$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft File: JAmH9ApgMM36M97R7ufPTcfDAJQ.mft (raw, json) Hash identifier: pb1bbdlBukLz89EeePky/cSxCHTy3KQZsxrHV4ofH+8= Subject key identifier: 17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 0CF4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft Manifest number: 0CDE Signing time: Tue 28 May 2024 18:24:55 +0000 Manifest this update: Tue 28 May 2024 18:24:55 +0000 Manifest next update: Wed 29 May 2024 00:24:55 +0000 Files and hashes: 1: 1n4mryIyZhcvXV-NrmJOznRg1l0.roa (hash: l9F8xZ6IbrXD3iGrqKLWiy3Xl+uE0kzMVrEYmwrdDiU=) 2: A2osGo6mgxYCs0gBRZZvC0a3X0w.roa (hash: 9iSlxShPns2B0osnfp20NVusXICzQk9yrihtbajPDRY=) 3: Bow1ygpoCopifdVGAmxL82uArDE.roa (hash: Lmw0Mvpxth5s/gBuL9Yk0CDcXLMz9YMnxZKJG2qW87E=) 4: Dv8Nzur347RB-nUes347EUErh78.roa (hash: b35b/UhFLIxpq0FPAxgB7n2NDbOBfpTJcO0xIeoOaWg=) 5: JAmH9ApgMM36M97R7ufPTcfDAJQ.crl (hash: oBtwekGydhfnECSiXz3thlOrqKh5uufxkckA5pycCg4=) 6: OUXcSKjKyxQfnELn3zJCw9NZJxA.roa (hash: M1CbHMM6pfNiYzl372XljSrcrUiwHiBXwdg6yt+0/0Q=) 7: ierKU4Xn8nhdr_trK9WuyEbyDag.roa (hash: TbUHklGoZRpFwofYNbZx/ZxS2+ELxSv2EKBS157dfVI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 00:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: May 28 18:24:55 2024 GMT Not After : Aug 10 07:41:13 2024 GMT Subject: CN=170CE6C74073A2911853FEB3DA432426D3812316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:13:68:09:e5:6c:1e:f1:16:d9:57:10:e8: 55:fa:72:11:4e:e3:89:c4:3d:e5:4b:3e:30:d0:74: de:6f:f2:cd:bb:76:00:75:99:cf:42:d6:fb:16:01: 7c:5d:01:69:bb:fc:ef:74:f0:49:b4:3b:ea:57:fd: 53:4b:8b:79:53:e0:e4:cc:e0:e3:5b:a8:ce:e8:d8: 72:b4:1c:68:78:49:ec:c8:98:8b:22:75:6b:87:5a: 64:f6:14:b2:bd:04:9b:5e:dc:21:3b:87:7c:ea:75: 22:ba:3a:4e:b2:2e:07:44:a7:f2:f2:a5:45:b5:6f: 41:9e:ba:92:c5:74:02:3d:80:a2:5f:2e:5d:73:ec: ac:c9:3b:89:7b:e7:6e:35:94:db:4e:64:13:56:72: e7:c6:88:c9:f7:7c:3d:76:91:a7:63:1d:8f:3c:df: 98:67:71:1d:ba:bb:48:f6:7d:55:26:3f:89:a9:a7: d3:fa:c2:ac:67:d8:c6:d1:2e:7e:e9:e1:f6:e7:c9: 2b:b1:44:12:bd:01:c5:43:a2:3c:c9:51:bd:69:ff: 0a:3d:f8:0d:bb:48:62:ca:58:01:99:de:19:6c:ea: 71:5c:fa:93:48:6f:51:0b:24:c7:de:ad:5d:09:56: 