$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft File: DqwT6V7p4IXk3eST4sWV7hZQy5E.mft (raw, json) Hash identifier: ut3+Xi4sZpOQ2lgy+8pgC08IwmbUeyflcJZ8vAPtBE0= Subject key identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA Authority key identifier: 0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 Certificate issuer: /CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Certificate serial: 07F8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft Manifest number: 07F8 Signing time: Sat 26 Apr 2025 13:10:41 +0000 Manifest this update: Sat 26 Apr 2025 13:10:41 +0000 Manifest next update: Sat 26 Apr 2025 19:10:41 +0000 Files and hashes: 1: DqwT6V7p4IXk3eST4sWV7hZQy5E.crl (hash: 7RigeAjUAuF0NOpsjXPYsSjpbOUMMQlIQ6AW27QTeSk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 17:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAC13E95EE9E085E4DDE493E2C595EE1650CB91 Validity Not Before: Apr 26 13:10:41 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C130BB42761CDC64A0C4FD8C24857C4C71BC9EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:65:ae:fa:dc:ed:29:cc:7f:ec:48:ba:c1: 9d:87:25:fe:64:4b:9c:6c:2a:24:71:70:03:66:73: 7c:55:a3:90:51:c8:1f:fd:d8:a0:24:ab:d1:6c:30: a3:ab:ca:97:29:6b:2c:87:0b:ef:8c:13:16:78:86: 05:6c:15:00:bf:76:66:55:9d:e9:6a:a9:c4:ce:73: b3:8a:23:7b:5c:bf:6d:33:d8:86:94:09:27:ab:0b: 23:46:a7:f4:a6:ab:c1:9c:40:1c:bc:e0:21:ec:c4: c7:3b:97:aa:98:a3:8d:c1:e0:ba:6a:5a:63:41:7b: 36:75:55:d4:4e:5a:bb:2f:a5:c4:f2:c0:82:ad:dc: eb:9f:cc:37:c8:e4:35:3f:21:f2:c9:7d:d0:17:6f: fa:90:b4:c8:e1:44:ca:f3:2e:81:50:a4:38:41:ef: 7b:fd:c1:d9:35:86:ee:92:bc:0a:ca:8c:51:b4:17: af:58:74:38:84:04:93:c8:82:e5:b6:51:a8:48:a9: 75:ed:af:75:02:37:20:62:4e:e7:95:2c:fa:62:4e: 53:ee:cc:ad:8a:d9:27:6e:64:fb:04:0c:8f:b2:fa: 24:c5:b0:91:c2:83:21:79:98:c5:3f:b5:87:43:96: ec:95:18:f5:40:8a:43:51:02:fb:f0:b4:0e:88:59: 75:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:BB:42:76:1C:DC:64:A0:C4:FD:8C:24:85:7C:4C:71:BC:9E:FA X509v3 Authority Key Identifier: keyid:0E:AC:13:E9:5E:E9:E0:85:E4:DD:E4:93:E2:C5:95:EE:16:50:CB:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DqwT6V7p4IXk3eST4sWV7hZQy5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/DqwT6V7p4IXk3eST4sWV7hZQy5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:68:21:42:4f:fa:3f:45:38:03:a3:7f:7c:d9:24:83:62:9a: 66:aa:c9:71:74:f2:50:62:f2:7c:86:cd:b7:0d:0c:c6:97:73: 71:b2:f4:04:a2:bc:a7:06:84:e3:98:2b:f6:b3:52:8c:4f:90: 25:3f:94:d6:0f:4d:3e:94:d1:64:d9:cc:31:9d:c1:13:03:5f: a3:77:2a:12:4d:9f:a7:08:e0:00:b0:ec:b5:5c:4c:a1:a7:f3: d1:d4:68:94:e2:67:ec:8c:82:45:b4:bc:b2:b7:d4:f5:72:1a: 4f:e8:d6:4a:e2:7c:37:ab:94:eb:f6:a4:ee:9a:62:55:7c:5b: dd:43:5c:4d:41:e1:19:8a:4f:22:bc:24:10:5b:e2:e8:74:d5: 6f:ba:51:e1:cb:d0:6a:3f:93:99:6c:95:e6:44:3c:82:d8:c2: 53:38:02:e0:7a:74:14:e8:80:10:5a:aa:ba:b4:d6:83:e9:12: f4:1d:93:f8:00:2e:ee:3b:d2:d5:10:54:d2:9c:c1:98:9e:a0: 9b:cb:06:bd:76:df:aa:9c:6a:c1:1f:c4:2c:a9:8b:b1:53:4b: e5:b1:e1:fe:dd:4f:9e:a8:40:7b:98:9c:0f:b0:a7:a8:91:cf: 31:fe:0f:e7:5a:3c:6e:19:76:c5:fb:f6:60:12:f7:eb:58:31: 7c:b2:87:2d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB QzEzRTk1RUU5RTA4NUU0RERFNDkzRTJDNTk1RUUxNjUwQ0I5MTAeFw0yNTA0MjYx MzEwNDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMxMzBCQjQyNzYxQ0RD NjRBMEM0RkQ4QzI0ODU3QzRDNzFCQzlFRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIrWWu+tztKcx/7Ei6wZ2HJf5kS5xsKiRxcANmc3xVo5BRyB/9 2KAkq9FsMKOrypcpayyHC++MExZ4hgVsFQC/dmZVnelqqcTOc7OKI3tcv20z2IaU CSerCyNGp/Smq8GcQBy84CHsxMc7l6qYo43B4LpqWmNBezZ1VdROWrsvpcTywIKt 3OufzDfI5DU/IfLJfdAXb/qQtMjhRMrzLoFQpDhB73v9wdk1hu6SvArKjFG0F69Y dDiEBJPIguW2UahIqXXtr3UCNyBiTueVLPpiTlPuzK2K2SduZPsEDI+y+iTFsJHC gyF5mMU/tYdDluyVGPVAikNRAvvwtA6IWXXxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUwTC7QnYc3GSgxP2MJIV8THG8nvowHwYDVR0jBBgwFoAUDqwT6V7p4IXk3eST 4sWV7hZQy5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC9EcXdUNlY3cDRJWGszZVNUNHNXVjdoWlF5NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Rxd1Q2VjdwNElYazNlU1Q0c1dWN2haUXk1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzAvRHF3VDZWN3A0SVhr M2VTVDRzV1Y3aFpReTVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADRoIUJP+j9FOAOjf3zZJINimmaqyXF08lBi8nyGzbcNDMaXc3Gy9ASivKcG hOOYK/azUoxPkCU/lNYPTT6U0WTZzDGdwRMDX6N3KhJNn6cI4ACw7LVcTKGn89HU aJTiZ+yMgkW0vLK31PVyGk/o1krifDerlOv2pO6aYlV8W91DXE1B4RmKTyK8JBBb 4uh01W+6UeHL0Go/k5lsleZEPILYwlM4AuB6dBTogBBaqrq01oPpEvQdk/gALu47 0tUQVNKcwZieoJvLBr1236qcasEfxCypi7FTS+Wx4f7dT56oQHuYnA+wp6iRzzH+ D+daPG4ZdsX79mAS9+tYMXyyhy0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:23 2025 by rpki-client