$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft File: T04zJwO54ZxdoBGkjEsnbpsp11w.mft (raw, json) Hash identifier: wlxwe0ZUfvN2vlFVkYLlrIntxs92kTVqLZ6JuJDoEPY= Subject key identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 Authority key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C Certificate issuer: /CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Certificate serial: 2E96 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft Manifest number: 2E96 Signing time: Sun 02 Jun 2024 05:57:32 +0000 Manifest this update: Sun 02 Jun 2024 05:57:32 +0000 Manifest next update: Sun 02 Jun 2024 11:57:32 +0000 Files and hashes: 1: T04zJwO54ZxdoBGkjEsnbpsp11w.crl (hash: 7R7CXjLeZ5GKTLWR+CTA2sPbdb2NgrZ87wJnX4QjTuc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 11:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11926 (0x2e96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Validity Not Before: Jun 2 05:57:32 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=470D131A7541923CA9A1A4C76A5788ADFD240CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:41:3b:cc:83:cc:71:a2:fc:27:62:37:91: ee:ce:92:88:cc:36:35:05:5d:e9:49:34:1a:8d:c0: 55:1f:c3:63:38:e4:56:b7:80:7a:b8:e4:0f:d7:00: 60:61:32:c1:b4:27:22:0d:3c:c4:4b:99:32:17:12: 56:19:47:d1:11:01:8a:98:c5:db:9f:b6:b9:b4:fb: 45:68:aa:4b:32:4b:e9:f8:a2:3f:79:86:ad:19:15: 73:3f:42:7e:99:5a:e3:ea:e4:9e:cb:30:17:dc:ef: 3f:41:52:03:b1:bc:c5:4e:27:7e:1e:53:80:9b:6f: a8:2f:13:4c:b7:52:16:a6:cf:8f:06:9c:50:b3:07: a3:b9:10:33:1c:69:53:51:39:93:25:8b:89:63:32: 34:c9:2e:ed:f1:04:87:0f:5c:d6:7e:fd:9d:1a:f8: 0b:cb:7d:7b:5b:7b:74:17:c5:c6:9a:0c:91:af:3d: 4a:49:12:7b:f0:7b:81:fe:8d:d0:c1:84:9b:c9:ae: f5:61:5d:16:ab:73:48:03:32:39:34:eb:7a:54:a0: 68:73:1b:59:33:20:28:c2:70:d6:0c:aa:6d:b0:98: 02:cd:eb:f5:17:cc:cc:28:c9:7b:a2:32:39:fb:b5: 32:d9:7a:07:cd:53:91:88:41:f2:00:e6:a6:85:28: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 X509v3 Authority Key Identifier: keyid:4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:19:cc:89:8c:dd:4a:e9:f9:ba:21:6b:5c:2c:af:c8:75:7c: a7:07:8a:18:7f:76:3a:2d:0d:72:84:64:30:ab:19:c2:3f:26: 51:48:a4:e6:da:17:29:90:c3:0d:b2:72:a4:24:ea:db:4e:25: 4f:c2:95:cd:a7:4f:e2:d7:2f:85:cf:38:cc:56:08:66:d4:20: 8d:08:e7:56:7b:00:cb:8d:76:26:f4:2c:84:b3:50:a5:50:b6: 54:d3:4c:2b:88:a5:16:51:dc:81:aa:a1:fb:45:57:ac:e3:91: e1:de:b7:dd:52:ff:f0:dc:64:d8:30:86:52:04:32:e1:56:57: e6:85:7d:01:c3:a7:07:09:f5:09:e2:0e:96:ee:72:f5:59:da: 9c:13:dd:dc:de:04:ad:de:db:6e:d2:2d:85:65:77:00:2e:71: 42:2a:b7:a4:7f:ac:c1:fc:ed:67:8c:86:a8:97:58:8e:2b:93: 6b:15:ad:81:1c:e1:b3:03:d4:6b:d1:e1:6a:32:99:60:39:39: 70:68:4c:9b:32:d1:61:79:98:b1:2d:ec:e9:24:1c:48:79:d1: 6d:b4:89:01:7a:fd:93:f8:c6:b5:8d:c1:16:cd:dd:6e:8b:93: d4:1d:8c:c6:d5:08:ab:90:d3:d4:13:06:ac:7b:c4:7e:70:71: ac:50:8d:64 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICLpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEY0 RTMzMjcwM0I5RTE5QzVEQTAxMUE0OEM0QjI3NkU5QjI5RDc1QzAeFw0yNDA2MDIw NTU3MzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ3MEQxMzFBNzU0MTky M0NBOUExQTRDNzZBNTc4OEFERkQyNDBDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQbEE7zIPMcaL8J2I3ke7OkojMNjUFXelJNBqNwFUfw2M45Fa3 gHq45A/XAGBhMsG0JyINPMRLmTIXElYZR9ERAYqYxduftrm0+0VoqksyS+n4oj95 hq0ZFXM/Qn6ZWuPq5J7LMBfc7z9BUgOxvMVOJ34eU4Cbb6gvE0y3Uhamz48GnFCz B6O5EDMcaVNROZMli4ljMjTJLu3xBIcPXNZ+/Z0a+AvLfXtbe3QXxcaaDJGvPUpJ Envwe4H+jdDBhJvJrvVhXRarc0gDMjk063pUoGhzG1kzICjCcNYMqm2wmALN6/UX zMwoyXuiMjn7tTLZegfNU5GIQfIA5qaFKJYdAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURw0TGnVBkjypoaTHaleIrf0kDKcwHwYDVR0jBBgwFoAUT04zJwO54ZxdoBGk jEsnbpsp11wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4 L1QwNHpKd081NFp4ZG9CR2tqRXNuYnBzcDExdy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVDA0ekp3TzU0Wnhkb0JHa2pFc25icHNwMTF3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4L1QwNHpKd081NFp4ZG9C R2tqRXNuYnBzcDExdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCuGcyJjN1K6fm6IWtcLK/IdXynB4oYf3Y6LQ1yhGQwqxnCPyZRSKTm2hcpkMMN snKkJOrbTiVPwpXNp0/i1y+FzzjMVghm1CCNCOdWewDLjXYm9CyEs1ClULZU00wr iKUWUdyBqqH7RVes45Hh3rfdUv/w3GTYMIZSBDLhVlfmhX0Bw6cHCfUJ4g6W7nL1 WdqcE93c3gSt3ttu0i2FZXcALnFCKrekf6zB/O1njIaol1iOK5NrFa2BHOGzA9Rr 0eFqMplgOTlwaEybMtFheZixLezpJBxIedFttIkBev2T+Ma1jcEWzd1ui5PUHYzG 1QirkNPUEwase8R+cHGsUI1k -----END CERTIFICATE-----Generated at Sun Jun 2 09:22:41 2024 by rpki-client on console-ams.rpki-client.org