$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft File: e13JVZm-TeRUqZwMJXU9HgDHQU8.mft (raw, json) Hash identifier: Tl3BU7peebPdC5RyatihooED4XIyAlc6uCilFN6VC+Y= Subject key identifier: 22:40:38:AA:D8:41:94:E3:A8:92:01:13:F5:E5:17:74:F4:36:36:3E Authority key identifier: 7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F Certificate issuer: /CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F Certificate serial: 02E6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft Manifest number: 02DD Signing time: Mon 20 May 2024 04:24:40 +0000 Manifest this update: Mon 20 May 2024 04:24:40 +0000 Manifest next update: Mon 20 May 2024 10:24:40 +0000 Files and hashes: 1: D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa (hash: ElwPAAB/RBdxmPJCt34rJ3jgiG/FnJnHOmYYjmFgxQk=) 2: H4KORnDhY-VKxuYTHr3rYLKQWnQ.roa (hash: oKzTY6oapz472bUTZ5uNwL98YiUS9I+uG+Bk+tLd+40=) 3: e13JVZm-TeRUqZwMJXU9HgDHQU8.crl (hash: hskJZut+8Gto2fV+tC8+F4X+rl7XfGHKIMWlEKjZh2Y=) 4: ielmdqzudOhinh8eKxaKX8pOiFM.roa (hash: b1jFaNbCxCnTA5SNi3iulLcr/VBCv1DMCD/Oty6Pwms=) 5: rtLqb4gLaNofoaISUeU9kHQWtDU.roa (hash: UjglH3914lXJyAJG/QXGAiW0Ird7Y8FuX01hcUXXay0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 05:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F Validity Not Before: May 20 04:24:40 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=224038AAD84194E3A8920113F5E51774F436363E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:66:18:f4:fa:4e:97:03:2b:82:ef:26:5e: 9f:c5:a9:bd:97:41:e4:21:b0:41:c9:2c:19:9d:04: b3:73:de:57:74:4e:2e:bb:16:80:b2:2a:e4:f6:8d: 89:26:69:1e:73:14:7c:67:78:1c:c7:30:7c:19:e3: 5b:33:0f:1c:87:8d:d2:bf:d8:67:57:08:b5:50:93: 01:d7:c8:dc:21:61:9b:75:60:64:85:b1:b1:5e:cc: 0d:d9:5b:23:e2:83:70:17:7c:db:90:58:80:ed:1d: 01:7b:d0:df:18:e2:90:77:d1:4c:3e:b3:66:59:3d: c3:00:e3:2c:ec:c3:fb:30:93:c2:2e:a2:0a:59:49: e5:04:da:28:3c:f8:01:3b:41:4d:07:05:92:b0:00: f7:a7:3c:c3:b7:5f:0a:d1:22:17:49:68:48:be:fa: 10:05:87:55:0e:6b:3b:a4:8c:86:90:ce:de:69:dd: 68:48:c9:76:3a:c6:2f:95:bc:41:87:96:87:fb:cd: 11:01:52:d9:b0:b9:c9:28:8d:d2:42:72:bf:b6:5f: a7:af:50:a7:5a:1b:e4:3b:58:c8:52:00:7f:c5:da: d0:22:3b:c7:b1:c6:29:f7:1e:1a:1c:16:0a:76:62: f8:ce:e2:88:db:cb:a7:71:12:10:21:a6:2d:41:85: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:40:38:AA:D8:41:94:E3:A8:92:01:13:F5:E5:17:74:F4:36:36:3E X509v3 Authority Key Identifier: