$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft File: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft (raw, json) Hash identifier: xecSnrS1KpwzgsrFOG/pWPD4GIl0lp77CTgsrXBBshc= Subject key identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1 Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Certificate serial: 17A9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft Manifest number: 1799 Signing time: Tue 18 Jun 2024 12:58:14 +0000 Manifest this update: Tue 18 Jun 2024 12:58:14 +0000 Manifest next update: Tue 18 Jun 2024 18:58:14 +0000 Files and hashes: 1: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl (hash: fdsweE7CBnVo1oKAv/CChvDxrVckm/mPT7eYmeplb0Q=) 2: EOnupcvtCMAK5OxIY4h4mWkyjzw.roa (hash: fiIIAwLLrgOkYfmjaRRf+etedHxjFxYKrT1AXkBeG4U=) 3: VH8awNGkt8Q8uZAvg8-izyTVHLM.roa (hash: sQc5umNmOnO0GLJxj1aR5vLHHvrzmr9tngeVXjSsjcc=) 4: sp_XY7K5BQY6jBo-0H97ioeGzXU.roa (hash: zEt5fauDwgCZPiZ0CxExZORg8rf4bRihuLQGnWmfUdo=) 5: wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa (hash: aCqIRJyc+3BwxvglqHW/KaXOCMDVU2ElRHQfOy6as8M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 18:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6057 (0x17a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Validity Not Before: Jun 18 12:58:14 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=1794218645C7CCC4535A9526D8E2540877324BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:34:6d:ce:47:f1:95:a2:61:f6:f5:f5:c1: 65:10:2c:cd:2c:2c:92:49:21:25:4f:88:4d:68:34: ae:ae:de:64:4b:2a:6b:c1:d5:6e:a6:80:0e:4e:01: 66:ff:de:82:b5:99:11:9f:2b:e7:38:e7:29:0d:d3: 3f:6b:a7:71:c3:1f:8a:c3:41:9d:a8:d3:14:15:70: 0e:02:fb:99:5e:8d:01:50:4f:76:11:b6:0e:1d:ff: dd:05:89:97:b2:57:89:c1:ef:0f:e0:ef:b1:25:19: c4:5f:79:ac:45:ed:6f:c6:f2:a5:2a:45:ce:bb:5f: a0:b0:9b:9f:ce:39:58:c0:c5:49:2e:7b:07:f9:39: d2:06:b1:75:6e:a4:f4:b3:a2:e4:69:e7:1c:92:29: fd:8d:8e:56:d2:da:f9:b5:6d:8f:36:f2:2a:8b:da: fd:c0:eb:c9:b8:14:c4:b4:df:d9:a1:1b:c8:e2:4f: 52:aa:90:6f:af:aa:aa:87:4f:01:e8:5c:29:98:3a: 24:82:10:3b:82:c0:b9:89:c6:67:93:51:1a:2c:00: 4b:55:2e:44:d3:38:a2:8a:72:95:e0:0c:3f:e0:ef: da:d3:4a:65:a6:7e:c8:68:9b:82:ea:86:f5:3c:ed: 97:f2:db:e4:07:de:22:11:f8:72:5b:62:14:f4:60: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1 X509v3 Authority Key Identifier: keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d1:cd:a8:26:f8:90:38:2b:0f:76:01:83:ee:13:ff:99:4b: 73:d6:66:5c:99:08:bb:f2:23:a6:6e:9f:c6:65:0d:0e:bd:5e: 20:6e:bb:3b:01:cb:60:a8:b0:a8:f7:07:db:1f:90:85:b1:56: 97:96:11:87:ac:ea:4c:ba:0d:9e:bf:b3:76:78:ca:0d:f6:03: 62:2f:11:89:80:7f:8d:b9:19:f4:27:de:05:54:2d:41:9b:1a: e5:0f:1c:f6:70:8c:3c:23:88:c2:fe:b6:d0:ab:17:1e:e0:da: 0c:97:f9:ad:f4:87:38:e2:a4:77:d9:3f:25:16:19:3d:b0:2f: bb:77:52:ad:4f:6a:f3:c5:71:8c:4a:5b:93:ac:e5:6b:c3:74: 57:67:83:6e:a9:18:c5:8e:7f:b3:b0:26:e3:25:38:bc:bc:24: 3b:ed:b4:97:12:37:cc:07:cb:12:11:e7:9a:2c:d2:46:a4:8c: ec:f7:13:72:5b:4c:31:a4:31:11:2a:8d:60:e1:11:29:f4:67: 72:e7:01:a0:b4:a1:54:9f:bb:1b:ee:4f:da:11:88:96:92:f5: d9:82:f6:95:1b:5e:46:15:07:7a:90:25:8f:db:c9:48:4f:b7: bb:b2:b3:3d:cb:88:95:f0:8e:8f:45:c8:d9:4d:ff:75:8c:34: 8c:62:fd:47 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICF6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjZE NUFGMjE5NTlCN0Y5QzFCMjMwRDcyNTg5OEYxMTFBQUEzRjlBRTAeFw0yNDA2MTgx MjU4MTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE3OTQyMTg2NDVDN0ND QzQ1MzVBOTUyNkQ4RTI1NDA4NzczMjRCRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvrDRtzkfxlaJh9vX1wWUQLM0sLJJJISVPiE1oNK6u3mRLKmvB 1W6mgA5OAWb/3oK1mRGfK+c45ykN0z9rp3HDH4rDQZ2o0xQVcA4C+5lejQFQT3YR tg4d/90FiZeyV4nB7w/g77ElGcRfeaxF7W/G8qUqRc67X6Cwm5/OOVjAxUkuewf5 OdIGsXVupPSzouRp5xySKf2NjlbS2vm1bY828iqL2v3A68m4FMS039mhG8jiT1Kq kG+vqqqHTwHoXCmYOiSCEDuCwLmJxmeTURosAEtVLkTTOKKKcpXgDD/g79rTSmWm fshom4LqhvU87Zfy2+QH3iIR+HJbYhT0YCEZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUF5QhhkXHzMRTWpUm2OJUCHcyS9EwHwYDVR0jBBgwFoAU9tWvIZWbf5wbIw1y WJjxEaqj+a4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky Lzl0V3ZJWldiZjV3Ykl3MXlXSmp4RWFxai1hNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXRXdklaV2JmNXdiSXcxeVdKanhFYXFqLWE0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyLzl0V3ZJWldiZjV3Ykl3 MXlXSmp4RWFxai1hNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCY0c2oJviQOCsPdgGD7hP/mUtz1mZcmQi78iOmbp/GZQ0OvV4gbrs7ActgqLCo 9wfbH5CFsVaXlhGHrOpMug2ev7N2eMoN9gNiLxGJgH+NuRn0J94FVC1BmxrlDxz2 cIw8I4jC/rbQqxce4NoMl/mt9Ic44qR32T8lFhk9sC+7d1KtT2rzxXGMSluTrOVr w3RXZ4NuqRjFjn+zsCbjJTi8vCQ77bSXEjfMB8sSEeeaLNJGpIzs9xNyW0wxpDER Ko1g4REp9Gdy5wGgtKFUn7sb7k/aEYiWkvXZgvaVG15GFQd6kCWP28lIT7e7srM9 y4iV8I6PRcjZTf91jDSMYv1H -----END CERTIFICATE-----Generated at Tue Jun 18 14:09:19 2024 by rpki-client on console-fra.rpki-client.org