$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft File: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft (raw, json) Hash identifier: wU+S8tW/5/r/4zM/2i6+oAAltSO3QBLaGxmY/lC9aMo= Subject key identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D Authority key identifier: 64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 Certificate issuer: /CN=64586FB3438D76154454082FF8556B3D13F171B7 Certificate serial: 1444 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft Manifest number: 1444 Signing time: Mon 14 Apr 2025 04:35:44 +0000 Manifest this update: Mon 14 Apr 2025 04:35:44 +0000 Manifest next update: Mon 14 Apr 2025 10:35:44 +0000 Files and hashes: 1: ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl (hash: 6+/QBJh1VSmDOW5aZJcWikXztga7CHnuSmBwqdU41YQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 10:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5188 (0x1444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64586FB3438D76154454082FF8556B3D13F171B7 Validity Not Before: Apr 14 04:35:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=FF4F1BE7CA68092A10750FABC11F4DB6BD8F993D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:50:2d:04:51:f6:aa:bf:5f:ad:b7:5e:b3: c8:40:f7:71:65:fa:1c:81:8e:79:e0:a7:4d:52:49: 70:ee:de:c3:45:d6:e7:42:61:64:e5:8b:51:c5:50: e6:a1:61:aa:ef:a5:fc:d2:b8:37:f7:2a:b9:66:85: 61:b5:de:e7:48:8a:6d:72:c0:9e:44:3b:e1:d8:36: d1:81:16:d6:5e:bc:ae:62:e2:ed:e5:1e:35:93:70: 76:26:c4:a7:2c:80:85:fa:04:81:72:74:ce:fc:a1: 4e:a0:f3:75:4d:53:4b:a1:88:e0:69:35:9b:f1:26: 0f:7a:da:83:04:c5:81:65:c5:c6:8b:ae:7d:40:58: 1e:63:af:ac:b5:08:b0:3d:14:66:98:67:b3:2d:3c: a4:d2:4a:15:1a:33:d6:86:6d:7c:46:2f:4b:de:c0: 99:c2:99:e2:9f:72:c5:75:3f:96:f4:ae:e4:09:29: 4f:af:39:2d:c4:23:f9:e1:45:31:37:d7:f3:4c:cf: 4a:bb:07:d4:8c:da:04:b3:bc:46:6c:d4:15:be:7f: 83:bb:ad:90:55:1b:6d:db:29:8b:e2:2e:b2:6d:5b: b8:8e:fe:2a:e1:d8:9c:ce:7d:b0:fd:a4:42:62:3d: 18:7b:7c:c8:d7:57:8e:c8:67:5f:51:60:f6:20:0b: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:1B:E7:CA:68:09:2A:10:75:0F:AB:C1:1F:4D:B6:BD:8F:99:3D X509v3 Authority Key Identifier: keyid:64:58:6F:B3:43:8D:76:15:44:54:08:2F:F8:55:6B:3D:13:F1:71:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/ZFhvs0ONdhVEVAgv-FVrPRPxcbc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:55:d1:db:83:de:7d:e9:87:ab:77:48:b0:e1:4d:a3:40:e1: 61:9c:36:47:cf:c2:a4:de:80:42:60:bf:3a:10:25:69:04:24: 03:89:e7:44:25:b8:f7:68:9a:6d:4b:37:01:d5:6d:82:d3:b8: 9d:f8:bb:7f:09:e5:f7:09:31:0a:3d:81:91:42:e9:17:c5:c8: e9:78:ff:44:28:89:bf:77:17:ab:de:7a:03:fb:46:49:97:15: 73:ef:38:a5:31:0f:f5:04:d1:72:d0:b6:e3:03:30:95:e2:ad: 41:12:f1:fe:59:cd:d5:0c:09:3d:4c:7a:aa:9f:01:fb:97:e9: c5:1d:32:05:8b:e4:d7:f6:c4:52:95:e4:55:6c:64:68:ef:51: 83:03:f0:8b:c6:80:c1:71:11:8a:17:61:99:da:d8:59:13:bf: 97:57:97:c4:aa:2a:17:11:5b:d1:f6:07:74:66:be:fb:a0:ef: 8a:74:d8:f2:2f:e4:0e:5c:0f:43:a6:8e:a6:f4:20:a0:44:74: 0f:58:6a:da:e4:31:49:35:86:d5:8a:5b:7f:ef:96:14:80:39: 2e:1b:54:f8:05:f8:bf:f6:f7:16:4d:d1:72:28:47:3d:7f:89: 6f:4c:54:da:e4:db:ad:67:2b:db:a7:cf:9f:3d:fd:c6:71:af: d4:25:73:31 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjQ1 ODZGQjM0MzhENzYxNTQ0NTQwODJGRjg1NTZCM0QxM0YxNzFCNzAeFw0yNTA0MTQw NDM1NDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZGNEYxQkU3Q0E2ODA5 MkExMDc1MEZBQkMxMUY0REI2QkQ4Rjk5M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUOVAtBFH2qr9frbdes8hA93Fl+hyBjnngp01SSXDu3sNF1udC YWTli1HFUOahYarvpfzSuDf3KrlmhWG13udIim1ywJ5EO+HYNtGBFtZevK5i4u3l HjWTcHYmxKcsgIX6BIFydM78oU6g83VNU0uhiOBpNZvxJg962oMExYFlxcaLrn1A WB5jr6y1CLA9FGaYZ7MtPKTSShUaM9aGbXxGL0vewJnCmeKfcsV1P5b0ruQJKU+v OS3EI/nhRTE31/NMz0q7B9SM2gSzvEZs1BW+f4O7rZBVG23bKYviLrJtW7iO/irh 2JzOfbD9pEJiPRh7fMjXV47IZ19RYPYgC1jDAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/08b58poCSoQdQ+rwR9Ntr2PmT0wHwYDVR0jBBgwFoAUZFhvs0ONdhVEVAgv +FVrPRPxcbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMw L1pGaHZzME9OZGhWRVZBZ3YtRlZyUFJQeGNiYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWkZodnMwT05kaFZFVkFndi1GVnJQUlB4Y2JjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjMwL1pGaHZzME9OZGhWRVZB Z3YtRlZyUFJQeGNiYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUVdHbg9596Yerd0iw4U2jQOFhnDZHz8Kk3oBCYL86ECVpBCQDiedEJbj3aJpt SzcB1W2C07id+Lt/CeX3CTEKPYGRQukXxcjpeP9EKIm/dxer3noD+0ZJlxVz7zil MQ/1BNFy0LbjAzCV4q1BEvH+Wc3VDAk9THqqnwH7l+nFHTIFi+TX9sRSleRVbGRo 71GDA/CLxoDBcRGKF2GZ2thZE7+XV5fEqioXEVvR9gd0Zr77oO+KdNjyL+QOXA9D po6m9CCgRHQPWGra5DFJNYbVilt/75YUgDkuG1T4Bfi/9vcWTdFyKEc9f4lvTFTa 5NutZyvbp8+fPf3Gca/UJXMx -----END CERTIFICATE-----Generated at Mon Apr 14 10:07:17 2025 by rpki-client