$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3369/4hkHWT0fCCFTkF8FLRB0Eu5gngU.mft File: 4hkHWT0fCCFTkF8FLRB0Eu5gngU.mft (raw, json) Hash identifier: mNhiPnt5ZJmFqjklNSkNqovpArN+/pZOSIGThSGTGEU= Subject key identifier: CE:89:4A:FE:63:72:A2:67:D5:09:0C:88:A9:9F:40:D0:1E:62:46:0B Authority key identifier: E2:19:07:59:3D:1F:08:21:53:90:5F:05:2D:10:74:12:EE:60:9E:05 Certificate issuer: /CN=E21907593D1F082153905F052D107412EE609E05 Certificate serial: 1B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4hkHWT0fCCFTkF8FLRB0Eu5gngU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3369/4hkHWT0fCCFTkF8FLRB0Eu5gngU.mft Manifest number: 1B Signing time: Mon 28 Apr 2025 18:36:41 +0000 Manifest this update: Mon 28 Apr 2025 18:36:41 +0000 Manifest next update: Tue 29 Apr 2025 00:36:41 +0000 Files and hashes: 1: 4hkHWT0fCCFTkF8FLRB0Eu5gngU.crl (hash: sKw1N2uw1rjJwRD9oVocfN8LVDDoJ3nrQW3oR++Tjf4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3369/4hkHWT0fCCFTkF8FLRB0Eu5gngU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3369/4hkHWT0fCCFTkF8FLRB0Eu5gngU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4hkHWT0fCCFTkF8FLRB0Eu5gngU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E21907593D1F082153905F052D107412EE609E05 Validity Not Before: Apr 28 18:36:41 2025 GMT Not After : Apr 25 07:13:20 2026 GMT Subject: CN=CE894AFE6372A267D5090C88A99F40D01E62460B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:16:3a:2c:47:92:4b:6e:fc:b7:58:f5:29: ca:ef:5e:84:bf:1a:f9:08:f2:40:9f:e6:52:34:16: 2d:5a:f0:c3:2e:95:4d:3f:9c:af:7f:bb:f8:e6:e8: 43:db:5b:83:0e:3d:b2:63:f0:b3:93:49:24:5d:87: 78:4f:14:d0:62:32:82:31:c0:a2:df:b0:fd:9a:7e: 28:a1:92:7d:86:e8:8f:0e:aa:47:85:b3:0c:dd:be: 6a:55:e2:59:55:4e:1b:45:50:ee:c1:d9:fb:38:47: 38:54:bf:99:35:b5:c6:ed:03:82:f5:e0:db:78:c9: 7c:3a:64:4d:a4:e3:19:c8:5f:c1:2a:74:0d:92:3f: b6:42:bb:19:dd:99:a4:0c:d6:2e:98:94:1a:9b:c4: 80:00:0c:e9:94:d3:fd:e6:4d:90:86:ad:a6:93:ee: 05:bd:ea:fa:af:23:b8:de:4a:eb:8f:f3:27:b8:e6: 20:f5:14:79:92:08:b5:90:fe:92:0f:23:24:3d:3e: 63:5a:70:b0:53:7d:b6:31:49:3c:8c:8c:8a:d8:23: bc:c9:59:81:ed:b2:5a:bd:ae:c9:01:02:d2:7e:6e: 54:90:61:67:4e:bb:34:05:42:2a:7c:56:f4:ed:33: 87:2e:57:18:3d:e5:ea:21:4c:05:98:b6:bd:33:68: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:89:4A:FE:63:72:A2:67:D5:09:0C:88:A9:9F:40:D0:1E:62:46:0B X509v3 Authority Key Identifier: