$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft (raw, json) Hash identifier: 6QieKYkLCB5y7ahRw3z/XCAy4vZH6nVEoQMuLwHzRx0= Subject key identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 Authority key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 Certificate issuer: /CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Certificate serial: 05C9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft Manifest number: 05C9 Signing time: Mon 28 Apr 2025 17:07:11 +0000 Manifest this update: Mon 28 Apr 2025 17:07:11 +0000 Manifest next update: Mon 28 Apr 2025 23:07:11 +0000 Files and hashes: 1: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl (hash: UCqlfna3waZIRkiJ4rp1YcnG6FPZmnHzQ9fB0QJGj3s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1481 (0x5c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Validity Not Before: Apr 28 17:07:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1F69946BDFFBCBE8EDE7A4D46B9143B895AB27A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:41:5e:8c:db:b0:01:a5:ed:6a:45:10:13: b3:1c:be:e8:22:60:92:bf:21:07:3e:da:14:e1:05: eb:85:b8:22:d8:0a:c7:80:5a:b1:3d:36:2d:78:db: ac:82:c7:fc:20:d1:37:c2:46:e2:c7:0e:7b:ea:7f: c8:c8:44:0c:f1:04:fb:6a:4d:c1:72:b6:58:a5:68: 0f:8f:99:2d:1b:9b:f8:e4:9b:61:b4:76:fb:36:07: f5:58:65:8c:fd:1d:be:8b:9a:42:a9:c6:19:32:ef: d6:7f:40:e3:1e:e8:ba:cd:f5:47:05:54:b0:9d:de: 9a:e9:93:1a:51:f1:b9:4f:34:f6:78:09:f4:f8:35: 32:41:52:75:fb:4d:43:e6:6f:10:27:bc:08:d4:0f: f5:a5:ea:fd:7c:e0:ee:d7:76:fd:f7:76:38:44:b5: d4:89:fb:e9:8d:f3:e8:27:2e:51:da:13:22:37:da: e4:d5:1b:ec:4a:51:88:75:d2:ea:73:8d:32:dc:54: a5:7c:81:39:e3:ae:04:d6:41:9a:0f:7b:92:c3:bf: 55:82:b7:ae:f3:91:0c:39:6a:67:db:c7:bb:c7:23: 19:e4:c1:c0:61:1c:35:15:ad:45:56:79:5f:28:9f: bd:f4:0c:60:e1:54:f7:40:e8:4b:8c:0b:a3:cb:5a: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 X509v3 Authority Key Identifier: keyid:32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:e6:6e:72:1a:93:28:ea:d1:00:63:44:d2:6a:2a:44:c2:ee: e5:e6:6d:85:64:4d:d1:11:5a:9d:ae:88:d6:46:83:e9:99:c9: 9a:c3:8c:b5:48:42:09:53:41:89:35:4f:2f:6f:b3:b9:bc:64: 89:61:f1:72:50:bd:d4:28:d4:b2:22:1d:a0:e5:3b:f9:e7:6b: 4d:49:69:ad:6f:e1:11:5b:49:72:62:44:c4:d2:95:9f:43:43: c0:18:d5:4c:85:fd:f1:d0:21:33:4b:62:d1:68:91:a0:56:2e: 5a:f7:c9:1e:b4:4c:0f:70:92:ad:6c:9a:55:a6:e0:26:50:0b: 47:ee:44:d5:53:44:fb:39:02:47:06:85:ce:25:a4:92:2d:bc: 56:cb:41:a2:d2:c1:01:9a:da:f2:93:51:dc:2a:a7:01:20:5e: ae:6e:85:3a:76:19:e7:0c:05:d0:d5:a7:d9:6f:e9:5c:09:b2: fd:0e:32:78:09:08:a0:c0:82:f3:ab:98:7e:e9:f9:04:5c:98: cd:7a:03:a7:3e:d9:f9:88:51:2a:b7:20:3c:f3:3f:bf:8d:ac: b5:3a:ea:3d:ac:4c:92:e1:b3:15:24:d7:1e:6d:98:d8:25:c5: 09:b1:6b:a1:27:00:d9:6d:0b:ee:05:7f:45:f1:24:0e:d2:a2: 4c:8c:3a:ed -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI5 RjJBRkM4NkZFOUYxRkFDOUYyRjhCQjMxMkI1QUI5QzkxOEMyNjAeFw0yNTA0Mjgx NzA3MTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFGNjk5NDZCREZGQkNC RThFREU3QTRENDZCOTE0M0I4OTVBQjI3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLgkFejNuwAaXtakUQE7McvugiYJK/IQc+2hThBeuFuCLYCseA WrE9Ni1426yCx/wg0TfCRuLHDnvqf8jIRAzxBPtqTcFytlilaA+PmS0bm/jkm2G0 dvs2B/VYZYz9Hb6LmkKpxhky79Z/QOMe6LrN9UcFVLCd3prpkxpR8blPNPZ4CfT4 NTJBUnX7TUPmbxAnvAjUD/Wl6v184O7Xdv33djhEtdSJ++mN8+gnLlHaEyI32uTV G+xKUYh10upzjTLcVKV8gTnjrgTWQZoPe5LDv1WCt67zkQw5amfbx7vHIxnkwcBh HDUVrUVWeV8on730DGDhVPdA6EuMC6PLWlxVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUH2mUa9/7y+jt56TUa5FDuJWrJ6YwHwYDVR0jBBgwFoAUMp8q/Ib+nx+sny+L sxK1q5yRjCYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL01wOHFfSWItbngtc255LUxzeEsxcTV5UmpDWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDEvTXA4cV9JYi1ueC1z bnktTHN4SzFxNXlSakNZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAjmbnIakyjq0QBjRNJqKkTC7uXmbYVkTdERWp2uiNZGg+mZyZrDjLVIQglT QYk1Ty9vs7m8ZIlh8XJQvdQo1LIiHaDlO/nna01Jaa1v4RFbSXJiRMTSlZ9DQ8AY 1UyF/fHQITNLYtFokaBWLlr3yR60TA9wkq1smlWm4CZQC0fuRNVTRPs5AkcGhc4l pJItvFbLQaLSwQGa2vKTUdwqpwEgXq5uhTp2GecMBdDVp9lv6VwJsv0OMngJCKDA gvOrmH7p+QRcmM16A6c+2fmIUSq3IDzzP7+NrLU66j2sTJLhsxUk1x5tmNglxQmx a6EnANltC+4Ff0XxJA7SokyMOu0= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:27 2025 by rpki-client on console.sobornost.net