$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft File: hTRSS_5XzTyFZI-ryLwRC4vixb4.mft (raw, json) Hash identifier: LSQXqMzvYoRZHlxz38RIh7+zXIT0p334b5W7GRa2Fbs= Subject key identifier: BA:2C:1F:6C:2C:B7:DB:92:11:15:6E:20:50:46:2B:59:6D:96:98:ED Authority key identifier: 85:34:52:4B:FE:57:CD:3C:85:64:8F:AB:C8:BC:11:0B:8B:E2:C5:BE Certificate issuer: /CN=8534524BFE57CD3C85648FABC8BC110B8BE2C5BE Certificate serial: 07EC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft Manifest number: 07EC Signing time: Sun 02 Jun 2024 13:55:02 +0000 Manifest this update: Sun 02 Jun 2024 13:55:02 +0000 Manifest next update: Sun 02 Jun 2024 19:55:02 +0000 Files and hashes: 1: hTRSS_5XzTyFZI-ryLwRC4vixb4.crl (hash: J9jkskfLBbX7lsXq4HZNmzbVJdwBexpX0mgonGes9Z0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 19:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8534524BFE57CD3C85648FABC8BC110B8BE2C5BE Validity Not Before: Jun 2 13:55:02 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=BA2C1F6C2CB7DB9211156E2050462B596D9698ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:dd:d7:aa:d0:74:4b:22:b1:24:f7:f1:14: c1:33:a3:eb:aa:a6:5a:88:83:ca:99:e6:6b:db:07: 5e:c5:55:8d:c5:01:59:2a:4f:9e:1f:01:1c:0f:59: c3:c8:07:d7:cb:c0:1b:36:4c:69:58:ed:62:53:26: d6:8a:00:fd:10:57:fe:d6:6c:83:46:01:81:22:fc: 6d:c7:d5:3f:d3:60:c9:74:ff:ce:6b:e8:9f:20:cd: de:ae:a4:a7:20:2f:d5:7a:8e:14:6a:d1:4b:aa:2d: c8:f3:81:71:cd:d5:c0:ba:d8:fd:47:5c:de:27:4b: e3:40:69:3b:43:8d:d8:29:39:5c:58:28:6b:96:4b: 2c:60:70:eb:98:12:ff:ec:1d:8e:85:e5:f3:76:7b: 50:7e:5b:0a:98:d2:6e:c1:d8:91:6c:8e:2e:bd:61: e6:7b:bd:88:00:63:46:d3:40:8f:f6:97:d4:02:0c: 92:4d:1a:f3:e9:1e:74:cd:1d:d5:ae:1c:eb:3a:f9: 95:7d:e7:09:f8:58:a5:92:b7:3f:b4:64:0a:a9:9a: bc:8b:16:8d:b6:e1:af:4a:48:8f:ac:9f:eb:c8:a0: 96:99:ef:59:89:23:d7:e7:33:1d:c6:7b:63:86:10: 15:cd:48:7b:06:4e:07:70:4b:cf:67:b6:49:c4:85: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2C:1F:6C:2C:B7:DB:92:11:15:6E:20:50:46:2B:59:6D:96:98:ED X509v3 Authority Key Identifier: keyid:85:34:52:4B:FE:57:CD:3C:85:64:8F:AB:C8:BC:11:0B:8B:E2:C5:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:9b:55:c0:08:ae:c6:54:e8:98:3c:1d:a6:fd:0f:ea:9c:cb: b5:d4:ea:0a:fd:90:97:bf:15:75:1b:08:2a:2b:84:71:fb:a5: 50:7f:1d:14:73:c7:8f:3d:c7:a0:ab:37:72:9f:9c:7f:f1:cc: ad:f0:64:c6:5d:69:49:28:93:47:5f:b7:47:fa:24:36:35:17: d9:63:5b:af:a8:d4:7e:ab:b4:c4:f2:3e:c0:51:0f:fb:6b:cc: d3:27:0a:fe:31:a3:42:7b:4a:71:dc:51:87:cf:3a:6f:05:45: 1b:bd:4d:bf:fc:02:71:e7:f6:f0:40:fc:66:79:0c:a8:7b:59: dc:18:8c:4d:a4:8e:81:54:7c:4b:37:51:35:bf:d5:b3:db:01: 2f:29:f8:23:0b:9a:47:12:72:3c:85:9c:5a:fe:75:ff:14:2f: 40:5a:48:2f:38:7e:4d:21:38:32:69:a9:ff:41:29:50:d9:a4: 3c:cc:d8:09:81:76:9d:3c:c0:d1:37:7f:70:0a:81:25:9b:22: 74:19:11:36:f9:b7:e3:4a:0e:94:8e:6d:4e:02:e9:48:0e:53: df:18:6a:10:d5:91:10:0d:dc:5e:52:6a:0e:66:f3:0f:ae:0c: 27:ab:ce:a9:e0:cb:f5:17:64:22:35:09:4a:08:d1:45:21:e5: e2:bb:78:34 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODUz NDUyNEJGRTU3Q0QzQzg1NjQ4RkFCQzhCQzExMEI4QkUyQzVCRTAeFw0yNDA2MDIx MzU1MDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJBMkMxRjZDMkNCN0RC OTIxMTE1NkUyMDUwNDYyQjU5NkQ5Njk4RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0Hd3XqtB0SyKxJPfxFMEzo+uqplqIg8qZ5mvbB17FVY3FAVkq T54fARwPWcPIB9fLwBs2TGlY7WJTJtaKAP0QV/7WbINGAYEi/G3H1T/TYMl0/85r 6J8gzd6upKcgL9V6jhRq0UuqLcjzgXHN1cC62P1HXN4nS+NAaTtDjdgpOVxYKGuW SyxgcOuYEv/sHY6F5fN2e1B+WwqY0m7B2JFsji69YeZ7vYgAY0bTQI/2l9QCDJJN GvPpHnTNHdWuHOs6+ZV95wn4WKWStz+0ZAqpmryLFo224a9KSI+sn+vIoJaZ71mJ I9fnMx3Ge2OGEBXNSHsGTgdwS89ntknEheXXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUuiwfbCy325IRFW4gUEYrWW2WmO0wHwYDVR0jBBgwFoAUhTRSS/5XzTyFZI+r yLwRC4vixb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OS9oVFJTU181WHpUeUZaSS1yeUx3UkM0dml4YjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hUUlNTXzVYelR5RlpJLXJ5THdSQzR2aXhiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvaFRSU1NfNVh6VHlG WkktcnlMd1JDNHZpeGI0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALabVcAIrsZU6Jg8Hab9D+qcy7XU6gr9kJe/FXUbCCorhHH7pVB/HRRzx489 x6CrN3KfnH/xzK3wZMZdaUkok0dft0f6JDY1F9ljW6+o1H6rtMTyPsBRD/trzNMn Cv4xo0J7SnHcUYfPOm8FRRu9Tb/8AnHn9vBA/GZ5DKh7WdwYjE2kjoFUfEs3UTW/ 1bPbAS8p+CMLmkcScjyFnFr+df8UL0BaSC84fk0hODJpqf9BKVDZpDzM2AmBdp08 wNE3f3AKgSWbInQZETb5t+NKDpSObU4C6UgOU98YahDVkRAN3F5Sag5m8w+uDCer zqngy/UXZCI1CUoI0UUh5eK7eDQ= -----END CERTIFICATE-----Generated at Sun Jun 2 17:08:10 2024 by rpki-client on console-fra.rpki-client.org