$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft File: u11oF9lc0Cjy8wUtxskakjFFby4.mft (raw, json) Hash identifier: YtOHm7wsWANChifMHol84BB3OfqqlF/WTjlIB3NqBWA= Subject key identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F Authority key identifier: BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E Certificate issuer: /CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Certificate serial: 07F1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft Manifest number: 07F1 Signing time: Sun 02 Jun 2024 00:54:35 +0000 Manifest this update: Sun 02 Jun 2024 00:54:35 +0000 Manifest next update: Sun 02 Jun 2024 06:54:35 +0000 Files and hashes: 1: u11oF9lc0Cjy8wUtxskakjFFby4.crl (hash: e04g4onoy9J3Dv0XpyDFzdLZb2d+/+cDDOL4AjWc8Hw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 06:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Validity Not Before: Jun 2 00:54:35 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6E8FFE1636887BE4014F2452CECBF2732922939F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:75:57:1f:be:57:74:dc:b3:b8:22:16:74: 94:ec:17:a1:22:00:0d:6d:2d:91:80:b7:a3:7d:40: a3:1a:1a:f0:91:04:99:a9:fb:4a:aa:38:38:82:a6: 61:02:01:5a:68:28:fa:7d:ed:9f:6f:a9:9b:c2:81: c0:9b:2d:06:58:6c:09:9c:07:3a:29:6d:58:be:6a: 8e:98:75:23:66:29:d2:0f:3b:71:d5:01:8d:2a:08: 6b:a9:d4:b1:6d:c0:21:27:de:8d:e0:b1:69:26:09: db:88:32:6e:b0:23:0d:e8:b5:f3:2d:c0:13:71:9d: b3:17:84:a7:a9:0e:de:95:72:11:52:20:71:f5:1f: 23:1e:eb:6b:f6:a5:8a:18:15:24:81:ee:6c:76:1f: 5e:e2:6b:9f:41:88:e5:86:12:97:45:ba:4a:40:b6: 49:d8:66:5e:40:ec:b9:66:c1:11:91:89:36:8c:ce: 7b:84:5e:6d:3b:6a:a1:9b:5d:61:9c:ab:6f:35:72: 1f:7e:31:9a:8a:12:db:8c:bb:dc:2c:63:5f:1b:eb: a0:3e:60:24:20:89:ae:f2:d0:a0:51:3b:51:00:3a: 47:1d:16:9e:5a:26:d4:3d:c7:d5:f5:ab:a6:24:2f: 5b:8b:2c:5e:e5:29:48:80:91:df:33:c5:4b:c2:7e: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F X509v3 Authority Key Identifier: keyid:BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8f:46:2b:5d:22:8c:cf:18:af:c2:00:c2:05:55:db:09:79: 9b:be:c7:cf:3c:65:39:bc:16:92:68:7d:b6:ac:bf:83:a5:47: b2:17:83:21:03:85:f6:63:d8:99:e9:57:ba:86:18:5a:98:1e: 2f:b8:0b:51:6d:08:2e:6f:25:22:3e:57:bb:5c:13:13:ce:16: 66:f3:cf:7b:78:20:56:88:7e:dc:0a:24:0d:b9:f2:c1:4b:fc: ba:70:42:9d:eb:b9:b2:f1:06:9f:b3:14:7d:8f:68:f5:9b:96: 2a:9d:ef:62:18:b4:4e:e8:0c:bc:d8:4b:98:2e:60:ad:ab:9e: fb:f5:f7:3d:80:5c:1d:f5:aa:98:33:e1:e3:f6:00:70:10:06: 6b:85:38:4a:c9:52:e5:6b:0d:f6:c8:23:5e:9b:2c:ea:8b:5a: f3:f1:ee:19:30:88:71:38:41:97:bc:b5:4d:e0:dc:99:39:d2: a6:67:4a:24:9b:4c:6c:64:de:4b:7e:36:61:6b:e1:73:ef:3a: 8d:30:4c:47:8b:1d:53:d3:f8:4d:69:0b:7e:4a:66:d7:3b:72: 57:3d:8f:78:e7:c0:7e:7d:1d:56:ce:00:f7:dc:2d:6d:83:75: ce:59:e2:d8:51:1a:b5:9c:1a:50:f0:dc:0c:de:6b:b4:32:ee: aa:83:01:7f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkI1 RDY4MTdEOTVDRDAyOEYyRjMwNTJEQzZDOTFBOTIzMTQ1NkYyRTAeFw0yNDA2MDIw MDU0MzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZFOEZGRTE2MzY4ODdC RTQwMTRGMjQ1MkNFQ0JGMjczMjkyMjkzOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuFnVXH75XdNyzuCIWdJTsF6EiAA1tLZGAt6N9QKMaGvCRBJmp +0qqODiCpmECAVpoKPp97Z9vqZvCgcCbLQZYbAmcBzopbVi+ao6YdSNmKdIPO3HV AY0qCGup1LFtwCEn3o3gsWkmCduIMm6wIw3otfMtwBNxnbMXhKepDt6VchFSIHH1 HyMe62v2pYoYFSSB7mx2H17ia59BiOWGEpdFukpAtknYZl5A7LlmwRGRiTaMznuE Xm07aqGbXWGcq281ch9+MZqKEtuMu9wsY18b66A+YCQgia7y0KBRO1EAOkcdFp5a JtQ9x9X1q6YkL1uLLF7lKUiAkd8zxUvCflSlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUbo/+FjaIe+QBTyRSzsvycykik58wHwYDVR0jBBgwFoAUu11oF9lc0Cjy8wUt xskakjFFby4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 MS91MTFvRjlsYzBDank4d1V0eHNrYWtqRkZieTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3UxMW9GOWxjMENqeTh3VXR4c2tha2pGRmJ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjEvdTExb0Y5bGMwQ2p5 OHdVdHhza2FrakZGYnk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIqPRitdIozPGK/CAMIFVdsJeZu+x888ZTm8FpJofbasv4OlR7IXgyEDhfZj 2JnpV7qGGFqYHi+4C1FtCC5vJSI+V7tcExPOFmbzz3t4IFaIftwKJA258sFL/Lpw Qp3rubLxBp+zFH2PaPWbliqd72IYtE7oDLzYS5guYK2rnvv19z2AXB31qpgz4eP2 AHAQBmuFOErJUuVrDfbII16bLOqLWvPx7hkwiHE4QZe8tU3g3Jk50qZnSiSbTGxk 3kt+NmFr4XPvOo0wTEeLHVPT+E1pC35KZtc7clc9j3jnwH59HVbOAPfcLW2Ddc5Z 4thRGrWcGlDw3Azea7Qy7qqDAX8= -----END CERTIFICATE-----Generated at Sun Jun 2 02:26:42 2024 by rpki-client on console-ams.rpki-client.org