$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft File: bvKvdW1CN346rCRuOiHy_UtAf8U.mft (raw, json) Hash identifier: 1S5WNbhAX0DzKw5xYvpEjMImefu/QCoi9Fu8/cK3LUM= Subject key identifier: 8E:3F:B0:FC:DD:8D:C3:DB:D0:39:B7:36:C1:57:2E:F3:E3:43:0F:73 Authority key identifier: 6E:F2:AF:75:6D:42:37:7E:3A:AC:24:6E:3A:21:F2:FD:4B:40:7F:C5 Certificate issuer: /CN=6EF2AF756D42377E3AAC246E3A21F2FD4B407FC5 Certificate serial: 08E5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bvKvdW1CN346rCRuOiHy_UtAf8U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft Manifest number: 08E5 Signing time: Sun 02 Jun 2024 13:55:01 +0000 Manifest this update: Sun 02 Jun 2024 13:55:01 +0000 Manifest next update: Sun 02 Jun 2024 19:55:01 +0000 Files and hashes: 1: bvKvdW1CN346rCRuOiHy_UtAf8U.crl (hash: W/rkZYAzwZjA736Ng/G7r9/qTR71aKEjDfw9OScbLm8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bvKvdW1CN346rCRuOiHy_UtAf8U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 16:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2277 (0x8e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EF2AF756D42377E3AAC246E3A21F2FD4B407FC5 Validity Not Before: Jun 2 13:55:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=8E3FB0FCDD8DC3DBD039B736C1572EF3E3430F73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:88:6d:57:bb:d0:59:12:16:e0:ba:5f:88: 1f:48:a6:4f:8d:29:64:80:02:30:3a:41:a8:b9:f2: b7:d2:e9:ff:e0:04:19:ee:d8:5f:c2:2e:8e:b1:f6: 0a:c7:f1:7c:b4:76:d4:2b:43:c2:a1:f2:cb:2b:26: 23:12:ff:97:e2:e5:60:d2:2d:72:fb:f3:7a:60:a7: 58:d8:d0:30:b1:6b:b3:f5:57:ee:d9:2e:ac:80:fd: d1:21:4c:20:8e:af:2d:e0:03:23:cd:53:18:69:46: 10:9f:70:04:e2:b1:f1:9a:49:9b:d6:91:90:fd:85: a7:1e:de:13:d3:c4:ea:43:17:f5:5c:54:33:e1:9b: 46:66:39:dc:4b:66:f5:5b:a8:d2:bc:c4:19:d0:0c: ed:af:44:1a:a5:a1:54:cc:51:02:a4:91:bd:61:02: b1:59:e1:4a:e5:5c:dc:c4:13:a4:44:94:8b:02:08: a6:47:66:47:53:84:d5:e4:b8:a0:6f:ce:bc:79:99: 47:f2:e7:b7:9b:75:82:da:84:0b:e3:35:91:03:c3: f7:2b:c3:25:77:3d:32:35:3a:12:9c:3a:8c:1e:88: b7:46:bc:c5:38:a9:29:ad:03:8c:28:8d:9c:99:69: c6:0c:61:d3:04:e2:eb:b3:93:bf:d2:90:f9:94:3e: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3F:B0:FC:DD:8D:C3:DB:D0:39:B7:36:C1:57:2E:F3:E3:43:0F:73 X509v3 Authority Key Identifier: keyid:6E:F2:AF:75:6D:42:37:7E:3A:AC:24:6E:3A:21:F2:FD:4B:40:7F:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bvKvdW1CN346rCRuOiHy_UtAf8U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7b:aa:cb:54:c7:a1:07:ce:18:53:05:0c:f6:12:a9:47:09: 