$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft File: K6tMFwMvC3Tx01c-eeloid-ypu4.mft (raw, json) Hash identifier: Nql9ZLIXx7rTb23SZIKOufQe1tvb8tz1PXFs2rmgphY= Subject key identifier: BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0 Authority key identifier: 2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE Certificate issuer: /CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE Certificate serial: 02A0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft Manifest number: 02A0 Signing time: Sat 26 Apr 2025 08:39:35 +0000 Manifest this update: Sat 26 Apr 2025 08:39:35 +0000 Manifest next update: Sat 26 Apr 2025 14:39:35 +0000 Files and hashes: 1: K6tMFwMvC3Tx01c-eeloid-ypu4.crl (hash: 0AYLs+0W5/tBPTNhOnH9QpkNGPjA0pRbRJ6BTbJi2Fc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BAB4C17032F0B74F1D3573E79E96889DFB2A6EE Validity Not Before: Apr 26 08:39:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=BE671BA73B86480189EF54ED7FEF88040D02D1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:18:79:57:d3:51:87:19:64:d4:2b:23:54: 8a:ac:f2:88:6d:a0:42:74:e0:65:b1:3b:ac:60:e5: 27:5b:40:9c:f9:f1:72:9b:0f:d0:ae:dd:56:b9:d3: e0:f1:02:16:eb:b1:33:50:44:94:2c:d7:09:11:c5: d0:bb:39:c1:09:55:17:68:ec:d0:69:25:42:b0:a8: 65:ec:e8:80:0c:0e:e5:2f:5c:d6:b3:5d:ae:24:9e: 45:97:66:32:17:b2:82:3f:6f:7b:94:54:d2:58:7e: a7:50:23:74:2d:52:24:6e:73:51:95:71:d0:bc:fd: f3:c3:41:d2:84:41:a9:65:82:fb:1d:df:bd:08:a9: 83:29:47:d0:76:fc:a7:f3:04:2f:e2:4f:f7:3e:92: 8d:84:db:0d:eb:71:7e:d6:d8:7e:de:2c:44:d0:53: 3c:36:d6:1f:63:5d:01:bb:53:89:e9:da:d8:e2:0c: 7b:3c:ed:a6:8d:91:9c:55:e7:33:7e:ad:7e:46:9c: 54:c4:c3:b8:f0:8e:68:f9:4e:9d:f6:aa:fc:b9:d0: 9f:a8:be:a4:22:4f:72:15:98:47:c7:fc:38:f4:d3: 3b:56:d5:02:ea:ca:7b:80:63:a5:5a:f7:0d:97:0d: 30:fd:e2:4e:ba:23:23:81:db:dd:28:9c:ee:76:fe: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:67:1B:A7:3B:86:48:01:89:EF:54:ED:7F:EF:88:04:0D:02:D1:C0 X509v3 Authority Key Identifier: keyid:2B:AB:4C:17:03:2F:0B:74:F1:D3:57:3E:79:E9:68:89:DF:B2:A6:EE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K6tMFwMvC3Tx01c-eeloid-ypu4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/K6tMFwMvC3Tx01c-eeloid-ypu4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:97:22:76:99:b4:ce:3d:08:22:4c:16:53:e4:d7:cc:69:7c: f6:8b:ef:d2:0c:3f:8b:ee:85:24:05:6b:97:5f:09:93:4b:f2: 1a:b6:87:13:12:09:0c:3f:35:64:df:7f:23:d5:2b:7b:7c:e6: 76:64:9e:9c:29:c6:d3:10:94:65:df:99:56:75:36:2f:d2:6e: ac:28:75:6a:ca:66:9c:82:2b:45:3b:58:9d:10:35:e1:bc:e9: ab:06:b3:bf:0b:c6:47:dd:13:6d:d0:ce:7f:a0:83:8f:ea:3a: 87:17:3b:f5:04:b1:16:2b:eb:07:7a:c2:77:0d:ad:23:8a:0c: 4a:7b:47:4d:dd:c4:42:1d:79:cc:02:1f:53:32:a5:fc:10:19: c7:17:89:b9:4f:82:94:01:00:a4:2c:96:9a:28:dd:62:47:be: 9b:72:17:a7:4c:4b:43:c2:8e:b7:b3:30:5d:36:ce:e2:2a:7f: 6c:06:de:f0:ed:11:4f:1f:4a:5d:62:ad:67:ba:6e:01:de:9e: 15:2e:17:ec:ec:28:12:ff:3a:f6:78:87:b7:c3:00:9e:06:95: 68:3a:ba:c9:b0:3d:50:5c:39:0a:eb:2f:6f:f1:f7:eb:68:8a: f6:21:c0:4f:d4:f7:41:4e:84:f4:af:ff:04:44:ef:93:1c:e7: e8:b0:7c:48 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkJB QjRDMTcwMzJGMEI3NEYxRDM1NzNFNzlFOTY4ODlERkIyQTZFRTAeFw0yNTA0MjYw ODM5MzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEJFNjcxQkE3M0I4NjQ4 MDE4OUVGNTRFRDdGRUY4ODA0MEQwMkQxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL2xh5V9NRhxlk1CsjVIqs8ohtoEJ04GWxO6xg5SdbQJz58XKb D9Cu3Va50+DxAhbrsTNQRJQs1wkRxdC7OcEJVRdo7NBpJUKwqGXs6IAMDuUvXNaz Xa4knkWXZjIXsoI/b3uUVNJYfqdQI3QtUiRuc1GVcdC8/fPDQdKEQallgvsd370I qYMpR9B2/KfzBC/iT/c+ko2E2w3rcX7W2H7eLETQUzw21h9jXQG7U4np2tjiDHs8 7aaNkZxV5zN+rX5GnFTEw7jwjmj5Tp32qvy50J+ovqQiT3IVmEfH/Dj00ztW1QLq ynuAY6Va9w2XDTD94k66IyOB290onO52/p/NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUvmcbpzuGSAGJ71Ttf++IBA0C0cAwHwYDVR0jBBgwFoAUK6tMFwMvC3Tx01c+ eeloid+ypu4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OC9LNnRNRndNdkMzVHgwMWMtZWVsb2lkLXlwdTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0s2dE1Gd012QzNUeDAxYy1lZWxvaWQteXB1NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzgvSzZ0TUZ3TXZDM1R4 MDFjLWVlbG9pZC15cHU0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE2XInaZtM49CCJMFlPk18xpfPaL79IMP4vuhSQFa5dfCZNL8hq2hxMSCQw/ NWTffyPVK3t85nZknpwpxtMQlGXfmVZ1Ni/SbqwodWrKZpyCK0U7WJ0QNeG86asG s78LxkfdE23Qzn+gg4/qOocXO/UEsRYr6wd6wncNrSOKDEp7R03dxEIdecwCH1My pfwQGccXiblPgpQBAKQslpoo3WJHvptyF6dMS0PCjrezMF02zuIqf2wG3vDtEU8f Sl1irWe6bgHenhUuF+zsKBL/OvZ4h7fDAJ4GlWg6usmwPVBcOQrrL2/x9+toivYh wE/U90FOhPSv/wRE75Mc5+iwfEg= -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:31 2025 by rpki-client