$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft File: G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft (raw, json) Hash identifier: 2ZXcytA48MhBUYg+VH6c7o6L4kiDRaEEUfFQ1AHJSR4= Subject key identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 0664 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft Manifest number: 065B Signing time: Sat 17 May 2025 13:09:46 +0000 Manifest this update: Sat 17 May 2025 13:09:46 +0000 Manifest next update: Sat 17 May 2025 19:09:46 +0000 Files and hashes: 1: 5OEuFKPxJaq1YidFs9FhBAB9P64.roa (hash: ai6iEpYFHCC4+YcYY1ILAHS+XendDmfNBlH2O+XrO30=) 2: 5iA-h01FgjAaC-DPAOpdAAX_FUQ.roa (hash: 6Xo71nk33XT6X/k3IVsNNARD6WK9MRPdCpAx2+YpPBY=) 3: 7GZTK5QwS8vnTmYs4X-8-_ZS4PM.roa (hash: Fypc5S3wysoSbXk7yh6NHgb67GpfLGm2tLs4epy1xF8=) 4: G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl (hash: ykT28WFIx+SG+iDp5LWv6cUgNYTvANW/KSX+Y4aSQpI=) 5: LH2PyxaebTwUWCqIBs1Kq9jLOjU.roa (hash: L04+TBCa3SIZMlFAdOVBBd3Gf27YDwcU8ancEUoAIfY=) 6: Y2ZKD-A30k3bDBgJvwCgTOSEfgE.roa (hash: 9hA3D9MXarvGgUQCQ8E1yH6YN9fGRixIrfBTcD/M2r0=) 7: dTMFnNYS9LqVMpJIioge2ooc5gE.roa (hash: pCXNC0r3wfXitDNymXsPE77AREO+Pz310OZK4OIzz2Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: May 17 13:09:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C92091CD704E8E01CB5621F4BFAA3A3F31DF49B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:a9:d9:1e:ae:44:4e:64:08:03:b8:dd:8f: d0:cf:76:8f:f3:30:8d:92:2d:f5:31:26:2c:cb:16: 3d:e4:53:4a:25:55:f4:0c:08:a7:0b:fd:7c:cb:6d: a2:dd:92:63:9b:79:f3:49:82:2c:07:00:ff:8c:46: b5:22:11:04:49:70:35:97:40:f3:6f:f3:35:ab:c1: 3b:26:2b:e6:4a:7a:5e:06:d7:eb:a7:23:7a:c4:ee: 07:38:38:23:35:dc:83:3d:f3:50:e8:69:c9:05:f4: b5:43:13:94:78:2d:49:57:dd:7d:10:05:57:f1:5c: a4:8a:cf:83:13:08:25:fd:7f:cb:b6:71:0b:36:9c: 0a:53:35:51:f5:fd:48:73:7e:f6:61:5b:00:54:14: c0:48:10:74:88:1d:1f:11:0d:f7:c6:81:7c:b9:66: 25:3c:0e:52:cd:9a:7f:9c:f9:e9:6e:dd:49:ca:c9: 3d:57:2a:5e:53:9f:fa:6a:1e:23:49:f1:01:67:5e: 2c:a1:70:bc:18:73:ea:2d:2d:ce:c6:d8:c4:5d:b0: ef:1f:1a:27:e0:f4:c8:49:d0:19:81:44:51:a5:67: d1:43:ed:c1:97:9b:69:72:3c:c2:c9:64:6c:d2:a2: 1f:d5:ef:dc:17:ea:8d:4e:a7:d9:0e:79:e6:65:d9: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:34:db:0d:15:d3:38:be:63:c4:08:d5:09:07:b3:6f:8f: ea:12:69:3c:91:3e:2b:fe:01:7d:67:fe:57:d3:c2:3d:2a:61: 48:42:3d:32:8d:38:f5:02:74:b2:16:30:6b:f3:99:1d:9d:5a: 49:2e:fb:dc:a1:1c:6d:8b:d2:a6:0f:dd:29:36:f5:28:a3:8b: d4:24:7c:18:b7:98:64:a2:16:05:4c:f0:fd:e8:9b:0f:3b:c2: 29:53:63:f9:0e:76:b0:53:f2:63:a6:86:be:24:89:f4:cf:21: a5:cc:84:b0:79:c0:37:7f:41:75:4a:19:c5:fb:fe:30:73:fd: 03:77:01:76:51:09:3f:97:71:45:ca:8e:d3:23:ab:ae:ee:df: 4c:b3:dd:5a:64:af:aa:59:69:7c:71:0c:f3:8e:96:47:e6:47: 8d:b1:40:fb:62:30:b9:74:c4:19:fa:c5:ef:cf:74:b9:04:8d: 1b:98:d7:21:1d:7e:3a:de:a5:e1:17:8a:09:62:08:35:45:c3: 75:86:d7:56:2c:74:61:12:ad:88:8b:9f:31:aa:b3:09:7c:29: 7d:74:ff:2f:75:2b:b1:3f:30:98:28:f8:76:84:72:7d:cf:ad: 15:45:38:35:a5:02:6e:f2:7e:02:fc:93:2d:8f:96:52:a4:0c: e2:d3:b2:0f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA1MTcx MzA5NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM5MjA5MUNENzA0RThF MDFDQjU2MjFGNEJGQUEzQTNGMzFERjQ5QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLiqnZHq5ETmQIA7jdj9DPdo/zMI2SLfUxJizLFj3kU0olVfQM CKcL/XzLbaLdkmObefNJgiwHAP+MRrUiEQRJcDWXQPNv8zWrwTsmK+ZKel4G1+un I3rE7gc4OCM13IM981DoackF9LVDE5R4LUlX3X0QBVfxXKSKz4MTCCX9f8u2cQs2 nApTNVH1/UhzfvZhWwBUFMBIEHSIHR8RDffGgXy5ZiU8DlLNmn+c+elu3UnKyT1X Kl5Tn/pqHiNJ8QFnXiyhcLwYc+otLc7G2MRdsO8fGifg9MhJ0BmBRFGlZ9FD7cGX m2lyPMLJZGzSoh/V79wX6o1Op9kOeeZl2QOjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUySCRzXBOjgHLViH0v6o6PzHfSbcwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvRzhiWnFmU2lKcVlm WDZHcEZqbEIxTE5ibzFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGS+NNsNFdM4vmPECNUJB7Nvj+oSaTyRPiv+AX1n/lfTwj0qYUhCPTKNOPUC dLIWMGvzmR2dWkku+9yhHG2L0qYP3Sk29Siji9QkfBi3mGSiFgVM8P3omw87wilT Y/kOdrBT8mOmhr4kifTPIaXMhLB5wDd/QXVKGcX7/jBz/QN3AXZRCT+XcUXKjtMj q67u30yz3Vpkr6pZaXxxDPOOlkfmR42xQPtiMLl0xBn6xe/PdLkEjRuY1yEdfjre peEXigliCDVFw3WG11YsdGESrYiLnzGqswl8KX10/y91K7E/MJgo+HaEcn3PrRVF ODWlAm7yfgL8ky2PllKkDOLTsg8= -----END CERTIFICATE-----Generated at Sat May 17 17:47:17 2025 by rpki-client