$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft File: jADfzi10-W1xE_7xW2z4zSGqJm4.mft (raw, json) Hash identifier: tPy2zfOuz5zJFBV/yw6ygNhXnGk/jitNChJzcWh7gvg= Subject key identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D Authority key identifier: 8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E Certificate issuer: /CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Certificate serial: 1CF9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft Manifest number: 1CF9 Signing time: Mon 28 Apr 2025 17:07:07 +0000 Manifest this update: Mon 28 Apr 2025 17:07:07 +0000 Manifest next update: Mon 28 Apr 2025 23:07:07 +0000 Files and hashes: 1: jADfzi10-W1xE_7xW2z4zSGqJm4.crl (hash: W8akhVpfbevLXjvge+9RIH4FWI/c+zKrJPyy/kLJ+mM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7417 (0x1cf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E Validity Not Before: Apr 28 17:07:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2DBDCE5D957056DAF5725D4EF0B8D9FD9FA84F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:78:49:97:ff:78:07:ae:27:3d:db:c3:d3: 5f:d9:dc:5f:b7:bd:f8:d4:f2:0e:89:b1:8e:be:53: c2:b0:5a:a3:5d:61:4e:b4:01:1b:2f:7d:5e:6e:7f: b7:31:62:eb:a4:c6:5e:4d:47:60:9d:80:d4:e9:36: 24:32:5e:3d:4d:23:94:c2:c6:a0:47:9d:f5:5d:d9: 13:c0:e2:81:5b:56:1a:ff:92:4e:ec:fc:b8:4f:4e: a7:52:de:f8:79:47:1c:29:c1:77:1b:0b:93:71:65: 41:7f:38:0e:af:e3:96:67:a4:cd:50:db:e5:5e:97: 90:22:5d:6a:23:69:8e:72:35:27:ff:8b:ed:ea:33: 71:cc:aa:96:e7:cc:18:43:05:8b:4c:ac:15:47:99: ef:c2:46:61:88:a2:58:33:38:40:de:59:05:f8:f0: fd:99:dd:08:a6:2c:ce:23:b5:f3:a3:45:f5:3c:60: 53:29:71:e5:5b:26:30:50:51:25:e2:5f:10:db:0a: ca:cb:26:9a:59:26:c7:c3:c6:48:3b:1f:1f:cd:48: 6b:0e:c2:1b:6e:48:71:ba:3c:7e:c3:c3:bc:42:38: cb:d3:2b:86:2d:75:7e:0f:5f:74:bf:5d:d6:00:61: fb:3e:30:05:7d:86:71:a0:b4:ec:f4:de:60:da:d1: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:CE:5D:95:70:56:DA:F5:72:5D:4E:F0:B8:D9:FD:9F:A8:4F:3D X509v3 Authority Key Identifier: keyid:8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:70:90:6f:5a:fe:fe:d1:73:82:8d:fb:91:dc:50:af:ac:4e: 4b:2d:6e:a6:6a:bf:34:58:d9:63:05:7c:cb:59:e3:d8:46:0c: ee:1a:d0:64:ba:70:4c:a2:9d:4f:56:1a:59:c5:b3:6d:ce:03: 6b:92:25:f5:c5:10:31:3c:0b:66:d2:68:cd:24:d6:31:19:08: 37:26:a9:60:91:84:75:37:14:3b:9c:15:36:2a:c0:eb:5b:a3: f4:fc:a2:61:6e:58:7c:cb:89:ec:fe:e6:d3:2d:8d:5d:b1:e9: a9:69:f0:53:7d:f7:82:78:a0:25:27:40:f9:e1:8e:43:8f:33: 8e:dc:cc:95:94:16:a5:ef:3b:fa:cf:fd:00:2f:e4:ea:b6:98: 01:df:3a:49:03:24:15:b2:68:ce:08:27:f4:09:32:4c:62:25: 69:1d:6e:75:1f:83:a2:a3:09:f7:67:ee:97:b1:8b:8d:ad:b6: 3a:34:53:f5:ff:66:27:5d:63:72:36:6f:b1:36:0e:1e:5f:04: 21:d9:76:13:ac:23:c0:26:ba:68:01:59:4d:2d:c4:41:8e:ea: 96:09:dd:2e:27:84:64:4e:66:28:4c:90:00:45:83:3f:90:71: 01:9f:bc:79:14:cc:73:d2:1c:1b:0f:db:3d:1a:79:38:6e:6d: 1b:3c:3a:75 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMw MERGQ0UyRDc0Rjk2RDcxMTNGRUYxNUI2Q0Y4Q0QyMUFBMjY2RTAeFw0yNTA0Mjgx NzA3MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJEQkRDRTVEOTU3MDU2 REFGNTcyNUQ0RUYwQjhEOUZEOUZBODRGM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV4nhJl/94B64nPdvD01/Z3F+3vfjU8g6JsY6+U8KwWqNdYU60 ARsvfV5uf7cxYuukxl5NR2CdgNTpNiQyXj1NI5TCxqBHnfVd2RPA4oFbVhr/kk7s /LhPTqdS3vh5RxwpwXcbC5NxZUF/OA6v45ZnpM1Q2+Vel5AiXWojaY5yNSf/i+3q M3HMqpbnzBhDBYtMrBVHme/CRmGIolgzOEDeWQX48P2Z3QimLM4jtfOjRfU8YFMp ceVbJjBQUSXiXxDbCsrLJppZJsfDxkg7Hx/NSGsOwhtuSHG6PH7Dw7xCOMvTK4Yt dX4PX3S/XdYAYfs+MAV9hnGgtOz03mDa0Ut5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQULb3OXZVwVtr1cl1O8LjZ/Z+oTz0wHwYDVR0jBBgwFoAUjADfzi10+W1xE/7x W2z4zSGqJm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OC9qQURmemkxMC1XMXhFXzd4VzJ6NHpTR3FKbTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pBRGZ6aTEwLVcxeEVfN3hXMno0elNHcUptNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTgvakFEZnppMTAtVzF4 RV83eFcyejR6U0dxSm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAhwkG9a/v7Rc4KN+5HcUK+sTkstbqZqvzRY2WMFfMtZ49hGDO4a0GS6cEyi nU9WGlnFs23OA2uSJfXFEDE8C2bSaM0k1jEZCDcmqWCRhHU3FDucFTYqwOtbo/T8 omFuWHzLiez+5tMtjV2x6alp8FN994J4oCUnQPnhjkOPM47czJWUFqXvO/rP/QAv 5Oq2mAHfOkkDJBWyaM4IJ/QJMkxiJWkdbnUfg6KjCfdn7pexi42ttjo0U/X/Zidd Y3I2b7E2Dh5fBCHZdhOsI8AmumgBWU0txEGO6pYJ3S4nhGROZihMkABFgz+QcQGf vHkUzHPSHBsP2z0aeThubRs8OnU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net