$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft File: ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json) Hash identifier: 87o1MPnhBZ+wrkpTFDaUkFs/yt1zKUByMpr87a9RH18= Subject key identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE Certificate serial: 0542 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft Manifest number: 0542 Signing time: Sat 17 May 2025 21:37:28 +0000 Manifest this update: Sat 17 May 2025 21:37:28 +0000 Manifest next update: Sun 18 May 2025 03:37:28 +0000 Files and hashes: 1: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: mB3B5IFO49NiCE61KGlAtR1eVjOb/2a/pl19kUrd9Z4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE Validity Not Before: May 17 21:37:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04: 90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1: 27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3: a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32: 04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9: 2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e: af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f: 45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5: 8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53: 48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca: 0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8: 5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b: 19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03: 2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93: 68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55: a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61: ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 X509v3 Authority Key Identifier: keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:19:36:b9:84:56:6a:c4:19:c5:b0:1c:06:f5:43:b4:5c:e0: 2d:08:d7:1e:b0:43:cf:13:94:15:a1:c5:c8:66:02:03:c2:a8: 59:a6:91:01:3c:d5:77:c9:58:f4:c6:28:ab:36:32:23:98:4c: 5d:df:2d:a0:dd:e2:51:28:f9:7a:42:44:f6:43:6f:54:b8:bc: 47:9d:6a:c6:33:b9:32:27:dc:be:d4:57:30:6c:5e:99:0c:5b: 7b:76:5f:a0:26:80:79:42:5e:31:6b:91:73:be:67:d3:f5:bc: 70:7a:e6:08:63:cb:09:89:60:d3:ec:2e:0f:ea:bc:5b:a3:b4: 14:54:fd:b6:09:53:76:c1:67:c3:8f:c1:f7:23:5c:48:54:e1: 3a:fb:9a:44:97:37:0d:0a:2c:c9:dd:fe:ee:77:01:73:de:ae: 81:fd:e4:86:fa:f7:25:7e:26:2e:cf:f5:df:ac:46:80:b5:f0: 6f:ee:ba:68:4b:df:b7:02:f1:3a:8f:e5:5d:42:0f:94:da:7c: 93:78:30:4d:a1:85:6a:69:91:53:ec:31:7e:76:b2:27:e8:c6: 71:1b:28:26:09:dc:47:98:43:26:35:a0:cb:61:98:84:45:37: 00:ff:7f:1c:e0:8b:63:d0:49:39:4f:43:ed:af:29:53:a0:47: 88:6d:f3:ee -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY5 OTk3MjcxNjIyMjEzOEE0NUEzOUVCMEJGQUE4MTQ5NjgzNDBBRTAeFw0yNTA1MTcy MTM3MjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDY3MTE0RUU5NjNCNjgz RjhDQzk0RkU5N0JCRUFDRTU5MkU0MDIwQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfQ02hvSPxXx9HtpV7BJA8Pq+epask2MuMAYbzwSeuKJcXFpLS 6jjdESgZ06TCQ7OCKK2unw7eHYGbMgSHqSZvXBmo+hXHpno+6S3HVl/iZvqio+5o 4vepfq8687OBVJCkMGRb5SNhT0XLFbPjhVbo7ocanhFfpYxfDqufLaihVz2fmf7v U0idWL0RT37x0Pg6m+TGyg3X1dNGEN4NGy4/PsJX+F3MVrnfCEPg8xYDFs+LKxk+ 7+8kWdy8eS1WDf6dAy5HL+o3XNI535V/nhNjk2j/ZHjCZ1cnhomIwuvHVaJyeKQ1 nKSvRDX94Z6yYepBdAgom2JiLEn6FCDd91BzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZxFO6WO2g/jMlP6Xu+rOWS5AIMEwHwYDVR0jBBgwFoAUZpmXJxYiITikWjnr C/qoFJaDQK4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw OS9acG1YSnhZaUlUaWtXam5yQ19xb0ZKYURRSzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1pwbVhKeFlpSVRpa1dqbnJDX3FvRkphRFFLNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDkvWnBtWEp4WWlJVGlr V2puckNfcW9GSmFEUUs0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJcZNrmEVmrEGcWwHAb1Q7Rc4C0I1x6wQ88TlBWhxchmAgPCqFmmkQE81XfJ WPTGKKs2MiOYTF3fLaDd4lEo+XpCRPZDb1S4vEedasYzuTIn3L7UVzBsXpkMW3t2 X6AmgHlCXjFrkXO+Z9P1vHB65ghjywmJYNPsLg/qvFujtBRU/bYJU3bBZ8OPwfcj XEhU4Tr7mkSXNw0KLMnd/u53AXPeroH95Ib69yV+Ji7P9d+sRoC18G/uumhL37cC 8TqP5V1CD5TafJN4ME2hhWppkVPsMX52sifoxnEbKCYJ3EeYQyY1oMthmIRFNwD/ fxzgi2PQSTlPQ+2vKVOgR4ht8+4= -----END CERTIFICATE-----Generated at Sun May 18 01:44:07 2025 by rpki-client