$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft File: qZvZ5t79lpSrRdfzLK3QHlKz348.mft (raw, json) Hash identifier: rmQfq36SL5cKeK9/5Y5wX1d+bHYNjeA6gEN6kSUoz/Q= Subject key identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E Authority key identifier: A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F Certificate issuer: /CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Certificate serial: 0E33 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft Manifest number: 0E33 Signing time: Sun 02 Jun 2024 13:55:07 +0000 Manifest this update: Sun 02 Jun 2024 13:55:06 +0000 Manifest next update: Sun 02 Jun 2024 19:55:06 +0000 Files and hashes: 1: qZvZ5t79lpSrRdfzLK3QHlKz348.crl (hash: uiGFJ8ZEw3Ac/r/E7xYN02/yf+AKeugfXkDQck3joaU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 19:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3635 (0xe33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Validity Not Before: Jun 2 13:55:06 2024 GMT Not After : Oct 8 00:16:33 2024 GMT Subject: CN=DFD9F4D304399082BFD1C594FA44EA136887D66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:03:4e:2f:18:7b:b5:99:63:b9:d6:7b:b9: 0f:ed:ca:84:fc:26:50:4d:44:00:df:38:d0:64:3c: 3c:6e:ed:ee:d2:98:c1:32:c7:1b:0b:ed:ff:33:c3: db:86:a9:fd:8f:3e:bc:e5:fb:40:06:e5:e0:15:fa: a7:b9:21:f5:86:4c:be:84:09:88:b5:11:61:1f:cd: 3f:b5:e2:8c:22:7b:25:e7:dc:ce:80:96:df:69:c1: 84:88:7d:c6:67:a2:09:51:7a:a2:0d:6b:62:02:fa: 0a:b7:aa:63:47:d9:01:c3:02:b5:d4:9d:de:d0:77: 18:d4:36:5f:3d:4a:12:38:11:27:13:37:03:31:8c: d5:05:c5:1e:33:64:65:4e:df:4a:9b:71:47:4a:27: 76:a7:fa:b5:75:60:16:6e:8f:ef:af:05:8f:34:37: d1:80:7b:71:63:23:48:d3:87:05:50:3e:da:de:07: 60:d8:02:2c:66:38:81:aa:be:c6:10:b5:7d:65:4b: 66:9a:3b:5a:99:0c:02:d4:31:46:03:1c:78:c2:22: ca:ab:27:49:cf:91:26:90:78:b4:e9:55:e7:3e:97: 44:03:44:9e:69:05:1d:a7:06:27:b3:6d:0f:db:e0: 33:db:28:78:69:60:0b:60:9e:49:af:ee:a7:9e:af: bc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E X509v3 Authority Key Identifier: keyid:A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:fa:36:9e:ea:57:fa:d6:cb:f8:0e:cc:2e:97:f4:ea:e3:ee: 63:7f:70:ce:fb:78:11:de:08:46:0d:db:6a:d4:15:a9:5e:82: 94:3c:51:92:a5:ef:98:98:84:df:25:d2:5d:36:80:11:d6:bf: 9d:0e:b1:42:f4:18:92:eb:b6:7b:42:b6:6f:3b:73:cf:e4:80: 91:af:b1:42:33:72:25:cf:80:3c:6b:12:ed:1c:db:e0:29:4e: 62:a1:79:a9:12:1a:cc:0f:0f:f6:1c:b0:e4:c7:11:05:73:6b: dc:19:e9:ef:22:5d:f7:c9:e4:f9:ec:ab:d7:61:84:04:22:71: 8c:10:72:ea:40:5e:46:03:a8:1a:1c:3e:fa:99:50:c5:a3:e2: 4b:df:66:71:00:c5:9d:3c:37:1d:38:8e:36:3c:2d:c8:d3:b2: 61:a6:54:a8:fd:a4:91:7b:34:ce:85:7a:4c:d0:73:f9:4f:cc: c5:a3:eb:89:61:27:85:24:a3:b8:27:f1:09:62:d2:d3:00:4e: 33:e9:c0:cc:61:ea:83:60:9a:71:70:c4:60:cb:b2:90:d6:26: 6f:c6:15:7b:0b:b9:ba:69:43:13:14:ac:bf:e7:54:2f:50:40: 71:1b:de:c0:bf:21:09:3c:40:55:62:1a:77:62:32:f5:9d:f1: 49:9d:e5:39 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTk5 QkQ5RTZERUZEOTY5NEFCNDVEN0YzMkNBREQwMUU1MkIzREY4RjAeFw0yNDA2MDIx MzU1MDZaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKERGRDlGNEQzMDQzOTkw ODJCRkQxQzU5NEZBNDRFQTEzNjg4N0Q2NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDalANOLxh7tZljudZ7uQ/tyoT8JlBNRADfONBkPDxu7e7SmMEy xxsL7f8zw9uGqf2PPrzl+0AG5eAV+qe5IfWGTL6ECYi1EWEfzT+14owieyXn3M6A lt9pwYSIfcZnoglReqINa2IC+gq3qmNH2QHDArXUnd7QdxjUNl89ShI4EScTNwMx jNUFxR4zZGVO30qbcUdKJ3an+rV1YBZuj++vBY80N9GAe3FjI0jThwVQPtreB2DY AixmOIGqvsYQtX1lS2aaO1qZDALUMUYDHHjCIsqrJ0nPkSaQeLTpVec+l0QDRJ5p BR2nBiezbQ/b4DPbKHhpYAtgnkmv7qeer7xpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU39n00wQ5kIK/0cWU+kTqE2iH1m4wHwYDVR0jBBgwFoAUqZvZ5t79lpSrRdfz LK3QHlKz348wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM2 My9xWnZaNXQ3OWxwU3JSZGZ6TEszUUhsS3ozNDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Fadlo1dDc5bHBTclJkZnpMSzNRSGxLejM0OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzNjMvcVp2WjV0NzlscFNy UmRmekxLM1FIbEt6MzQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABX6Np7qV/rWy/gOzC6X9Orj7mN/cM77eBHeCEYN22rUFalegpQ8UZKl75iY hN8l0l02gBHWv50OsUL0GJLrtntCtm87c8/kgJGvsUIzciXPgDxrEu0c2+ApTmKh eakSGswPD/YcsOTHEQVza9wZ6e8iXffJ5Pnsq9dhhAQicYwQcupAXkYDqBocPvqZ UMWj4kvfZnEAxZ08Nx04jjY8LcjTsmGmVKj9pJF7NM6FekzQc/lPzMWj64lhJ4Uk o7gn8Qli0tMATjPpwMxh6oNgmnFwxGDLspDWJm/GFXsLubppQxMUrL/nVC9QQHEb 3sC/IQk8QFViGndiMvWd8Umd5Tk= -----END CERTIFICATE-----Generated at Sun Jun 2 17:08:09 2024 by rpki-client on console-fra.rpki-client.org