$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft File: SMusqvPRm5kth3kQdAxjiyXwtyw.mft (raw, json) Hash identifier: 49TTAXvtrmVhNR21w/PRj9ZAkyRNxqcJrerdKbE00/0= Subject key identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 Authority key identifier: 48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C Certificate issuer: /CN=48CBACAAF3D19B992D877910740C638B25F0B72C Certificate serial: 18 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft Manifest number: 18 Signing time: Mon 28 Apr 2025 17:06:48 +0000 Manifest this update: Mon 28 Apr 2025 17:06:48 +0000 Manifest next update: Mon 28 Apr 2025 23:06:48 +0000 Files and hashes: 1: SMusqvPRm5kth3kQdAxjiyXwtyw.crl (hash: ImTgIwG3n4w6tALmejBlnEz0nUCvrTkB3PE2DsjUhzo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CBACAAF3D19B992D877910740C638B25F0B72C Validity Not Before: Apr 28 17:06:48 2025 GMT Not After : Apr 24 06:25:54 2026 GMT Subject: CN=E4CE9F3991E9A36B20DB985D8F15321B45E0BE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:86:c0:0b:d3:c3:80:68:3b:d0:99:9b:16: b7:ca:89:af:ca:9f:f0:3f:80:b5:91:b9:ff:73:3b: a7:db:5c:a7:9b:2e:e0:4f:7c:73:25:fa:9a:f7:f9: 31:06:f7:2d:0e:3b:2e:ef:ed:58:36:16:fc:bf:2b: 21:3b:58:6c:0b:25:5d:fd:91:98:c8:18:6d:fa:be: 6e:45:6e:8c:e8:17:17:e8:2f:08:e3:1c:54:87:2a: db:7c:7a:1b:84:10:9b:50:1d:b6:5c:25:98:e0:84: ec:89:f6:a3:82:c4:fc:59:44:a4:4c:5d:6d:a4:43: 5c:09:1a:65:01:f6:f0:c8:ea:46:04:fb:a1:92:fe: 75:a1:f4:c9:b6:67:f7:aa:09:ff:c3:ab:19:f5:d0: aa:48:c7:df:26:6a:f6:49:f3:d9:3d:f0:16:f1:b4: 53:6f:b0:6b:72:61:30:63:f2:61:7f:fb:53:06:cf: e4:6f:c7:f6:56:cc:c2:ec:04:30:3b:b5:bb:8b:89: fc:3c:c0:a7:54:ae:d5:78:24:c5:14:8b:60:a4:6a: 6b:76:b6:ef:3d:e1:1c:74:84:74:bf:e1:6d:20:4b: 94:a7:be:69:2e:0b:aa:e0:75:b1:68:1d:fd:0e:a8: 27:d9:11:49:5e:15:67:48:cf:5c:c4:93:3d:33:35: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 X509v3 Authority Key Identifier: keyid:48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:08:e6:27:e4:82:97:47:b8:d2:b5:6a:42:db:b1:e6:ea:b9: 03:72:36:db:b4:15:7e:41:f1:d4:e2:9d:a5:b6:f2:08:df:4c: d2:85:16:76:75:4c:e6:12:1a:0c:e6:2e:d5:59:26:f7:c3:71: 75:c2:22:b0:fa:17:e5:97:a1:cd:99:d4:21:56:14:9f:29:bf: 7e:2f:eb:59:30:57:f1:bc:c2:2e:76:a5:de:35:71:eb:72:d2: 58:d3:15:de:3b:e9:cc:08:76:f6:8f:d7:2c:45:93:b4:1a:a4: cd:2a:b3:48:5d:d2:66:3e:a2:b5:9c:41:69:7b:b2:6f:49:9e: 16:9a:08:a0:e6:5d:90:15:aa:26:6a:08:a6:38:46:12:f4:be: 9f:f3:7c:65:54:04:9a:3f:8b:d7:84:56:5b:6c:13:b3:f9:13: 02:30:55:60:de:50:12:7f:ce:f6:59:91:4c:6c:43:25:e4:ca: 4f:e8:9a:e0:23:7b:12:dc:26:3e:21:ef:05:1a:5d:90:e1:7f: cf:ac:3b:55:63:11:f8:64:cf:32:ad:eb:f8:3d:ca:94:75:fa: 72:4d:57:bc:e8:0d:e3:48:f8:44:ab:9a:6b:1c:e5:5b:f5:d5: 66:eb:17:87:03:c4:d0:d6:be:72:d9:2e:71:6b:6a:c2:e4:62: 2c:69:e6:dd -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OENC QUNBQUYzRDE5Qjk5MkQ4Nzc5MTA3NDBDNjM4QjI1RjBCNzJDMB4XDTI1MDQyODE3 MDY0OFoXDTI2MDQyNDA2MjU1NFowMzExMC8GA1UEAxMoRTRDRTlGMzk5MUU5QTM2 QjIwREI5ODVEOEYxNTMyMUI0NUUwQkU2ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPYwhsAL08OAaDvQmZsWt8qJr8qf8D+AtZG5/3M7p9tcp5su4E98 cyX6mvf5MQb3LQ47Lu/tWDYW/L8rITtYbAslXf2RmMgYbfq+bkVujOgXF+gvCOMc VIcq23x6G4QQm1AdtlwlmOCE7In2o4LE/FlEpExdbaRDXAkaZQH28MjqRgT7oZL+ daH0ybZn96oJ/8OrGfXQqkjH3yZq9knz2T3wFvG0U2+wa3JhMGPyYX/7UwbP5G/H 9lbMwuwEMDu1u4uJ/DzAp1Su1XgkxRSLYKRqa3a27z3hHHSEdL/hbSBLlKe+aS4L quB1sWgd/Q6oJ9kRSV4VZ0jPXMSTPTM1rs0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTkzp85kemjayDbmF2PFTIbReC+aDAfBgNVHSMEGDAWgBRIy6yq89GbmS2HeRB0 DGOLJfC3LDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzY1 L1NNdXNxdlBSbTVrdGgza1FkQXhqaXlYd3R5dy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvU011c3F2UFJtNWt0aDNrUWRBeGppeVh3dHl3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2NS9TTXVzcXZQUm01a3Ro M2tRZEF4aml5WHd0eXcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0gjmJ+SCl0e40rVqQtux5uq5A3I227QVfkHx1OKdpbbyCN9M0oUWdnVM5hIa DOYu1Vkm98NxdcIisPoX5ZehzZnUIVYUnym/fi/rWTBX8bzCLnal3jVx63LSWNMV 3jvpzAh29o/XLEWTtBqkzSqzSF3SZj6itZxBaXuyb0meFpoIoOZdkBWqJmoIpjhG EvS+n/N8ZVQEmj+L14RWW2wTs/kTAjBVYN5QEn/O9lmRTGxDJeTKT+ia4CN7Etwm PiHvBRpdkOF/z6w7VWMR+GTPMq3r+D3KlHX6ck1XvOgN40j4RKuaaxzlW/XVZusX hwPE0Na+ctkucWtqwuRiLGnm3Q== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:28 2025 by rpki-client on console.sobornost.net