBgNVBAMTKDE4Q0IwRjk4Q0EwNEFD MjVDNzFBNUNFMjIyNUIzOEM4NkQ4NTEwOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjDV9kHjfHaQ2PCNeBfx9TE2+K6dDKJK0WT5vH0WArE4+tIGbW TaEmHIcJ+hgFG0Ahkn4EwtjyrXVJ3GJt9c3evoHQmxrrLYMG97oQ2Gkw0L2OVKbf NUowzV7lSY5KB3oeIwpnGNcM/ogYINflL0NiOgKPTs97/JLbuMobPgD0o5JWJSEk a8JaBY7qvbL5ohALV82OqySLUZfD3e7SBB9593wF9mfi/cg9hc8Afvkhn9Dlxvgy cFrs7YOOMM4yWbOVnWx/lLa3VhxBUd4nKb3AOWK85cp7+HKvqup0c3NJgd9Q1rBM 1++FpP5yn6B/XAqnPc8bqrc/PX3F903Y4ScXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGMsPmMoErCXHGlziIls4yG2FEJAwHwYDVR0jBBgwFoAUQZthcvWyvCKKx7p4 s58CMyghqKgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 MS9RWnRoY3ZXeXZDS0t4N3A0czU4Q015Z2hxS2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1FadGhjdld5dkNLS3g3cDRzNThDTXlnaHFLZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDEvUVp0aGN2V3l2Q0tL eDdwNHM1OENNeWdocUtnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACv3u2q299gFARq4n3vUPKGaQngJpC4OR9DmZyUr3ehrUS2YGmoStifVSWyh cZ0LN2pyQi5r3WFzCC+bHw5oeQF1Z2STEjtBWJEPqTrSPILwRR55QTbXHgRNXx+y FlENsUr6RcDfrbrSHsI4thnwsMASdQAH3bdK2QgKYt4HNn48h6Vo8N8o4ajuISS9 yJKIADyCpYXfMHPBZFD/rF90uTAVXF24HMxcjPt8yQB5CL53Fk9HfoYMvlPHLlLC fk843ju6L/q6e2fn7iccsHK9nWlm7iQlTp7pGi/rAdTfCR06+B8WANTK0RJ04FsC 6UL6V+HmDXsJbvtyzP4ifTSNdUE= -----END CERTIFICATE-----Generated at Fri Feb 21 10:47:35 2025 by rpki-client