$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft File: pOPO1GYcOU6TnS2AjPrHXSV_lig.mft (raw, json) Hash identifier: RbbaEKqpO64d+oLD64D00sY5L4EnDsZrPRfh/C/RXlU= Subject key identifier: 7E:E1:CD:33:84:A2:80:B1:F0:F8:1B:11:62:54:4A:DC:42:6A:C1:AD Authority key identifier: A4:E3:CE:D4:66:1C:39:4E:93:9D:2D:80:8C:FA:C7:5D:25:7F:96:28 Certificate issuer: /CN=A4E3CED4661C394E939D2D808CFAC75D257F9628 Certificate serial: 18 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft Manifest number: 18 Signing time: Mon 28 Apr 2025 16:06:58 +0000 Manifest this update: Mon 28 Apr 2025 16:06:58 +0000 Manifest next update: Mon 28 Apr 2025 22:06:58 +0000 Files and hashes: 1: pOPO1GYcOU6TnS2AjPrHXSV_lig.crl (hash: ouwSJflNKLaLbmgrHGsoS2LCp8QTY8I4geA7uGp5U9w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4E3CED4661C394E939D2D808CFAC75D257F9628 Validity Not Before: Apr 28 16:06:58 2025 GMT Not After : Apr 24 06:35:20 2026 GMT Subject: CN=7EE1CD3384A280B1F0F81B1162544ADC426AC1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:8a:23:5b:39:78:21:8e:43:dd:f5:74:fc: 1e:60:dc:45:e2:91:99:5e:7c:92:74:24:54:a5:48: 35:5f:c5:be:a6:70:11:be:53:de:cd:f5:6c:ea:bf: 45:60:59:ec:7b:f7:72:56:61:96:97:5d:e9:2d:f2: 5f:1f:5f:6d:4a:da:9d:83:fe:bd:61:16:52:4d:c7: 66:7a:77:7b:da:89:af:e0:2e:7d:60:8f:b6:71:22: 25:98:5e:ec:64:55:f4:ee:38:59:85:34:eb:96:1f: 54:d7:2d:fd:02:16:22:df:d1:b6:82:d1:f5:a6:70: 78:b4:36:f3:8a:10:76:68:78:57:88:4a:ec:63:0e: c4:b7:a1:24:c6:cd:10:11:ad:9c:30:78:95:4d:0b: 54:6b:c7:f1:ba:0a:ff:a9:88:23:45:81:32:5a:5f: d2:ff:a7:e1:7a:30:05:7b:54:84:b5:7d:0d:5d:94: 69:0e:7d:be:61:ef:15:ec:8e:79:0f:da:12:f0:d7: 46:f3:4a:0d:88:53:b5:d9:3d:3c:53:85:eb:f3:74: 0c:12:94:40:d3:0f:13:ae:62:b4:f8:55:35:98:3d: cf:fa:b2:ad:23:d0:41:6d:e5:45:cb:00:74:29:e4: b8:e3:af:d0:b1:af:63:7f:e5:43:9f:d7:3d:c4:dc: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E1:CD:33:84:A2:80:B1:F0:F8:1B:11:62:54:4A:DC:42:6A:C1:AD X509v3 Authority Key Identifier: keyid:A4:E3:CE:D4:66:1C:39:4E:93:9D:2D:80:8C:FA:C7:5D:25:7F:96:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:1e:a7:f5:0f:55:79:71:d1:7b:cc:67:0c:23:63:31:fa:64: ce:44:7e:1e:7b:a2:58:06:0c:db:e8:a7:7e:94:f4:4c:94:56: 64:bd:8c:ba:45:ba:8d:7b:00:24:ef:b6:4a:83:cc:4b:03:8f: de:b8:bf:92:40:e2:f2:6a:0f:ce:6e:0d:f7:0c:23:3c:2c:16: 6a:4f:97:91:90:27:81:4c:59:50:7b:a2:03:c5:f0:ee:3b:f4: 2c:72:cc:d4:57:b8:8d:0e:ab:bc:6e:6c:6d:fa:1a:44:62:f4: f5:26:fe:3a:71:90:2e:92:20:31:21:e3:ea:18:25:74:58:28: 0c:57:26:bb:03:98:e8:64:8f:e1:98:c6:0e:9a:4c:5f:5c:18: cd:a2:65:1b:ed:a0:60:d6:d9:d4:04:9c:4b:d6:ab:73:9f:72: d7:a7:95:74:48:e5:ec:af:81:c3:57:3b:20:b5:f5:6e:b4:dc: c2:97:b9:87:43:a0:08:9a:e9:1e:18:99:35:e9:ec:80:d6:7d: 95:16:19:c0:2c:d1:2f:85:7e:26:a9:98:45:6a:bc:60:eb:4b: 36:0e:ea:58:39:40:ed:7b:71:30:b5:f2:6c:b1:d6:80:78:1f: b0:a4:b7:17:97:8f:f9:8f:31:f0:66:34:65:57:89:d6:0d:ba: 24:54:03:74 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNEUz Q0VENDY2MUMzOTRFOTM5RDJEODA4Q0ZBQzc1RDI1N0Y5NjI4MB4XDTI1MDQyODE2 MDY1OFoXDTI2MDQyNDA2MzUyMFowMzExMC8GA1UEAxMoN0VFMUNEMzM4NEEyODBC MUYwRjgxQjExNjI1NDRBREM0MjZBQzFBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMZViiNbOXghjkPd9XT8HmDcReKRmV58knQkVKVINV/FvqZwEb5T 3s31bOq/RWBZ7Hv3clZhlpdd6S3yXx9fbUranYP+vWEWUk3HZnp3e9qJr+AufWCP tnEiJZhe7GRV9O44WYU065YfVNct/QIWIt/RtoLR9aZweLQ284oQdmh4V4hK7GMO xLehJMbNEBGtnDB4lU0LVGvH8boK/6mII0WBMlpf0v+n4XowBXtUhLV9DV2UaQ59 vmHvFeyOeQ/aEvDXRvNKDYhTtdk9PFOF6/N0DBKUQNMPE65itPhVNZg9z/qyrSPQ QW3lRcsAdCnkuOOv0LGvY3/lQ5/XPcTcb40CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBR+4c0zhKKAsfD4GxFiVErcQmrBrTAfBgNVHSMEGDAWgBSk487UZhw5TpOdLYCM +sddJX+WKDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzY4 L3BPUE8xR1ljT1U2VG5TMkFqUHJIWFNWX2xpZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcE9QTzFHWWNPVTZUblMyQWpQckhYU1ZfbGlnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2OC9wT1BPMUdZY09VNlRu UzJBalBySFhTVl9saWcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxB6n9Q9VeXHRe8xnDCNjMfpkzkR+HnuiWAYM2+infpT0TJRWZL2MukW6jXsA JO+2SoPMSwOP3ri/kkDi8moPzm4N9wwjPCwWak+XkZAngUxZUHuiA8Xw7jv0LHLM 1Fe4jQ6rvG5sbfoaRGL09Sb+OnGQLpIgMSHj6hgldFgoDFcmuwOY6GSP4ZjGDppM X1wYzaJlG+2gYNbZ1AScS9arc59y16eVdEjl7K+Bw1c7ILX1brTcwpe5h0OgCJrp HhiZNensgNZ9lRYZwCzRL4V+JqmYRWq8YOtLNg7qWDlA7XtxMLXybLHWgHgfsKS3 F5eP+Y8x8GY0ZVeJ1g26JFQDdA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:28 2025 by rpki-client on console.sobornost.net