$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft File: vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json) Hash identifier: hIa8RYOI/+khdCPmS/MKmOIvdPHvqf33Qqe4u7PaWoU= Subject key identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 58D6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft Manifest number: 3C55 Signing time: Tue 18 Jun 2024 09:26:25 +0000 Manifest this update: Tue 18 Jun 2024 09:26:24 +0000 Manifest next update: Tue 18 Jun 2024 15:26:24 +0000 Files and hashes: 1: BPwbl2E3hmx2EUpWuWYORyxN8yE.roa (hash: 6kfzV7CI3M37fO5MxZgdrdcrrDV+M3SBHaoJoDh6lsA=) 2: hUwqPu6t8tUYFc-peBX6xMI4HBc.roa (hash: jOkPLxA3qJXTVDxX+ALBQiv9GL9hiNSiQhqdZqM62Co=) 3: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: IVsktGG8d9DFLZyRgJklVNBARedZHBtq2FIzBWGldZY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 14:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22742 (0x58d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jun 18 09:26:24 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c: a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef: 6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d: e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06: 74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe: aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a: f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c: 74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86: 4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab: 21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c: 3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c: d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70: 45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed: 42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c: 95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce: e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4: 4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c8:10:19:75:ab:19:ee:f0:8f:93:90:de:d7:77:ad:d7:dd: 5c:eb:2b:2a:bf:14:0b:7a:ec:f4:cc:c3:47:b6:85:66:71:a0: a4:ac:a3:35:3d:e2:a9:cd:e3:19:d0:04:06:71:ed:d7:11:96: b0:05:07:65:1b:aa:2b:47:2e:e4:af:c0:4f:1e:e1:9f:b8:4d: 5f:3a:51:2a:15:01:ce:d1:9f:f5:eb:6a:5f:37:f8:f8:3e:33: f0:48:be:47:2f:cd:25:7b:de:8d:6b:ef:cf:9e:81:7b:c2:f8: 09:56:b7:c4:44:da:61:fa:d3:df:ab:0b:84:b6:9a:1f:01:52: f1:71:d6:b5:12:9b:b7:3c:2f:2e:92:64:dd:8f:66:34:bb:74: 1a:50:c7:5a:14:99:65:b2:47:bf:31:ab:ee:09:cd:cb:c5:6a: d5:69:35:7f:ee:e4:a5:5c:98:3b:ff:b6:80:fd:4b:6f:a7:1b: 2d:d0:3f:f0:ad:3d:aa:53:0d:48:7c:fa:ee:52:5b:da:b2:a3: a6:00:e8:c6:b7:cf:2d:d0:7d:d5:8f:9b:f1:72:d4:46:67:55: 00:4d:86:0b:59:e8:4f:75:a8:b6:4d:b9:3a:e6:1d:05:da:a4: 42:72:b2:e8:ac:45:aa:86:69:3b:bf:29:ae:e5:36:8d:18:ae: c5:b6:c8:72 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICWNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA2MTgw OTI2MjRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU4OTI0NjVCMEE0RjM1 NjEzRDY5MkIzQjY4NTM2RThFQzEwRTBCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7L9Ho9iRXPO+XbdUrbKBD92Jo4hqyRWVeI5vv72/4T+WgxRZ3 rrlAbdLsXegiVk778yzSIfVM4jHeBnRYnNEsORB8iiOzTXun/qpK8GUJuVuyCdMB GFP8KvHPBO3tCet6lEqP53bYfHTj+C1SRbBX/I9d7fyrhkwa1OcktwCGfYmwKt8L qyH4tEKCze3EczTun8mELDtJxrhkRo+Cm8iA7U8FfNPgIwB9UksmEmgJJlhYcEW/ 1yZ9BX9g13l4e0kP7UJxhrP+X3vnQvpu6HaMDJWLWfuI6Upq8hK7eII2zulAUS8J LKXIbCv+YVtU5ErAzbOsYEj1vSqTCvyqrY79AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU6JJGWwpPNWE9aSs7aFNujsEOC7MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZldnRoa0RMcGxrOXFm bWozU0tOT0pFa1dPby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZyBAZdasZ7vCPk5De13et191c6ysqvxQLeuz0zMNHtoVmcaCkrKM1PeKpzeMZ 0AQGce3XEZawBQdlG6orRy7kr8BPHuGfuE1fOlEqFQHO0Z/162pfN/j4PjPwSL5H L80le96Na+/PnoF7wvgJVrfERNph+tPfqwuEtpofAVLxcda1Epu3PC8ukmTdj2Y0 u3QaUMdaFJllske/MavuCc3LxWrVaTV/7uSlXJg7/7aA/Utvpxst0D/wrT2qUw1I fPruUlvasqOmAOjGt88t0H3Vj5vxctRGZ1UATYYLWehPdai2Tbk65h0F2qRCcrLo rEWqhmk7vymu5TaNGK7Ftshy -----END CERTIFICATE-----Generated at Tue Jun 18 10:56:34 2024 by rpki-client on console-ams.rpki-client.org