$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft File: WRxbA8l84P4-x44jxoVveSwg1AQ.mft (raw, json) Hash identifier: rDBE9U77FT/MyQ+WpVhEsRjsifoP7ybEM2I727kwiEA= Subject key identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Certificate serial: 14BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft Manifest number: 14B1 Signing time: Sat 26 Apr 2025 11:07:43 +0000 Manifest this update: Sat 26 Apr 2025 11:07:43 +0000 Manifest next update: Sat 26 Apr 2025 17:07:43 +0000 Files and hashes: 1: Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa (hash: m4W5sYfutDIBGUa1Xlob/CH9YeApB50kyDS7XSN9X8k=) 2: WRxbA8l84P4-x44jxoVveSwg1AQ.crl (hash: sYQdD8vUPdHLlobUS3QE84feRfeJNxam0ALAzSuERoc=) 3: dhzeY3_OxcHAtiIl3zszftT0K6M.roa (hash: Bh1vZMx8G1lOICwP2E+cHe0uEMRdbBxn1G0CwSCXWF0=) 4: hSA0GN3vrBMOwEnZYiQXH6DYuc8.roa (hash: 2Vn8f0lm4bXJ6phvRt7XoC++jp3dCf7kzB9LVXj1jVc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5306 (0x14ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Validity Not Before: Apr 26 11:07:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=060B73E0178A24DA932755B1B93C3A654C8743F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:43:1f:96:d4:be:91:b4:92:bf:46:af:95: 9c:5a:b7:f7:c0:3f:1f:ba:fb:2e:7f:55:20:41:8c: 12:de:18:be:a7:e8:86:a8:6b:ae:dd:e9:09:84:5a: fb:f9:6d:84:cb:0f:26:69:59:b8:6a:4c:ae:43:72: dc:84:60:1f:09:b1:40:e9:64:8a:25:60:fa:f6:db: 6a:aa:13:57:5e:96:39:f3:23:2d:79:ac:81:f7:e5: 76:54:53:e3:64:56:5e:f1:5a:50:d5:6e:1d:19:78: ad:b6:0f:64:de:2c:63:5f:a7:18:20:1b:41:ae:92: f5:42:e1:63:4e:66:83:fb:c2:ad:d6:69:b9:d5:0e: e5:b4:87:b9:27:75:7d:29:51:d3:cc:2b:3a:0d:79: 96:cb:3a:00:67:a0:68:59:56:f9:66:61:34:3b:26: db:45:e0:15:61:2b:03:68:dd:33:6f:4d:a9:02:87: 5d:2c:f7:51:5e:cf:52:3a:27:56:2d:46:af:44:a3: 1d:ac:98:b0:94:50:a9:57:b6:d7:e4:27:a5:a7:4b: df:23:23:6b:b3:d4:08:21:51:e2:47:cb:67:3d:48: 1a:3c:4f:20:2c:f1:75:63:ec:7d:01:94:c0:ac:df: 45:c2:90:44:9f:f9:22:cc:e7:15:55:dc:d7:83:a8: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 X509v3 Authority Key Identifier: keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:ab:31:2f:a4:26:c1:11:db:14:a2:9c:93:c1:17:de:bd:e2: 2c:8c:70:f7:8e:f4:65:bf:a1:ae:d1:b2:4d:9f:e7:04:55:99: 35:91:84:fd:c0:9d:6a:92:cc:c0:d7:e0:4f:c6:02:52:44:6c: 84:f8:0a:99:89:8a:a3:f4:2a:53:5c:77:b1:2a:ad:97:b8:47: f8:00:49:a4:45:09:25:04:f6:12:20:44:fc:9c:bc:65:04:6a: ad:da:fc:d4:9c:63:ed:de:32:4d:62:f2:bd:de:f5:b1:17:b8: e3:91:9f:da:fd:c2:af:93:cc:e9:b1:5f:4d:7f:16:31:42:c5: 92:a0:13:fb:5b:f5:1e:cf:c5:6a:46:80:97:7d:6e:53:b4:08: c4:7d:fe:84:cb:27:90:4c:2f:d2:5b:e8:5b:1d:76:4b:9f:0a: c7:f0:70:15:8e:15:37:68:2e:b4:b2:1c:c3:36:7a:b9:d8:92: 4a:44:4b:c4:61:74:f2:31:95:21:ae:25:91:eb:a1:fd:ba:28: 44:98:77:04:e8:25:b4:c8:07:0d:2e:ba:dc:f6:72:ff:af:b1: 65:a8:36:9b:a7:54:56:a1:c5:88:53:6c:20:d1:be:db:ac:8b: 2d:06:36:97:a5:57:15:f0:10:a8:70:e7:22:a2:72:3f:b9:35: bd:8f:53:2a -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkx QzVCMDNDOTdDRTBGRTNFQzc4RTIzQzY4NTZGNzkyQzIwRDQwNDAeFw0yNTA0MjYx MTA3NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA2MEI3M0UwMTc4QTI0 REE5MzI3NTVCMUI5M0MzQTY1NEM4NzQzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOxEMfltS+kbSSv0avlZxat/fAPx+6+y5/VSBBjBLeGL6n6Iao a67d6QmEWvv5bYTLDyZpWbhqTK5DctyEYB8JsUDpZIolYPr222qqE1deljnzIy15 rIH35XZUU+NkVl7xWlDVbh0ZeK22D2TeLGNfpxggG0GukvVC4WNOZoP7wq3WabnV DuW0h7kndX0pUdPMKzoNeZbLOgBnoGhZVvlmYTQ7JttF4BVhKwNo3TNvTakCh10s 91Fez1I6J1YtRq9Eox2smLCUUKlXttfkJ6WnS98jI2uz1AghUeJHy2c9SBo8TyAs 8XVj7H0BlMCs30XCkESf+SLM5xVV3NeDqH2fAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUBgtz4BeKJNqTJ1WxuTw6ZUyHQ/QwHwYDVR0jBBgwFoAUWRxbA8l84P4+x44j xoVveSwg1AQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2 L1dSeGJBOGw4NFA0LXg0NGp4b1Z2ZVN3ZzFBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2L1dSeGJBOGw4NFA0LXg0 NGp4b1Z2ZVN3ZzFBUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC3qzEvpCbBEdsUopyTwRfeveIsjHD3jvRlv6Gu0bJNn+cEVZk1kYT9wJ1qkszA 1+BPxgJSRGyE+AqZiYqj9CpTXHexKq2XuEf4AEmkRQklBPYSIET8nLxlBGqt2vzU nGPt3jJNYvK93vWxF7jjkZ/a/cKvk8zpsV9NfxYxQsWSoBP7W/Uez8VqRoCXfW5T tAjEff6EyyeQTC/SW+hbHXZLnwrH8HAVjhU3aC60shzDNnq52JJKREvEYXTyMZUh riWR66H9uihEmHcE6CW0yAcNLrrc9nL/r7FlqDabp1RWocWIU2wg0b7brIstBjaX pVcV8BCocOcionI/uTW9j1Mq -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:59 2025 by rpki-client