$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft File: yWewb7xL_3HCRTp9vkkVFDS7jW8.mft (raw, json) Hash identifier: vMAjj62usMe0qtnNxFKv2jkhmJikkAOBMVLy1S9z0mU= Subject key identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E Authority key identifier: C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F Certificate issuer: /CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Certificate serial: 0C2D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft Manifest number: 0C2D Signing time: Mon 28 Apr 2025 17:06:56 +0000 Manifest this update: Mon 28 Apr 2025 17:06:56 +0000 Manifest next update: Mon 28 Apr 2025 23:06:56 +0000 Files and hashes: 1: yWewb7xL_3HCRTp9vkkVFDS7jW8.crl (hash: 4lNSe8j7aOBY0JMaoItpMVS1VjVu89+gI/XA6K0pISM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Validity Not Before: Apr 28 17:06:56 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=894F37F63950F05EB10F706A509A4894914F608E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:42:42:64:e9:69:8a:58:4a:14:ac:ad:1b: aa:3d:86:55:37:d2:e9:45:06:57:01:57:fb:eb:4e: 9a:93:2c:5f:5b:25:14:d1:ff:f4:6a:47:47:90:7c: a6:43:28:ff:82:5f:9b:b2:1d:d6:69:8e:ac:76:02: fc:d0:5a:6e:ee:6a:7f:6f:98:82:54:57:f7:de:97: 9f:7b:a4:6d:ec:0c:81:78:ca:eb:52:95:cd:51:cf: 82:a7:a8:00:74:51:2f:32:34:da:42:85:bb:5e:b6: c6:37:a0:a8:ef:ea:02:a7:06:5c:06:b4:a8:d8:f1: 9e:d9:b2:98:35:55:a1:b5:06:1d:5f:80:ab:d5:9a: b9:f2:49:55:98:c5:e6:83:fa:ba:78:5b:8a:e0:68: fa:df:41:0c:49:6f:0e:57:0e:a2:10:40:27:9d:4f: 06:eb:84:0c:95:3f:73:20:c2:bb:ea:6c:0a:51:4e: 35:30:3e:e0:11:e9:12:84:cd:88:b3:29:97:e9:67: 70:62:d6:0d:ab:a6:e3:5c:de:86:55:89:c5:ff:82: db:5e:b0:7b:fa:86:57:eb:94:1d:56:09:66:ae:29: b9:e6:27:94:4d:5e:d4:2f:5f:fb:4b:f7:ac:bc:9f: 95:6d:c6:64:68:7a:83:fb:0d:d6:6a:fd:b0:fe:cd: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E X509v3 Authority Key Identifier: keyid:C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:b9:e3:b9:f3:60:44:a8:aa:a3:48:b6:69:a8:51:e5:63:c2: b4:1b:37:27:bf:aa:b3:59:b1:5b:a9:1f:f0:01:c6:7d:a2:1c: 61:60:96:21:61:9e:0b:01:83:8e:6a:61:2f:8c:73:a0:aa:9d: 88:93:0c:87:06:4e:28:c5:fd:60:21:77:ca:26:f9:52:4e:c3: e8:de:a3:d2:43:e9:21:7f:9a:db:7d:a3:df:eb:5d:eb:9f:36: 53:ac:fe:c7:56:81:9a:11:0f:bb:91:c1:39:d9:f2:43:e5:6d: 9d:0f:cd:60:35:96:61:cd:a1:cb:17:a2:1b:10:a5:2c:5c:fc: 0d:40:07:4e:68:ea:c5:46:b7:7e:1a:5e:68:23:95:2d:59:3b: c6:83:a5:93:fb:8c:a4:77:7e:9a:44:84:20:02:67:c5:89:85: df:a7:0c:a1:38:a7:5c:a0:11:b1:46:e3:88:d0:82:52:a8:cc: 09:99:38:fe:d5:f5:66:65:3e:7d:cb:3b:71:16:3a:4f:f9:1c: 8f:61:b2:38:f0:fa:58:88:28:50:60:d9:f8:aa:18:31:f8:7a: a0:9c:a3:2e:18:f1:67:c3:07:c0:f8:21:66:98:b1:54:be:4e: 94:0c:9a:61:7e:28:a5:6e:15:65:8c:89:62:a9:8a:aa:64:19: f0:54:f8:e7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk2 N0IwNkZCQzRCRkY3MUMyNDUzQTdEQkU0OTE1MTQzNEJCOEQ2RjAeFw0yNTA0Mjgx NzA2NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg5NEYzN0Y2Mzk1MEYw NUVCMTBGNzA2QTUwOUE0ODk0OTE0RjYwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc9EJCZOlpilhKFKytG6o9hlU30ulFBlcBV/vrTpqTLF9bJRTR //RqR0eQfKZDKP+CX5uyHdZpjqx2AvzQWm7uan9vmIJUV/fel597pG3sDIF4yutS lc1Rz4KnqAB0US8yNNpChbtetsY3oKjv6gKnBlwGtKjY8Z7Zspg1VaG1Bh1fgKvV mrnySVWYxeaD+rp4W4rgaPrfQQxJbw5XDqIQQCedTwbrhAyVP3MgwrvqbApRTjUw PuAR6RKEzYizKZfpZ3Bi1g2rpuNc3oZVicX/gttesHv6hlfrlB1WCWauKbnmJ5RN XtQvX/tL96y8n5VtxmRoeoP7DdZq/bD+zdpXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUiU839jlQ8F6xD3BqUJpIlJFPYI4wHwYDVR0jBBgwFoAUyWewb7xL/3HCRTp9 vkkVFDS7jW8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx Ni95V2V3Yjd4TF8zSENSVHA5dmtrVkZEUzdqVzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3lXZXdiN3hMXzNIQ1JUcDl2a2tWRkRTN2pXOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTYveVdld2I3eExfM0hD UlRwOXZra1ZGRFM3alc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMq547nzYESoqqNItmmoUeVjwrQbNye/qrNZsVupH/ABxn2iHGFgliFhngsB g45qYS+Mc6CqnYiTDIcGTijF/WAhd8om+VJOw+jeo9JD6SF/mtt9o9/rXeufNlOs /sdWgZoRD7uRwTnZ8kPlbZ0PzWA1lmHNocsXohsQpSxc/A1AB05o6sVGt34aXmgj lS1ZO8aDpZP7jKR3fppEhCACZ8WJhd+nDKE4p1ygEbFG44jQglKozAmZOP7V9WZl Pn3LO3EWOk/5HI9hsjjw+liIKFBg2fiqGDH4eqCcoy4Y8WfDB8D4IWaYsVS+TpQM mmF+KKVuFWWMiWKpiqpkGfBU+Oc= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:27 2025 by rpki-client on console.sobornost.net