$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft File: cpzUo3V_UkXEbNX7sK1MjtG73Us.mft (raw, json) Hash identifier: jvd8wN1JaTVOrH6zydTOn/0fVUiTF69A89ksoU0nKcw= Subject key identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 Authority key identifier: 72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B Certificate issuer: /CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Certificate serial: 14A0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft Manifest number: 14A0 Signing time: Mon 28 Apr 2025 18:06:33 +0000 Manifest this update: Mon 28 Apr 2025 18:06:33 +0000 Manifest next update: Tue 29 Apr 2025 00:06:33 +0000 Files and hashes: 1: cpzUo3V_UkXEbNX7sK1MjtG73Us.crl (hash: y35Zi9W9xIvfVqAt/Hye/tOpcEDDAN0V11+murbL4UI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5280 (0x14a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B Validity Not Before: Apr 28 18:06:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B2C580BE6C0A90D2887CAE55DD0C71A81BE1C6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:4b:a7:ea:0e:54:b0:74:1f:43:82:e2:d6: 23:41:e9:9f:b0:d1:09:31:5e:92:73:75:78:c5:27: d9:92:38:ab:4f:90:68:4b:94:8f:5c:5f:75:81:3c: 2e:2e:01:00:c1:3c:a9:99:d4:b3:5f:8a:f5:23:1d: 9c:47:a5:d0:d5:6c:25:77:b8:c5:6b:87:fd:83:f8: d2:98:a7:3d:04:bf:8b:f6:2d:d1:2b:34:51:eb:8d: 8a:7e:12:88:e3:2a:99:08:13:30:a9:ca:d8:2e:30: cf:8d:fc:22:7a:a9:c1:21:af:03:b0:e1:5d:ee:74: 41:74:c3:ae:80:ae:8a:71:2c:a1:f9:f4:ee:5e:78: 87:3b:67:26:77:ee:60:78:32:e4:10:b7:bc:6e:bc: 86:dd:5b:61:74:e8:78:cc:a4:0c:7e:99:6a:cc:b5: 36:70:ab:48:4f:11:38:a2:a4:16:dd:c9:f6:aa:29: e6:07:e4:b9:f6:68:56:b6:b8:c8:a9:0d:55:0d:b7: 68:0a:07:92:06:23:51:f7:2a:c0:30:b7:78:57:75: 10:0d:96:65:44:60:af:e9:ac:42:3a:37:6f:da:1f: 4d:ea:d6:e8:41:ee:7d:e3:63:7e:9a:58:81:5f:9a: dc:31:35:d1:20:de:3e:b3:88:01:fe:e0:7d:0b:0c: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5 X509v3 Authority Key Identifier: keyid:72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ad:14:97:1f:2c:34:13:0b:36:c6:c7:c1:10:dc:60:dd:72: 62:f6:19:29:8e:b4:dd:cd:fa:39:5c:3a:eb:70:cb:e8:64:63: d4:ad:24:ff:3f:29:c4:55:92:e0:35:06:99:e0:9b:a1:e4:e0: 58:9a:4c:91:96:13:23:1a:2f:ca:df:1a:90:c8:ba:67:d6:1a: 51:50:d8:97:81:d5:fa:23:b6:dc:b5:1f:8a:9e:e4:a6:de:51: 9b:04:d2:9a:e2:e4:45:44:52:4d:d1:00:cb:4e:60:52:e4:59: 83:6a:33:6a:7f:d3:18:21:13:ea:14:55:39:cd:46:27:31:a5: e2:6e:ff:67:d6:65:af:11:eb:40:e1:5a:72:36:5e:ed:65:be: f3:33:31:4e:3e:cb:37:e4:e1:85:3d:54:f8:f7:00:22:b8:d1: 25:5b:78:74:d3:32:8c:28:4b:46:0b:b9:c8:43:04:50:53:33: 9e:17:0f:2e:69:28:5e:d1:da:20:83:d5:2e:65:05:3f:dc:71: 29:d3:13:88:57:15:a2:ec:84:0c:1b:f0:0a:cc:1d:31:2c:0d: f8:4e:d8:d4:85:51:1d:a7:89:fc:a1:17:fa:2a:85:43:e8:e2: 35:ab:97:02:25:9b:78:28:b8:d8:c7:58:d9:e6:18:25:38:c8: e4:c1:1e:8d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzI5 Q0Q0QTM3NTdGNTI0NUM0NkNENUZCQjBBRDRDOEVEMUJCREQ0QjAeFw0yNTA0Mjgx ODA2MzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIyQzU4MEJFNkMwQTkw RDI4ODdDQUU1NUREMEM3MUE4MUJFMUM2QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsZ0un6g5UsHQfQ4Li1iNB6Z+w0QkxXpJzdXjFJ9mSOKtPkGhL lI9cX3WBPC4uAQDBPKmZ1LNfivUjHZxHpdDVbCV3uMVrh/2D+NKYpz0Ev4v2LdEr NFHrjYp+EojjKpkIEzCpytguMM+N/CJ6qcEhrwOw4V3udEF0w66AropxLKH59O5e eIc7ZyZ37mB4MuQQt7xuvIbdW2F06HjMpAx+mWrMtTZwq0hPETiipBbdyfaqKeYH 5Ln2aFa2uMipDVUNt2gKB5IGI1H3KsAwt3hXdRANlmVEYK/prEI6N2/aH03q1uhB 7n3jY36aWIFfmtwxNdEg3j6ziAH+4H0LDE7FAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUssWAvmwKkNKIfK5V3QxxqBvhxqUwHwYDVR0jBBgwFoAUcpzUo3V/UkXEbNX7 sK1MjtG73UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 Ny9jcHpVbzNWX1VrWEViTlg3c0sxTWp0RzczVXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NwelVvM1ZfVWtYRWJOWDdzSzFNanRHNzNVcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODcvY3B6VW8zVl9Va1hF Yk5YN3NLMU1qdEc3M1VzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC+tFJcfLDQTCzbGx8EQ3GDdcmL2GSmOtN3N+jlcOutwy+hkY9StJP8/KcRV kuA1Bpngm6Hk4FiaTJGWEyMaL8rfGpDIumfWGlFQ2JeB1fojtty1H4qe5KbeUZsE 0pri5EVEUk3RAMtOYFLkWYNqM2p/0xghE+oUVTnNRicxpeJu/2fWZa8R60DhWnI2 Xu1lvvMzMU4+yzfk4YU9VPj3ACK40SVbeHTTMowoS0YLuchDBFBTM54XDy5pKF7R 2iCD1S5lBT/ccSnTE4hXFaLshAwb8ArMHTEsDfhO2NSFUR2nifyhF/oqhUPo4jWr lwIlm3gouNjHWNnmGCU4yOTBHo0= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net