$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft File: TS1a-PNilt7eZELYEcBKdAhswCk.mft (raw, json) Hash identifier: V0/376pUzWLh0Hztl0NjVIvva1L9ctCQrJcxk/8x+wY= Subject key identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 Authority key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 Certificate issuer: /CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Certificate serial: 1641 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft Manifest number: 1641 Signing time: Sat 01 Jun 2024 10:27:51 +0000 Manifest this update: Sat 01 Jun 2024 10:27:51 +0000 Manifest next update: Sat 01 Jun 2024 16:27:51 +0000 Files and hashes: 1: TS1a-PNilt7eZELYEcBKdAhswCk.crl (hash: BQmprEOCNlFnwMKnv3U51E9T6YdTMZeO1AoqKQcSW7c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 16:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5697 (0x1641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Validity Not Before: Jun 1 10:27:51 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=FB05EB7D2AA945F23FDF3EE47C8BEE704F06A134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:4f:7d:fc:28:2d:d7:cd:f1:6e:6e:4e:d9: d7:54:74:5a:df:76:cd:82:70:0b:4d:ee:b7:b7:8a: 50:8a:b1:fd:c2:a7:0e:ac:0d:35:a3:59:47:52:b8: da:5c:4c:59:79:1d:ae:1f:06:ce:31:bb:67:03:b6: 18:7e:e6:6f:b9:2d:27:2b:59:a3:bd:d1:b7:7a:f2: c5:8f:5a:14:3c:c4:51:a6:7f:4b:42:fb:76:88:0d: 7f:f8:2d:36:29:1b:73:31:02:b2:f6:2f:84:c0:17: 67:5c:9e:b7:db:48:f1:e1:f9:1d:53:15:38:19:5e: 9e:3b:65:09:3d:2d:2b:14:9e:e9:44:ee:5c:fb:4c: 6d:31:68:42:0f:12:1f:f5:d2:50:57:ee:dc:a3:77: c4:e0:1c:65:0a:c3:fc:6d:98:0f:25:b7:51:c6:88: 34:3f:65:e9:e9:5b:8d:6e:64:75:b1:50:74:51:59: e7:21:fe:84:62:ef:e2:e4:8f:95:08:7e:7e:2f:b3: b7:d6:09:18:c8:aa:3b:86:c9:89:66:76:c6:c6:07: 8e:d9:19:9f:90:61:8e:3d:27:fb:d9:bc:21:3b:7e: f5:25:c9:e2:00:6e:22:09:21:da:1e:b3:8d:cd:73: 4c:a5:38:1f:4d:7e:47:0f:6d:cc:38:75:61:6a:b8: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 X509v3 Authority Key Identifier: keyid:4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:f4:20:16:74:cb:c7:5a:08:06:7b:fb:b1:d2:f7:84:0e:5d: fc:4f:63:10:7a:f5:c0:1a:8b:d1:ee:83:6d:4e:12:92:a8:4d: b3:dc:2a:1d:d8:1b:7e:47:86:4c:bf:0e:10:6c:c9:21:99:c6: 7a:03:93:7a:2d:47:e8:5d:cd:13:57:79:e8:55:5d:c4:ac:8f: d9:04:fd:92:6d:de:d0:43:6b:3f:20:e1:01:8d:89:d1:6b:75: c2:9c:b0:a1:4e:97:0c:c3:0f:25:2a:32:06:83:3f:a2:7d:e2: ee:cf:2c:46:8d:65:ee:0d:89:c8:23:ad:d8:96:29:1e:98:53: b7:c4:31:c5:d2:13:a8:17:de:98:90:07:b7:35:0a:cf:b8:28: 36:db:6d:dd:50:db:34:df:44:ff:e5:ef:4d:ad:8b:d4:f2:db: f1:ae:e2:fc:ce:36:c8:c9:01:24:fd:4c:8b:17:9b:31:50:5e: 41:19:e0:c0:5d:f6:27:85:2b:94:ac:f8:36:9b:d9:16:7f:a5: 7a:c6:81:71:03:63:aa:0e:4c:fc:05:7a:d6:63:b3:7b:c2:6a: bf:b9:f3:3f:d8:0d:57:e8:53:fd:3a:97:87:4b:7e:0b:c2:66: 50:de:f6:e2:bf:a8:7b:60:54:27:7f:d6:02:84:2e:c9:0c:9d: ce:81:3c:d8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEQy RDVBRjhGMzYyOTZERURFNjQ0MkQ4MTFDMDRBNzQwODZDQzAyOTAeFw0yNDA2MDEx MDI3NTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZCMDVFQjdEMkFBOTQ1 RjIzRkRGM0VFNDdDOEJFRTcwNEYwNkExMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLMk99/Cgt183xbm5O2ddUdFrfds2CcAtN7re3ilCKsf3Cpw6s DTWjWUdSuNpcTFl5Ha4fBs4xu2cDthh+5m+5LScrWaO90bd68sWPWhQ8xFGmf0tC +3aIDX/4LTYpG3MxArL2L4TAF2dcnrfbSPHh+R1TFTgZXp47ZQk9LSsUnulE7lz7 TG0xaEIPEh/10lBX7tyjd8TgHGUKw/xtmA8lt1HGiDQ/ZenpW41uZHWxUHRRWech /oRi7+Lkj5UIfn4vs7fWCRjIqjuGyYlmdsbGB47ZGZ+QYY49J/vZvCE7fvUlyeIA biIJIdoes43Nc0ylOB9NfkcPbcw4dWFquOJtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+wXrfSqpRfI/3z7kfIvucE8GoTQwHwYDVR0jBBgwFoAUTS1a+PNilt7eZELY EcBKdAhswCkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc5 MC9UUzFhLVBOaWx0N2VaRUxZRWNCS2RBaHN3Q2suY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RTMWEtUE5pbHQ3ZVpFTFlFY0JLZEFoc3dDay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3OTAvVFMxYS1QTmlsdDdl WkVMWUVjQktkQWhzd0NrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEb0IBZ0y8daCAZ7+7HS94QOXfxPYxB69cAai9Hug21OEpKoTbPcKh3YG35H hky/DhBsySGZxnoDk3otR+hdzRNXeehVXcSsj9kE/ZJt3tBDaz8g4QGNidFrdcKc sKFOlwzDDyUqMgaDP6J94u7PLEaNZe4NicgjrdiWKR6YU7fEMcXSE6gX3piQB7c1 Cs+4KDbbbd1Q2zTfRP/l702ti9Ty2/Gu4vzONsjJAST9TIsXmzFQXkEZ4MBd9ieF K5Ss+Dab2RZ/pXrGgXEDY6oOTPwFetZjs3vCar+58z/YDVfoU/06l4dLfgvCZlDe 9uK/qHtgVCd/1gKELskMnc6BPNg= -----END CERTIFICATE-----Generated at Sat Jun 1 13:43:23 2024 by rpki-client on console-fra.rpki-client.org