$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft File: mlx0rj-M07Z5rFbEc_RQN4WRkms.mft (raw, json) Hash identifier: CKYoJKP+3ZB2bz0oEStITQUyYVCdKJyeo8JtBT24hx4= Subject key identifier: DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07 Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B Certificate serial: 1E0A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft Manifest number: 1DFA Signing time: Fri 04 Apr 2025 17:05:54 +0000 Manifest this update: Fri 04 Apr 2025 17:05:54 +0000 Manifest next update: Fri 04 Apr 2025 23:05:54 +0000 Files and hashes: 1: BJ8T6xeZmMZPoJmpWakz5R26fNM.roa (hash: 4dzjcrkTArAsirZGrc5ZYf3u9Rn1+p/i9kWIil0/S6o=) 2: GffFEt798jGr2kcFeplLE9TiUpw.roa (hash: x/NW5R0sx7+4pKoOo1eHG33Vc6aGyXA8OuFJtzNxon8=) 3: GhF9Iv8-xpxt-BLusQ7L-l-Zlyk.roa (hash: 8dxpRvljiGFK6kC5Y47WYo2ofFRXbFVeh34A5lPzXCs=) 4: KebNhNqHYlNdAxB9cgzJuTzHbFs.roa (hash: 5TjKvSC7WlvKE6HkDjGaROjX06WQePtjRheVhtqxHWo=) 5: TuRAimkG7nUfxwwnfG2ggisWEWQ.roa (hash: rJ770ZZ28gQ4Oy6pYNR7fhAhl+t7lmth+T2+S8AjKOM=) 6: mlx0rj-M07Z5rFbEc_RQN4WRkms.crl (hash: ORML1b7hujOK/z/6iRhD0q18sePNl0O830aev+Y8KCc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7690 (0x1e0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B Validity Not Before: Apr 4 17:05:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DED08EF758D4AC1835950E046F31B9ED40123207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:b4:f4:af:6f:ac:59:2d:d1:16:e3:99:9d: 09:77:1c:8a:5e:2d:8f:8b:bb:83:34:11:10:f9:8e: 84:8f:27:66:e9:3c:be:6d:8f:8f:4c:3c:ad:d7:2c: 0c:37:06:ac:4e:22:a3:e5:7f:e0:90:60:42:32:60: c2:25:cb:72:3e:b1:2d:30:c9:7d:98:0d:48:d5:44: 96:12:df:47:d9:8a:df:3b:ba:04:bd:b7:ba:c8:ce: 93:00:73:aa:4f:ca:13:74:a2:80:55:83:9e:d3:d1: 8b:50:fe:09:23:7a:ec:e6:d1:2f:9b:fe:36:e1:1e: 92:91:17:ee:56:0b:a6:70:07:68:74:62:a6:8f:29: 3c:24:4f:b0:c3:a2:ff:06:57:43:0d:77:1d:b0:fd: 1d:0b:63:19:1e:a6:cb:86:b4:77:0b:8b:80:b8:86: a6:55:45:dd:80:a4:32:16:45:8f:78:a1:b0:17:ab: 78:dd:54:a5:60:0d:71:9b:d3:59:78:a2:92:6b:a5: d4:f8:0c:a9:41:32:11:ec:94:c4:59:ba:8e:89:30: bb:b1:ef:1e:f1:fc:27:6c:6c:79:e3:13:6e:4d:f4: 8c:61:7b:20:dd:52:81:39:08:4f:da:10:13:81:29: c4:b2:f2:18:06:f2:99:9e:57:37:d1:c1:ae:7d:76: 9d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07 X509v3 Authority Key Identifier: keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:05:c7:b0:98:0e:72:c6:62:36:d6:8c:1a:b6:2e:23:60:a4: b0:ee:95:fe:54:71:da:b0:72:90:c7:e3:a2:50:49:de:fb:6c: eb:54:f1:f5:81:5b:61:69:90:db:91:98:dc:fd:85:19:49:3d: 2c:cb:2c:e7:fd:88:36:79:9c:26:fe:83:3f:b9:60:8c:74:d8: d7:cd:dd:1d:7a:39:9e:f9:b5:ff:b6:35:e2:2b:63:b5:ff:44: 1a:28:66:be:ce:2f:55:02:4d:b0:f7:27:d4:90:f3:9b:dc:8e: 84:64:88:d8:21:c1:f7:b8:23:d0:e4:ae:bd:56:c4:bb:b0:da: 36:c6:d2:a1:05:1f:d7:4a:f1:aa:6d:82:70:81:d2:77:3f:91: 3b:ca:4a:db:8e:af:49:fd:37:56:78:59:01:dc:d0:e6:df:74: 2d:e1:6c:d6:48:9e:6d:fb:e6:b4:26:a8:c2:f2:c5:96:3e:49: a4:3c:cb:23:d9:ec:2f:f3:aa:8c:33:b6:9f:34:67:cc:4e:be: e6:02:c9:cc:ed:04:3c:ee:f4:f3:62:fd:d7:1b:ef:82:24:c9: ce:57:5d:8b:5a:13:62:6f:70:75:fb:b4:b0:34:93:00:bd:7b: 7e:e6:b2:77:9c:ec:47:9c:04:1d:ea:58:0f:d6:5e:6b:82:f5: a9:99:14:c0 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICHgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUE1 Qzc0QUUzRjhDRDNCNjc5QUM1NkM0NzNGNDUwMzc4NTkxOTI2QjAeFw0yNTA0MDQx NzA1NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERFRDA4RUY3NThENEFD MTgzNTk1MEUwNDZGMzFCOUVENDAxMjMyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHALT0r2+sWS3RFuOZnQl3HIpeLY+Lu4M0ERD5joSPJ2bpPL5t j49MPK3XLAw3BqxOIqPlf+CQYEIyYMIly3I+sS0wyX2YDUjVRJYS30fZit87ugS9 t7rIzpMAc6pPyhN0ooBVg57T0YtQ/gkjeuzm0S+b/jbhHpKRF+5WC6ZwB2h0YqaP KTwkT7DDov8GV0MNdx2w/R0LYxkepsuGtHcLi4C4hqZVRd2ApDIWRY94obAXq3jd VKVgDXGb01l4opJrpdT4DKlBMhHslMRZuo6JMLux7x7x/CdsbHnjE25N9IxheyDd UoE5CE/aEBOBKcSy8hgG8pmeVzfRwa59dp1LAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQU3tCO91jUrBg1lQ4EbzG57UASMgcwHwYDVR0jBBgwFoAUmlx0rj+M07Z5rFbE c/RQN4WRkmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv bWx4MHJqLU0wN1o1ckZiRWNfUlFONFdSa21zLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tbHgwcmotTTA3WjVyRmJFY19SUU40V1JrbXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9tbHgwcmotTTA3WjVyRmJF Y19SUU40V1JrbXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA wQXHsJgOcsZiNtaMGrYuI2CksO6V/lRx2rBykMfjolBJ3vts61Tx9YFbYWmQ25GY 3P2FGUk9LMss5/2INnmcJv6DP7lgjHTY183dHXo5nvm1/7Y14itjtf9EGihmvs4v VQJNsPcn1JDzm9yOhGSI2CHB97gj0OSuvVbEu7DaNsbSoQUf10rxqm2CcIHSdz+R O8pK246vSf03VnhZAdzQ5t90LeFs1kiebfvmtCaowvLFlj5JpDzLI9nsL/OqjDO2 nzRnzE6+5gLJzO0EPO7082L91xvvgiTJzlddi1oTYm9wdfu0sDSTAL17fuayd5zs R5wEHepYD9Zea4L1qZkUwA== -----END CERTIFICATE-----Generated at Fri Apr 4 22:02:14 2025 by rpki-client