$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft File: LiZtw-rYDrJdSYWKZNwe8cihuUI.mft (raw, json) Hash identifier: vMDSoYRXIUmr/+iVXSZrR4LrLLFYHnv1wAhSf1mnMIY= Subject key identifier: 3D:AB:33:4D:EF:9E:C0:9F:69:7B:E2:E8:AA:96:12:66:37:E5:FE:2D Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 080F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft Manifest number: 026E Signing time: Sat 17 May 2025 19:38:11 +0000 Manifest this update: Sat 17 May 2025 19:38:11 +0000 Manifest next update: Sun 18 May 2025 01:38:11 +0000 Files and hashes: 1: -GYOd-df_Oy-f0YGZ8QoXpE-KUY.roa (hash: XMRU4RMulafL9ykW2oShRAn56DaYEZ2ldVuJ0Q69omY=) 2: AGaEAro_MAFjXInOEwdhF2J99-Q.roa (hash: teDEVQxiwG3thUd6EHaVhn7M5ajR6DNWTN9bYkKzjpw=) 3: LiZtw-rYDrJdSYWKZNwe8cihuUI.crl (hash: MJ1MfhJfIJYyNqKCeZFEqMmQr9TfjX+VUIuDh5Hlbx8=) 4: N068Movxhd0HY-G9IlBTH0wcH-o.roa (hash: 52PacQFpyIpw+nFdeX2RQwEMG/bZk45cRChsSeSXizk=) 5: OjvJeSo6lsEg9uLCdozMhBG1wpM.roa (hash: o11AaYnXnEfRHY+f+c5bRhxX0vq/1+fUyNDi4psENWI=) 6: ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa (hash: FvWAWdHlZfe8cZsITf2/A06d9VsOp6LGA7o/YZd8tAI=) 7: kHETLM6cygeGpKKoqih1EPU7gmI.roa (hash: +LQA3OraGUIU6wW3F0A+ePFfIqnRqwHWcGXQxQ6FNG4=) 8: nHfB2GHYBmc8bX5DxbEirv_IKF0.roa (hash: 6zuNH+NuLOtHpcZwmZyV/YBPSvVE39rWVdrUOXiD83g=) 9: ubVRh7K6EgjZdqdXMRoDRILg7oA.roa (hash: 6YRc7jTji1CAGbe8flD8uUsWV2WPrr9iUMVCo/vh4VE=) 10: whnSgSDZbbST2Iyga7o6uYq11rs.roa (hash: TG4QXugSXzWzcS5ARpRO8Br45SVv/LEfTwO0wpu7pf8=) 11: yVCeVSdYcGSgIEZ7ns34fALeY6w.roa (hash: 37YcQVfz5Xs12JKZlzGMhU0SATgmn3/Zn9Jnck5yiyU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2063 (0x80f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 17 19:38:11 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=3DAB334DEF9EC09F697BE2E8AA96126637E5FE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:1a:85:4f:41:aa:4f:1d:ad:88:bd:9e:28: 1f:ee:13:f9:de:f9:37:ac:78:ea:a9:b3:6d:4b:31: 54:0f:be:48:75:53:a3:bb:f9:eb:19:27:3a:cd:ad: bd:a9:d6:82:d8:76:ca:7c:31:80:53:db:5c:e5:b1: f6:b9:9b:5a:3d:24:8f:1c:9a:f4:2d:16:d4:8a:6f: 66:0a:db:b7:ec:fd:e8:9c:5f:5f:78:0c:ca:42:91: f4:9f:96:45:b8:19:f0:b7:90:92:8a:39:fc:85:bd: 15:1f:8a:72:49:91:41:25:30:2c:7a:c1:44:a5:98: bb:93:62:25:87:cf:11:46:0e:ec:f6:29:fd:8c:01: 40:d9:3b:5a:a4:53:d1:57:72:bd:85:81:3e:63:88: 9d:a0:cf:31:3e:50:6d:94:81:6e:96:bb:ba:09:e9: 32:3b:87:3e:2b:03:b4:36:c8:14:1a:45:4d:11:2c: 