$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3220/Fl3L4TxzpwZWWgsIoftY4fn02t8.mft File: Fl3L4TxzpwZWWgsIoftY4fn02t8.mft (raw, json) Hash identifier: 6gQTiAQBigtbQ/VQNTfFBED6Vl7TJvtzG5Qy/pajcAQ= Subject key identifier: 20:1F:1C:FE:6E:AF:B7:E6:94:83:DE:3C:E6:09:00:37:E5:40:F6:F8 Authority key identifier: 16:5D:CB:E1:3C:73:A7:06:56:5A:0B:08:A1:FB:58:E1:F9:F4:DA:DF Certificate issuer: /CN=165DCBE13C73A706565A0B08A1FB58E1F9F4DADF Certificate serial: 0D70 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Fl3L4TxzpwZWWgsIoftY4fn02t8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3220/Fl3L4TxzpwZWWgsIoftY4fn02t8.mft Manifest number: 0D70 Signing time: Mon 28 Apr 2025 17:07:46 +0000 Manifest this update: Mon 28 Apr 2025 17:07:46 +0000 Manifest next update: Mon 28 Apr 2025 23:07:46 +0000 Files and hashes: 1: Fl3L4TxzpwZWWgsIoftY4fn02t8.crl (hash: BbLK5kRcrIZq1pMiZXpMoMhjH329Jo/d89PrVZ2oQf4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3220/Fl3L4TxzpwZWWgsIoftY4fn02t8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3220/Fl3L4TxzpwZWWgsIoftY4fn02t8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Fl3L4TxzpwZWWgsIoftY4fn02t8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=165DCBE13C73A706565A0B08A1FB58E1F9F4DADF Validity Not Before: Apr 28 17:07:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=201F1CFE6EAFB7E69483DE3CE6090037E540F6F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:b5:0a:c8:ab:67:83:03:d1:e6:c6:7f:4a: c0:b1:8c:7c:eb:28:2a:fb:a7:f7:66:a5:b2:74:1c: 31:7a:cf:2c:30:8f:59:0d:25:d5:e5:48:1b:22:f9: 6b:33:73:3f:16:a2:d4:3e:de:ee:42:af:81:b9:c3: 81:b0:06:3b:31:78:db:67:63:29:c1:27:d2:75:74: 3c:25:13:7a:e2:82:df:a5:2b:64:6b:6f:50:5e:72: be:ce:de:5f:ca:6b:9b:d1:eb:d5:fe:b9:85:20:2b: e5:51:4f:4c:d4:9e:95:a9:5e:d6:94:7b:ba:ca:2c: d3:63:ca:b5:63:e2:34:6f:19:a7:e7:8a:b6:3a:b4: df:1d:94:2b:e2:9f:38:4b:8a:02:2e:8f:a4:7d:22: c3:d0:c2:79:89:d0:89:f1:86:8a:ac:5b:75:04:a3: d7:77:a2:64:5c:1c:f6:e1:9e:4c:1c:b0:09:45:5c: b8:42:58:1b:e4:4b:2e:cc:11:cf:9f:cc:d5:22:94: 89:3a:bc:2f:cf:7a:eb:4c:77:b0:b6:ec:3a:ba:1f: ed:b3:cd:48:80:b6:5c:ba:3b:8e:fe:6f:ab:fb:12: d0:e1:2e:54:60:a9:13:ed:12:b0:a9:14:39:71:6e: e8:7b:c7:2d:a4:c1:b5:e5:09:c6:27:bc:15:02:72: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1F:1C:FE:6E:AF:B7:E6:94:83:DE:3C:E6:09:00:37:E5:40:F6:F8 X509v3 Authority Key Identifier: keyid:16:5D:CB:E1:3C:73:A7:06:56:5A:0B:08:A1:FB:58:E1:F9:F4:DA:DF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3220/Fl3L4TxzpwZWWgsIoftY4fn02t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Fl3L4TxzpwZWWgsIoftY4fn02t8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3220/Fl3L4TxzpwZWWgsIoftY4fn02t8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:07:23:7b:be:aa:58:89:fb:a3:bb:83:ab:f0:70:f0:5a:3f: 43:b8:9a:f2:1f:82:75:a7:fc:5b:df:f3:98:26:d1:e6:fd:e6: 9c:68:de:6b:e3:af:4c:d0:b8:79:42:e5:6e:81:89:31:52:7d: 5c:65:b2:51:d3:e7:98:d0:7b:10:ae:fb:01:45:83:fd:ac:5e: fe:81:ce:1b:ec:bf:1c:e3:7b:be:ae:17:33:78:bc:a1:26:77: c6:d3:a1:de:7f:a2:02:ce:19:a8:bf:7d:e9:13:50:f3:d0:3a: 52:b6:f4:82:80:88:3d:0e:84:37:b5:f0:ac:34:d3:19:e0:8a: be:73:25:15:7b:47:99:d6:bb:45:bc:af:36:97:59:fe:c4:85: b3:a0:11:32:48:f8:18:de:1c:67:c5:0d:12:55:48:39:ab:9c: ae:49:4a:ed:14:e9:dc:94:d3:90:f5:d0:ef:7c:aa:1e:2e:e5: 79:f0:2e:fb:89:df:f1:f8:4b:c9:84:bf:49:43:ca:1c:2e:30: 4b:54:7f:08:73:99:f3:71:dc:9c:39:71:56:c0:93:8d:11:6f: 88:0e:e5:b0:c9:af:28:28:1f:8e:74:ca:16:b9:96:34:1c:97: 1a:12:59:f1:3c:af:82:6d:3f:f0:99:64:47:fb:cb:ae:1e:87: 29:c7:63:e7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1 RENCRTEzQzczQTcwNjU2NUEwQjA4QTFGQjU4RTFGOUY0REFERjAeFw0yNTA0Mjgx NzA3NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIwMUYxQ0ZFNkVBRkI3 RTY5NDgzREUzQ0U2MDkwMDM3RTU0MEY2RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9krUKyKtngwPR5sZ/SsCxjHzrKCr7p/dmpbJ0HDF6zywwj1kN JdXlSBsi+Wszcz8WotQ+3u5Cr4G5w4GwBjsxeNtnYynBJ9J1dDwlE3rigt+lK2Rr b1Becr7O3l/Ka5vR69X+uYUgK+VRT0zUnpWpXtaUe7rKLNNjyrVj4jRvGafnirY6 tN8dlCvinzhLigIuj6R9IsPQwnmJ0InxhoqsW3UEo9d3omRcHPbhnkwcsAlFXLhC WBvkSy7MEc+fzNUilIk6vC/PeutMd7C27Dq6H+2zzUiAtly6O47+b6v7EtDhLlRg qRPtErCpFDlxbuh7xy2kwbXlCcYnvBUCcglhAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIB8c/m6vt+aUg9485gkAN+VA9vgwHwYDVR0jBBgwFoAUFl3L4TxzpwZWWgsI oftY4fn02t8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy MC9GbDNMNFR4enB3WldXZ3NJb2Z0WTRmbjAydDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZsM0w0VHh6cHdaV1dnc0lvZnRZNGZuMDJ0OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjAvRmwzTDRUeHpwd1pX V2dzSW9mdFk0Zm4wMnQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE8HI3u+qliJ+6O7g6vwcPBaP0O4mvIfgnWn/Fvf85gm0eb95pxo3mvjr0zQ uHlC5W6BiTFSfVxlslHT55jQexCu+wFFg/2sXv6Bzhvsvxzje76uFzN4vKEmd8bT od5/ogLOGai/fekTUPPQOlK29IKAiD0OhDe18Kw00xngir5zJRV7R5nWu0W8rzaX Wf7EhbOgETJI+BjeHGfFDRJVSDmrnK5JSu0U6dyU05D10O98qh4u5XnwLvuJ3/H4 S8mEv0lDyhwuMEtUfwhzmfNx3Jw5cVbAk40Rb4gO5bDJrygoH450yha5ljQclxoS WfE8r4JtP/CZZEf7y64ehynHY+c= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:27 2025 by rpki-client on console.sobornost.net