$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft File: BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft (raw, json) Hash identifier: Jrl+dWsbw9997BDmrwhuXMKQqr12LqQ4Fb6LSaGZU6E= Subject key identifier: 5D:42:79:BC:0A:39:3D:12:95:72:C4:60:EA:C3:EC:24:D5:7E:40:C8 Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Certificate serial: 0EB4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft Manifest number: 0E6D Signing time: Sun 02 Jun 2024 04:24:50 +0000 Manifest this update: Sun 02 Jun 2024 04:24:50 +0000 Manifest next update: Sun 02 Jun 2024 10:24:50 +0000 Files and hashes: 1: -3C9C9rutlwEdK4sA17TRy-4Z8w.roa (hash: loADQdGLwVETdYtQv956cH1AMpSudOPuPT/PVOTDUto=) 2: BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl (hash: oKLTdZZzu8mymDg3ZvyiXZPKM6stut08Y7bAbEfr1EM=) 3: Jc1tF-t1bnhjr3FKS_kH6E04t6w.roa (hash: fJKx5D6tpc3U01HuCP5c12qAeQxsHpP+GlD9Un+7Z9w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3764 (0xeb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Validity Not Before: Jun 2 04:24:50 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=5D4279BC0A393D129572C460EAC3EC24D57E40C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:e2:68:2e:18:73:b7:fd:9d:69:1a:31:3c: 64:95:18:19:fd:85:66:89:7b:01:1e:a3:5a:c3:37: 94:9c:4e:d5:b5:89:c6:74:15:85:e3:2d:55:dd:88: 74:18:0c:8e:63:76:d9:97:01:d8:7b:42:2c:bb:4d: 96:0e:ec:08:c5:c7:7f:63:34:d5:92:ab:d7:97:04: 81:29:78:2a:06:85:46:5d:b9:56:be:b3:f7:a1:a5: a9:79:31:94:95:00:8d:77:06:a7:12:08:8e:49:df: da:fc:4f:eb:1d:d1:38:9f:e0:2d:e3:aa:9b:f7:4b: b9:0e:e3:4b:80:09:ab:af:ee:d3:56:86:30:3a:9f: b1:fc:7e:32:78:c8:7f:f3:a5:1f:eb:2c:54:0d:17: 41:db:24:50:a5:e6:19:af:de:4b:6b:b8:c2:80:74: f8:41:78:84:64:81:68:3e:36:16:3e:00:eb:8c:8c: 29:21:3b:83:a1:74:8e:97:57:5e:7a:27:81:20:e1: e6:3a:35:45:6c:34:58:60:a5:c0:2a:37:5a:f7:36: 5a:44:01:3e:d5:f1:1a:33:30:dc:e9:68:62:a7:59: 17:e0:af:a6:cb:00:8e:ce:31:5c:47:7c:e5:97:fa: 12:57:f8:8e:1c:32:ab:79:bb:32:7b:eb:02:a5:b9: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:42:79:BC:0A:39:3D:12:95:72:C4:60:EA:C3:EC:24:D5:7E:40:C8 X509v3 Authority Key Identifier: keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:1e:3e:30:cb:ec:64:40:56:34:88:01:01:6e:0a:20:0d:83: a2:b3:a0:02:cc:0a:bb:94:d1:10:6e:81:41:7a:9c:90:ec:6c: cb:99:d1:24:67:3b:8a:38:50:b3:6d:56:8d:af:78:09:ee:03: 6e:04:dd:9f:da:a5:74:87:dd:36:91:a9:2d:ea:51:c4:1b:c9: ac:43:6f:a2:81:c1:ee:e9:61:ee:87:57:67:d3:eb:b0:f7:7b: 53:d5:30:45:02:02:16:6c:37:3e:51:43:51:64:ee:3b:4f:18: 2b:39:1e:23:d2:8d:58:e5:0a:a7:92:c5:98:ce:cd:05:7b:1f: a3:70:55:be:ec:b3:01:03:39:26:66:d4:5b:66:28:b1:2c:0c: 2c:b5:c2:33:35:69:fa:2b:3f:bb:6e:8d:64:23:62:12:31:ab: 52:de:01:56:da:19:4e:37:d1:fd:cd:9d:de:5b:a4:50:32:a0: 3a:ba:0a:70:19:3b:1b:5b:ed:f6:d6:15:06:d9:d4:7c:26:fa: 01:b6:48:26:87:5b:18:6c:74:18:4a:c3:98:91:0a:52:f6:64: d4:26:0e:63:33:2c:1e:b3:8c:48:f6:c3:7c:57:fb:81:2d:ce: 8e:80:ea:5b:56:2c:85:5f:6f:5b:0a:a4:8d:c7:29:19:e6:9f: 9f:38:6a:05 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYw QzAwQkYxN0E1NUZEQjg1Q0FGNDU3OEJFODMzMDU2RTAyOEI0MzAeFw0yNDA2MDIw NDI0NTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVENDI3OUJDMEEzOTNE MTI5NTcyQzQ2MEVBQzNFQzI0RDU3RTQwQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDETuJoLhhzt/2daRoxPGSVGBn9hWaJewEeo1rDN5ScTtW1icZ0 FYXjLVXdiHQYDI5jdtmXAdh7Qiy7TZYO7AjFx39jNNWSq9eXBIEpeCoGhUZduVa+ s/ehpal5MZSVAI13BqcSCI5J39r8T+sd0Tif4C3jqpv3S7kO40uACauv7tNWhjA6 n7H8fjJ4yH/zpR/rLFQNF0HbJFCl5hmv3ktruMKAdPhBeIRkgWg+NhY+AOuMjCkh O4OhdI6XV156J4Eg4eY6NUVsNFhgpcAqN1r3NlpEAT7V8RozMNzpaGKnWRfgr6bL AI7OMVxHfOWX+hJX+I4cMqt5uzJ76wKlueZvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXUJ5vAo5PRKVcsRg6sPsJNV+QMgwHwYDVR0jBBgwFoAUBgwAvxelX9uFyvRX i+gzBW4Ci0MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS9CZ3dBdnhlbFg5dUZ5dlJYaS1nekJXNENpME0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Jnd0F2eGVsWDl1Rnl2UlhpLWd6Qlc0Q2kwTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvQmd3QXZ4ZWxYOXVG eXZSWGktZ3pCVzRDaTBNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEQePjDL7GRAVjSIAQFuCiANg6KzoALMCruU0RBugUF6nJDsbMuZ0SRnO4o4 ULNtVo2veAnuA24E3Z/apXSH3TaRqS3qUcQbyaxDb6KBwe7pYe6HV2fT67D3e1PV MEUCAhZsNz5RQ1Fk7jtPGCs5HiPSjVjlCqeSxZjOzQV7H6NwVb7sswEDOSZm1Ftm KLEsDCy1wjM1aforP7tujWQjYhIxq1LeAVbaGU430f3Nnd5bpFAyoDq6CnAZOxtb 7fbWFQbZ1Hwm+gG2SCaHWxhsdBhKw5iRClL2ZNQmDmMzLB6zjEj2w3xX+4Etzo6A 6ltWLIVfb1sKpI3HKRnmn584agU= -----END CERTIFICATE-----Generated at Sun Jun 2 09:22:41 2024 by rpki-client on console-ams.rpki-client.org