$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft File: pl1CGRJdc3FK-EHeL23UGrlPAE0.mft (raw, json) Hash identifier: fYFMGowtRPCicKpKwUAiDgKmKNqcXOQP96bQBeCluXY= Subject key identifier: 23:3D:51:48:65:33:D4:D5:8F:08:56:D3:40:E1:D3:37:58:F6:BD:BF Authority key identifier: A6:5D:42:19:12:5D:73:71:4A:F8:41:DE:2F:6D:D4:1A:B9:4F:00:4D Certificate issuer: /CN=A65D4219125D73714AF841DE2F6DD41AB94F004D Certificate serial: 0936 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pl1CGRJdc3FK-EHeL23UGrlPAE0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft Manifest number: 0936 Signing time: Mon 28 Apr 2025 17:07:05 +0000 Manifest this update: Mon 28 Apr 2025 17:07:05 +0000 Manifest next update: Mon 28 Apr 2025 23:07:05 +0000 Files and hashes: 1: pl1CGRJdc3FK-EHeL23UGrlPAE0.crl (hash: 6jGw3BLtaNMPtVJrMW5HRSmTWbdWJcc37IIG4k6THxA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pl1CGRJdc3FK-EHeL23UGrlPAE0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2358 (0x936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65D4219125D73714AF841DE2F6DD41AB94F004D Validity Not Before: Apr 28 17:07:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=233D51486533D4D58F0856D340E1D33758F6BDBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:aa:fd:08:73:70:b5:6c:d8:e0:a6:e3:ed: 8f:3c:f7:ec:0a:aa:38:3b:f8:e5:01:12:95:bf:3c: e1:d7:02:09:cb:34:6b:74:33:59:72:40:16:86:9f: 2c:80:1e:72:75:32:7f:1d:c9:f3:86:e5:97:58:e8: f9:1f:1f:92:01:f3:23:22:e2:5c:4d:c1:2f:c3:91: 8b:a9:0a:bf:94:46:ea:0d:4b:4b:8b:64:8a:ba:6e: 2f:80:fc:11:da:8d:2b:c1:4f:fd:7c:cb:81:15:fa: 03:7a:f7:b4:c2:e6:70:1f:52:e5:cd:57:dd:b8:c3: 92:56:dd:82:1e:1e:6b:a1:77:48:b7:7f:92:b8:4b: b9:cd:a6:b7:ec:d1:7d:2c:bc:5e:6a:2c:3a:c2:af: 11:b3:c6:36:64:c3:60:df:df:96:9e:5a:cc:c5:12: 61:43:0a:ac:22:a3:5b:0f:50:d8:f0:42:2d:e1:59: d0:9f:a6:88:2c:b9:d3:78:0f:3f:e3:03:f6:05:e0: 00:de:26:8a:d1:53:b8:53:9c:13:f7:be:f1:ff:fb: 4c:90:d6:a3:96:fc:5d:1b:79:e7:27:08:78:0b:e5: 15:6c:9e:e6:67:7e:ea:75:4b:db:89:a0:1b:15:e5: be:21:f5:12:3a:78:93:6b:55:88:a8:ac:f3:71:d2: 4f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3D:51:48:65:33:D4:D5:8F:08:56:D3:40:E1:D3:37:58:F6:BD:BF X509v3 Authority Key Identifier: keyid:A6:5D:42:19:12:5D:73:71:4A:F8:41:DE:2F:6D:D4:1A:B9:4F:00:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pl1CGRJdc3FK-EHeL23UGrlPAE0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:af:8d:53:e0:77:b5:eb:0e:24:fd:07:8a:7a:0e:64:c9:18: