$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft File: j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft (raw, json) Hash identifier: lFRgANn8YGAco3B9xWwu0nNvx7nVZ12yBdhrr2roqBk= Subject key identifier: 9A:A0:75:E6:08:52:AF:1E:4C:C0:07:87:13:A9:C0:F1:94:2F:E3:83 Authority key identifier: 8F:4A:A5:C4:72:5A:EA:B7:4E:BF:AA:4F:CE:AF:1D:E6:60:B5:95:05 Certificate issuer: /CN=8F4AA5C4725AEAB74EBFAA4FCEAF1DE660B59505 Certificate serial: 0E39 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j0qlxHJa6rdOv6pPzq8d5mC1lQU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft Manifest number: 0E39 Signing time: Sat 01 Jun 2024 10:25:28 +0000 Manifest this update: Sat 01 Jun 2024 10:25:28 +0000 Manifest next update: Sat 01 Jun 2024 16:25:28 +0000 Files and hashes: 1: j0qlxHJa6rdOv6pPzq8d5mC1lQU.crl (hash: kQ5/vdVplW12AkRsuOa0zs7TZ/msy4NuP07xCfBdaAc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j0qlxHJa6rdOv6pPzq8d5mC1lQU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 16:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3641 (0xe39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F4AA5C4725AEAB74EBFAA4FCEAF1DE660B59505 Validity Not Before: Jun 1 10:25:28 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9AA075E60852AF1E4CC0078713A9C0F1942FE383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:fd:e0:3c:e8:6d:dc:49:d9:37:09:96:bc: 16:01:60:9c:c4:0e:7e:1a:c6:a1:6a:ba:ea:17:2e: 14:02:ef:ea:9f:0c:70:0f:a3:34:97:fe:3e:64:fc: 76:02:06:0f:de:6c:70:bd:60:d8:2c:0e:2d:7a:0a: 56:76:aa:1f:31:ed:4a:cc:09:a1:5a:15:82:93:38: 49:d9:6d:f7:0a:70:8b:6c:23:2a:12:cc:ec:a5:d7: 6f:b6:1e:8e:f2:56:5f:0d:3f:80:4b:7b:3b:6e:85: 50:21:b9:16:05:a4:70:16:70:59:c4:66:46:8a:97: a4:4f:86:64:a7:15:6e:1b:de:b5:07:9f:b4:05:49: 64:08:46:7b:cc:58:6e:62:ff:7d:76:8c:00:f3:39: b0:5b:1d:84:12:c4:dc:69:47:9d:b6:7d:e8:42:50: f2:c5:71:84:2c:4e:9d:b2:31:53:62:c9:54:74:b1: fa:53:11:4c:99:23:92:3a:e0:30:3c:62:e5:ab:3a: 9a:f9:d7:7e:07:37:b8:98:88:bc:15:59:4c:de:02: 89:14:b4:85:08:ee:99:2d:41:38:52:f3:bd:92:7a: 41:7c:fe:d8:6e:fd:03:04:d7:98:88:7b:44:a3:bf: 97:ec:7f:f3:51:5d:f3:c6:46:04:a9:a9:ee:63:8d: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A0:75:E6:08:52:AF:1E:4C:C0:07:87:13:A9:C0:F1:94:2F:E3:83 X509v3 Authority Key Identifier: keyid:8F:4A:A5:C4:72:5A:EA:B7:4E:BF:AA:4F:CE:AF:1D:E6:60:B5:95:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j0qlxHJa6rdOv6pPzq8d5mC1lQU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:56:01:8b:57:a7:f9:64:bc:67:67:5b:0a:34:48:60:d0:a0: 