$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft File: zfv2KGSEFu4dmdMuX5yWhae-K7w.mft (raw, json) Hash identifier: d5M8J3Zmbpge+3kNPJ5+l5ypaT1GAg7IyTWygswOzj4= Subject key identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B Authority key identifier: CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC Certificate issuer: /CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Certificate serial: 1CE8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft Manifest number: 1CE8 Signing time: Sat 26 Apr 2025 08:39:45 +0000 Manifest this update: Sat 26 Apr 2025 08:39:45 +0000 Manifest next update: Sat 26 Apr 2025 14:39:45 +0000 Files and hashes: 1: zfv2KGSEFu4dmdMuX5yWhae-K7w.crl (hash: +2Bv9o4OIT6QWc+Ieeiipqt9nwUu9tzg2LvjvBBtc/U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7400 (0x1ce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Validity Not Before: Apr 26 08:39:45 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3C66EB21CE741247CB2A9320E25E8CEF324D467B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:49:8e:33:ee:b4:d8:a8:76:b4:9d:5b:cc:42: 2f:9f:47:62:a7:e1:8e:d7:07:e1:e0:5d:02:81:a9: d0:22:bd:24:a3:6e:9b:de:62:be:2a:40:6e:38:19: d3:66:28:57:3b:99:53:71:f2:5c:d4:ea:c3:bd:6c: 63:37:85:6b:ef:18:36:68:30:95:90:1a:8b:ee:0e: 89:8c:5e:43:ee:c6:df:15:16:3c:34:7e:46:5f:06: ec:d9:86:c9:7c:a8:28:9c:34:56:48:c9:b3:e5:a2: 6c:90:33:29:c8:8c:e9:57:34:c6:f6:45:37:f6:71: 00:2f:1b:b8:9e:8b:f3:92:5f:88:93:ed:a9:3d:ef: 3b:61:74:ad:7b:bf:e7:3e:27:63:a2:88:49:0a:a3: 1f:63:11:40:d4:86:24:0f:5a:73:f0:17:3d:33:25: 61:42:8f:5f:6e:85:46:f6:90:98:fd:ae:43:2b:02: e5:09:fd:c9:44:df:58:94:36:c2:a7:05:a9:60:18: 20:49:44:c6:b4:5a:20:a1:24:05:fa:5a:7e:e4:47: fe:e9:51:73:9b:c1:59:2e:be:3e:9a:84:64:52:8f: c3:c7:31:32:1f:f0:53:4d:4e:9c:81:0a:f0:13:99: d8:61:bf:3b:c8:1d:59:92:30:46:36:2a:ab:87:d8: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B X509v3 Authority Key Identifier: keyid:CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:42:67:47:da:a6:5d:f7:07:c9:5c:e7:45:b2:49:30:9c:04: d4:25:73:88:fc:2e:89:d2:4b:7e:96:ad:4f:86:f2:5d:dd:67: 1f:fb:bf:40:65:03:34:4e:e9:cf:d6:c3:f2:5f:e8:1e:2a:6e: ae:91:88:b1:c7:ac:98:91:b4:04:c4:3d:f0:3d:71:6c:cc:e7: b6:d2:15:a4:02:1c:3e:5a:9d:9f:77:70:52:72:e8:21:0d:e2: 43:80:22:94:30:59:96:3c:ef:92:15:e7:e0:f5:fb:33:e5:21: ff:4f:d7:96:11:05:bf:3a:39:ec:41:f3:b8:1e:8d:8a:40:04: 05:f5:8e:25:6b:0b:64:df:b0:98:0d:ac:8a:32:a0:e4:bc:1f: 73:47:39:74:f0:74:94:2a:2f:e7:a2:3c:a8:7e:49:c9:00:6f: bc:ea:f0:f4:3c:5c:1c:a5:10:f8:97:67:1c:6c:fb:f4:d8:89: e0:90:e3:40:d1:d7:71:15:e9:ee:42:a7:bf:56:46:ff:26:79: dd:a9:51:dd:65:ca:ea:71:e5:8e:da:ca:8a:41:87:aa:14:54: 34:56:ec:4c:b8:40:79:6a:bb:0b:21:80:73:46:f1:95:d4:a9: 80:a8:51:00:1f:0f:00:da:81:7d:4a:f5:84:41:66:4c:ba:4b: 28:f0:a1:14 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RG QkY2Mjg2NDg0MTZFRTFEOTlEMzJFNUY5Qzk2ODVBN0JFMkJCQzAeFw0yNTA0MjYw ODM5NDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNDNjZFQjIxQ0U3NDEy NDdDQjJBOTMyMEUyNUU4Q0VGMzI0RDQ2N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtSY4z7rTYqHa0nVvMQi+fR2Kn4Y7XB+HgXQKBqdAivSSjbpve Yr4qQG44GdNmKFc7mVNx8lzU6sO9bGM3hWvvGDZoMJWQGovuDomMXkPuxt8VFjw0 fkZfBuzZhsl8qCicNFZIybPlomyQMynIjOlXNMb2RTf2cQAvG7iei/OSX4iT7ak9 7zthdK17v+c+J2OiiEkKox9jEUDUhiQPWnPwFz0zJWFCj19uhUb2kJj9rkMrAuUJ /clE31iUNsKnBalgGCBJRMa0WiChJAX6Wn7kR/7pUXObwVkuvj6ahGRSj8PHMTIf 8FNNTpyBCvATmdhhvzvIHVmSMEY2KquH2AjHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPGbrIc50EkfLKpMg4l6M7zJNRnswHwYDVR0jBBgwFoAUzfv2KGSEFu4dmdMu X5yWhae+K7wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy My96ZnYyS0dTRUZ1NGRtZE11WDV5V2hhZS1LN3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pmdjJLR1NFRnU0ZG1kTXVYNXlXaGFlLUs3dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjMvemZ2MktHU0VGdTRk bWRNdVg1eVdoYWUtSzd3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF5CZ0fapl33B8lc50WySTCcBNQlc4j8LonSS36WrU+G8l3dZx/7v0BlAzRO 6c/Ww/Jf6B4qbq6RiLHHrJiRtATEPfA9cWzM57bSFaQCHD5anZ93cFJy6CEN4kOA IpQwWZY875IV5+D1+zPlIf9P15YRBb86OexB87gejYpABAX1jiVrC2TfsJgNrIoy oOS8H3NHOXTwdJQqL+eiPKh+SckAb7zq8PQ8XBylEPiXZxxs+/TYieCQ40DR13EV 6e5Cp79WRv8med2pUd1lyupx5Y7ayopBh6oUVDRW7Ey4QHlquwshgHNG8ZXUqYCo UQAfDwDagX1K9YRBZky6SyjwoRQ= -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:46 2025 by rpki-client