$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft File: YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft (raw, json) Hash identifier: o0+scIBcJXLehQKPz7Cz5DtojpZ7r/8m/L+9n9LoqoM= Subject key identifier: ED:23:7B:79:59:A2:7F:5B:DF:B8:CE:97:8E:E2:B5:50:34:03:80:39 Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E Certificate issuer: /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Certificate serial: 1587 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft Manifest number: 157F Signing time: Mon 28 Apr 2025 17:07:51 +0000 Manifest this update: Mon 28 Apr 2025 17:07:51 +0000 Manifest next update: Mon 28 Apr 2025 23:07:51 +0000 Files and hashes: 1: KtkKTWtPNj5wHFjwBkJUsLLPtIY.roa (hash: VueTaTS6ACWPKbz+D/qnweeOLK3EFD2lyW+Z38+Z/7Q=) 2: YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl (hash: dMGnu9NL6bzfB0/WtLvxRIXU7FPtq433pMgccB6hSPQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5511 (0x1587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Validity Not Before: Apr 28 17:07:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=ED237B7959A27F5BDFB8CE978EE2B55034038039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:a0:22:5a:c4:f8:55:eb:26:40:78:97:1a: 25:53:eb:52:1f:70:45:64:cd:44:4d:14:15:83:e3: 8b:d3:48:e9:a9:e1:dd:2c:7b:d5:ae:6e:2f:9d:09: 4c:45:f1:7f:45:fd:89:62:a4:11:52:c5:cc:87:28: f6:50:9a:a8:67:87:90:c5:11:d7:05:b2:49:4f:cd: 70:52:63:4b:d3:88:b6:71:56:18:0d:eb:2b:ad:62: 49:00:2e:95:8d:99:37:16:bd:fb:71:ad:db:f4:0b: ca:80:ae:7e:15:0e:82:b5:0d:f9:ce:e2:3d:81:aa: a1:f4:10:f1:b9:2b:1c:cd:bc:a0:22:6a:65:2a:66: 82:86:09:85:2c:83:3d:a4:ce:57:49:c4:26:5e:25: dc:13:c9:08:6d:af:c8:6a:e5:41:55:57:1e:32:c2: 47:db:5b:1d:36:f4:8a:90:5f:86:b6:63:44:60:cd: 4f:5e:3a:00:6b:c3:8c:8d:98:5a:ae:5b:ad:82:6d: b2:99:32:3e:04:28:4a:d9:0c:3f:97:c2:0d:43:9e: 61:dc:c6:c0:71:82:5a:d7:b1:bc:6f:a1:46:08:b5: b1:c8:06:f9:1f:6c:48:32:d2:0b:d7:1b:96:39:62: 91:70:8b:00:10:2d:0e:e9:de:de:b1:e7:a0:b9:8b: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:23:7B:79:59:A2:7F:5B:DF:B8:CE:97:8E:E2:B5:50:34:03:80:39 X509v3 Authority Key Identifier: keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:26:56:e1:fe:cf:78:16:ae:02:17:8c:b3:1e:9f:68:a3:4d: bc:a2:05:45:be:a0:4d:0d:2e:0e:6c:6d:64:2f:d9:34:a8:08: 63:10:9d:18:18:60:ee:47:b2:58:06:ad:51:94:c6:a7:c1:5b: 71:23:59:5f:27:16:8f:ab:32:cb:4e:62:3f:05:b4:8f:0c:1d: 0d:0a:45:38:87:69:94:f4:44:42:f0:ae:1b:0f:b5:6a:ba:df: ee:3e:5c:d0:ad:bd:64:0b:ac:b7:b2:71:e1:e0:f6:fb:ac:d3: 4d:8e:a8:15:b1:a5:43:48:fa:86:d9:0a:56:96:bf:72:9f:00: 7e:96:32:c6:66:27:5a:8b:f6:59:b9:a5:7e:1e:a1:eb:47:7c: cd:cf:0e:10:b4:9c:f9:63:87:57:b3:a6:c2:43:6d:45:02:d5: 8f:8e:d6:75:f5:16:a1:ab:87:8c:13:1c:b4:6b:53:87:ea:07: 27:22:98:1b:c8:12:b5:d2:e5:01:73:93:20:c6:8a:8a:34:9d: 97:39:65:ad:3e:58:83:af:50:a2:63:93:a1:a7:15:9b:1b:ce: 1d:49:9b:99:39:29:62:48:14:dc:ee:03:ad:06:5a:78:f8:2c: 46:44:f9:f0:45:cf:3f:75:82:f1:08:63:0a:ed:90:9b:23:e2: 76:6f:38:e8 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 QkNFOEY3RjhBODNEQjkzOUFFMEY0MkZBMDU0MTNCMjg1MTgxRTAeFw0yNTA0Mjgx NzA3NTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVEMjM3Qjc5NTlBMjdG NUJERkI4Q0U5NzhFRTJCNTUwMzQwMzgwMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSbqAiWsT4VesmQHiXGiVT61IfcEVkzURNFBWD44vTSOmp4d0s e9Wubi+dCUxF8X9F/YlipBFSxcyHKPZQmqhnh5DFEdcFsklPzXBSY0vTiLZxVhgN 6yutYkkALpWNmTcWvftxrdv0C8qArn4VDoK1DfnO4j2BqqH0EPG5KxzNvKAiamUq ZoKGCYUsgz2kzldJxCZeJdwTyQhtr8hq5UFVVx4ywkfbWx029IqQX4a2Y0RgzU9e OgBrw4yNmFquW62CbbKZMj4EKErZDD+Xwg1DnmHcxsBxglrXsbxvoUYItbHIBvkf bEgy0gvXG5Y5YpFwiwAQLQ7p3t6x56C5izFbAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU7SN7eVmif1vfuM6XjuK1UDQDgDkwHwYDVR0jBBgwFoAUYVvOj3+Kg9uTmuD0 L6BUE7KFGB4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYx L1lWdk9qMy1LZzl1VG11RDBMNkJVRTdLRkdCNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWVZ2T2ozLUtnOXVUbXVEMEw2QlVFN0tGR0I0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYxL1lWdk9qMy1LZzl1VG11 RDBMNkJVRTdLRkdCNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBtJlbh/s94Fq4CF4yzHp9oo028ogVFvqBNDS4ObG1kL9k0qAhjEJ0YGGDuR7JY Bq1RlManwVtxI1lfJxaPqzLLTmI/BbSPDB0NCkU4h2mU9ERC8K4bD7Vqut/uPlzQ rb1kC6y3snHh4Pb7rNNNjqgVsaVDSPqG2QpWlr9ynwB+ljLGZidai/ZZuaV+HqHr R3zNzw4QtJz5Y4dXs6bCQ21FAtWPjtZ19Rahq4eMExy0a1OH6gcnIpgbyBK10uUB c5MgxoqKNJ2XOWWtPliDr1CiY5OhpxWbG84dSZuZOSliSBTc7gOtBlp4+CxGRPnw Rc8/dYLxCGMK7ZCbI+J2bzjo -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net