8c:43:10:2c:3a:4f:90:df:00:f1:a8:e3:40:34:cf:f7:3f:27: df:64:53:f2:f8:ac:0b:b8:91:1c:3f:c2:64:7d:02:c0:27:77: 49:a1:7e:f1:b2:39:32:d8:0d:85:af:cd:d5:b0:d7:fe:b8:e7: 2a:95:86:0a:06:ed:8c:12:39:91:34:20:a2:11:b6:88:e4:bd: 8c:e0:82:b3:dd:29:98:6e:9e:36:02:9a:07:bf:77:67:1a:71: e5:f6:4b:92:0f:02:26:52:90:a8:31:28:29:f4:0a:c1:34:9c: 9e:b5:45:90:7e:54:3e:e7:4c:10:80:56:b3:50:89:ae:e1:f5: 15:8f:2c:e0:35:f2:f5:2a:b3:56:0e:8e:0d:72:3f:1b:54:ba: 8c:c8:aa:37:e1:8f:30:85:8d:68:b4:94:0f:2e:ee:b6:09:63: 12:9c:92:08:a2:fa:74:bb:05:e0:6a:56:a9:18:da:47:c0:67: 9d:d7:b5:46:75:dc:e4:f7:ad:b3:39:b1:30:7e:57:62:09:b1: cd:da:40:35:81:19:88:43:05:9b:4c:29:6b:46:d9:dc:ae:be: b4:e1:e0:0a:b5:3e:4a:63:fe:43:8d:f8:19:25:9d:74:c6:74: 70:b5:4b:94 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVG MkFGNzU2RDQyMzc3RTNBQUMyNDZFM0EyMUYyRkQ0QjQwN0ZDNTAeFw0yNDA2MDIx MzU1MDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDhFM0ZCMEZDREQ4REMz REJEMDM5QjczNkMxNTcyRUYzRTM0MzBGNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC124htV7vQWRIW4LpfiB9Ipk+NKWSAAjA6Qai58rfS6f/gBBnu 2F/CLo6x9grH8Xy0dtQrQ8Kh8ssrJiMS/5fi5WDSLXL783pgp1jY0DCxa7P1V+7Z LqyA/dEhTCCOry3gAyPNUxhpRhCfcATisfGaSZvWkZD9hace3hPTxOpDF/VcVDPh m0ZmOdxLZvVbqNK8xBnQDO2vRBqloVTMUQKkkb1hArFZ4UrlXNzEE6RElIsCCKZH ZkdThNXkuKBvzrx5mUfy57ebdYLahAvjNZEDw/crwyV3PTI1OhKcOoweiLdGvMU4 qSmtA4wojZyZacYMYdME4uuzk7/SkPmUPvk1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUjj+w/N2Nw9vQObc2wVcu8+NDD3MwHwYDVR0jBBgwFoAUbvKvdW1CN346rCRu OiHy/UtAf8UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx My9idkt2ZFcxQ04zNDZyQ1J1T2lIeV9VdEFmOFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2J2S3ZkVzFDTjM0NnJDUnVPaUh5X1V0QWY4VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTMvYnZLdmRXMUNOMzQ2 ckNSdU9pSHlfVXRBZjhVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF17qstUx6EHzhhTBQz2EqlHCYxDECw6T5DfAPGo40A0z/c/J99kU/L4rAu4 kRw/wmR9AsAnd0mhfvGyOTLYDYWvzdWw1/645yqVhgoG7YwSOZE0IKIRtojkvYzg grPdKZhunjYCmge/d2caceX2S5IPAiZSkKgxKCn0CsE0nJ61RZB+VD7nTBCAVrNQ ia7h9RWPLOA18vUqs1YOjg1yPxtUuozIqjfhjzCFjWi0lA8u7rYJYxKckgii+nS7 BeBqVqkY2kfAZ53XtUZ13OT3rbM5sTB+V2IJsc3aQDWBGYhDBZtMKWtG2dyuvrTh 4Aq1Pkpj/kON+BklnXTGdHC1S5Q= -----END CERTIFICATE-----Generated at Sun Jun 2 15:24:34 2024 by rpki-client on console-ams.rpki-client.org