$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft File: SMusqvPRm5kth3kQdAxjiyXwtyw.mft (raw, json) Hash identifier: sp6eBe8tMP9e2IBCsmqTcvCCwZcjfSgVJNYPEoo8vaU= Subject key identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 Authority key identifier: 48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C Certificate issuer: /CN=48CBACAAF3D19B992D877910740C638B25F0B72C Certificate serial: 0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft Manifest number: 0D Signing time: Sat 26 Apr 2025 11:06:50 +0000 Manifest this update: Sat 26 Apr 2025 11:06:50 +0000 Manifest next update: Sat 26 Apr 2025 17:06:50 +0000 Files and hashes: 1: SMusqvPRm5kth3kQdAxjiyXwtyw.crl (hash: nydl8hLmikc863y0p6uFRiMwN2OLMYk9MrtvjcVMQnk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CBACAAF3D19B992D877910740C638B25F0B72C Validity Not Before: Apr 26 11:06:50 2025 GMT Not After : Apr 24 06:25:54 2026 GMT Subject: CN=E4CE9F3991E9A36B20DB985D8F15321B45E0BE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:86:c0:0b:d3:c3:80:68:3b:d0:99:9b:16: b7:ca:89:af:ca:9f:f0:3f:80:b5:91:b9:ff:73:3b: a7:db:5c:a7:9b:2e:e0:4f:7c:73:25:fa:9a:f7:f9: 31:06:f7:2d:0e:3b:2e:ef:ed:58:36:16:fc:bf:2b: 21:3b:58:6c:0b:25:5d:fd:91:98:c8:18:6d:fa:be: 6e:45:6e:8c:e8:17:17:e8:2f:08:e3:1c:54:87:2a: db:7c:7a:1b:84:10:9b:50:1d:b6:5c:25:98:e0:84: ec:89:f6:a3:82:c4:fc:59:44:a4:4c:5d:6d:a4:43: 5c:09:1a:65:01:f6:f0:c8:ea:46:04:fb:a1:92:fe: 75:a1:f4:c9:b6:67:f7:aa:09:ff:c3:ab:19:f5:d0: aa:48:c7:df:26:6a:f6:49:f3:d9:3d:f0:16:f1:b4: 53:6f:b0:6b:72:61:30:63:f2:61:7f:fb:53:06:cf: e4:6f:c7:f6:56:cc:c2:ec:04:30:3b:b5:bb:8b:89: fc:3c:c0:a7:54:ae:d5:78:24:c5:14:8b:60:a4:6a: 6b:76:b6:ef:3d:e1:1c:74:84:74:bf:e1:6d:20:4b: 94:a7:be:69:2e:0b:aa:e0:75:b1:68:1d:fd:0e:a8: 27:d9:11:49:5e:15:67:48:cf:5c:c4:93:3d:33:35: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 X509v3 Authority Key Identifier: keyid:48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:08:86:14:3f:ea:2a:fc:c8:4b:c5:40:a8:b6:e2:5e:57:39: d5:70:fc:2a:ed:d2:8f:18:7e:51:1c:24:29:8c:e1:32:07:71: 19:5e:c9:58:6e:b7:8b:96:ff:b7:c0:0b:18:ae:f9:6d:99:b1: 72:31:56:0d:f6:dd:81:9d:2c:e6:60:b1:f9:56:b9:4c:40:d1: 30:74:bc:c6:b7:04:eb:a1:c6:ff:fd:d7:86:e3:94:f1:36:c1: 6d:2c:20:a6:d5:b5:09:29:35:22:cf:b8:0a:ca:62:7e:58:f1: 78:36:c3:68:c3:f9:c4:1a:88:91:3e:57:b7:1e:dc:82:23:d4: 39:04:49:81:e7:e9:05:8d:a7:7f:45:0a:a7:f2:1c:2b:e9:ca: a9:bf:3d:53:b8:16:86:f2:3d:25:09:16:74:1a:b2:27:1b:10: 9d:e8:c0:24:11:bb:87:4c:54:2d:5b:0b:df:0f:3b:e6:db:d0: 3c:7f:ff:d2:41:c5:b9:dd:d3:2e:72:c5:9d:cc:2d:f5:8c:4b: 71:fb:5e:80:78:cc:10:6e:15:9e:82:8d:a5:6e:52:f2:d8:15: fa:08:14:34:ed:f4:3c:75:d5:06:32:60:43:ad:05:90:ec:62: 47:c0:08:40:5a:b5:e1:cb:7c:8c:af:7a:35:97:b4:bc:91:8e: ff:a7:4a:94 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OENC QUNBQUYzRDE5Qjk5MkQ4Nzc5MTA3NDBDNjM4QjI1RjBCNzJDMB4XDTI1MDQyNjEx MDY1MFoXDTI2MDQyNDA2MjU1NFowMzExMC8GA1UEAxMoRTRDRTlGMzk5MUU5QTM2 QjIwREI5ODVEOEYxNTMyMUI0NUUwQkU2ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPYwhsAL08OAaDvQmZsWt8qJr8qf8D+AtZG5/3M7p9tcp5su4E98 cyX6mvf5MQb3LQ47Lu/tWDYW/L8rITtYbAslXf2RmMgYbfq+bkVujOgXF+gvCOMc VIcq23x6G4QQm1AdtlwlmOCE7In2o4LE/FlEpExdbaRDXAkaZQH28MjqRgT7oZL+ daH0ybZn96oJ/8OrGfXQqkjH3yZq9knz2T3wFvG0U2+wa3JhMGPyYX/7UwbP5G/H 9lbMwuwEMDu1u4uJ/DzAp1Su1XgkxRSLYKRqa3a27z3hHHSEdL/hbSBLlKe+aS4L quB1sWgd/Q6oJ9kRSV4VZ0jPXMSTPTM1rs0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTkzp85kemjayDbmF2PFTIbReC+aDAfBgNVHSMEGDAWgBRIy6yq89GbmS2HeRB0 DGOLJfC3LDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzY1 L1NNdXNxdlBSbTVrdGgza1FkQXhqaXlYd3R5dy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvU011c3F2UFJtNWt0aDNrUWRBeGppeVh3dHl3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2NS9TTXVzcXZQUm01a3Ro M2tRZEF4aml5WHd0eXcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATgiGFD/qKvzIS8VAqLbiXlc51XD8Ku3Sjxh+URwkKYzhMgdxGV7JWG63i5b/ t8ALGK75bZmxcjFWDfbdgZ0s5mCx+Va5TEDRMHS8xrcE66HG//3XhuOU8TbBbSwg ptW1CSk1Is+4CspifljxeDbDaMP5xBqIkT5Xtx7cgiPUOQRJgefpBY2nf0UKp/Ic K+nKqb89U7gWhvI9JQkWdBqyJxsQnejAJBG7h0xULVsL3w875tvQPH//0kHFud3T LnLFncwt9YxLcftegHjMEG4VnoKNpW5S8tgV+ggUNO30PHXVBjJgQ60FkOxiR8AI QFq14ct8jK96NZe0vJGO/6dKlA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:39 2025 by rpki-client