6c:72:c1:77:f1:b5:0c:0d:c1:c6:67:2f:f6:b2:e8:ca:5c:4d: df:70:90:91:1b:c1:e7:13:da:52:49:71:39:39:2c:a7:57:f3: 6a:72:a9:b2:9b:f2:57:03:93:f6:63:2a:26:37:ba:d4:54:a1: 2d:42:77:2a:a0:2c:fb:18:a5:53:30:6b:e6:47:ba:e8:31:34: 86:2a:77:72:c5:b6:a3:9d:5e:df:8f:47:b1:2a:27:9a:75:fa: c0:be:f5:48:9f:83:00:f2:2c:32:12:eb:2e:e9:19:64:5c:0b: 21:52:d9:78:2b:25:8c:19:44:75:39:f5:19:52:10:9b:26:2c: 13:6c:42:a0:fb:5f:c7:92:a4:a8:e8:34:c3:fa:a5:c7:8c:37: 97:69:45:4d:f6:93:c9:4a:08:9f:ba:2a:90:75:0c:67:23:e1: 0d:27:ce:3b:7b:37:04:b6:b1:f2:d1:e0:ed:0c:ce:4d:23:80: 3a:ad:5f:f2:bf:29:44:3d:05:50:33:bb:15:15:27:37:30:31: 1f:41:82:ac:01:9e:32:90:4c:0f:f6:de:a4:3b:c2:11:01:c9: bd:93:82:47:ee:3c:30:d3:bb:b3:56:6e:79:d4:80:de:f2:69: 9b:48:db:1d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEY0 QUE1QzQ3MjVBRUFCNzRFQkZBQTRGQ0VBRjFERTY2MEI1OTUwNTAeFw0yNDA2MDEx MDI1MjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlBQTA3NUU2MDg1MkFG MUU0Q0MwMDc4NzEzQTlDMEYxOTQyRkUzODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8kf3gPOht3EnZNwmWvBYBYJzEDn4axqFquuoXLhQC7+qfDHAP ozSX/j5k/HYCBg/ebHC9YNgsDi16ClZ2qh8x7UrMCaFaFYKTOEnZbfcKcItsIyoS zOyl12+2Ho7yVl8NP4BLeztuhVAhuRYFpHAWcFnEZkaKl6RPhmSnFW4b3rUHn7QF SWQIRnvMWG5i/312jADzObBbHYQSxNxpR522fehCUPLFcYQsTp2yMVNiyVR0sfpT EUyZI5I64DA8YuWrOpr5134HN7iYiLwVWUzeAokUtIUI7pktQThS872SekF8/thu /QME15iIe0Sjv5fsf/NRXfPGRgSpqe5jjZjdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmqB15ghSrx5MwAeHE6nA8ZQv44MwHwYDVR0jBBgwFoAUj0qlxHJa6rdOv6pP zq8d5mC1lQUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 Ny9qMHFseEhKYTZyZE92NnBQenE4ZDVtQzFsUVUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2owcWx4SEphNnJkT3Y2cFB6cThkNW1DMWxRVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODcvajBxbHhISmE2cmRP djZwUHpxOGQ1bUMxbFFVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEVWAYtXp/lkvGdnWwo0SGDQoGxywXfxtQwNwcZnL/ay6MpcTd9wkJEbwecT 2lJJcTk5LKdX82pyqbKb8lcDk/ZjKiY3utRUoS1CdyqgLPsYpVMwa+ZHuugxNIYq d3LFtqOdXt+PR7EqJ5p1+sC+9UifgwDyLDIS6y7pGWRcCyFS2XgrJYwZRHU59RlS EJsmLBNsQqD7X8eSpKjoNMP6pceMN5dpRU32k8lKCJ+6KpB1DGcj4Q0nzjt7NwS2 sfLR4O0Mzk0jgDqtX/K/KUQ9BVAzuxUVJzcwMR9BgqwBnjKQTA/23qQ7whEByb2T gkfuPDDTu7NWbnnUgN7yaZtI2x0= -----END CERTIFICATE-----Generated at Sat Jun 1 12:23:48 2024 by rpki-client on console-ams.rpki-client.org