$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft File: LiZtw-rYDrJdSYWKZNwe8cihuUI.mft (raw, json) Hash identifier: SDFYSUyhK0tl+D9Lt5xvAR5Y9KCCR1Y3MC9+hVDC7UA= Subject key identifier: 3D:AB:33:4D:EF:9E:C0:9F:69:7B:E2:E8:AA:96:12:66:37:E5:FE:2D Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft Manifest number: 64 Signing time: Mon 28 Apr 2025 17:07:32 +0000 Manifest this update: Mon 28 Apr 2025 17:07:32 +0000 Manifest next update: Mon 28 Apr 2025 23:07:32 +0000 Files and hashes: 1: -1TXyCnR9iUOSL2BUXFRzk72O2k.roa (hash: Gv9OHjB2+pxSSGvait4ep8/w3eAyFS/+a3xNLHuDb58=) 2: -GYOd-df_Oy-f0YGZ8QoXpE-KUY.roa (hash: XMRU4RMulafL9ykW2oShRAn56DaYEZ2ldVuJ0Q69omY=) 3: LiZtw-rYDrJdSYWKZNwe8cihuUI.crl (hash: u4tlIoWGC0tzS0k5rl8c4UFSScoKJafzS5omLc5dSo4=) 4: MtZDpTZ70d2pPcDrnrLfRtErlHs.roa (hash: kct1KBzlRi9WU8ZnI1ARMiBQfEL2G3rm7rfqc6M11RI=) 5: N068Movxhd0HY-G9IlBTH0wcH-o.roa (hash: 52PacQFpyIpw+nFdeX2RQwEMG/bZk45cRChsSeSXizk=) 6: OjvJeSo6lsEg9uLCdozMhBG1wpM.roa (hash: o11AaYnXnEfRHY+f+c5bRhxX0vq/1+fUyNDi4psENWI=) 7: ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa (hash: FvWAWdHlZfe8cZsITf2/A06d9VsOp6LGA7o/YZd8tAI=) 8: g6dvdPPpijOkcmRmRTZnT-y14Tk.roa (hash: CB2d6yyYQRrRoAdL2nEn/Kl5Yw9asCUF8Gr2w7kfsrs=) 9: kHETLM6cygeGpKKoqih1EPU7gmI.roa (hash: +LQA3OraGUIU6wW3F0A+ePFfIqnRqwHWcGXQxQ6FNG4=) 10: nHfB2GHYBmc8bX5DxbEirv_IKF0.roa (hash: 6zuNH+NuLOtHpcZwmZyV/YBPSvVE39rWVdrUOXiD83g=) 11: yVCeVSdYcGSgIEZ7ns34fALeY6w.roa (hash: 37YcQVfz5Xs12JKZlzGMhU0SATgmn3/Zn9Jnck5yiyU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Apr 28 17:07:32 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=3DAB334DEF9EC09F697BE2E8AA96126637E5FE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:1a:85:4f:41:aa:4f:1d:ad:88:bd:9e:28: 1f:ee:13:f9:de:f9:37:ac:78:ea:a9:b3:6d:4b:31: 54:0f:be:48:75:53:a3:bb:f9:eb:19:27:3a:cd:ad: bd:a9:d6:82:d8:76:ca:7c:31:80:53:db:5c:e5:b1: f6:b9:9b:5a:3d:24:8f:1c:9a:f4:2d:16:d4:8a:6f: 66:0a:db:b7:ec:fd:e8:9c:5f:5f:78:0c:ca:42:91: f4:9f:96:45:b8:19:f0:b7:90:92:8a:39:fc:85:bd: 15:1f:8a:72:49:91:41:25:30:2c:7a:c1:44:a5:98: bb:93:62:25:87:cf:11:46:0e:ec:f6:29:fd:8c:01: 40:d9:3b:5a:a4:53:d1:57:72:bd:85:81:3e:63:88: 9d:a0:cf:31:3e:50:6d:94:81:6e:96:bb:ba:09:e9: 32:3b:87:3e:2b:03:b4:36:c8:14:1a:45:4d:11:2c: 18:53:66:c7:b7:6b:7f:12:68:3e:e7:f6:e8:09:c6: c8:da:61:14:e1:8a:8a:37:bd:73:91:1e:83:1d:47: 77:e4:3c:59:07:32:ad:4c:47:e3:5a:ab:27:81:a8: f9:02:67:a1:4a:5b:cf:a9:de:68:a4:31:94:d8:be: