$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft File: c_jFHpB2aR787kYX7QQw9Xy8gB0.mft (raw, json) Hash identifier: K357EN8E2O/qFj+K+9Z/wvin5N6IfeCB/ZZiaIuj670= Subject key identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 Authority key identifier: 73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D Certificate issuer: /CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Certificate serial: BD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft Manifest number: BD Signing time: Tue 18 Jun 2024 07:57:04 +0000 Manifest this update: Tue 18 Jun 2024 07:57:04 +0000 Manifest next update: Tue 18 Jun 2024 13:57:04 +0000 Files and hashes: 1: c_jFHpB2aR787kYX7QQw9Xy8gB0.crl (hash: PhNp6fuU9E1URp3STdR/ouprbXVRxqDRSbwg4N1qXhg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 13:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Validity Not Before: Jun 18 07:57:04 2024 GMT Not After : May 11 09:03:50 2025 GMT Subject: CN=1A96673E80786404FE296B91E5825FA196604F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:78:3d:60:00:57:d1:46:10:20:61:9e:95: b0:49:1e:0d:5c:52:0b:c8:7a:1c:81:d0:ed:72:56: ee:19:51:41:e0:24:b0:4d:06:1a:5d:3b:2c:8c:fb: 3d:11:d0:0c:29:ef:27:77:69:b8:2b:11:aa:83:4a: a1:2b:ad:60:3b:f0:c1:4b:77:9c:38:cb:c6:39:9d: 80:df:69:73:ae:95:5e:ba:25:2d:b2:5d:27:67:74: 3a:d9:ec:52:fe:af:0b:9c:5f:9b:dd:00:ca:95:5d: dc:5f:ad:55:3a:07:58:79:a2:39:2e:61:35:3b:80: 69:6c:60:58:d7:6a:11:2a:5e:86:a3:c5:1d:e6:08: 09:f7:5e:cb:6c:37:a0:c7:db:43:07:8e:40:b0:f5: af:5d:89:94:f4:99:d8:ad:a3:4f:e6:94:9a:6d:36: 71:00:29:8e:2e:a4:3b:3e:04:a7:9f:57:16:e8:0b: 4a:6d:56:61:3f:85:74:d0:1a:4d:75:87:34:24:81: 3d:82:dc:41:54:70:cb:fa:58:69:2d:c9:fd:b4:94: 06:71:fe:be:99:8e:74:40:10:ab:98:00:cb:83:d9: 23:24:b9:23:b9:51:d8:51:6c:fd:14:59:7b:a4:37: 2a:54:8d:96:54:08:95:f7:8b:75:9e:40:9f:eb:5a: 8b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 X509v3 Authority Key Identifier: keyid:73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:82:6f:72:28:03:8c:3a:90:2d:01:b8:9e:06:0c:87:ef:97: cf:bf:b3:23:28:c2:c2:f7:06:98:09:3e:6b:ee:49:b7:49:55: 32:17:7e:35:83:43:c9:7a:a1:23:5a:09:80:83:39:1d:11:23: f6:8d:ee:9d:07:4a:61:ad:b5:f4:fe:ce:02:c1:68:e9:ac:1e: 8c:be:51:a3:01:b3:36:8c:1c:03:37:b7:e7:44:e8:91:0f:72: 16:19:28:31:cb:d1:98:4c:af:15:92:e5:5a:50:a3:4c:96:12: 75:57:f2:b9:92:2f:f6:a2:cc:3c:da:16:1e:2d:b3:2f:9f:cc: 24:ad:b2:7e:2d:7e:4e:9d:c2:20:83:0f:06:09:8c:af:e3:1a: 9d:cd:5c:2c:f3:f8:f4:9d:18:d3:73:07:cb:f3:3c:f7:70:c3: 87:5e:7f:04:91:e8:90:77:17:b2:25:c2:82:53:0e:9c:cf:45: 70:c0:2c:df:aa:81:dd:f2:c3:38:0d:5c:a6:ea:d6:de:71:ec: 3c:fa:8f:2b:e6:e1:58:c9:d0:5d:67:f7:91:e9:c8:f1:e3:7c: fc:aa:17:27:68:a0:7c:df:b6:8d:68:d3:e0:64:34:e0:15:f9: 53:d8:a6:46:d0:e6:66:3a:fa:79:9c:68:68:e1:83:00:f0:34: dd:92:03:2b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNG OEM1MUU5MDc2NjkxRUZDRUU0NjE3RUQwNDMwRjU3Q0JDODAxRDAeFw0yNDA2MTgw NzU3MDRaFw0yNTA1MTEwOTAzNTBaMDMxMTAvBgNVBAMTKDFBOTY2NzNFODA3ODY0 MDRGRTI5NkI5MUU1ODI1RkExOTY2MDRGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIGng9YABX0UYQIGGelbBJHg1cUgvIehyB0O1yVu4ZUUHgJLBN BhpdOyyM+z0R0Awp7yd3abgrEaqDSqErrWA78MFLd5w4y8Y5nYDfaXOulV66JS2y XSdndDrZ7FL+rwucX5vdAMqVXdxfrVU6B1h5ojkuYTU7gGlsYFjXahEqXoajxR3m CAn3XstsN6DH20MHjkCw9a9diZT0mdito0/mlJptNnEAKY4upDs+BKefVxboC0pt VmE/hXTQGk11hzQkgT2C3EFUcMv6WGktyf20lAZx/r6ZjnRAEKuYAMuD2SMkuSO5 UdhRbP0UWXukNypUjZZUCJX3i3WeQJ/rWourAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGpZnPoB4ZAT+KWuR5YJfoZZgTxcwHwYDVR0jBBgwFoAUc/jFHpB2aR787kYX 7QQw9Xy8gB0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 MS9jX2pGSHBCMmFSNzg3a1lYN1FRdzlYeThnQjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NfakZIcEIyYVI3ODdrWVg3UVF3OVh5OGdCMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODEvY19qRkhwQjJhUjc4 N2tZWDdRUXc5WHk4Z0IwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABeCb3IoA4w6kC0BuJ4GDIfvl8+/syMowsL3BpgJPmvuSbdJVTIXfjWDQ8l6 oSNaCYCDOR0RI/aN7p0HSmGttfT+zgLBaOmsHoy+UaMBszaMHAM3t+dE6JEPchYZ KDHL0ZhMrxWS5VpQo0yWEnVX8rmSL/aizDzaFh4tsy+fzCStsn4tfk6dwiCDDwYJ jK/jGp3NXCzz+PSdGNNzB8vzPPdww4defwSR6JB3F7IlwoJTDpzPRXDALN+qgd3y wzgNXKbq1t5x7Dz6jyvm4VjJ0F1n95HpyPHjfPyqFydooHzfto1o0+BkNOAV+VPY pkbQ5mY6+nmcaGjhgwDwNN2SAys= -----END CERTIFICATE-----Generated at Tue Jun 18 09:36:53 2024 by rpki-client on console-fra.rpki-client.org