$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft File: LTxBkfus18zT0-oZXlR0KTGatwI.mft (raw, json) Hash identifier: MZEFPRXvD5DrBmvSdzofNopXSReapTupbbSXxrwPmcQ= Subject key identifier: 70:EA:A8:FD:E2:77:50:A0:42:DD:C5:50:D2:1D:A8:E2:7B:82:85:16 Authority key identifier: 2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02 Certificate issuer: /CN=2D3C4191FBACD7CCD3D3EA195E547429319AB702 Certificate serial: C3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft Manifest number: C3 Signing time: Tue 18 Jun 2024 07:57:07 +0000 Manifest this update: Tue 18 Jun 2024 07:57:07 +0000 Manifest next update: Tue 18 Jun 2024 13:57:07 +0000 Files and hashes: 1: LTxBkfus18zT0-oZXlR0KTGatwI.crl (hash: 7lJ3Hz3IXmZozls3oB+0tNb+S7D8Nz+0RkkGZML6J2M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 13:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D3C4191FBACD7CCD3D3EA195E547429319AB702 Validity Not Before: Jun 18 07:57:07 2024 GMT Not After : May 10 02:22:22 2025 GMT Subject: CN=70EAA8FDE27750A042DDC550D21DA8E27B828516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:ee:6c:0f:99:bd:6a:d5:75:3d:2a:f0:dd: f8:51:59:4e:77:8f:47:21:f2:0f:5e:39:cd:f2:37: 9d:fe:49:6d:8a:87:df:0b:10:94:d2:c5:89:67:94: da:1f:93:a3:ba:e8:8f:84:79:07:0f:6d:b3:50:e7: 16:91:3f:6c:9a:45:ac:99:70:15:11:7c:2e:29:e9: 7a:7d:84:70:df:e9:35:8c:2a:6a:24:17:b6:64:12: db:02:3e:93:db:2b:91:76:a2:2e:c1:79:d7:3b:6a: 4e:6c:9c:ce:68:03:ea:9d:b3:cb:f7:5b:07:aa:bb: 4f:e9:f5:44:83:2e:92:ed:8f:94:79:4b:82:0a:a0: 4f:7a:6d:2f:37:8d:2b:39:aa:0a:c8:cd:e3:1d:de: 07:6d:f0:9d:05:be:28:a0:e8:0b:c6:3a:a3:56:b1: f3:58:bc:0b:4e:b4:f4:3d:95:ab:b0:f8:7b:df:9a: 37:84:72:19:1c:bb:da:1f:f9:12:c7:70:44:26:27: c8:2f:b3:70:ba:28:60:a3:32:34:59:12:7c:cb:b4: 4b:a7:9f:60:0c:28:44:fd:9a:18:3a:6b:86:50:ae: 5e:fd:70:01:3b:52:d8:9d:12:4f:03:b6:a3:c9:3f: fb:15:0c:ef:80:c7:d1:41:59:45:3e:36:a9:6d:3c: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EA:A8:FD:E2:77:50:A0:42:DD:C5:50:D2:1D:A8:E2:7B:82:85:16 X509v3 Authority Key Identifier: keyid:2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a2:e2:1a:af:50:f4:fd:1c:c6:cc:1c:c9:ba:a0:c2:58:93: a3:bb:d1:25:28:c9:f2:3f:b2:1f:6d:6d:e3:b9:16:16:d5:94: 14:24:08:96:01:4b:ef:3f:28:58:e6:e7:a1:60:4d:d6:70:83: 6c:88:34:43:1c:fc:8d:38:57:7e:af:d1:ad:db:61:16:91:02: 07:12:4a:38:ae:28:b8:55:ac:fd:60:22:ab:a7:94:d4:9b:ac: 86:8f:f6:de:b0:a0:df:5a:c7:1a:08:c5:72:42:ab:16:ab:91: a1:e6:d5:e3:12:b9:ab:fe:35:4d:71:b6:79:08:2d:55:c8:28: 77:ed:f3:47:dc:e2:0f:57:09:ce:29:4e:54:ca:14:2d:83:48: 58:cb:28:93:d7:49:b2:95:db:b7:43:14:f1:f4:6c:e8:cc:3b: 54:ee:49:03:16:c8:7f:27:39:74:ba:8e:86:5e:fb:23:8e:84: 88:11:4a:9a:77:4a:86:53:02:c5:8f:5c:b8:68:5f:a8:bc:50: 85:d3:82:fd:b8:c1:aa:ef:ac:26:ff:1c:72:77:9d:b9:61:47: 5a:66:f1:06:37:ba:14:fc:bb:42:3d:59:81:d3:8f:e3:79:eb: 2a:0f:42:ca:ac:3a:09:93:fb:83:55:7b:9e:5d:ef:07:27:fc: 75:ee:f2:9e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkQz QzQxOTFGQkFDRDdDQ0QzRDNFQTE5NUU1NDc0MjkzMTlBQjcwMjAeFw0yNDA2MTgw NzU3MDdaFw0yNTA1MTAwMjIyMjJaMDMxMTAvBgNVBAMTKDcwRUFBOEZERTI3NzUw QTA0MkREQzU1MEQyMURBOEUyN0I4Mjg1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmFu5sD5m9atV1PSrw3fhRWU53j0ch8g9eOc3yN53+SW2Kh98L EJTSxYlnlNofk6O66I+EeQcPbbNQ5xaRP2yaRayZcBURfC4p6Xp9hHDf6TWMKmok F7ZkEtsCPpPbK5F2oi7Bedc7ak5snM5oA+qds8v3Wwequ0/p9USDLpLtj5R5S4IK oE96bS83jSs5qgrIzeMd3gdt8J0Fviig6AvGOqNWsfNYvAtOtPQ9lauw+HvfmjeE chkcu9of+RLHcEQmJ8gvs3C6KGCjMjRZEnzLtEunn2AMKET9mhg6a4ZQrl79cAE7 UtidEk8DtqPJP/sVDO+Ax9FBWUU+NqltPAXLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcOqo/eJ3UKBC3cVQ0h2o4nuChRYwHwYDVR0jBBgwFoAULTxBkfus18zT0+oZ XlR0KTGatwIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 MC9MVHhCa2Z1czE4elQwLW9aWGxSMEtUR2F0d0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xUeEJrZnVzMTh6VDAtb1pYbFIwS1RHYXR3SS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODAvTFR4QmtmdXMxOHpU MC1vWlhsUjBLVEdhdHdJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABGi4hqvUPT9HMbMHMm6oMJYk6O70SUoyfI/sh9tbeO5FhbVlBQkCJYBS+8/ KFjm56FgTdZwg2yINEMc/I04V36v0a3bYRaRAgcSSjiuKLhVrP1gIqunlNSbrIaP 9t6woN9axxoIxXJCqxarkaHm1eMSuav+NU1xtnkILVXIKHft80fc4g9XCc4pTlTK FC2DSFjLKJPXSbKV27dDFPH0bOjMO1TuSQMWyH8nOXS6joZe+yOOhIgRSpp3SoZT AsWPXLhoX6i8UIXTgv24warvrCb/HHJ3nblhR1pm8QY3uhT8u0I9WYHTj+N56yoP QsqsOgmT+4NVe55d7wcn/HXu8p4= -----END CERTIFICATE-----Generated at Tue Jun 18 09:36:53 2024 by rpki-client on console-fra.rpki-client.org