$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft File: hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft (raw, json) Hash identifier: UZ/2obfH/+4kputGS1w0DveKuFKb7yPlotEqUNhLU50= Subject key identifier: 5A:E5:EB:E6:F2:69:00:47:5A:8B:A4:8D:FD:4E:DA:E4:5D:DB:34:BF Authority key identifier: 86:42:7E:54:5A:3E:80:6B:34:5F:0D:20:C0:E3:9E:21:C4:E8:50:1C Certificate issuer: /CN=86427E545A3E806B345F0D20C0E39E21C4E8501C Certificate serial: 05DB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft Manifest number: 05DB Signing time: Sun 02 Jun 2024 10:24:49 +0000 Manifest this update: Sun 02 Jun 2024 10:24:49 +0000 Manifest next update: Sun 02 Jun 2024 16:24:49 +0000 Files and hashes: 1: hkJ-VFo-gGs0Xw0gwOOeIcToUBw.crl (hash: ODODy8Ql2rQqSCILWys0+016IRim5cwjLCVImjxoDLY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 16:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1499 (0x5db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86427E545A3E806B345F0D20C0E39E21C4E8501C Validity Not Before: Jun 2 10:24:49 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=5AE5EBE6F26900475A8BA48DFD4EDAE45DDB34BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:4d:89:ad:a4:d1:cf:95:af:20:d2:72:38: c8:10:41:3a:e8:23:5d:d7:16:57:21:b6:a1:2d:cd: 37:8c:84:f4:c0:4f:89:ab:6c:d5:dd:7b:d5:e0:7f: f3:3f:af:a6:fb:8e:b7:98:ab:91:d0:66:6b:14:fe: ad:d6:f1:55:51:f2:0b:00:8f:e4:30:ac:35:cc:03: 91:99:87:8f:d5:a8:b6:61:1f:1c:ca:bc:86:e4:93: 00:eb:89:c4:89:c1:27:42:a6:28:3b:47:cc:ca:06: 41:a8:f0:6b:9c:ab:08:ce:6d:4a:18:b3:2a:ee:98: ca:54:87:81:ed:a7:08:d4:e0:fe:84:b3:a1:d2:39: 61:15:02:16:10:08:ea:3c:f5:98:a9:89:71:7a:05: 5b:a9:17:4b:46:f6:f9:c7:74:5a:b0:96:2a:f2:e9: b1:a6:d2:5c:ad:c7:c8:58:ac:d4:a2:2c:5c:51:6c: 71:5e:dd:4e:58:97:31:43:64:25:41:f2:5b:aa:b6: 53:dc:c3:b9:41:6f:1d:e4:31:b4:1c:03:0e:8c:53: 24:c2:04:9d:f1:2b:9f:42:9e:97:9e:92:58:78:27: 9e:dd:1f:df:e1:8e:49:a6:03:2a:4f:54:f2:d9:1d: 5b:c7:da:79:aa:04:d9:a7:5b:49:e4:d9:0e:a3:d8: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E5:EB:E6:F2:69:00:47:5A:8B:A4:8D:FD:4E:DA:E4:5D:DB:34:BF X509v3 Authority Key Identifier: keyid:86:42:7E:54:5A:3E:80:6B:34:5F:0D:20:C0:E3:9E:21:C4:E8:50:1C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:59:7b:64:44:67:ca:03:32:6d:94:77:3a:9f:cf:a9:a3:f5: 7d:52:49:e7:3f:b5:a6:63:99:a1:0e:04:0a:05:55:ca:14:e5: 80:e4:78:eb:89:92:ac:b6:bb:d4:e2:f7:75:8f:ea:79:c8:00: a4:aa:1f:23:42:21:23:20:03:1e:ab:f9:1f:a6:cc:e4:7a:34: c2:ce:ff:d6:a3:2a:b5:8a:8c:50:cc:0c:b4:0f:a9:42:21:bb: 61:65:97:df:e8:0d:91:e1:12:9b:d4:31:24:7f:4b:29:0f:a1: 1a:d0:d5:75:8a:54:c0:12:b7:71:b8:39:21:06:a1:fb:94:ee: e2:60:a5:e4:23:2b:4c:cf:9e:a8:db:f5:9a:af:2c:30:5f:0d: 89:50:0d:90:84:40:1b:81:c4:3e:ad:08:0d:be:c3:f8:52:06: c2:dc:0f:79:4b:45:ee:ff:a9:1f:e0:5f:00:1a:57:af:20:82: 5e:3c:34:91:8e:04:af:65:17:7b:f6:0f:e3:39:bc:3c:70:3f: 55:3d:49:cc:a1:0a:c4:dd:54:4a:f7:e8:42:f5:9e:90:dc:21: fd:3b:f6:89:4b:36:d5:d7:b8:9c:ac:36:4a:30:4a:67:73:7f: 3a:6c:04:e6:6e:43:e2:b0:8b:27:08:23:25:96:3f:33:40:1a: 26:37:7b:e7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODY0 MjdFNTQ1QTNFODA2QjM0NUYwRDIwQzBFMzlFMjFDNEU4NTAxQzAeFw0yNDA2MDIx MDI0NDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVBRTVFQkU2RjI2OTAw NDc1QThCQTQ4REZENEVEQUU0NUREQjM0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAHk2JraTRz5WvINJyOMgQQTroI13XFlchtqEtzTeMhPTAT4mr bNXde9Xgf/M/r6b7jreYq5HQZmsU/q3W8VVR8gsAj+QwrDXMA5GZh4/VqLZhHxzK vIbkkwDricSJwSdCpig7R8zKBkGo8GucqwjObUoYsyrumMpUh4HtpwjU4P6Es6HS OWEVAhYQCOo89ZipiXF6BVupF0tG9vnHdFqwliry6bGm0lytx8hYrNSiLFxRbHFe 3U5YlzFDZCVB8luqtlPcw7lBbx3kMbQcAw6MUyTCBJ3xK59Cnpeeklh4J57dH9/h jkmmAypPVPLZHVvH2nmqBNmnW0nk2Q6j2N11AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUWuXr5vJpAEdai6SN/U7a5F3bNL8wHwYDVR0jBBgwFoAUhkJ+VFo+gGs0Xw0g wOOeIcToUBwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy OS9oa0otVkZvLWdHczBYdzBnd09PZUljVG9VQncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hrSi1WRm8tZ0dzMFh3MGd3T09lSWNUb1VCdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjkvaGtKLVZGby1nR3Mw WHcwZ3dPT2VJY1RvVUJ3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGBZe2REZ8oDMm2Udzqfz6mj9X1SSec/taZjmaEOBAoFVcoU5YDkeOuJkqy2 u9Ti93WP6nnIAKSqHyNCISMgAx6r+R+mzOR6NMLO/9ajKrWKjFDMDLQPqUIhu2Fl l9/oDZHhEpvUMSR/SykPoRrQ1XWKVMASt3G4OSEGofuU7uJgpeQjK0zPnqjb9Zqv LDBfDYlQDZCEQBuBxD6tCA2+w/hSBsLcD3lLRe7/qR/gXwAaV68ggl48NJGOBK9l F3v2D+M5vDxwP1U9ScyhCsTdVEr36EL1npDcIf079olLNtXXuJysNkowSmdzfzps BOZuQ+KwiycIIyWWPzNAGiY3e+c= -----END CERTIFICATE-----Generated at Sun Jun 2 12:47:03 2024 by rpki-client on console-ams.rpki-client.org