keyid:7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:1e:34:df:97:1c:fd:75:82:9c:e8:e2:3d:95:ae:29:0c:33: b9:d9:dc:c6:42:8b:a9:8f:90:82:23:5e:6b:7a:bf:e2:35:49: 73:35:6b:7c:05:25:12:50:36:f8:9e:75:7e:91:4b:9e:e9:67: ff:3f:14:b4:df:f5:b4:29:48:4a:23:8c:ed:10:06:05:1f:36: ad:1d:c5:03:78:16:d1:be:6e:ab:55:5d:ec:d3:34:3a:8f:6e: 0f:b3:ab:82:90:ad:4e:50:81:09:9f:34:b5:47:ea:f4:b2:14: 53:10:6b:b7:b7:97:42:2d:a7:3e:1c:c3:0f:95:6c:ce:99:e6: 78:10:bc:b8:81:31:53:67:2d:d9:29:81:72:8a:90:cf:19:d0: 91:db:d6:2c:a4:92:cb:67:b6:20:ac:a6:ae:55:82:ab:00:6e: 5a:3c:16:96:a7:d5:82:2e:21:7d:fc:06:66:36:5a:5e:be:1f: 6a:e1:17:39:43:e0:37:ca:d3:6f:d4:86:56:87:67:d2:5b:05: 6e:ad:2a:33:cd:b0:65:a5:0a:3d:f7:ae:49:1d:51:0d:f8:69: 6e:ec:79:63:b4:ab:39:2d:60:6b:ab:a1:1e:12:44:c9:5b:07: f6:08:45:c6:3a:00:4f:32:ae:0e:ac:c0:43:31:35:f9:fb:3d: e2:f5:24:1e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0I1 REM5NTU5OUJFNERFNDU0QTk5QzBDMjU3NTNEMUUwMEM3NDE0RjAeFw0yNDA1MjAw NDI0NDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIyNDAzOEFBRDg0MTk0 RTNBODkyMDExM0Y1RTUxNzc0RjQzNjM2M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8N2YY9PpOlwMrgu8mXp/Fqb2XQeQhsEHJLBmdBLNz3ld0Ti67 FoCyKuT2jYkmaR5zFHxneBzHMHwZ41szDxyHjdK/2GdXCLVQkwHXyNwhYZt1YGSF sbFezA3ZWyPig3AXfNuQWIDtHQF70N8Y4pB30Uw+s2ZZPcMA4yzsw/swk8IuogpZ SeUE2ig8+AE7QU0HBZKwAPenPMO3XwrRIhdJaEi++hAFh1UOazukjIaQzt5p3WhI yXY6xi+VvEGHlof7zREBUtmwuckojdJCcr+2X6evUKdaG+Q7WMhSAH/F2tAiO8ex xin3HhocFgp2YvjO4ojby6dxEhAhpi1BhfuHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIkA4qthBlOOokgET9eUXdPQ2Nj4wHwYDVR0jBBgwFoAUe13JVZm+TeRUqZwM JXU9HgDHQU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny9lMTNKVlptLVRlUlVxWndNSlhVOUhnREhRVTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2UxM0pWWm0tVGVSVXFad01KWFU5SGdESFFVOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvZTEzSlZabS1UZVJV cVp3TUpYVTlIZ0RIUVU4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACceNN+XHP11gpzo4j2VrikMM7nZ3MZCi6mPkIIjXmt6v+I1SXM1a3wFJRJQ NviedX6RS57pZ/8/FLTf9bQpSEojjO0QBgUfNq0dxQN4FtG+bqtVXezTNDqPbg+z q4KQrU5QgQmfNLVH6vSyFFMQa7e3l0Itpz4cww+VbM6Z5ngQvLiBMVNnLdkpgXKK kM8Z0JHb1iykkstntiCspq5VgqsAblo8Fpan1YIuIX38BmY2Wl6+H2rhFzlD4DfK 02/UhlaHZ9JbBW6tKjPNsGWlCj33rkkdUQ34aW7seWO0qzktYGuroR4SRMlbB/YI RcY6AE8yrg6swEMxNfn7PeL1JB4= -----END CERTIFICATE-----Generated at Mon May 20 04:53:37 2024 by rpki-client on console-ams.rpki-client.org