$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft File: siBZMMmnzLPKhy8QeQqwa2_acHI.mft (raw, json) Hash identifier: RtyE0TYZz8/92cqtdCC37QFJbxJZNh/rttu1mki/VIM= Subject key identifier: 35:B1:A6:FD:B2:A5:7B:24:92:AF:9E:83:B4:24:7A:63:10:82:7B:B1 Authority key identifier: B2:20:59:30:C9:A7:CC:B3:CA:87:2F:10:79:0A:B0:6B:6F:DA:70:72 Certificate issuer: /CN=B2205930C9A7CCB3CA872F10790AB06B6FDA7072 Certificate serial: 07A5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft Manifest number: 07A5 Signing time: Sat 26 Apr 2025 11:08:03 +0000 Manifest this update: Sat 26 Apr 2025 11:08:03 +0000 Manifest next update: Sat 26 Apr 2025 17:08:03 +0000 Files and hashes: 1: siBZMMmnzLPKhy8QeQqwa2_acHI.crl (hash: caiVGJvD9tOHcs31SYTFQIK8XR4G8yK88FqQ2cjV3oo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2205930C9A7CCB3CA872F10790AB06B6FDA7072 Validity Not Before: Apr 26 11:08:03 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=35B1A6FDB2A57B2492AF9E83B4247A6310827BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:55:cb:58:88:9a:53:9a:3e:03:72:a9:1d:03: b9:05:0d:34:3e:fa:84:e2:5f:cd:d8:92:bc:06:95: e0:27:7a:48:23:00:2a:c0:84:6f:f3:5e:fc:d1:6b: 16:5a:56:86:3d:a6:b7:e6:68:a6:f1:39:47:6b:ae: bc:1b:b9:5c:88:c7:3e:69:a4:77:0d:4b:68:09:fe: e4:f4:24:32:74:05:6e:04:76:55:5b:76:9b:24:00: 53:a8:94:cc:dc:62:ef:28:ad:b5:bd:77:c2:28:68: c8:e4:34:aa:dc:ab:17:85:e1:1c:67:cf:0c:b4:e0: 48:95:fc:b3:0f:b9:0c:d1:d1:f4:bd:ea:a4:49:d4: b4:0d:d4:30:8b:80:9b:eb:25:98:ca:ae:30:27:6b: 58:1d:65:af:80:e2:dd:82:99:bf:9c:7a:20:ec:d6: 52:52:85:00:f6:0f:20:99:3c:d0:40:f5:86:4e:b7: d8:59:72:d3:72:47:0a:3c:fd:32:23:f1:47:e3:e1: 00:a1:bc:98:ce:b8:63:c7:90:0c:b5:8b:f0:c3:c8: 96:66:f7:7e:cc:0c:4f:4c:25:77:13:c5:ab:96:df: e0:14:42:24:6e:d3:14:de:98:76:91:6d:2e:a9:6b: d2:c9:47:86:33:95:58:f2:2c:2b:a1:b2:d3:08:9c: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B1:A6:FD:B2:A5:7B:24:92:AF:9E:83:B4:24:7A:63:10:82:7B:B1 X509v3 Authority Key Identifier: keyid:B2:20:59:30:C9:A7:CC:B3:CA:87:2F:10:79:0A:B0:6B:6F:DA:70:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:72:a5:eb:1c:80:67:87:14:e4:28:e7:87:2d:02:24:df:ee: 48:f2:38:0f:0c:e9:aa:b2:60:a2:2d:67:a7:1b:3d:e9:c1:db: 6b:de:5e:a5:d0:51:82:4d:88:33:67:19:a4:25:0e:62:7c:8e: d6:e6:76:e0:be:2a:0d:ac:fb:cc:0c:a9:63:f1:a7:ee:80:3c: 8f:b6:e3:cd:ae:61:16:0c:c3:5c:70:2c:f0:a0:97:20:9d:b7: 66:36:9b:e9:57:8c:3f:32:d2:70:28:55:86:56:50:49:e6:49: e5:17:2a:7e:7f:ec:ce:c3:83:a5:a2:32:f6:17:fc:0f:75:e5: 24:d3:d1:eb:ce:43:74:eb:06:68:96:83:f5:9c:fe:d7:6e:4d: 6e:f4:7f:5e:e3:07:fb:d5:1c:27:36:46:18:f5:9e:8e:4f:f5: b5:e4:86:59:a4:30:d2:4b:2b:cb:66:e7:67:6d:24:b2:92:c5: 33:fa:d9:df:fa:fa:47:76:ba:df:72:86:42:72:d3:ad:db:cd: b7:71:1e:d8:a1:e0:6b:27:6d:ea:00:38:57:00:16:ed:b1:fd: 27:ee:0d:a5:ef:3f:30:d1:fd:3b:0d:60:44:1f:90:00:ae:a5: 99:2e:03:0c:8e:b3:51:20:d2:05:fa:3a:49:4f:c8:e8:72:e3: e3:c5:ab:5c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjIy MDU5MzBDOUE3Q0NCM0NBODcyRjEwNzkwQUIwNkI2RkRBNzA3MjAeFw0yNTA0MjYx MTA4MDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM1QjFBNkZEQjJBNTdC MjQ5MkFGOUU4M0I0MjQ3QTYzMTA4MjdCQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2VctYiJpTmj4DcqkdA7kFDTQ++oTiX83YkrwGleAnekgjACrA hG/zXvzRaxZaVoY9prfmaKbxOUdrrrwbuVyIxz5ppHcNS2gJ/uT0JDJ0BW4EdlVb dpskAFOolMzcYu8orbW9d8IoaMjkNKrcqxeF4Rxnzwy04EiV/LMPuQzR0fS96qRJ 1LQN1DCLgJvrJZjKrjAna1gdZa+A4t2Cmb+ceiDs1lJShQD2DyCZPNBA9YZOt9hZ ctNyRwo8/TIj8Ufj4QChvJjOuGPHkAy1i/DDyJZm937MDE9MJXcTxauW3+AUQiRu 0xTemHaRbS6pa9LJR4YzlVjyLCuhstMInI2FAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNbGm/bKleySSr56DtCR6YxCCe7EwHwYDVR0jBBgwFoAUsiBZMMmnzLPKhy8Q eQqwa2/acHIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 NC9zaUJaTU1tbnpMUEtoeThRZVFxd2EyX2FjSEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NpQlpNTW1uekxQS2h5OFFlUXF3YTJfYWNISS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjQvc2lCWk1NbW56TFBL aHk4UWVRcXdhMl9hY0hJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAItypescgGeHFOQo54ctAiTf7kjyOA8M6aqyYKItZ6cbPenB22veXqXQUYJN iDNnGaQlDmJ8jtbmduC+Kg2s+8wMqWPxp+6API+2482uYRYMw1xwLPCglyCdt2Y2 m+lXjD8y0nAoVYZWUEnmSeUXKn5/7M7Dg6WiMvYX/A915STT0evOQ3TrBmiWg/Wc /tduTW70f17jB/vVHCc2Rhj1no5P9bXkhlmkMNJLK8tm52dtJLKSxTP62d/6+kd2 ut9yhkJy063bzbdxHtih4GsnbeoAOFcAFu2x/SfuDaXvPzDR/TsNYEQfkACupZku AwyOs1Eg0gX6OklPyOhy4+PFq1w= -----END CERTIFICATE-----Generated at Sat Apr 26 15:31:43 2025 by rpki-client