$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft File: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft (raw, json) Hash identifier: FIB0qalMuc8DZk3g5CxwPsEvKocO4H60WLJa5B+RrbI= Subject key identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 Authority key identifier: 60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 Certificate issuer: /CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Certificate serial: 0669 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft Manifest number: 0669 Signing time: Sat 01 Jun 2024 10:25:16 +0000 Manifest this update: Sat 01 Jun 2024 10:25:16 +0000 Manifest next update: Sat 01 Jun 2024 16:25:16 +0000 Files and hashes: 1: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl (hash: 6J6BLHNyWJIgcmggNHdSrwI/eF1gu1PSUKK010mgCjg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Validity Not Before: Jun 1 10:25:16 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=4417D6FBFFB0DC025A87456F40A5FEAD98D1BAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:b3:11:0c:da:e4:3c:97:50:8b:7c:6d:03: b5:6c:ca:8e:44:3c:8b:55:d7:96:cc:6a:28:e2:a2: ea:14:25:db:38:84:83:92:2d:26:f8:6e:0f:9e:4a: c5:17:05:51:fa:ed:c5:11:aa:0b:f5:ec:d6:26:64: f6:37:df:19:04:18:2b:87:35:b9:76:6c:78:52:44: de:96:23:8e:da:82:8a:a8:63:60:1a:5f:e3:f6:c4: 5e:da:ab:fa:c2:c7:60:89:fb:29:f0:38:90:ff:e3: df:02:6b:c6:f0:c3:fe:ee:a5:68:95:ad:58:8d:ba: db:a5:03:34:b1:d6:74:e4:c1:30:6c:07:b7:6f:29: b0:60:91:70:a1:8a:ce:89:e8:39:a9:26:3a:98:f7: 87:63:6f:d6:b7:42:38:a5:e6:72:4f:f5:52:07:4e: 85:5a:2e:6a:a5:1a:7f:e5:4f:7a:94:61:be:22:52: b3:ec:86:fe:50:fa:c0:18:5a:a5:27:95:8f:10:f4: 19:fd:18:2b:8c:0b:91:70:fb:d6:59:77:b1:c7:7c: c0:57:2e:b8:2c:8f:4b:46:04:ad:46:90:9a:73:dc: 0d:7d:41:a7:f0:0d:8a:6c:50:89:5f:b4:36:3a:8e: 6a:52:89:ac:46:b5:10:bd:0f:7e:7b:38:4f:df:52: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 X509v3 Authority Key Identifier: keyid:60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:bd:f8:b9:40:cc:8f:56:54:98:03:22:0f:9f:45:fe:ac:df: 72:04:05:dd:0b:e7:39:2d:e5:3d:87:34:17:94:1d:f1:d3:f4: 98:f7:6a:73:00:8e:40:b2:ef:6a:ba:16:af:71:c6:fa:bb:97: 1d:15:42:ac:91:f1:a3:f7:b7:5d:57:7a:73:05:ca:b5:7c:67: 99:89:03:6c:7e:8e:76:21:15:ae:2c:ea:6d:bc:44:d3:cf:11: d7:87:f1:6d:ca:82:fd:b0:e5:0f:eb:0c:26:cb:f1:9e:c9:97: f5:f0:13:3b:09:87:f5:2e:20:53:77:a9:80:ef:38:8d:3e:71: 11:9b:09:c9:de:29:cf:ba:7c:63:dd:74:1c:b2:75:62:f1:07: 2e:c7:54:fc:0b:98:e7:c9:66:47:01:70:3c:18:50:2a:78:a5: e2:74:bb:46:75:02:3c:06:61:a6:4d:85:76:45:8e:f7:e9:a9: 35:75:d7:8c:78:d6:ac:04:18:6b:fa:be:c8:4f:ed:36:66:87: 7f:fb:ed:d8:e7:e7:d7:bb:72:08:c6:a1:34:50:5d:d2:77:e1: 4f:c2:48:0f:e5:25:e3:3d:67:0b:60:e5:48:14:03:56:5f:3d: 52:57:6e:0b:bd:db:1c:4e:93:09:95:63:a7:72:1d:a0:32:8e: 4f:72:8a:bc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjBC MkQ4RjkwRDIxMDVDOEVCODc2ODU2QUE5NzVCNTNDNDMyNjk5NjAeFw0yNDA2MDEx MDI1MTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ0MTdENkZCRkZCMERD MDI1QTg3NDU2RjQwQTVGRUFEOThEMUJBRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk07MRDNrkPJdQi3xtA7Vsyo5EPItV15bMaijiouoUJds4hIOS LSb4bg+eSsUXBVH67cURqgv17NYmZPY33xkEGCuHNbl2bHhSRN6WI47agoqoY2Aa X+P2xF7aq/rCx2CJ+ynwOJD/498Ca8bww/7upWiVrViNutulAzSx1nTkwTBsB7dv KbBgkXChis6J6DmpJjqY94djb9a3Qjil5nJP9VIHToVaLmqlGn/lT3qUYb4iUrPs hv5Q+sAYWqUnlY8Q9Bn9GCuMC5Fw+9ZZd7HHfMBXLrgsj0tGBK1GkJpz3A19Qafw DYpsUIlftDY6jmpSiaxGtRC9D357OE/fUoIxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQURBfW+/+w3AJah0VvQKX+rZjRuuEwHwYDVR0jBBgwFoAUYLLY+Q0hBcjrh2hW qpdbU8QyaZYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy Ny9ZTExZLVEwaEJjanJoMmhXcXBkYlU4UXlhWlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1lMTFktUTBoQmNqcmgyaFdxcGRiVThReWFaWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjcvWUxMWS1RMGhCY2py aDJoV3FwZGJVOFF5YVpZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMC9+LlAzI9WVJgDIg+fRf6s33IEBd0L5zkt5T2HNBeUHfHT9Jj3anMAjkCy 72q6Fq9xxvq7lx0VQqyR8aP3t11XenMFyrV8Z5mJA2x+jnYhFa4s6m28RNPPEdeH 8W3Kgv2w5Q/rDCbL8Z7Jl/XwEzsJh/UuIFN3qYDvOI0+cRGbCcneKc+6fGPddByy dWLxBy7HVPwLmOfJZkcBcDwYUCp4peJ0u0Z1AjwGYaZNhXZFjvfpqTV114x41qwE GGv6vshP7TZmh3/77djn59e7cgjGoTRQXdJ34U/CSA/lJeM9Zwtg5UgUA1ZfPVJX bgu92xxOkwmVY6dyHaAyjk9yirw= -----END CERTIFICATE-----Generated at Sat Jun 1 11:37:20 2024 by rpki-client on console-fra.rpki-client.org