$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.mft File: _On9lvjAopmBn-sARGCn2GHQu3I.mft (raw, json) Hash identifier: yooOb15jyHKx6YQJ3dA2SUmshP3a+TBuCpXR88x/Pq8= Subject key identifier: 07:45:AC:3C:4A:E9:B8:10:CF:F0:61:DA:83:70:00:77:BD:31:79:A8 Authority key identifier: FC:E9:FD:96:F8:C0:A2:99:81:9F:EB:00:44:60:A7:D8:61:D0:BB:72 Certificate issuer: /CN=FCE9FD96F8C0A299819FEB004460A7D861D0BB72 Certificate serial: F5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_On9lvjAopmBn-sARGCn2GHQu3I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.mft Manifest number: F5 Signing time: Fri 21 Feb 2025 08:27:51 +0000 Manifest this update: Fri 21 Feb 2025 08:27:51 +0000 Manifest next update: Fri 21 Feb 2025 14:27:51 +0000 Files and hashes: 1: _On9lvjAopmBn-sARGCn2GHQu3I.crl (hash: cTQF6Ppv1OZziU+V972748sFmBOh+S0+wBD45QdQXmc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_On9lvjAopmBn-sARGCn2GHQu3I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 11:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCE9FD96F8C0A299819FEB004460A7D861D0BB72 Validity Not Before: Feb 21 08:27:51 2025 GMT Not After : Jan 3 02:04:14 2026 GMT Subject: CN=0745AC3C4AE9B810CFF061DA83700077BD3179A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f9:fe:40:86:68:d8:c8:57:39:76:8e:60:33: 27:ae:4c:2a:dc:67:26:77:c7:36:b9:49:4d:aa:98: 7e:ff:9c:a7:b5:44:90:4a:bf:5b:15:56:41:9e:9c: e8:84:2d:46:f9:47:79:18:96:8e:5c:2c:90:0e:15: f9:2a:db:90:d3:73:d9:71:ab:73:61:1c:bd:77:11: 28:58:65:25:02:c9:ee:ca:cc:0c:50:78:72:b9:41: 05:d6:7e:9c:78:8a:1f:49:31:43:11:65:b4:62:1f: 95:ff:e1:18:bd:a5:eb:f1:d4:63:f2:c6:a3:e2:50: 69:0a:22:df:d8:1a:c6:b1:bb:a0:23:4f:b8:aa:83: 35:49:39:ee:73:88:e0:0a:7e:fd:09:ef:7b:d0:23: d3:58:5e:c2:4a:0b:b5:1e:f9:28:a2:8b:b8:58:7e: a9:19:26:e6:a2:b8:be:93:0d:e0:48:92:f0:cc:c7: 76:f0:dc:bd:6f:c2:3e:a0:ce:5f:c6:5d:00:94:d8: 49:b3:3f:40:41:9e:6d:e4:bf:0d:7b:83:96:15:d2: f5:b3:41:5d:da:29:f7:5b:5e:11:cc:74:ed:29:78: 45:34:d8:eb:c6:ca:42:1b:55:81:13:0f:ca:4c:3e: f2:28:4e:1f:f8:b0:f2:92:c2:1c:c5:bb:de:ec:99: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:45:AC:3C:4A:E9:B8:10:CF:F0:61:DA:83:70:00:77:BD:31:79:A8 X509v3 Authority Key Identifier: keyid:FC:E9:FD:96:F8:C0:A2:99:81:9F:EB:00:44:60:A7:D8:61:D0:BB:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_On9lvjAopmBn-sARGCn2GHQu3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d9:c0:7b:c0:fd:57:62:9b:65:44:02:f3:7f:db:3e:28:25: 