18:53:66:c7:b7:6b:7f:12:68:3e:e7:f6:e8:09:c6: c8:da:61:14:e1:8a:8a:37:bd:73:91:1e:83:1d:47: 77:e4:3c:59:07:32:ad:4c:47:e3:5a:ab:27:81:a8: f9:02:67:a1:4a:5b:cf:a9:de:68:a4:31:94:d8:be: e9:da:1f:83:f7:d2:26:6a:5f:cc:99:ba:40:62:01: 92:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:33:4D:EF:9E:C0:9F:69:7B:E2:E8:AA:96:12:66:37:E5:FE:2D X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:40:e0:58:fe:3c:74:1f:7b:e0:21:43:09:d0:8c:63:9e:1f: 65:4c:26:b5:d5:a9:5c:1b:83:1e:1a:50:63:6c:05:0b:8e:0f: 25:91:4a:1c:c6:3c:9a:ff:f5:06:3d:75:d8:f9:e4:4a:39:65: 14:0d:88:b8:4b:b0:75:e3:25:3f:53:c4:ff:09:f3:42:96:3c: fd:6f:27:2b:aa:e7:f6:e1:8a:d7:38:56:89:5f:c7:4e:a4:bd: 74:fb:3b:06:ac:b8:99:58:63:89:9a:b0:96:73:a5:b1:5a:ac: 84:ce:13:cc:9c:38:33:2e:f5:ac:5a:c4:a5:8a:6a:64:66:56: 00:7c:b4:fa:b2:0c:8b:55:5f:d3:fc:3a:d2:a5:47:f1:58:2e: 7b:43:87:1a:df:b5:58:d8:65:5b:27:d7:a4:cd:2e:f7:be:74: b0:ed:e7:8c:6e:61:d1:93:d2:44:a5:c7:23:93:7e:7b:b1:f8: 35:90:19:b8:d7:f0:6c:36:50:ca:2d:8e:98:13:0e:c4:bf:81: 93:5c:8a:60:4b:19:2f:a2:df:c2:86:3d:09:51:07:51:b9:25: 72:86:31:e7:47:2a:9b:c3:12:f7:5a:f3:eb:ca:a9:28:90:91: 61:ad:76:ae:eb:89:b3:80:f3:b8:d5:e1:17:cd:7c:4c:01:5d: d1:e6:c4:64 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcx OTM4MTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNEQUIzMzRERUY5RUMw OUY2OTdCRTJFOEFBOTYxMjY2MzdFNUZFMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+BBqFT0GqTx2tiL2eKB/uE/ne+TeseOqps21LMVQPvkh1U6O7 +esZJzrNrb2p1oLYdsp8MYBT21zlsfa5m1o9JI8cmvQtFtSKb2YK27fs/eicX194 DMpCkfSflkW4GfC3kJKKOfyFvRUfinJJkUElMCx6wUSlmLuTYiWHzxFGDuz2Kf2M AUDZO1qkU9FXcr2FgT5jiJ2gzzE+UG2UgW6Wu7oJ6TI7hz4rA7Q2yBQaRU0RLBhT Zse3a38SaD7n9ugJxsjaYRThioo3vXORHoMdR3fkPFkHMq1MR+NaqyeBqPkCZ6FK W8+p3mikMZTYvunaH4P30iZqX8yZukBiAZJZAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUPaszTe+ewJ9pe+LoqpYSZjfl/i0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9MaVp0dy1yWURySmRTWVdL Wk53ZThjaWh1VUkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA AkDgWP48dB974CFDCdCMY54fZUwmtdWpXBuDHhpQY2wFC44PJZFKHMY8mv/1Bj11 2PnkSjllFA2IuEuwdeMlP1PE/wnzQpY8/W8nK6rn9uGK1zhWiV/HTqS9dPs7Bqy4 mVhjiZqwlnOlsVqshM4TzJw4My71rFrEpYpqZGZWAHy0+rIMi1Vf0/w60qVH8Vgu e0OHGt+1WNhlWyfXpM0u9750sO3njG5h0ZPSRKXHI5N+e7H4NZAZuNfwbDZQyi2O mBMOxL+Bk1yKYEsZL6LfwoY9CVEHUbklcoYx50cqm8MS91rz68qpKJCRYa12ruuJ s4DzuNXhF818TAFd0ebEZA== -----END CERTIFICATE-----Generated at Sat May 17 21:21:49 2025 by rpki-client