keyid:E2:19:07:59:3D:1F:08:21:53:90:5F:05:2D:10:74:12:EE:60:9E:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3369/4hkHWT0fCCFTkF8FLRB0Eu5gngU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4hkHWT0fCCFTkF8FLRB0Eu5gngU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3369/4hkHWT0fCCFTkF8FLRB0Eu5gngU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c3:72:ad:7d:17:2e:72:fa:60:d0:ea:f0:d3:d0:87:ec:0e: 6c:fe:ea:da:09:7e:94:6e:5e:94:01:c7:ac:7b:79:12:24:dc: a0:69:86:54:e6:c5:b9:ba:b7:8c:17:99:50:54:a2:85:44:9c: 12:20:c9:2f:25:a8:79:3f:bc:1a:f7:be:28:3f:1f:37:5a:4c: 6a:a5:88:a7:69:ec:42:67:84:f3:7e:be:b1:40:c2:db:36:10: f3:25:d6:86:bd:fc:56:6e:1e:e6:90:52:ca:77:7e:80:b8:2e: d6:90:3e:f5:03:25:17:eb:08:1a:b6:69:e7:54:c1:9c:fa:a5: 74:b5:f6:a8:1f:f5:67:60:e5:b6:2e:a1:fa:32:96:11:5a:4c: f1:b5:c4:14:c2:9b:a3:3d:90:58:8b:a4:88:a5:a0:a1:cf:db: da:dc:6d:66:11:0d:97:35:6b:79:b4:ca:09:28:43:81:2f:4f: fb:82:ec:89:11:5f:4c:a2:bf:4d:70:cf:af:a7:e6:15:e4:7c: 97:03:86:98:c3:c3:93:a8:73:e0:ae:52:29:e7:e7:78:75:f9: f4:b4:36:4c:69:6a:69:27:38:b7:a1:5e:f5:e6:3f:bc:08:53: 44:59:68:68:5d:7c:0a:71:0d:22:88:0b:56:cf:aa:12:7d:8b: 49:64:75:4d -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMjE5 MDc1OTNEMUYwODIxNTM5MDVGMDUyRDEwNzQxMkVFNjA5RTA1MB4XDTI1MDQyODE4 MzY0MVoXDTI2MDQyNTA3MTMyMFowMzExMC8GA1UEAxMoQ0U4OTRBRkU2MzcyQTI2 N0Q1MDkwQzg4QTk5RjQwRDAxRTYyNDYwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMDaFjosR5JLbvy3WPUpyu9ehL8a+QjyQJ/mUjQWLVrwwy6VTT+c r3+7+OboQ9tbgw49smPws5NJJF2HeE8U0GIygjHAot+w/Zp+KKGSfYbojw6qR4Wz DN2+alXiWVVOG0VQ7sHZ+zhHOFS/mTW1xu0DgvXg23jJfDpkTaTjGchfwSp0DZI/ tkK7Gd2ZpAzWLpiUGpvEgAAM6ZTT/eZNkIatppPuBb3q+q8juN5K64/zJ7jmIPUU eZIItZD+kg8jJD0+Y1pwsFN9tjFJPIyMitgjvMlZge2yWr2uyQEC0n5uVJBhZ067 NAVCKnxW9O0zhy5XGD3l6iFMBZi2vTNoXrECAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTOiUr+Y3KiZ9UJDIipn0DQHmJGCzAfBgNVHSMEGDAWgBTiGQdZPR8IIVOQXwUt EHQS7mCeBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzY5 LzRoa0hXVDBmQ0NGVGtGOEZMUkIwRXU1Z25nVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNGhrSFdUMGZDQ0ZUa0Y4RkxSQjBFdTVnbmdVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2OS80aGtIV1QwZkNDRlRr RjhGTFJCMEV1NWduZ1UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl8NyrX0XLnL6YNDq8NPQh+wObP7q2gl+lG5elAHHrHt5EiTcoGmGVObFubq3 jBeZUFSihUScEiDJLyWoeT+8Gve+KD8fN1pMaqWIp2nsQmeE836+sUDC2zYQ8yXW hr38Vm4e5pBSynd+gLgu1pA+9QMlF+sIGrZp51TBnPqldLX2qB/1Z2Dlti6h+jKW EVpM8bXEFMKboz2QWIukiKWgoc/b2txtZhENlzVrebTKCShDgS9P+4LsiRFfTKK/ TXDPr6fmFeR8lwOGmMPDk6hz4K5SKefneHX59LQ2TGlqaSc4t6Fe9eY/vAhTRFlo aF18CnENIogLVs+qEn2LSWR1TQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:28 2025 by rpki-client on console.sobornost.net