e9:da:1f:83:f7:d2:26:6a:5f:cc:99:ba:40:62:01: 92:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:33:4D:EF:9E:C0:9F:69:7B:E2:E8:AA:96:12:66:37:E5:FE:2D X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:41:8f:93:7c:ef:8e:ef:b0:03:5a:3d:3d:8c:ea:7d:09:c8: 65:3f:7e:1f:ae:86:28:1a:98:67:6a:88:40:0a:3f:78:5c:9b: b6:83:53:12:bf:b9:95:f5:7b:97:27:fd:af:3b:d1:f8:48:77: 11:3e:46:40:85:29:1c:4e:9f:67:fb:7b:c4:d0:8a:32:bb:80: 75:08:1e:3d:b1:83:16:c8:42:57:b9:eb:3d:26:89:66:fe:e3: d5:86:4a:5c:b5:85:e1:5c:ad:89:8b:c4:bc:a2:c4:0b:56:d9: 40:75:c6:8f:df:69:1f:5c:7a:ec:22:5f:59:58:e6:b5:a2:38: 0b:0a:11:73:73:e0:08:9f:60:ea:f6:ea:0d:29:44:0e:2d:28: 47:2b:b8:66:f7:7c:09:26:47:9a:91:01:c4:39:5a:83:c9:03: b6:13:87:ba:2c:8f:2e:0b:34:e8:5a:03:db:ac:77:23:64:8c: 4e:c3:c7:0a:2d:23:19:46:34:95:24:ed:d4:b5:33:49:27:44: f5:69:38:90:25:a8:5c:5a:b3:21:5d:67:c6:24:d8:cc:de:52: 45:74:43:7c:cb:53:fc:b9:a6:27:b6:17:77:42:71:4e:c4:bd: 35:2e:54:fd:91:47:7b:9c:a7:a7:ef:d7:74:d7:86:0a:73:33: 00:73:94:36 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRTI2 NkRDM0VBRDgwRUIyNUQ0OTg1OEE2NERDMUVGMUM4QTFCOTQyMB4XDTI1MDQyODE3 MDczMloXDTI2MDQwOTA2MzMyMVowMzExMC8GA1UEAxMoM0RBQjMzNERFRjlFQzA5 RjY5N0JFMkU4QUE5NjEyNjYzN0U1RkUyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL4EGoVPQapPHa2IvZ4oH+4T+d75N6x46qmzbUsxVA++SHVTo7v5 6xknOs2tvanWgth2ynwxgFPbXOWx9rmbWj0kjxya9C0W1IpvZgrbt+z96JxfX3gM ykKR9J+WRbgZ8LeQkoo5/IW9FR+KckmRQSUwLHrBRKWYu5NiJYfPEUYO7PYp/YwB QNk7WqRT0VdyvYWBPmOInaDPMT5QbZSBbpa7ugnpMjuHPisDtDbIFBpFTREsGFNm x7drfxJoPuf26AnGyNphFOGKije9c5Eegx1Hd+Q8WQcyrUxH41qrJ4Go+QJnoUpb z6neaKQxlNi+6dofg/fSJmpfzJm6QGIBklkCAwEAAaOCAggwggIEMB0GA1UdDgQW BBQ9qzNN757An2l74uiqlhJmN+X+LTAfBgNVHSMEGDAWgBQuJm3D6tgOsl1JhYpk 3B7xyKG5QjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9M aVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL0xpWnR3LXJZRHJKZFNZV0taTndlOGNpaHVVSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc2L0xpWnR3LXJZRHJKZFNZV0ta TndlOGNpaHVVSS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBO QY+TfO+O77ADWj09jOp9CchlP34froYoGphnaohACj94XJu2g1MSv7mV9XuXJ/2v O9H4SHcRPkZAhSkcTp9n+3vE0Ioyu4B1CB49sYMWyEJXues9Jolm/uPVhkpctYXh XK2Ji8S8osQLVtlAdcaP32kfXHrsIl9ZWOa1ojgLChFzc+AIn2Dq9uoNKUQOLShH K7hm93wJJkeakQHEOVqDyQO2E4e6LI8uCzToWgPbrHcjZIxOw8cKLSMZRjSVJO3U tTNJJ0T1aTiQJahcWrMhXWfGJNjM3lJFdEN8y1P8uaYnthd3QnFOxL01LlT9kUd7 nKen79d014YKczMAc5Q2 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net