$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft File: lmzVCUReWNdVvBqFJWP5uy_uzbk.mft (raw, json) Hash identifier: wyPgKqLwUYRjA5RNR4arWgfjDfWKHtKdbj0reTrBZy4= Subject key identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 Authority key identifier: 96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 Certificate issuer: /CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Certificate serial: 76 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft Manifest number: 76 Signing time: Sat 17 May 2025 22:37:47 +0000 Manifest this update: Sat 17 May 2025 22:37:47 +0000 Manifest next update: Sun 18 May 2025 04:37:47 +0000 Files and hashes: 1: lmzVCUReWNdVvBqFJWP5uy_uzbk.crl (hash: AJ+esO/PT8luxeP91qvCtsoRpFqWD+Z5dDGok1CBfyQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Validity Not Before: May 17 22:37:47 2025 GMT Not After : Apr 24 06:29:48 2026 GMT Subject: CN=652AC6D45D74F000FFFCA5A6AFB02690651A8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:a6:94:b4:d1:5b:79:37:2b:14:1b:ea:76: b7:a1:db:e8:f1:8b:44:bd:c4:0f:3e:b8:d1:a0:54: 23:64:d7:c8:ce:64:6f:20:76:56:ca:01:ae:86:04: 17:29:aa:60:e3:4d:a2:b1:72:3a:b0:b4:39:8e:0d: e6:b2:ea:13:13:2a:5e:c3:ab:93:ea:66:b0:dc:5e: 6b:65:ce:31:61:45:e2:16:30:88:09:a2:57:bd:2e: 36:b0:ef:51:98:df:a8:3d:36:3e:1a:37:47:71:1f: a3:9b:67:6f:d5:4d:f3:87:82:b3:ce:b3:08:d5:a2: 01:4f:fe:46:90:8b:15:df:a6:c7:4b:26:4a:f6:b0: 89:6c:0c:ad:85:11:5b:36:07:61:90:0b:d8:7e:d6: b0:32:04:6a:80:9a:8f:32:c2:df:4c:e8:1b:79:67: 4f:c2:21:b0:62:c3:72:71:f2:c5:4f:c9:a3:0a:03: 1e:5b:fe:b6:f4:df:47:09:8b:d2:21:b2:46:8f:8c: 88:72:cc:a7:2f:ee:e3:52:aa:60:bc:f2:34:a9:8b: f9:59:2f:57:ef:92:66:58:f6:da:a7:d6:b7:c0:23: 42:6b:a1:ba:24:9e:a3:4a:bb:98:f5:ad:96:f6:b3: ea:51:ca:ba:aa:16:8a:5c:29:11:96:8f:14:49:3a: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 X509v3 Authority Key Identifier: keyid:96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:44:1c:9d:9f:bd:eb:05:eb:e2:f1:2f:f3:14:f7:96:a8:26: c9:eb:1c:33:a6:a7:a0:0d:b4:a3:b5:b9:2e:4c:db:1c:e1:10: 34:9d:6f:51:2f:b8:ea:4e:2d:9c:5b:c4:1d:6a:c7:83:63:c9: 96:9d:1d:e4:34:b8:b8:56:0d:27:1d:ad:a9:db:3a:32:c3:e8: 25:5a:68:d7:71:78:4a:38:09:f2:ef:72:f4:23:09:b6:78:2d: 04:65:a5:c6:e1:ae:cf:51:8c:99:c2:ee:cf:42:00:d5:c7:1a: 1e:f0:5e:4d:a6:30:f9:b3:a1:ec:9f:c1:9c:f2:47:f2:62:75: 1e:b3:f8:9d:6b:1c:64:ea:66:af:ad:ae:1d:52:8a:d5:48:42: c7:93:5e:f3:1b:9e:f1:ce:e5:8d:20:3e:cf:af:75:76:1c:ca: ee:dd:2a:75:c2:9e:2a:cb:51:7e:c5:91:0d:be:89:45:5e:44: 4c:bb:7f:d6:57:50:ac:57:8e:98:bd:9b:ab:10:4d:76:4d:49: 20:3f:f1:ba:04:f6:67:73:ab:4f:70:bf:f3:2a:f9:01:14:74: 80:46:87:4d:8d:22:72:67:6a:e2:d9:06:34:6a:10:bb:93:d7: d2:ee:c8:58:f9:1a:8f:ed:13:a9:8b:24:63:14:e1:7d:92:e9: 16:8c:17:0f -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjZD RDUwOTQ0NUU1OEQ3NTVCQzFBODUyNTYzRjlCQjJGRUVDREI5MB4XDTI1MDUxNzIy Mzc0N1oXDTI2MDQyNDA2Mjk0OFowMzExMC8GA1UEAxMoNjUyQUM2RDQ1RDc0RjAw MEZGRkNBNUE2QUZCMDI2OTA2NTFBODgxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMh8ppS00Vt5NysUG+p2t6Hb6PGLRL3EDz640aBUI2TXyM5kbyB2 VsoBroYEFymqYONNorFyOrC0OY4N5rLqExMqXsOrk+pmsNxea2XOMWFF4hYwiAmi V70uNrDvUZjfqD02Pho3R3Efo5tnb9VN84eCs86zCNWiAU/+RpCLFd+mx0smSvaw iWwMrYURWzYHYZAL2H7WsDIEaoCajzLC30zoG3lnT8IhsGLDcnHyxU/JowoDHlv+ tvTfRwmL0iGyRo+MiHLMpy/u41KqYLzyNKmL+VkvV++SZlj22qfWt8AjQmuhuiSe o0q7mPWtlvaz6lHKuqoWilwpEZaPFEk6IiUCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRlKsbUXXTwAP/8paavsCaQZRqIEjAfBgNVHSMEGDAWgBSWbNUJRF5Y11W8GoUl Y/m7L+7NuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzY2 L2xtelZDVVJlV05kVnZCcUZKV1A1dXlfdXpiay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbG16VkNVUmVXTmRWdkJxRkpXUDV1eV91emJrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2Ni9sbXpWQ1VSZVdOZFZ2 QnFGSldQNXV5X3V6YmsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIUQcnZ+96wXr4vEv8xT3lqgmyescM6anoA20o7W5LkzbHOEQNJ1vUS+46k4t nFvEHWrHg2PJlp0d5DS4uFYNJx2tqds6MsPoJVpo13F4SjgJ8u9y9CMJtngtBGWl xuGuz1GMmcLuz0IA1ccaHvBeTaYw+bOh7J/BnPJH8mJ1HrP4nWscZOpmr62uHVKK 1UhCx5Ne8xue8c7ljSA+z691dhzK7t0qdcKeKstRfsWRDb6JRV5ETLt/1ldQrFeO mL2bqxBNdk1JID/xugT2Z3OrT3C/8yr5ARR0gEaHTY0icmdq4tkGNGoQu5PX0u7I WPkaj+0TqYskYxThfZLpFowXDw== -----END CERTIFICATE-----Generated at Sun May 18 01:42:18 2025 by rpki-client