56:92:40:39:f4:0b:1c:4c:a5:63:94:84:4a:7c:55: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0C:E6:C7:40:73:A2:91:18:53:FE:B3:DA:43:24:26:D3:81:23:16 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c7:ee:31:ab:76:d0:28:74:1d:94:ed:5d:1b:73:ba:b4:93: fd:96:86:7f:9a:83:9c:0a:eb:22:c6:bf:94:57:31:cb:8d:b3: b8:a3:f4:6f:71:3f:f6:7c:f8:8e:f4:ec:fc:dd:82:9b:54:a3: 21:89:91:6a:af:29:88:12:3e:8b:b3:ac:8d:30:e6:b3:b2:9d: 81:4f:ed:96:1f:03:40:18:a3:77:22:9b:a2:95:ea:15:df:db: 02:0b:3c:b4:ea:84:d9:da:a0:55:55:21:cd:95:04:84:7a:fb: 36:2f:5b:1c:f3:c8:b4:5e:34:7f:1e:1a:71:67:ed:bf:21:0b: fa:b6:20:ad:e8:59:79:e9:cb:0c:8a:78:fe:c4:82:0e:1f:a2: ab:70:f4:8f:cc:0e:cd:8b:b9:8b:6c:8d:ae:2e:a3:74:64:97: 5d:d7:9b:64:4e:88:94:b1:b1:dc:91:42:f4:30:b1:79:d0:79: 70:d2:90:37:38:83:8b:c3:7f:7a:6f:c5:60:4c:63:e9:5c:dc: c1:c7:0d:d6:4c:96:10:0c:ac:b5:de:a1:a2:e1:f0:6b:03:c7: d6:e6:54:89:bc:98:9d:f9:08:9c:fc:55:4e:41:7a:d8:6e:23: 5a:d6:93:f1:f2:1a:15:a3:70:c7:99:9e:49:82:80:ec:07:ee: 99:16:45:ee -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNDA1Mjgx ODI0NTVaFw0yNDA4MTAwNzQxMTNaMDMxMTAvBgNVBAMTKDE3MENFNkM3NDA3M0Ey OTExODUzRkVCM0RBNDMyNDI2RDM4MTIzMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtqBNoCeVsHvEW2VcQ6FX6chFO44nEPeVLPjDQdN5v8s27dgB1 mc9C1vsWAXxdAWm7/O908Em0O+pX/VNLi3lT4OTM4ONbqM7o2HK0HGh4SezImIsi dWuHWmT2FLK9BJte3CE7h3zqdSK6Ok6yLgdEp/LypUW1b0GeupLFdAI9gKJfLl1z 7KzJO4l75241lNtOZBNWcufGiMn3fD12kadjHY8835hncR26u0j2fVUmP4mpp9P6 wqxn2MbRLn7p4fbnySuxRBK9AcVDojzJUb1p/wo9+A27SGLKWAGZ3hls6nFc+pNI b1ELJMferV0JVlaSQDn0CxxMpWOUhEp8Vfp/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUFwzmx0BzopEYU/6z2kMkJtOBIxYwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvSkFtSDlBcGdNTTM2 TTk3Ujd1ZlBUY2ZEQUpRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACjH7jGrdtAodB2U7V0bc7q0k/2Whn+ag5wK6yLGv5RXMcuNs7ij9G9xP/Z8 +I707PzdgptUoyGJkWqvKYgSPouzrI0w5rOynYFP7ZYfA0AYo3cim6KV6hXf2wIL PLTqhNnaoFVVIc2VBIR6+zYvWxzzyLReNH8eGnFn7b8hC/q2IK3oWXnpywyKeP7E gg4foqtw9I/MDs2LuYtsja4uo3Rkl13Xm2ROiJSxsdyRQvQwsXnQeXDSkDc4g4vD f3pvxWBMY+lc3MHHDdZMlhAMrLXeoaLh8GsDx9bmVIm8mJ35CJz8VU5BethuI1rW k/HyGhWjcMeZnkmCgOwH7pkWRe4= -----END CERTIFICATE-----Generated at Tue May 28 21:54:06 2024 by rpki-client on console-fra.rpki-client.org