$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft File: j3yfJPFqzfopGAszfzITYCfMNNc.mft (raw, json) Hash identifier: CPvwInChOAoh9Hf2BiYf7PwJbWrQCv4ZCxsoiFSoW4E= Subject key identifier: C4:A8:B3:49:D0:33:B6:14:30:EC:AD:A5:F6:4B:C3:6D:0A:E9:9B:30 Authority key identifier: 8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7 Certificate issuer: /CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7 Certificate serial: 1781 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft Manifest number: 177D Signing time: Sat 01 Jun 2024 08:24:23 +0000 Manifest this update: Sat 01 Jun 2024 08:24:23 +0000 Manifest next update: Sat 01 Jun 2024 14:24:23 +0000 Files and hashes: 1: fXsyGZMt4JPBgR0t-YmNJKzw11Q.roa (hash: xM7+xJQigzAFokxOzburIBfP7ZHI+KfES+09b80hpIo=) 2: j3yfJPFqzfopGAszfzITYCfMNNc.crl (hash: akRw5fiAOY1+H+1PiB8xB3IwN8DZrgHCzFHB1skpm0U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 14:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6017 (0x1781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7 Validity Not Before: Jun 1 08:24:23 2024 GMT Not After : Jun 4 06:12:36 2024 GMT Subject: CN=C4A8B349D033B61430ECADA5F64BC36D0AE99B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:ab:9c:e1:fd:aa:a3:d3:c6:48:74:77:2c: 5c:7b:9f:1e:6d:2a:4e:75:90:40:99:b2:55:3c:68: 45:7b:0d:85:da:5f:6d:b0:f6:c7:d0:1a:3e:77:b9: ac:71:8c:3b:8b:97:b2:4b:3f:35:b3:fc:6d:54:ec: 08:d7:f2:1e:a1:7a:fe:34:5d:5a:74:e9:b0:ff:31: e5:dd:cd:9b:e3:0a:03:ad:4b:4b:30:cb:9a:1e:5b: fa:ae:77:fd:43:d4:86:59:96:36:fa:1e:ec:ef:57: 48:1c:e7:04:e6:73:ed:b8:0c:f7:46:9c:e7:99:fd: 29:f2:82:9e:78:cc:8c:21:a9:b5:c2:f3:f5:1e:1f: e7:e7:fd:2a:f0:ab:64:4e:63:cc:6a:11:7e:72:c2: 69:bd:f2:2c:38:04:44:5d:6f:63:69:85:4e:c3:28: 68:69:10:ea:a5:60:f9:a4:5b:f0:76:76:4e:ec:c6: 51:b9:4f:24:46:03:3d:68:02:15:6f:9c:b1:1d:2a: 69:ec:d0:93:c3:4c:7b:0d:db:f7:08:50:6e:12:01: 9a:5c:6a:cb:c1:28:31:ae:d1:be:4e:28:ed:30:b7: da:bb:27:2a:97:33:12:11:d3:3a:3e:a9:ce:e3:dd: 68:6c:b1:d2:b9:a0:79:4c:8f:4d:1a:6f:13:b8:33: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A8:B3:49:D0:33:B6:14:30:EC:AD:A5:F6:4B:C3:6D:0A:E9:9B:30 X509v3 Authority Key Identifier: keyid:8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:54:7b:4d:7c:14:59:c7:7b:34:2e:be:02:88:c9:07:17:00: a1:9a:d2:08:15:fa:b1:91:be:6e:75:36:0c:8b:b2:80:ab:cc: 30:4c:95:bf:fb:24:98:ae:c5:6c:5d:79:50:8e:98:9b:3c:dd: df:91:d8:c8:88:05:8d:57:64:70:12:3b:f7:54:0a:6d:eb:f6: 46:9a:5f:5e:7e:4f:07:4c:90:ad:8d:dc:b0:40:74:f2:05:4c: a2:9b:a1:c5:3e:10:f9:35:aa:e6:5e:e6:0c:fd:1f:43:c4:b4: 03:8e:28:b1:4b:a9:95:ce:a4:16:4b:5b:99:65:c0:b8:4f:64: f1:49:81:a2:1b:3a:6e:37:07:69:72:65:59:82:4c:b9:72:2b: 1a:02:7e:67:b0:5c:90:55:fc:b8:57:0a:70:e3:c3:9f:0a:01: c9:a8:14:a4:98:28:0e:6a:5d:d8:d6:5b:17:56:9b:14:81:8d: 0b:5a:73:d0:6b:55:ad:b1:08:c1:0d:9a:67:ac:fe:30:92:c4: 15:0b:0c:e3:33:a3:b8:77:65:d7:0b:4d:4a:50:b7:89:8c:c8: b0:53:2d:72:14:46:af:01:84:df:a2:97:45:c8:2f:7e:71:79: 4c:8b:3e:1f:0e:ba:5c:09:13:ba:6f:da:23:bd:90:99:88:56: 9c:14:f8:fc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICF4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEY3 QzlGMjRGMTZBQ0RGQTI5MTgwQjMzN0YzMjEzNjAyN0NDMzRENzAeFw0yNDA2MDEw ODI0MjNaFw0yNDA2MDQwNjEyMzZaMDMxMTAvBgNVBAMTKEM0QThCMzQ5RDAzM0I2 MTQzMEVDQURBNUY2NEJDMzZEMEFFOTlCMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+1quc4f2qo9PGSHR3LFx7nx5tKk51kECZslU8aEV7DYXaX22w 9sfQGj53uaxxjDuLl7JLPzWz/G1U7AjX8h6hev40XVp06bD/MeXdzZvjCgOtS0sw y5oeW/qud/1D1IZZljb6HuzvV0gc5wTmc+24DPdGnOeZ/Snygp54zIwhqbXC8/Ue H+fn/Srwq2ROY8xqEX5ywmm98iw4BERdb2NphU7DKGhpEOqlYPmkW/B2dk7sxlG5 TyRGAz1oAhVvnLEdKmns0JPDTHsN2/cIUG4SAZpcasvBKDGu0b5OKO0wt9q7JyqX MxIR0zo+qc7j3WhssdK5oHlMj00abxO4M/edAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUxKizSdAzthQw7K2l9kvDbQrpmzAwHwYDVR0jBBgwFoAUj3yfJPFqzfopGAsz fzITYCfMNNcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY5 NC9qM3lmSlBGcXpmb3BHQXN6ZnpJVFlDZk1OTmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ozeWZKUEZxemZvcEdBc3pmeklUWUNmTU5OYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2OTQvajN5ZkpQRnF6Zm9w R0FzemZ6SVRZQ2ZNTk5jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHlUe018FFnHezQuvgKIyQcXAKGa0ggV+rGRvm51NgyLsoCrzDBMlb/7JJiu xWxdeVCOmJs83d+R2MiIBY1XZHASO/dUCm3r9kaaX15+TwdMkK2N3LBAdPIFTKKb ocU+EPk1quZe5gz9H0PEtAOOKLFLqZXOpBZLW5llwLhPZPFJgaIbOm43B2lyZVmC TLlyKxoCfmewXJBV/LhXCnDjw58KAcmoFKSYKA5qXdjWWxdWmxSBjQtac9BrVa2x CMENmmes/jCSxBULDOMzo7h3ZdcLTUpQt4mMyLBTLXIURq8BhN+il0XIL35xeUyL Ph8OulwJE7pv2iO9kJmIVpwU+Pw= -----END CERTIFICATE-----Generated at Sat Jun 1 13:43:23 2024 by rpki-client on console-fra.rpki-client.org