99:85:2a:75:6f:f8:a5:25:bc:14:dc:f0:09:2a:3f:7b:b5:a9: 01:3d:28:8d:23:9f:75:78:66:ee:2f:ed:a5:a4:25:e3:cd:11: 51:e3:d1:1d:64:4c:28:9a:bb:6f:fc:05:63:10:60:16:8d:d4: 40:b3:13:43:77:0e:a5:82:39:36:97:30:d6:f7:85:98:8b:5b: 47:dc:27:7c:be:97:12:15:28:b6:9f:00:b8:73:ed:b7:5d:9a: ea:85:b9:fd:4e:9a:bd:22:f4:26:31:46:af:c1:9e:61:ec:f8: f0:64:50:61:6b:89:11:da:68:91:8d:0e:40:f9:fe:f1:84:8b: 38:93:d3:7b:f7:de:3a:20:91:a6:b8:38:f2:1b:ec:0c:ed:79: ed:a0:f3:f5:10:78:76:87:ed:87:96:22:a3:4e:5d:3e:a6:f6: 81:8d:a8:cf:8d:0f:36:92:30:8b:c2:86:99:27:a5:9e:fa:fd: 4a:11:95:d9:25:4a:cc:2a:ca:b0:2e:fd:5a:b7:4f:ee:9e:38: d4:53:ee:a5:71:59:9b:ed:ac:0d:84:03:13:fa:16:de:9c:3a: cd:19:59:54:66:78:c2:cc:ea:8c:9a:12:96:05:3b:cc:cd:8c: 25:57:d4:b9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkNF OUZEOTZGOEMwQTI5OTgxOUZFQjAwNDQ2MEE3RDg2MUQwQkI3MjAeFw0yNTAyMjEw ODI3NTFaFw0yNjAxMDMwMjA0MTRaMDMxMTAvBgNVBAMTKDA3NDVBQzNDNEFFOUI4 MTBDRkYwNjFEQTgzNzAwMDc3QkQzMTc5QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDg+f5AhmjYyFc5do5gMyeuTCrcZyZ3xza5SU2qmH7/nKe1RJBK v1sVVkGenOiELUb5R3kYlo5cLJAOFfkq25DTc9lxq3NhHL13EShYZSUCye7KzAxQ eHK5QQXWfpx4ih9JMUMRZbRiH5X/4Ri9pevx1GPyxqPiUGkKIt/YGsaxu6AjT7iq gzVJOe5ziOAKfv0J73vQI9NYXsJKC7Ue+Siii7hYfqkZJuaiuL6TDeBIkvDMx3bw 3L1vwj6gzl/GXQCU2EmzP0BBnm3kvw17g5YV0vWzQV3aKfdbXhHMdO0peEU02OvG ykIbVYETD8pMPvIoTh/4sPKSwhzFu97smeKlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUB0WsPErpuBDP8GHag3AAd70xeagwHwYDVR0jBBgwFoAU/On9lvjAopmBn+sA RGCn2GHQu3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 Ni9fT245bHZqQW9wbUJuLXNBUkdDbjJHSFF1M0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19PbjlsdmpBb3BtQm4tc0FSR0NuMkdIUXUzSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDYvX09uOWx2akFvcG1C bi1zQVJHQ24yR0hRdTNJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAPZwHvA/Vdim2VEAvN/2z4oJZmFKnVv+KUlvBTc8AkqP3u1qQE9KI0jn3V4 Zu4v7aWkJePNEVHj0R1kTCiau2/8BWMQYBaN1ECzE0N3DqWCOTaXMNb3hZiLW0fc J3y+lxIVKLafALhz7bddmuqFuf1Omr0i9CYxRq/BnmHs+PBkUGFriRHaaJGNDkD5 /vGEiziT03v33jogkaa4OPIb7Aztee2g8/UQeHaH7YeWIqNOXT6m9oGNqM+NDzaS MIvChpknpZ76/UoRldklSswqyrAu/Vq3T+6eONRT7qVxWZvtrA2EAxP6Ft6cOs0Z WVRmeMLM6oyaEpYFO8zNjCVX1Lk= -----END CERTIFICATE-----Generated at Fri Feb 21 10:22:39 2025 by rpki-client