$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft File: 3-pN9aKB625y06MUKkU2QAzMSM0.mft (raw, json) Hash identifier: NugVCiizOILUi+6s/vOJEB+Kwy2CtC3+WjGEeL8IUQE= Subject key identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E Authority key identifier: DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD Certificate issuer: /CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Certificate serial: 077E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft Manifest number: 077E Signing time: Mon 28 Apr 2025 18:06:29 +0000 Manifest this update: Mon 28 Apr 2025 18:06:29 +0000 Manifest next update: Tue 29 Apr 2025 00:06:29 +0000 Files and hashes: 1: 3-pN9aKB625y06MUKkU2QAzMSM0.crl (hash: w20rgOMniZuVHvwncVR9+Fu11ST2fT8rfQDvMZaw9p8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1918 (0x77e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFEA4DF5A281EB6E72D3A3142A4536400CCC48CD Validity Not Before: Apr 28 18:06:29 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=32E7383A6FE497B476EE736359087E501952A06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:18:54:3e:fb:1f:c3:7e:42:12:df:f3:83: 9d:b3:44:25:05:bd:a8:ab:bd:0c:cf:dc:94:de:fd: 7b:8c:e9:64:f0:1b:eb:4f:2b:f2:76:d5:d6:dd:d2: 7d:24:2e:86:41:06:a2:9e:e7:71:08:c6:d2:53:7d: 39:bd:71:79:7d:98:21:bd:48:8f:c6:f3:8c:79:cf: 00:ed:1b:b3:00:db:93:68:bb:b1:1b:e4:7e:db:0a: f7:3c:74:37:29:0d:a0:7c:73:ba:36:4b:08:89:2b: a1:73:b5:f5:08:7e:06:b1:f8:be:6c:59:d6:58:9f: 9b:e4:b8:c7:49:87:72:52:02:16:ed:e8:cc:11:ff: bd:e2:b6:89:f8:71:cf:d1:56:90:89:58:9a:bc:8a: a5:0d:49:26:97:a8:ef:ff:c8:8d:40:a6:23:5e:37: b3:30:21:7c:9c:9e:64:21:44:66:fa:b4:88:d5:36: d5:e8:d9:f2:9e:58:29:7d:61:fa:aa:ee:ca:3b:32: 71:6a:51:c6:d6:15:db:a3:16:3a:9d:7d:d1:10:0d: d4:7a:dd:fc:cc:46:87:89:fb:40:9b:49:ce:93:18: b4:1b:6e:ae:07:23:8a:27:80:09:44:af:5e:4c:ec: b7:d6:2e:26:9a:0d:39:a7:59:46:75:74:40:c4:05: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:38:3A:6F:E4:97:B4:76:EE:73:63:59:08:7E:50:19:52:A0:6E X509v3 Authority Key Identifier: keyid:DF:EA:4D:F5:A2:81:EB:6E:72:D3:A3:14:2A:45:36:40:0C:CC:48:CD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3-pN9aKB625y06MUKkU2QAzMSM0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/3-pN9aKB625y06MUKkU2QAzMSM0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d2:58:bc:93:3a:cb:7a:11:b0:4f:34:36:9f:fe:25:cc:ff: 1a:95:b4:5d:9d:43:57:61:2f:e5:17:6b:9f:ce:68:d6:08:62: 46:e7:da:6e:21:96:c8:94:a3:58:7d:9d:a1:57:ab:2e:13:aa: 76:3c:4c:83:c4:bc:aa:12:0f:80:33:5f:59:83:86:06:53:75: 91:ec:6f:d9:dd:f1:ce:11:7c:da:45:3a:03:46:8c:80:69:62: ff:05:ef:f2:cb:14:15:67:ac:e4:51:98:9a:03:76:30:80:fd: a7:e9:ef:75:b9:c7:3c:24:12:54:d6:eb:22:57:42:07:cf:86: 15:cd:55:94:27:8c:f1:25:e5:94:fe:09:96:09:4a:5e:9a:83: 74:2f:ad:61:77:1a:1b:1f:26:96:a9:06:0d:4f:cd:be:d6:b8: e2:8e:d1:f2:98:dc:a6:e8:21:d1:f1:f9:be:fe:00:5d:5e:b7: af:02:e2:c7:d3:4b:ea:08:1f:4c:34:f0:48:d3:40:49:f1:7b: cb:2d:ad:83:af:5e:a3:34:91:18:ee:8f:ca:57:17:e3:41:3b: 80:65:48:77:e6:e2:0e:bd:6f:5a:dc:ba:8e:a3:14:5b:7e:84: 01:66:43:3b:a1:ec:bf:59:0e:0c:1d:64:c0:b9:47:40:b3:90: d0:5a:01:29 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB34wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZF QTRERjVBMjgxRUI2RTcyRDNBMzE0MkE0NTM2NDAwQ0NDNDhDRDAeFw0yNTA0Mjgx ODA2MjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDMyRTczODNBNkZFNDk3 QjQ3NkVFNzM2MzU5MDg3RTUwMTk1MkEwNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2khhUPvsfw35CEt/zg52zRCUFvairvQzP3JTe/XuM6WTwG+tP K/J21dbd0n0kLoZBBqKe53EIxtJTfTm9cXl9mCG9SI/G84x5zwDtG7MA25Nou7Eb 5H7bCvc8dDcpDaB8c7o2SwiJK6FztfUIfgax+L5sWdZYn5vkuMdJh3JSAhbt6MwR /73iton4cc/RVpCJWJq8iqUNSSaXqO//yI1ApiNeN7MwIXycnmQhRGb6tIjVNtXo 2fKeWCl9Yfqq7so7MnFqUcbWFdujFjqdfdEQDdR63fzMRoeJ+0CbSc6TGLQbbq4H I4ongAlEr15M7LfWLiaaDTmnWUZ1dEDEBRlZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMuc4Om/kl7R27nNjWQh+UBlSoG4wHwYDVR0jBBgwFoAU3+pN9aKB625y06MU KkU2QAzMSM0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My8zLXBOOWFLQjYyNXkwNk1VS2tVMlFBek1TTTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzMtcE45YUtCNjI1eTA2TVVLa1UyUUF6TVNNMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvMy1wTjlhS0I2MjV5 MDZNVUtrVTJRQXpNU00wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABHSWLyTOst6EbBPNDaf/iXM/xqVtF2dQ1dhL+UXa5/OaNYIYkbn2m4hlsiU o1h9naFXqy4TqnY8TIPEvKoSD4AzX1mDhgZTdZHsb9nd8c4RfNpFOgNGjIBpYv8F 7/LLFBVnrORRmJoDdjCA/afp73W5xzwkElTW6yJXQgfPhhXNVZQnjPEl5ZT+CZYJ Sl6ag3QvrWF3GhsfJpapBg1Pzb7WuOKO0fKY3KboIdHx+b7+AF1et68C4sfTS+oI H0w08EjTQEnxe8strYOvXqM0kRjuj8pXF+NBO4BlSHfm4g69b1rcuo6jFFt+hAFm Qzuh7L9ZDgwdZMC5R0CzkNBaASk= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:27 2025 by rpki-client on console.sobornost.net