$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft File: ahHuR0JdFOuvL80k0gYrClK6BCw.mft (raw, json) Hash identifier: Yo8i0eaKdOYpbIJ4Qy6B4YQ6s2OrMt12emgD54DUqv0= Subject key identifier: 47:8F:ED:13:0B:DC:21:23:D0:1B:E4:4F:5F:CF:5F:0B:56:06:23:47 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 038E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft Manifest number: 038E Signing time: Sat 26 Apr 2025 08:37:46 +0000 Manifest this update: Sat 26 Apr 2025 08:37:46 +0000 Manifest next update: Sat 26 Apr 2025 14:37:46 +0000 Files and hashes: 1: ahHuR0JdFOuvL80k0gYrClK6BCw.crl (hash: ATdtZXJTVjfVujy5wsYupm9J9JB9Z5NFfDw0XFxbVf4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Apr 26 08:37:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=478FED130BDC2123D01BE44F5FCF5F0B56062347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:80:81:70:aa:fb:0e:8d:47:e8:26:06:8e: 3b:c5:98:f2:74:a7:54:35:ae:e6:59:f8:76:52:b9: 29:39:d4:09:0b:2a:1f:7c:4c:f6:3d:42:95:76:8f: 5f:34:94:19:8f:7e:ac:0f:e1:23:5c:0d:62:fa:96: 9e:df:bd:c9:86:9b:6a:7a:81:d2:1c:ef:c4:a8:8f: b9:b2:ce:84:b8:1c:04:7a:07:3b:5f:69:67:c0:85: 59:9f:90:f5:21:b1:0e:cc:22:64:7d:92:42:b3:86: 2e:99:75:a4:d3:27:cf:58:4e:61:b9:73:76:94:98: b7:1e:ae:b5:33:10:36:7d:3e:45:ae:19:d6:44:3e: 2c:44:15:29:40:bc:0f:af:f7:52:a5:44:4b:7d:65: 29:64:c0:2c:0f:60:71:7f:a3:c2:fa:bd:11:25:2b: 3b:76:63:49:9f:aa:77:b3:0a:4d:eb:5e:1a:1f:e0: 0b:ca:4a:9d:69:a6:37:88:cc:80:84:7d:22:c7:8e: 25:94:10:0f:48:2e:6f:b2:fa:04:d4:c6:b9:86:e8: a4:1e:f1:15:85:a0:da:c0:d4:c2:93:e8:e4:3a:95: e5:38:32:e0:e0:ca:9e:10:8c:80:0a:e1:6f:b7:19: be:f7:89:ed:18:ae:00:3b:26:44:e6:72:86:7f:01: bd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8F:ED:13:0B:DC:21:23:D0:1B:E4:4F:5F:CF:5F:0B:56:06:23:47 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:03:f7:0e:46:53:c7:6f:98:5b:e9:cf:bf:39:fb:99:11:2d: e8:00:0f:42:50:ed:2d:45:b1:8a:e8:a9:86:9a:15:bd:02:93: 14:23:b4:cb:c2:b2:a2:36:04:1a:d4:9d:1e:51:22:51:32:e5: 0b:45:d8:86:79:b0:3c:38:8c:16:96:36:fd:07:ca:b9:e7:82: ce:89:c7:40:a2:0e:d2:27:da:4f:b8:57:13:55:eb:b2:0e:dd: 69:68:94:b6:bf:d5:95:0e:c6:2b:7b:42:fb:4e:ab:b7:e4:32: 30:b5:9c:5d:db:10:f5:2a:81:5e:d1:f8:f9:3c:7b:e0:0e:a8: 71:1b:49:43:9c:37:7a:91:ca:3f:96:e2:9f:3b:17:a5:c5:a1: f6:81:f6:d0:5c:05:5e:36:9f:d3:55:19:1d:82:e0:6f:61:2c: 0a:9a:4f:9f:4c:27:a0:bc:89:62:7c:34:43:cd:80:e6:23:81: ef:43:f1:8a:35:2f:e7:c9:49:80:f6:2b:84:66:57:6f:f0:90: ee:cd:57:9c:40:eb:8b:df:99:62:ed:2a:15:64:a5:d0:66:60: f8:54:ee:f8:c2:4b:cc:c6:d5:8c:08:07:ef:a4:98:d0:dc:a8: be:b7:12:f5:c0:b5:83:3b:16:d0:f0:dc:0f:f7:05:da:9c:43: 98:e8:17:5b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA0MjYw ODM3NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ3OEZFRDEzMEJEQzIx MjNEMDFCRTQ0RjVGQ0Y1RjBCNTYwNjIzNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTj4CBcKr7Do1H6CYGjjvFmPJ0p1Q1ruZZ+HZSuSk51AkLKh98 TPY9QpV2j180lBmPfqwP4SNcDWL6lp7fvcmGm2p6gdIc78Soj7myzoS4HAR6Bztf aWfAhVmfkPUhsQ7MImR9kkKzhi6ZdaTTJ89YTmG5c3aUmLcerrUzEDZ9PkWuGdZE PixEFSlAvA+v91KlREt9ZSlkwCwPYHF/o8L6vRElKzt2Y0mfqnezCk3rXhof4AvK Sp1ppjeIzICEfSLHjiWUEA9ILm+y+gTUxrmG6KQe8RWFoNrA1MKT6OQ6leU4MuDg yp4QjIAK4W+3Gb73ie0YrgA7JkTmcoZ/Ab3pAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUR4/tEwvcISPQG+RPX89fC1YGI0cwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvYWhIdVIwSmRGT3V2 TDgwazBnWXJDbEs2QkN3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACoD9w5GU8dvmFvpz785+5kRLegAD0JQ7S1FsYroqYaaFb0CkxQjtMvCsqI2 BBrUnR5RIlEy5QtF2IZ5sDw4jBaWNv0Hyrnngs6Jx0CiDtIn2k+4VxNV67IO3Wlo lLa/1ZUOxit7QvtOq7fkMjC1nF3bEPUqgV7R+Pk8e+AOqHEbSUOcN3qRyj+W4p87 F6XFofaB9tBcBV42n9NVGR2C4G9hLAqaT59MJ6C8iWJ8NEPNgOYjge9D8Yo1L+fJ SYD2K4RmV2/wkO7NV5xA64vfmWLtKhVkpdBmYPhU7vjCS8zG1YwIB++kmNDcqL63 EvXAtYM7FtDw3A/3BdqcQ5joF1s= -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:37 2025 by rpki-client