$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft File: RHMR0DbVD1TEQW-41oIgp8uWgZk.mft (raw, json) Hash identifier: HDHGIXzb1cl6Vo+2RwFCIQe+t3yoZ3WA50vRwP9EZdI= Subject key identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD Authority key identifier: 44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 Certificate issuer: /CN=447311D036D50F54C4416FB8D68220A7CB968199 Certificate serial: 0DB7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft Manifest number: 0DB7 Signing time: Mon 28 Apr 2025 17:07:03 +0000 Manifest this update: Mon 28 Apr 2025 17:07:03 +0000 Manifest next update: Mon 28 Apr 2025 23:07:03 +0000 Files and hashes: 1: RHMR0DbVD1TEQW-41oIgp8uWgZk.crl (hash: Nx94aKXnJGkN47wqZIhWai7os7zK9+djTeGy01Y0NXo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447311D036D50F54C4416FB8D68220A7CB968199 Validity Not Before: Apr 28 17:07:03 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E87AE688BDC7A10FDD5E9B3706E050B1F5ACABCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:b5:20:11:08:e9:94:a4:b3:1b:10:e3:3b: 8c:9b:f3:3c:66:be:c4:8c:4c:8f:32:3d:75:bf:40: 7b:bf:65:97:b4:a5:fe:86:a0:df:27:cd:91:ff:04: 80:9d:7b:92:1a:d2:53:3d:27:c4:5d:a3:5c:c3:5c: 09:da:07:ba:5a:0d:d5:1e:a4:6c:fd:17:f2:a3:54: d7:10:0c:f5:45:bd:d6:fd:89:c3:14:99:b0:96:26: bc:f2:71:99:3c:9a:25:fd:6e:3a:9f:15:5b:01:e4: f7:2c:71:0b:3b:9c:a5:e1:28:15:63:3d:3f:61:bd: 99:0c:65:f7:ea:a6:2c:32:c6:9d:ab:8c:6c:12:6b: 77:72:c5:92:9e:23:aa:85:b5:09:6f:7d:e2:b6:66: 82:64:e6:c8:d5:71:b8:db:e6:7a:ee:92:72:48:cc: 75:03:dc:86:79:a6:05:67:84:18:21:37:5e:9e:c6: fa:3b:a9:a0:c7:79:33:d5:c7:75:d6:11:4c:2e:45: 14:55:6e:95:9f:eb:2f:c8:99:ec:42:7b:89:51:79: b9:4c:8b:46:ff:73:f2:d0:7f:f8:9b:b8:2c:17:2d: 19:62:83:96:ac:c5:0c:ea:5b:04:bd:e1:b1:b2:7c: 6d:82:3a:c6:23:3d:6e:4f:20:11:17:4f:05:e1:7a: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD X509v3 Authority Key Identifier: keyid:44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:45:94:0c:01:91:7e:5f:33:be:5a:23:e9:b9:29:05:20:ca: 1c:8b:8c:be:10:d8:c8:83:35:28:2f:35:0f:f4:4e:15:57:da: 04:ab:ca:b8:c2:e2:c3:16:35:a0:61:10:95:51:0f:07:5e:3c: d9:64:b9:50:1b:ce:ab:0a:56:2d:f5:1d:95:5a:6b:3e:12:ec: ef:9f:2c:89:67:66:b5:85:e2:7c:e1:a9:f4:5f:94:74:5e:22: aa:43:fb:12:a9:bb:c9:1a:69:d4:5d:6b:7d:8e:81:04:c1:f1: 1c:96:b8:a5:c0:10:9e:78:c4:34:e4:9b:09:69:8f:a6:24:3d: 36:23:52:6a:12:62:59:2d:92:74:4e:d6:ac:a7:5a:f5:c4:12: a7:c0:ea:b2:27:85:45:d2:b0:f6:3d:d8:2e:d8:72:47:43:92: 73:26:f0:43:df:93:e1:8a:0d:67:89:19:08:31:ee:9b:5c:da: 49:a7:df:b7:0f:87:c0:53:a2:e7:9f:c4:7c:04:5e:2a:fc:91: d3:d2:eb:aa:28:a1:ff:28:b1:c6:4a:fd:a7:25:ef:e8:f8:c7: 76:91:6d:25:9e:5d:1c:02:b5:3f:66:0c:92:cf:0e:73:74:4d: 44:5d:af:84:73:94:4a:97:e0:5d:5a:88:b7:3e:b9:87:86:c4: 6e:9e:f1:bb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ3 MzExRDAzNkQ1MEY1NEM0NDE2RkI4RDY4MjIwQTdDQjk2ODE5OTAeFw0yNTA0Mjgx NzA3MDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU4N0FFNjg4QkRDN0Ex MEZERDVFOUIzNzA2RTA1MEIxRjVBQ0FCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmULUgEQjplKSzGxDjO4yb8zxmvsSMTI8yPXW/QHu/ZZe0pf6G oN8nzZH/BICde5Ia0lM9J8Rdo1zDXAnaB7paDdUepGz9F/KjVNcQDPVFvdb9icMU mbCWJrzycZk8miX9bjqfFVsB5PcscQs7nKXhKBVjPT9hvZkMZffqpiwyxp2rjGwS a3dyxZKeI6qFtQlvfeK2ZoJk5sjVcbjb5nruknJIzHUD3IZ5pgVnhBghN16exvo7 qaDHeTPVx3XWEUwuRRRVbpWf6y/ImexCe4lReblMi0b/c/LQf/ibuCwXLRlig5as xQzqWwS94bGyfG2COsYjPW5PIBEXTwXhehJPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6HrmiL3HoQ/dXps3BuBQsfWsq80wHwYDVR0jBBgwFoAURHMR0DbVD1TEQW+4 1oIgp8uWgZkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx OS9SSE1SMERiVkQxVEVRVy00MW9JZ3A4dVdnWmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JITVIwRGJWRDFURVFXLTQxb0lncDh1V2daay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvUkhNUjBEYlZEMVRF UVctNDFvSWdwOHVXZ1prLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAINFlAwBkX5fM75aI+m5KQUgyhyLjL4Q2MiDNSgvNQ/0ThVX2gSryrjC4sMW NaBhEJVRDwdePNlkuVAbzqsKVi31HZVaaz4S7O+fLIlnZrWF4nzhqfRflHReIqpD +xKpu8kaadRda32OgQTB8RyWuKXAEJ54xDTkmwlpj6YkPTYjUmoSYlktknRO1qyn WvXEEqfA6rInhUXSsPY92C7YckdDknMm8EPfk+GKDWeJGQgx7ptc2kmn37cPh8BT ouefxHwEXir8kdPS66ooof8oscZK/acl7+j4x3aRbSWeXRwCtT9mDJLPDnN0TURd r4RzlEqX4F1aiLc+uYeGxG6e8bs= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:27 2025 by rpki-client on console.sobornost.net