$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft File: JAmH9ApgMM36M97R7ufPTcfDAJQ.mft (raw, json) Hash identifier: fNJnXjsQ61z28y5qAJyBaYtQqpfT4K0aYZ5RiAxcVaw= Subject key identifier: 17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 13E0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft Manifest number: 13AE Signing time: Fri 16 May 2025 02:40:20 +0000 Manifest this update: Fri 16 May 2025 02:40:20 +0000 Manifest next update: Fri 16 May 2025 08:40:20 +0000 Files and hashes: 1: -NG0bLl1h40-PhgKVbR2N40_j5E.roa (hash: K32pl5J9WfPVVhdRC9NRZ1eJVVKzrY07QQL9YorGUPQ=) 2: 61sanvoSxDfAlBmaVfsP0F8Z0vs.roa (hash: a5hLR+ChBTsRX6HByDbNL9QyWVXZIek1MWm8L9eOcGQ=) 3: DBPlOf1turXB5ZRvWgRN1Sx0c88.roa (hash: 6IAmN/YbGVf7nR03oKPiX2f/sdAiJqR9OQYDYPVLij8=) 4: DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa (hash: jrKcbvvKtIHdsQ4RvaaTHYkPK4YTDnCkQq8CfnmnpEA=) 5: DfmvJHHqo2_36cNk-0I4X70DpOQ.roa (hash: FPB9AyWhDC+67lUPEG/Hj5EAwWrfFGzGVGAGbR0G50c=) 6: JAmH9ApgMM36M97R7ufPTcfDAJQ.crl (hash: iBQvCaJIORVVmdQhzfRPtTiuuEfg5zkVvI+4EN02Wx0=) 7: JVyE-PbWV85g5evZ8YyoJRwoLHE.roa (hash: NtjRhSVuhDt0HPDJMNO6NW+SPA4tThjKOBB4zdl4TMc=) 8: KH1fBgdHgQMes9MIjuirH1qec0U.roa (hash: UBlXnmdFuAyfJiihIokjYSAwJin04WrdXKEE2oteD9k=) 9: MHV-03xmBb-oEGS-czTJkM_Nsz8.roa (hash: ZWMKxOo9LR1ITCABW6PC7oNwUEnFCpU2qQJg7wqS7yY=) 10: MpEEAbjqgsDpxSU_JKGOFVxS6BE.roa (hash: PjFuotNFoqKAgH2j5liIMl7AEnz5USP5lS26VvHIprY=) 11: NoIL6StYpSIxo-AEZPif8fiXOS8.roa (hash: pggJrJCdR6zrjpYj2Fj3+DaEmWZOk5uXOFmwKqUCSjY=) 12: Pi2kstC4xjHF7ye_avw2-n0Q5ZM.roa (hash: RPH2UsGUnpgziAyxe7SpKD14JsdWDFCMpgcFAiLCJGU=) 13: SPbxRfVqJDl-tzQOS4aeBemE8vY.roa (hash: 2G7DJJIM4dg1k8H0479hK2x06IMbck5SPXGFhV21Sus=) 14: TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa (hash: TMi874/SBAig+zK+xBqHWaRYSavUYVZMUZDHF5gp/Nk=) 15: fvd69ZsPYeQZtzroqsavM-2UErE.roa (hash: qSesFb98caUbD4FGBELb4OZX9SygP4mja1bw9UcJR5w=) 16: ngCrogSoEerCy3JCDkH3qz2zjh4.roa (hash: 7gV3qPpp3e9GtLUZvSw/Up5TUwAArU2Zk1z9CC4Eo+o=) 17: oTHwFHxLw7sHeCYIOnGQz_Xujjg.roa (hash: tWfa0dWlidx5lWRqi3XK3PCx9XD6R3kUz3xJXkaqA94=) 18: oh8mEJhSGhXZJtrCu4uAaungz-M.roa (hash: 5RwJ5gm0Xz2235CXnUw/gg7WlUVMqbzDpiAKN6xIIps=) 19: opgAiE1en4VEXgjtUKsIkROLdAk.roa (hash: qtxJLz18bhqTHdp8C9PQBGM1kkbjPiKM1IN0/TVEOQw=) 20: qPn3Ah--hbIOG6dP3R-dCsfyeKE.roa (hash: GdPdzFWraV2LqcnHCTDDRINqOoj6MvDSmve9v20C1ek=) 21: tI94S2liWtgOiUzZTuhdRlTV3is.roa (hash: TeJKMyOhh/szTwGGXHEUIUrBALLZVyg5cmH6YuNr6l8=) 22: uq-MkZpoh2PJmcnyPDST0US-nnY.roa (hash: r5OgYAcvqhHk44bTaajkhUNAOC+lQ7VxL+5woOsocso=) 23: xcZ13sMBOCL9f3oVxJIqy0PBakg.roa (hash: rInPvaJnhm7w24z2yjKPV6t67OqR//YTuUZvSlHw0sE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 08:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5088 (0x13e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: May 16 02:40:20 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=170CE6C74073A2911853FEB3DA432426D3812316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:13:68:09:e5:6c:1e:f1:16:d9:57:10:e8: 