$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft File: Os4QyDgpLG_HBlhbRE667coqEbk.mft (raw, json) Hash identifier: O+qYTQeGLGSGfbzJyRUbVL3JhAgMvMRDjM796y9fDFk= Subject key identifier: 8C:D7:D0:29:67:DD:CE:EB:42:93:61:96:D1:E2:6F:C4:1F:92:8C:DE Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0B50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft Manifest number: 0B4C Signing time: Fri 10 May 2024 08:53:20 +0000 Manifest this update: Fri 10 May 2024 08:53:20 +0000 Manifest next update: Fri 10 May 2024 14:53:20 +0000 Files and hashes: 1: Os4QyDgpLG_HBlhbRE667coqEbk.crl (hash: 5Q0Mijfx9Z2Njy5xx4Dq8AJz4clMntCDrrYWaZBIwUw=) 2: tAtbXMXkAjrY70_b0kvSe-ulc7c.roa (hash: In93q4Y+l2X7/H3yjD+nZowknZQ0M+wYm/4nw0Q9R1A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 13:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: May 10 08:53:20 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=8CD7D02967DDCEEB42936196D1E26FC41F928CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:b9:5e:22:86:50:0c:8f:02:4d:0b:d1:d9: ea:f4:6d:9f:7f:ad:30:25:d0:6e:b6:3f:9b:72:01: 07:42:42:bb:9e:b6:e2:60:f5:a4:d7:f9:cb:b7:df: e8:71:62:cf:bc:c0:a6:6f:30:00:0e:34:a1:b5:27: 1b:ca:53:5b:d4:8f:9b:0e:08:1f:ed:78:fa:16:06: 87:b0:98:b1:e3:28:c1:f0:43:0d:ac:1c:5f:25:d9: 3c:d5:6d:f5:94:c8:0d:d4:22:88:d6:69:da:a6:59: 52:dd:dd:ee:fd:10:cc:83:2b:21:60:f2:aa:fc:fd: d0:7d:cd:32:32:e2:d3:52:6b:db:6c:3b:53:31:fd: 18:5e:08:96:95:a7:28:fa:c6:11:a5:15:56:9a:e4: 6d:43:f6:12:91:76:ae:22:65:35:ee:44:01:50:1c: c5:a6:2e:46:5b:49:36:db:22:24:a2:5a:7e:7f:67: 07:66:19:b1:5e:7d:fd:dd:ec:8a:4b:00:e1:27:11: b8:38:a2:ea:8d:ba:87:79:78:dc:9f:d0:0f:18:6d: c4:05:b4:7e:66:43:85:82:e7:d7:9e:a9:a7:ae:6e: 5a:0c:a2:e1:fd:a8:b1:2c:0d:82:53:a2:e6:a2:62: 8f:bd:c5:f6:79:3f:19:4b:68:b9:af:18:e2:79:d3: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D7:D0:29:67:DD:CE:EB:42:93:61:96:D1:E2:6F:C4:1F:92:8C:DE X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:49:97:c3:33:6c:1c:d1:8f:84:dd:0e:0c:3a:b0:28:d4:8f: c6:4e:88:38:d7:88:1c:25:6f:df:d8:d7:1a:fe:b6:8a:b3:9f: ff:7e:b8:5c:df:e4:d9:5f:d8:23:0a:5a:dd:5e:cb:96:63:d7: 36:30:86:11:04:b2:ce:8d:7a:5b:f9:6b:f8:ed:21:5a:bd:f4: 0c:bf:42:ea:4e:e3:3c:33:3f:f7:af:53:9a:ed:9c:6a:75:e1: cd:04:e7:01:e6:ff:0a:be:84:9c:f2:6e:e6:c6:bd:d5:71:81: f6:6b:c6:ac:1e:08:93:ca:db:0b:43:f5:48:c5:9c:93:fc:d5: 20:01:b1:c0:cf:55:84:02:c4:4d:94:f7:4b:55:4c:75:28:b7: 0f:ca:3a:1c:08:e9:42:64:f7:6d:a9:5e:43:0f:28:7a:5e:c2: 6b:6a:cd:c9:92:60:4f:4a:ee:da:f3:cb:7a:3a:f5:b4:9d:d0: d5:a0:bb:14:f6:06:90:0d:95:36:4d:99:e8:d6:2b:b5:94:75: 3c:fe:75:c2:09:7a:e5:c1:79:94:a5:7c:a5:51:9f:67:e1:49: 32:86:14:f9:b7:a3:2b:16:01:a9:f6:dd:8d:5b:3c:b5:e2:57: 20:6d:01:63:ad:b4:29:d0:56:0f:85:94:07:2a:58:b5:41:ba: cb:96:72:15 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDA1MTAw ODUzMjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDhDRDdEMDI5NjdERENF RUI0MjkzNjE5NkQxRTI2RkM0MUY5MjhDREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpULleIoZQDI8CTQvR2er0bZ9/rTAl0G62P5tyAQdCQruetuJg 9aTX+cu33+hxYs+8wKZvMAAONKG1JxvKU1vUj5sOCB/tePoWBoewmLHjKMHwQw2s HF8l2TzVbfWUyA3UIojWadqmWVLd3e79EMyDKyFg8qr8/dB9zTIy4tNSa9tsO1Mx /RheCJaVpyj6xhGlFVaa5G1D9hKRdq4iZTXuRAFQHMWmLkZbSTbbIiSiWn5/Zwdm GbFeff3d7IpLAOEnEbg4ouqNuod5eNyf0A8YbcQFtH5mQ4WC59eeqaeubloMouH9 qLEsDYJTouaiYo+9xfZ5PxlLaLmvGOJ50/o7AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUjNfQKWfdzutCk2GW0eJvxB+SjN4wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvT3M0UXlEZ3BMR19I QmxoYlJFNjY3Y29xRWJrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIxJl8MzbBzRj4TdDgw6sCjUj8ZOiDjXiBwlb9/Y1xr+toqzn/9+uFzf5Nlf 2CMKWt1ey5Zj1zYwhhEEss6Nelv5a/jtIVq99Ay/QupO4zwzP/evU5rtnGp14c0E 5wHm/wq+hJzybubGvdVxgfZrxqweCJPK2wtD9UjFnJP81SABscDPVYQCxE2U90tV THUotw/KOhwI6UJk922pXkMPKHpewmtqzcmSYE9K7trzy3o69bSd0NWguxT2BpAN lTZNmejWK7WUdTz+dcIJeuXBeZSlfKVRn2fhSTKGFPm3oysWAan23Y1bPLXiVyBt AWOttCnQVg+FlAcqWLVBusuWchU= -----END CERTIFICATE-----Generated at Fri May 10 11:50:09 2024 by rpki-client on console-ams.rpki-client.org