$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft File: jBp_tNDRawix7CtJn6KrIwEhaB8.mft (raw, json) Hash identifier: lc3QbtCcSxrIJ2kpG8WjavS0VJGf9UnEVOsjxFrmjiw= Subject key identifier: 4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F Authority key identifier: 8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F Certificate issuer: /CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F Certificate serial: 8A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft Manifest number: 8A Signing time: Mon 28 Apr 2025 17:07:49 +0000 Manifest this update: Mon 28 Apr 2025 17:07:49 +0000 Manifest next update: Mon 28 Apr 2025 23:07:49 +0000 Files and hashes: 1: jBp_tNDRawix7CtJn6KrIwEhaB8.crl (hash: /nURqVAL2MEEy7EkhthGv9uCiLCfosgchiHz86IgY9I=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F Validity Not Before: Apr 28 17:07:49 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4E93D5B4B60FDE24CD4D953117CB16205463E80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:0f:64:73:4b:fc:42:4f:a8:3c:99:e7:36: 45:72:c0:9f:a3:34:dd:df:d7:45:b4:ed:a9:8b:ed: 8e:89:d7:6f:37:c6:42:9c:bd:90:e2:03:ee:67:3d: 60:c8:e2:45:18:0a:97:a8:50:cf:d9:b0:ee:b7:20: 09:19:b5:4d:45:dd:18:df:b2:18:d4:07:8d:aa:18: db:ed:aa:37:a9:92:82:b7:2a:8e:15:b6:13:43:80: 2e:15:0f:df:39:f3:20:f1:cd:a7:de:a1:32:e0:54: d4:37:26:9f:e8:68:ca:3e:af:fe:34:16:4d:fe:9a: 07:14:57:6d:4a:d8:8a:73:11:51:0a:61:cb:a4:1e: b5:c9:66:6c:80:8f:5f:f4:44:bb:9e:bb:9c:54:80: 05:c1:a1:be:b4:e5:1b:ae:7c:2b:bf:57:ad:98:a4: 65:be:bc:0e:61:3d:44:1c:68:f5:d5:cb:17:d2:02: 1a:66:35:d1:19:b7:a5:76:e6:78:28:7d:a3:83:31: 52:79:a3:8c:69:7d:d3:83:2d:af:90:b3:67:ed:1b: 13:79:b8:63:19:9b:66:36:dd:46:54:5d:8b:43:e4: 0a:ad:ef:e4:46:47:f0:b3:91:6a:e3:b8:3b:40:96: 5f:50:bd:19:0c:4d:5c:40:a0:c2:7c:53:6f:97:23: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F X509v3 Authority Key Identifier: keyid:8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:5e:ca:da:3c:e3:a8:72:6f:94:d0:51:28:21:6b:20:5d:ac: 84:c1:63:fb:b7:4b:03:db:f8:aa:52:8e:2c:4b:d9:23:61:62: 4a:ce:8f:99:f1:f6:25:03:a2:f5:3b:66:77:d5:8f:04:6a:f2: 45:42:28:5f:9f:2d:d2:25:73:f9:95:11:a2:9f:9d:9f:26:fd: 2b:fe:36:72:43:1b:09:90:87:65:a7:5f:73:7f:5b:04:97:d9: bc:82:6b:49:2b:7e:db:86:f6:57:bf:57:af:68:b5:55:64:b1: 84:e6:1f:92:f8:24:58:2f:c2:18:50:05:74:8f:07:69:14:29: 74:11:3a:89:c9:3c:68:c1:2c:d4:62:00:a5:31:63:3d:a4:0b: f8:1f:b5:79:b1:3a:8d:3d:5c:40:ed:cd:0b:99:34:c9:d4:f9: fa:98:b4:7b:ae:72:e9:10:75:b5:42:17:95:ed:7a:26:7f:98: 3f:da:3b:be:e0:d0:b7:bf:44:0e:c4:46:38:43:fe:44:a5:ee: 3a:6c:fc:75:67:0d:9d:6a:9b:09:9e:09:94:61:23:ba:9d:fe: 52:b6:96:ec:fb:dc:5a:16:b7:f4:ad:4c:51:ee:ff:51:2d:2c: 84:ee:0b:6c:85:4c:d3:25:58:7d:40:a1:04:8b:e4:39:dd:ac: b2:4c:35:90 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx QTdGQjREMEQxNkIwOEIxRUMyQjQ5OUZBMkFCMjMwMTIxNjgxRjAeFw0yNTA0Mjgx NzA3NDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRFOTNENUI0QjYwRkRF MjRDRDREOTUzMTE3Q0IxNjIwNTQ2M0U4MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ/g9kc0v8Qk+oPJnnNkVywJ+jNN3f10W07amL7Y6J1283xkKc vZDiA+5nPWDI4kUYCpeoUM/ZsO63IAkZtU1F3RjfshjUB42qGNvtqjepkoK3Ko4V thNDgC4VD9858yDxzafeoTLgVNQ3Jp/oaMo+r/40Fk3+mgcUV21K2IpzEVEKYcuk HrXJZmyAj1/0RLueu5xUgAXBob605RuufCu/V62YpGW+vA5hPUQcaPXVyxfSAhpm NdEZt6V25ngofaODMVJ5o4xpfdODLa+Qs2ftGxN5uGMZm2Y23UZUXYtD5Aqt7+RG R/CzkWrjuDtAll9QvRkMTVxAoMJ8U2+XI8inAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUTpPVtLYP3iTNTZUxF8sWIFRj6A8wHwYDVR0jBBgwFoAUjBp/tNDRawix7CtJ n6KrIwEhaB8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 OC9qQnBfdE5EUmF3aXg3Q3RKbjZLckl3RWhhQjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pCcF90TkRSYXdpeDdDdEpuNktySXdFaGFCOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTgvakJwX3RORFJhd2l4 N0N0Sm42S3JJd0VoYUI4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANdeyto846hyb5TQUSghayBdrITBY/u3SwPb+KpSjixL2SNhYkrOj5nx9iUD ovU7ZnfVjwRq8kVCKF+fLdIlc/mVEaKfnZ8m/Sv+NnJDGwmQh2WnX3N/WwSX2byC a0krftuG9le/V69otVVksYTmH5L4JFgvwhhQBXSPB2kUKXQROonJPGjBLNRiAKUx Yz2kC/gftXmxOo09XEDtzQuZNMnU+fqYtHuucukQdbVCF5XteiZ/mD/aO77g0Le/ RA7ERjhD/kSl7jps/HVnDZ1qmwmeCZRhI7qd/lK2luz73FoWt/StTFHu/1EtLITu C2yFTNMlWH1AoQSL5DndrLJMNZA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:28 2025 by rpki-client on console.sobornost.net