55:fa:72:11:4e:e3:89:c4:3d:e5:4b:3e:30:d0:74: de:6f:f2:cd:bb:76:00:75:99:cf:42:d6:fb:16:01: 7c:5d:01:69:bb:fc:ef:74:f0:49:b4:3b:ea:57:fd: 53:4b:8b:79:53:e0:e4:cc:e0:e3:5b:a8:ce:e8:d8: 72:b4:1c:68:78:49:ec:c8:98:8b:22:75:6b:87:5a: 64:f6:14:b2:bd:04:9b:5e:dc:21:3b:87:7c:ea:75: 22:ba:3a:4e:b2:2e:07:44:a7:f2:f2:a5:45:b5:6f: 41:9e:ba:92:c5:74:02:3d:80:a2:5f:2e:5d:73:ec: ac:c9:3b:89:7b:e7:6e:35:94:db:4e:64:13:56:72: e7:c6:88:c9:f7:7c:3d:76:91:a7:63:1d:8f:3c:df: 98:67:71:1d:ba:bb:48:f6:7d:55:26:3f:89:a9:a7: d3:fa:c2:ac:67:d8:c6:d1:2e:7e:e9:e1:f6:e7:c9: 2b:b1:44:12:bd:01:c5:43:a2:3c:c9:51:bd:69:ff: 0a:3d:f8:0d:bb:48:62:ca:58:01:99:de:19:6c:ea: 71:5c:fa:93:48:6f:51:0b:24:c7:de:ad:5d:09:56: 56:92:40:39:f4:0b:1c:4c:a5:63:94:84:4a:7c:55: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:56:80:74:8f:02:da:52:a8:aa:df:b2:44:e5:a0:cd:d8:7e: c9:4e:2e:5d:2c:eb:4e:62:01:cb:42:06:c6:e6:e5:01:8f:9b: 75:9f:1d:87:12:38:7e:d7:76:a1:5f:39:40:07:69:ea:47:cf: 42:99:a4:d5:47:24:4f:94:9f:fd:fa:c8:90:66:dd:4f:9e:95: 26:f0:5b:d2:98:f3:6e:f1:9b:71:35:b5:53:f6:dd:29:be:42: f5:f3:32:6a:47:65:30:86:22:ee:69:81:8f:e0:a1:95:3f:7c: f3:ac:1e:02:4c:41:f4:8e:20:df:2e:fa:78:56:90:06:b6:cb: 0a:84:de:2b:a0:42:5f:6e:78:95:04:3a:3a:b1:e5:75:83:e8: 7c:94:6f:f0:8d:e8:f4:07:1b:b2:55:c7:84:ac:fc:ae:3f:e7: f2:29:d8:aa:70:cf:00:a8:4d:67:1e:79:2c:7a:47:ec:e8:d6: 97:c5:97:2c:16:4e:27:a5:db:61:5f:3c:61:1f:2c:c0:bb:f0: d1:27:79:2e:11:e3:36:ba:b2:51:31:9d:05:71:56:22:11:b6: ae:ae:2b:3a:e6:bb:5a:93:5b:e3:8e:28:4a:6e:5c:8b:ea:2c: be:51:1f:92:5b:56:ec:e7:67:82:f3:e7:b9:a4:49:98:a6:98: 89:61:13:cf -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICE+AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA1MTYw MjQwMjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDE3MENFNkM3NDA3M0Ey OTExODUzRkVCM0RBNDMyNDI2RDM4MTIzMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtqBNoCeVsHvEW2VcQ6FX6chFO44nEPeVLPjDQdN5v8s27dgB1 mc9C1vsWAXxdAWm7/O908Em0O+pX/VNLi3lT4OTM4ONbqM7o2HK0HGh4SezImIsi dWuHWmT2FLK9BJte3CE7h3zqdSK6Ok6yLgdEp/LypUW1b0GeupLFdAI9gKJfLl1z 7KzJO4l75241lNtOZBNWcufGiMn3fD12kadjHY8835hncR26u0j2fVUmP4mpp9P6 wqxn2MbRLn7p4fbnySuxRBK9AcVDojzJUb1p/wo9+A27SGLKWAGZ3hls6nFc+pNI b1ELJMferV0JVlaSQDn0CxxMpWOUhEp8Vfp/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUFwzmx0BzopEYU/6z2kMkJtOBIxYwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvSkFtSDlBcGdNTTM2 TTk3Ujd1ZlBUY2ZEQUpRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKxWgHSPAtpSqKrfskTloM3YfslOLl0s605iActCBsbm5QGPm3WfHYcSOH7X dqFfOUAHaepHz0KZpNVHJE+Un/36yJBm3U+elSbwW9KY827xm3E1tVP23Sm+QvXz MmpHZTCGIu5pgY/goZU/fPOsHgJMQfSOIN8u+nhWkAa2ywqE3iugQl9ueJUEOjqx 5XWD6HyUb/CN6PQHG7JVx4Ss/K4/5/Ip2KpwzwCoTWceeSx6R+zo1pfFlywWTiel 22FfPGEfLMC78NEneS4R4za6slExnQVxViIRtq6uKzrmu1qTW+OOKEpuXIvqLL5R H5JbVuznZ4Lz57mkSZimmIlhE88= -----END CERTIFICATE-----Generated at Fri May 16 06:19:50 2025 by rpki-client