$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json) Hash identifier: UpKPyd+X0ocIW5QKjcBB2yIqd0GcBPuUPIr/BLcxqVM= Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1B44 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft Manifest number: 1B04 Signing time: Sun 19 May 2024 18:54:18 +0000 Manifest this update: Sun 19 May 2024 18:54:18 +0000 Manifest next update: Mon 20 May 2024 00:54:18 +0000 Files and hashes: 1: AolRVv85EFkDTmzgm3lL_oYrCGc.roa (hash: Fah2YDamI2FvAA3gMqyQQHJxtYNp8470LrhxEAMEqzQ=) 2: DmVjqLhNKuOE22vbPI0ul4zVLzY.roa (hash: kxUL4Qa3TdIVixs8EXEOedWrXc60q6MUy4uaCC86tLY=) 3: L6HRD5E2mZEFshwg9fCQuH8mzag.roa (hash: NVPQmnbtrGnJf1b9C/BzgkvTMi5xjC30JkS+2gFyhFw=) 4: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: DNC8VMzNrfA2O+3Bk/GEvkbdWLnmP48zlJOnpSxWcS0=) 5: UStN7kvuK_-ppvq5ruV5bVQfDuI.roa (hash: +WC1c0y0Oz3sKmMUqpO35inYl85R6iLjyunKAOfCRHQ=) 6: Yn02BaYfU6zzzHCnF9Y7UeACizU.roa (hash: tpzRxn2YBv8JFot87RTI/f2YYprjyd7VgTsOdDsCGw0=) 7: efz6goWINsL84F4ZHQDTxLY_UFA.roa (hash: kHvSyOkuYnFkpFZLUbPMZcwkck8QXeABdj7kdXcyEpg=) 8: jGvq9VmGPleDjnp2shtdKdZ5LCk.roa (hash: KsxSEmoENpfc1tY8hUGupAGXT0cEqLkrVDmNiWhzgy8=) 9: jU9BeBgc-yHULczhHh42PXng7xs.roa (hash: UidqR7/xEA9kCzUDWdoreQNknjbRfNGahCBzucW5AP0=) 10: z7e9dfjPdLPAkRwmCZdWxmJk4u0.roa (hash: pIXXbkR95npm68cDn866IUWc6Mqn1NPZpzKEnk7rxKM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 00:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6980 (0x1b44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: May 19 18:54:18 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18: a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53: ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a: 95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49: 3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6: 6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9: 34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7: 8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71: 05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42: 14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f: 30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f: e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2: 91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc: 8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb: 4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1: 33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f: 84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80: fd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:63:33:5d:60:40:61:55:77:de:b1:df:12:48:e5:b9:49:7b: 38:af:63:dc:1c:58:92:8c:30:be:70:f9:83:bf:82:d3:3b:c9: 33:60:e0:75:b8:db:ed:22:43:88:8a:df:70:23:71:10:57:3b: 2b:d1:97:43:1e:66:3d:18:3c:08:05:28:ed:1f:ed:e4:51:65: 42:d8:69:0c:77:f8:fe:a3:02:81:7e:14:0f:45:b9:2b:5c:b1: 5a:85:a2:08:de:80:91:53:ad:24:43:94:03:66:a9:6b:d5:d5: 46:59:5a:e7:b5:af:12:a8:67:f5:42:d8:38:f1:97:63:25:22: ad:0f:69:08:7c:f9:70:a8:41:62:80:99:ce:c2:be:d7:11:5b: 3b:91:ee:c8:f7:24:77:80:20:d2:7b:88:3c:cc:cc:d5:d9:1d: 9f:51:46:a6:bd:00:db:76:f4:79:8e:6b:f3:fa:f2:ec:1c:45: 36:e2:51:9b:74:36:38:ff:22:05:b0:ea:fb:16:b3:b9:35:6e: 33:d5:8c:2c:49:c4:a1:8a:fe:df:2a:a2:d8:53:55:74:59:92: fc:ad:a7:ad:c3:04:be:1f:4e:b6:49:90:b5:47:26:84:e9:b0: 82:d6:f2:dd:00:89:b3:6d:ef:85:b8:b4:b9:db:fa:17:3e:1d: 33:0f:21:dc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICG0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDA1MTkx ODU0MThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlDNkM2RTdGQjE2ODhF MEY2RjYzMTMyRDhGREIxNzI2OTUwOTk5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7Dzg4Ax8pgav3sXorGKOdSuQyc990+KGyGimLU8oCdLkLw9od VhCJoKddepVWd4PpuP/1cEqsJPJmSTwtaypYqrvB4AObS2Hb1myMwR4uNVWbVbb2 3Oke6TSjrKBX7Iye7qtiCotVp4sfm4TQPHP4wfR5588scQXKOYzDjDpLSvU1vbtd QhQIORu5cH327wCQiQhyPzCsinYVuzDFJWx50Oq0X+BOKAEjIz4dtQlOyarP8pGx Yq5mYZjkbKdUKNZO/IuRSrGu6DKdc1bKrfSU+0ssKbE6AOay7OAXYYMfsTOsoub7 HuWZqiyuCwusD4QG+moq3gv3d9ll+FM+gP13AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUnGxuf7Fojg9vYxMtj9sXJpUJmSAwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvU1JITGJWUkxPMmtG VXlsa3lPR2tjcjNMd21jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKJjM11gQGFVd96x3xJI5blJezivY9wcWJKMML5w+YO/gtM7yTNg4HW42+0i Q4iK33AjcRBXOyvRl0MeZj0YPAgFKO0f7eRRZULYaQx3+P6jAoF+FA9FuStcsVqF ogjegJFTrSRDlANmqWvV1UZZWue1rxKoZ/VC2Djxl2MlIq0PaQh8+XCoQWKAmc7C vtcRWzuR7sj3JHeAINJ7iDzMzNXZHZ9RRqa9ANt29HmOa/P68uwcRTbiUZt0Njj/ IgWw6vsWs7k1bjPVjCxJxKGK/t8qothTVXRZkvytp63DBL4fTrZJkLVHJoTpsILW 8t0AibNt74W4tLnb+hc+HTMPIdw= -----END CERTIFICATE-----Generated at Sun May 19 19:42:21 2024 by rpki-client on console-fra.rpki-client.org