b0:2a:76:73:5a:d3:1e:b2:a7:cc:62:49:02:f3:a6:63:2e:d9: 62:cf:8c:e1:93:40:c2:b3:a3:17:cc:03:c0:6a:59:ef:f2:2b: 00:1e:22:02:ea:3e:2e:fe:c1:e6:b1:c0:25:08:15:5a:40:a7: 23:99:f8:5b:47:6a:00:73:98:c6:e2:0f:5d:4d:32:0a:5a:fb: 51:e3:3c:11:69:3e:28:fd:43:3d:70:83:39:dd:66:d3:dd:e7: 2b:a5:cc:39:d7:74:e5:d3:8d:47:a8:a9:93:69:39:d3:e8:47: e3:1b:b7:c1:2c:0d:57:96:1b:63:01:13:74:74:9c:7d:3c:0b: 4d:d7:61:21:70:25:9d:59:7a:0d:28:59:75:ca:aa:1f:2a:ed: 62:90:3d:c4:2d:42:60:ba:92:f3:47:a7:d2:81:52:77:6e:22: 93:d5:26:4d:31:e1:b0:4d:3a:56:b4:a4:86:1f:83:7d:5a:b7: 53:bf:b0:56:36:6a:0f:a4:27:c2:39:a0:e6:a9:21:16:a4:e3: 77:2b:39:de:0e:45:12:f1:07:35:3b:14:46:f7:4a:06:b0:5e: d7:9f:e2:96:5e:ec:6b:7d:d5:1f:31:96:41:50:9b:39:cd:db: f9:3d:ab:b7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCTYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTY1 RDQyMTkxMjVENzM3MTRBRjg0MURFMkY2REQ0MUFCOTRGMDA0RDAeFw0yNTA0Mjgx NzA3MDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIzM0Q1MTQ4NjUzM0Q0 RDU4RjA4NTZEMzQwRTFEMzM3NThGNkJEQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+o6r9CHNwtWzY4Kbj7Y889+wKqjg7+OUBEpW/POHXAgnLNGt0 M1lyQBaGnyyAHnJ1Mn8dyfOG5ZdY6PkfH5IB8yMi4lxNwS/DkYupCr+URuoNS0uL ZIq6bi+A/BHajSvBT/18y4EV+gN697TC5nAfUuXNV924w5JW3YIeHmuhd0i3f5K4 S7nNprfs0X0svF5qLDrCrxGzxjZkw2Df35aeWszFEmFDCqwio1sPUNjwQi3hWdCf pogsudN4Dz/jA/YF4ADeJorRU7hTnBP3vvH/+0yQ1qOW/F0beecnCHgL5RVsnuZn fup1S9uJoBsV5b4h9RI6eJNrVYiorPNx0k8tAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIz1RSGUz1NWPCFbTQOHTN1j2vb8wHwYDVR0jBBgwFoAUpl1CGRJdc3FK+EHe L23UGrlPAE0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Ni9wbDFDR1JKZGMzRkstRUhlTDIzVUdybFBBRTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3BsMUNHUkpkYzNGSy1FSGVMMjNVR3JsUEFFMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTYvcGwxQ0dSSmRjM0ZL LUVIZUwyM1VHcmxQQUUwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALavjVPgd7XrDiT9B4p6DmTJGLAqdnNa0x6yp8xiSQLzpmMu2WLPjOGTQMKz oxfMA8BqWe/yKwAeIgLqPi7+weaxwCUIFVpApyOZ+FtHagBzmMbiD11NMgpa+1Hj PBFpPij9Qz1wgzndZtPd5yulzDnXdOXTjUeoqZNpOdPoR+Mbt8EsDVeWG2MBE3R0 nH08C03XYSFwJZ1Zeg0oWXXKqh8q7WKQPcQtQmC6kvNHp9KBUnduIpPVJk0x4bBN Ola0pIYfg31at1O/sFY2ag+kJ8I5oOapIRak43crOd4ORRLxBzU7FEb3SgawXtef 4pZe7Gt91R8xlkFQmznN2/k9q7c= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:27 2025 by rpki-client on console.sobornost.net