$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft File: lmzVCUReWNdVvBqFJWP5uy_uzbk.mft (raw, json) Hash identifier: ICmRbyypbroGYJ2WQDe1sgOks34WQRLFd3JWAJDdMfQ= Subject key identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 Authority key identifier: 96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 Certificate issuer: /CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Certificate serial: 0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft Manifest number: 0D Signing time: Sat 26 Apr 2025 12:06:37 +0000 Manifest this update: Sat 26 Apr 2025 12:06:37 +0000 Manifest next update: Sat 26 Apr 2025 18:06:37 +0000 Files and hashes: 1: lmzVCUReWNdVvBqFJWP5uy_uzbk.crl (hash: LAMlMm9ZVcZ2MzOT1+oZV3zE8TeZBkOgqGJYNnyCSp8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Validity Not Before: Apr 26 12:06:37 2025 GMT Not After : Apr 24 06:29:48 2026 GMT Subject: CN=652AC6D45D74F000FFFCA5A6AFB02690651A8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:a6:94:b4:d1:5b:79:37:2b:14:1b:ea:76: b7:a1:db:e8:f1:8b:44:bd:c4:0f:3e:b8:d1:a0:54: 23:64:d7:c8:ce:64:6f:20:76:56:ca:01:ae:86:04: 17:29:aa:60:e3:4d:a2:b1:72:3a:b0:b4:39:8e:0d: e6:b2:ea:13:13:2a:5e:c3:ab:93:ea:66:b0:dc:5e: 6b:65:ce:31:61:45:e2:16:30:88:09:a2:57:bd:2e: 36:b0:ef:51:98:df:a8:3d:36:3e:1a:37:47:71:1f: a3:9b:67:6f:d5:4d:f3:87:82:b3:ce:b3:08:d5:a2: 01:4f:fe:46:90:8b:15:df:a6:c7:4b:26:4a:f6:b0: 89:6c:0c:ad:85:11:5b:36:07:61:90:0b:d8:7e:d6: b0:32:04:6a:80:9a:8f:32:c2:df:4c:e8:1b:79:67: 4f:c2:21:b0:62:c3:72:71:f2:c5:4f:c9:a3:0a:03: 1e:5b:fe:b6:f4:df:47:09:8b:d2:21:b2:46:8f:8c: 88:72:cc:a7:2f:ee:e3:52:aa:60:bc:f2:34:a9:8b: f9:59:2f:57:ef:92:66:58:f6:da:a7:d6:b7:c0:23: 42:6b:a1:ba:24:9e:a3:4a:bb:98:f5:ad:96:f6:b3: ea:51:ca:ba:aa:16:8a:5c:29:11:96:8f:14:49:3a: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 X509v3 Authority Key Identifier: keyid:96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:ae:4a:0a:e9:1c:ea:a9:ee:b4:01:08:36:b2:53:79:84:b5: 5f:93:37:09:b8:65:79:33:f4:67:98:83:b5:45:55:eb:0b:f4: 6f:86:9e:8a:56:51:bf:3a:e8:51:6c:26:27:b2:2e:81:d6:02: 7b:ea:81:1d:ca:2c:75:f5:2c:ca:4a:86:81:30:2c:b3:b3:d8: d9:a2:68:2f:0d:27:e5:e1:12:b8:3a:db:5d:31:b2:6b:98:c1: 8f:d2:61:06:2a:7e:70:35:d5:67:2b:a6:ad:36:5e:4b:dd:57: 23:16:8c:4c:28:09:d5:26:a9:e3:f7:1b:3e:36:fa:50:53:7e: 9c:0d:8b:43:ac:90:c6:0d:66:a2:80:9d:7b:06:e3:5a:4c:cd: 2d:4e:e3:17:e2:26:0d:3c:df:38:31:50:78:1d:2d:44:9b:38: ba:11:e9:0d:f6:be:31:d2:7b:09:18:39:df:8e:72:42:fc:93: aa:3e:1d:bc:34:b4:44:66:f8:4b:4b:12:cc:18:63:0b:df:42: dd:93:2a:98:0d:13:bb:84:e7:52:01:50:ca:87:df:0d:39:d9: 31:97:91:60:e5:f9:8c:f3:cb:a2:52:3f:fd:24:79:e4:e7:6b: e3:1d:e1:95:25:41:16:71:bb:ec:a9:27:67:80:34:29:a1:60: 1e:a8:9b:b9 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjZD RDUwOTQ0NUU1OEQ3NTVCQzFBODUyNTYzRjlCQjJGRUVDREI5MB4XDTI1MDQyNjEy MDYzN1oXDTI2MDQyNDA2Mjk0OFowMzExMC8GA1UEAxMoNjUyQUM2RDQ1RDc0RjAw MEZGRkNBNUE2QUZCMDI2OTA2NTFBODgxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMh8ppS00Vt5NysUG+p2t6Hb6PGLRL3EDz640aBUI2TXyM5kbyB2 VsoBroYEFymqYONNorFyOrC0OY4N5rLqExMqXsOrk+pmsNxea2XOMWFF4hYwiAmi V70uNrDvUZjfqD02Pho3R3Efo5tnb9VN84eCs86zCNWiAU/+RpCLFd+mx0smSvaw iWwMrYURWzYHYZAL2H7WsDIEaoCajzLC30zoG3lnT8IhsGLDcnHyxU/JowoDHlv+ tvTfRwmL0iGyRo+MiHLMpy/u41KqYLzyNKmL+VkvV++SZlj22qfWt8AjQmuhuiSe o0q7mPWtlvaz6lHKuqoWilwpEZaPFEk6IiUCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRlKsbUXXTwAP/8paavsCaQZRqIEjAfBgNVHSMEGDAWgBSWbNUJRF5Y11W8GoUl Y/m7L+7NuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzY2 L2xtelZDVVJlV05kVnZCcUZKV1A1dXlfdXpiay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbG16VkNVUmVXTmRWdkJxRkpXUDV1eV91emJrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2Ni9sbXpWQ1VSZVdOZFZ2 QnFGSldQNXV5X3V6YmsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv65KCukc6qnutAEINrJTeYS1X5M3CbhleTP0Z5iDtUVV6wv0b4aeilZRvzro UWwmJ7IugdYCe+qBHcosdfUsykqGgTAss7PY2aJoLw0n5eESuDrbXTGya5jBj9Jh Bip+cDXVZyumrTZeS91XIxaMTCgJ1Sap4/cbPjb6UFN+nA2LQ6yQxg1mooCdewbj WkzNLU7jF+ImDTzfODFQeB0tRJs4uhHpDfa+MdJ7CRg5345yQvyTqj4dvDS0RGb4 S0sSzBhjC99C3ZMqmA0Tu4TnUgFQyoffDTnZMZeRYOX5jPPLolI//SR55Odr4x3h lSVBFnG77KknZ4A0KaFgHqibuQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:27 2025 by rpki-client