$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json) Hash identifier: gvufx7UWYuLMLs5Fpbl99WQJAI1zH6ytr/iVppAcHj0= Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1B37 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft Manifest number: 1AF7 Signing time: Fri 17 May 2024 03:54:12 +0000 Manifest this update: Fri 17 May 2024 03:54:12 +0000 Manifest next update: Fri 17 May 2024 09:54:12 +0000 Files and hashes: 1: AolRVv85EFkDTmzgm3lL_oYrCGc.roa (hash: Fah2YDamI2FvAA3gMqyQQHJxtYNp8470LrhxEAMEqzQ=) 2: DmVjqLhNKuOE22vbPI0ul4zVLzY.roa (hash: kxUL4Qa3TdIVixs8EXEOedWrXc60q6MUy4uaCC86tLY=) 3: L6HRD5E2mZEFshwg9fCQuH8mzag.roa (hash: NVPQmnbtrGnJf1b9C/BzgkvTMi5xjC30JkS+2gFyhFw=) 4: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: oTGwQxj87oVuloJlUiZeWZHR67zf6L2TznAsgp74+ic=) 5: UStN7kvuK_-ppvq5ruV5bVQfDuI.roa (hash: +WC1c0y0Oz3sKmMUqpO35inYl85R6iLjyunKAOfCRHQ=) 6: Yn02BaYfU6zzzHCnF9Y7UeACizU.roa (hash: tpzRxn2YBv8JFot87RTI/f2YYprjyd7VgTsOdDsCGw0=) 7: efz6goWINsL84F4ZHQDTxLY_UFA.roa (hash: kHvSyOkuYnFkpFZLUbPMZcwkck8QXeABdj7kdXcyEpg=) 8: jGvq9VmGPleDjnp2shtdKdZ5LCk.roa (hash: KsxSEmoENpfc1tY8hUGupAGXT0cEqLkrVDmNiWhzgy8=) 9: jU9BeBgc-yHULczhHh42PXng7xs.roa (hash: UidqR7/xEA9kCzUDWdoreQNknjbRfNGahCBzucW5AP0=) 10: z7e9dfjPdLPAkRwmCZdWxmJk4u0.roa (hash: pIXXbkR95npm68cDn866IUWc6Mqn1NPZpzKEnk7rxKM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 06:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6967 (0x1b37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: May 17 03:54:12 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18: a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53: ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a: 95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49: 3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6: 6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9: 34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7: 8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71: 05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42: 14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f: 30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f: e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2: 91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc: 8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb: 4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1: 33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f: 84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80: fd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:92:d4:8f:04:1f:2b:f9:d5:e8:03:65:4e:8a:0f:57:57:5c: 88:25:33:8f:10:b1:2a:41:02:cb:99:5a:90:c4:1e:2c:6e:bd: 22:76:f1:03:27:95:a2:42:60:43:f5:01:a5:14:1e:76:34:80: a1:3e:b9:ac:d9:a7:de:92:80:9e:54:df:28:cf:dd:99:ab:3c: bd:3b:31:a2:bc:d8:37:63:37:a0:50:b7:50:b5:58:91:f2:db: b3:2e:b0:bb:f5:00:bc:25:1b:cf:ae:29:6d:0f:25:71:24:02: 8c:29:f9:ea:d5:ad:ac:31:9b:5b:a9:55:98:68:73:b4:6e:eb: 7d:3b:bf:90:4a:8a:f4:8c:4c:ef:8e:6d:c6:41:8a:30:22:11: 5f:67:6b:78:f9:17:82:37:50:52:c2:6b:e0:d4:a7:cf:06:fb: 6e:62:b1:75:18:89:7f:4d:96:e2:f4:1b:13:ac:21:cf:c7:57: 6c:a9:47:12:61:b3:1f:76:3a:91:a1:82:c7:b6:09:28:89:f8: a5:2b:36:b7:38:0f:5f:52:8c:1c:de:46:bb:71:17:5e:4f:92: 21:1e:f9:38:98:05:f0:2a:8f:d3:aa:be:ec:bc:93:c6:66:f8: 3d:c5:d4:00:6e:fb:17:2c:fa:13:0d:f9:2a:82:0f:e9:fe:78: a0:b2:57:b8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDA1MTcw MzU0MTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlDNkM2RTdGQjE2ODhF MEY2RjYzMTMyRDhGREIxNzI2OTUwOTk5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7Dzg4Ax8pgav3sXorGKOdSuQyc990+KGyGimLU8oCdLkLw9od VhCJoKddepVWd4PpuP/1cEqsJPJmSTwtaypYqrvB4AObS2Hb1myMwR4uNVWbVbb2 3Oke6TSjrKBX7Iye7qtiCotVp4sfm4TQPHP4wfR5588scQXKOYzDjDpLSvU1vbtd QhQIORu5cH327wCQiQhyPzCsinYVuzDFJWx50Oq0X+BOKAEjIz4dtQlOyarP8pGx Yq5mYZjkbKdUKNZO/IuRSrGu6DKdc1bKrfSU+0ssKbE6AOay7OAXYYMfsTOsoub7 HuWZqiyuCwusD4QG+moq3gv3d9ll+FM+gP13AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUnGxuf7Fojg9vYxMtj9sXJpUJmSAwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvU1JITGJWUkxPMmtG VXlsa3lPR2tjcjNMd21jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA2S1I8EHyv51egDZU6KD1dXXIglM48QsSpBAsuZWpDEHixuvSJ28QMnlaJC YEP1AaUUHnY0gKE+uazZp96SgJ5U3yjP3ZmrPL07MaK82DdjN6BQt1C1WJHy27Mu sLv1ALwlG8+uKW0PJXEkAowp+erVrawxm1upVZhoc7Ru6307v5BKivSMTO+ObcZB ijAiEV9na3j5F4I3UFLCa+DUp88G+25isXUYiX9NluL0GxOsIc/HV2ypRxJhsx92 OpGhgse2CSiJ+KUrNrc4D19SjBzeRrtxF15PkiEe+TiYBfAqj9Oqvuy8k8Zm+D3F 1ABu+xcs+hMN+SqCD+n+eKCyV7g= -----END CERTIFICATE-----Generated at Fri May 17 04:44:57 2024 by rpki-client on console-ams.rpki-client.org