$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft File: _i1c0c9OKHJuJ3MPCnRmYEf68K4.mft (raw, json) Hash identifier: Pa7hBR4s4uN66lluNvo5+tVzolRPIMpGMFlbZUiDvgg= Subject key identifier: B7:CE:2D:7E:26:04:C0:FF:C0:15:9C:7A:64:A4:87:EB:FA:67:27:12 Authority key identifier: FE:2D:5C:D1:CF:4E:28:72:6E:27:73:0F:0A:74:66:60:47:FA:F0:AE Certificate issuer: /CN=FE2D5CD1CF4E28726E27730F0A74666047FAF0AE Certificate serial: 0F9D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft Manifest number: 0F9D Signing time: Tue 18 Jun 2024 07:56:31 +0000 Manifest this update: Tue 18 Jun 2024 07:56:31 +0000 Manifest next update: Tue 18 Jun 2024 13:56:31 +0000 Files and hashes: 1: _i1c0c9OKHJuJ3MPCnRmYEf68K4.crl (hash: 9rOW29adsF8raOTTyPgJqy1wDc64XiG9cr4hfT6WCBI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 13:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3997 (0xf9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE2D5CD1CF4E28726E27730F0A74666047FAF0AE Validity Not Before: Jun 18 07:56:31 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B7CE2D7E2604C0FFC0159C7A64A487EBFA672712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:c7:94:47:ec:31:e1:d2:10:1c:2f:b4:af: f6:7b:17:75:e2:ab:22:52:e1:c8:d0:73:95:f5:5a: c3:e1:37:fd:69:4e:cc:22:30:97:5b:20:27:fa:74: 4b:52:27:51:35:bb:40:90:fd:18:fd:9f:8b:ea:73: ec:bb:0d:ee:a9:73:51:e5:2d:16:d8:6c:12:51:a2: c8:b1:89:a5:23:9b:6a:74:06:0d:44:dc:f8:68:33: d4:ab:2a:80:ac:0c:ae:33:41:bd:e8:c6:5e:42:c0: d2:c3:b8:22:59:a4:32:55:d7:78:47:b3:17:ff:68: 72:12:76:4a:27:9b:8b:15:d1:07:cb:a7:01:64:62: eb:ed:89:b7:cb:d8:bc:45:c5:de:f1:2e:f8:87:5e: 60:98:1b:dc:3e:48:23:26:67:82:71:8c:f9:ff:10: 29:a0:3e:93:f9:13:67:ff:35:99:f9:af:4d:f7:99: 72:4e:c9:e6:f9:eb:ee:1a:3c:87:4d:64:0b:6f:b2: 2a:53:81:2f:00:24:a3:ab:dc:10:a3:26:d0:3b:eb: c2:84:6b:20:09:4c:4b:c5:76:1e:4d:24:14:f4:59: 94:5c:70:93:f4:3f:44:b5:20:5c:8e:bb:52:7c:6f: f6:90:65:db:01:04:06:d2:c8:50:b2:e8:a2:cb:a0: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CE:2D:7E:26:04:C0:FF:C0:15:9C:7A:64:A4:87:EB:FA:67:27:12 X509v3 Authority Key Identifier: keyid:FE:2D:5C:D1:CF:4E:28:72:6E:27:73:0F:0A:74:66:60:47:FA:F0:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:0d:fe:0a:8c:f1:fa:a8:0e:c7:a6:ef:4c:77:1c:0a:bd:3e: ea:21:70:8c:df:fe:ff:04:c2:62:8e:3a:4a:c4:19:00:ad:0f: 09:c9:19:5a:57:4b:73:b3:4b:be:d0:89:be:b5:62:86:33:35: aa:bc:fc:4e:7c:f5:ee:89:c1:bb:f2:6d:05:9d:5a:6d:a6:ea: 42:41:51:26:20:99:1e:8a:78:fa:4e:3b:8a:8a:a9:dd:9f:58: c9:5c:0b:7a:28:17:fc:31:63:3c:f4:aa:87:26:18:c1:57:66: a0:82:b0:e4:ff:33:73:9e:6f:96:40:77:14:e5:41:6a:c7:b6: 23:70:35:c5:7a:12:3e:e1:da:96:56:4e:6d:38:a0:f8:22:e6: 01:5b:2b:77:2b:f0:74:ee:55:29:24:d6:63:fa:a3:24:99:eb: aa:f5:b0:82:af:54:e9:b0:a5:9d:d9:25:73:24:00:09:fe:46: 34:22:c0:41:2f:b6:9e:08:40:a7:41:3a:09:b4:1a:2d:34:93: b1:25:d0:e6:6f:ca:81:79:7a:c2:d5:91:33:03:c3:09:b7:72: 35:ed:92:c3:c4:df:8b:35:3b:78:b4:43:f3:36:8c:47:0b:ac: be:6b:bf:07:51:69:c8:35:bb:03:d3:10:d6:02:6a:10:7e:94: 90:5f:db:c7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkUy RDVDRDFDRjRFMjg3MjZFMjc3MzBGMEE3NDY2NjA0N0ZBRjBBRTAeFw0yNDA2MTgw NzU2MzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI3Q0UyRDdFMjYwNEMw RkZDMDE1OUM3QTY0QTQ4N0VCRkE2NzI3MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKnseUR+wx4dIQHC+0r/Z7F3XiqyJS4cjQc5X1WsPhN/1pTswi MJdbICf6dEtSJ1E1u0CQ/Rj9n4vqc+y7De6pc1HlLRbYbBJRosixiaUjm2p0Bg1E 3PhoM9SrKoCsDK4zQb3oxl5CwNLDuCJZpDJV13hHsxf/aHISdkonm4sV0QfLpwFk YuvtibfL2LxFxd7xLviHXmCYG9w+SCMmZ4JxjPn/ECmgPpP5E2f/NZn5r033mXJO yeb56+4aPIdNZAtvsipTgS8AJKOr3BCjJtA768KEayAJTEvFdh5NJBT0WZRccJP0 P0S1IFyOu1J8b/aQZdsBBAbSyFCy6KLLoFJxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUt84tfiYEwP/AFZx6ZKSH6/pnJxIwHwYDVR0jBBgwFoAU/i1c0c9OKHJuJ3MP CnRmYEf68K4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 My9faTFjMGM5T0tISnVKM01QQ25SbVlFZjY4SzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19pMWMwYzlPS0hKdUozTVBDblJtWUVmNjhLNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDMvX2kxYzBjOU9LSEp1 SjNNUENuUm1ZRWY2OEs0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABgN/gqM8fqoDsem70x3HAq9PuohcIzf/v8EwmKOOkrEGQCtDwnJGVpXS3Oz S77Qib61YoYzNaq8/E589e6JwbvybQWdWm2m6kJBUSYgmR6KePpOO4qKqd2fWMlc C3ooF/wxYzz0qocmGMFXZqCCsOT/M3Oeb5ZAdxTlQWrHtiNwNcV6Ej7h2pZWTm04 oPgi5gFbK3cr8HTuVSkk1mP6oySZ66r1sIKvVOmwpZ3ZJXMkAAn+RjQiwEEvtp4I QKdBOgm0Gi00k7El0OZvyoF5esLVkTMDwwm3cjXtksPE34s1O3i0Q/M2jEcLrL5r vwdRacg1uwPTENYCahB+lJBf28c= -----END CERTIFICATE-----Generated at Tue Jun 18 10:56:36 2024 by rpki-client on console-ams.rpki-client.org