$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft File: Nd6o5bEoW5KyERchGKNBqy3bdrU.mft (raw, json) Hash identifier: Q/cA9YsbZTEKd/EL/es/p2cwe3+0f8eEfj7T0UtB0/M= Subject key identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 Authority key identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 Certificate issuer: /CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Certificate serial: 065F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft Manifest number: 065F Signing time: Tue 18 Jun 2024 09:25:44 +0000 Manifest this update: Tue 18 Jun 2024 09:25:44 +0000 Manifest next update: Tue 18 Jun 2024 15:25:44 +0000 Files and hashes: 1: Nd6o5bEoW5KyERchGKNBqy3bdrU.crl (hash: T/aWtq7UqoR7cyKb5+nl5EZExsgimDYcotjRJqXUC44=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 14:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Validity Not Before: Jun 18 09:25:44 2024 GMT Not After : Oct 8 00:16:33 2024 GMT Subject: CN=5BF91187435E01A842776355A2D3F3D0C6B75447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:4a:2e:e3:69:8c:36:a2:0f:c6:e1:ab:fa: a2:b8:c7:c6:f4:4f:0b:69:37:bd:7d:e9:b1:d2:d7: a3:24:85:7c:76:27:64:4d:ed:80:85:14:bb:3e:13: 65:f5:c8:27:33:60:41:5b:7d:61:d2:af:4a:c4:5d: f4:20:d5:b9:95:1d:43:95:d1:fd:ba:e7:ac:b9:6d: c7:8a:31:7c:c2:5a:43:2a:f4:7f:da:3a:06:61:59: 60:45:5f:ca:e3:dd:ac:ce:be:b3:ed:35:c9:6f:89: 0c:e8:2a:a0:99:f3:54:27:86:81:eb:1b:88:e5:55: 6e:b7:ef:a2:91:aa:4e:87:b5:be:43:4e:36:dc:d8: aa:30:14:03:f4:1e:2b:ae:1c:1a:26:0c:5d:39:e6: 68:eb:10:a7:ea:b1:6f:b0:b3:e9:f9:89:a2:8e:68: 0a:20:19:9a:91:27:df:a5:27:05:f8:79:1a:16:80: a1:0d:16:dc:2b:9c:ac:0f:8a:6b:cc:b3:3f:8d:00: 8e:5e:3f:3e:f5:77:80:e4:fc:9e:57:18:23:25:bf: 4b:c0:f7:23:72:90:43:d5:75:78:21:d0:87:e4:b2: b2:fb:d8:27:55:99:82:8e:68:53:18:f8:1a:88:95: 97:73:d4:5c:33:89:56:99:70:1a:bf:13:72:db:07: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 X509v3 Authority Key Identifier: keyid:35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a9:e0:4c:8d:23:75:fb:a1:d4:63:dd:3b:88:24:6f:06:9b: c8:5c:17:c5:92:6c:53:11:48:f4:2c:a8:8f:7a:23:3a:51:8f: e3:55:67:bb:b5:c1:0d:b5:b8:7a:a8:b4:30:c2:80:15:ec:22: 6c:37:6b:da:fe:bc:70:37:21:f2:c6:c7:5f:4f:16:1f:d6:e9: 16:f2:cb:c2:21:ef:cc:bb:65:b4:5e:39:60:c0:ea:3a:c5:46: fc:4c:52:a8:35:c2:df:07:65:6c:9a:4d:7c:5e:cc:ba:89:51: 99:e4:73:90:e7:75:da:e8:aa:a8:79:73:d8:54:ef:6a:32:bf: 07:2d:49:c1:d8:72:30:fe:61:86:90:71:b9:9f:8a:54:d1:be: 10:19:bc:94:4e:31:f7:78:f1:cd:d7:dc:3f:6b:96:ba:87:6a: 17:83:80:f0:87:0f:fa:7d:90:bf:dc:16:b8:7d:cd:9b:cf:9e: 3f:fd:7e:d6:f0:b5:c4:18:7f:8a:52:cf:6b:e5:39:42:ce:4a: 92:ac:24:5d:d8:e1:1d:b6:b4:78:ff:8e:51:bc:94:d3:51:d8: 24:9a:a4:36:44:90:46:ab:0b:a4:23:42:00:9a:5b:db:ce:98: 1a:17:a5:1e:e0:87:4c:5c:6b:e2:77:ff:b8:4c:a3:14:a2:ae: 1f:9c:2a:d2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVE RUE4RTVCMTI4NUI5MkIyMTExNzIxMThBMzQxQUIyRERCNzZCNTAeFw0yNDA2MTgw OTI1NDRaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKDVCRjkxMTg3NDM1RTAx QTg0Mjc3NjM1NUEyRDNGM0QwQzZCNzU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL1kou42mMNqIPxuGr+qK4x8b0TwtpN7196bHS16MkhXx2J2RN 7YCFFLs+E2X1yCczYEFbfWHSr0rEXfQg1bmVHUOV0f2656y5bceKMXzCWkMq9H/a OgZhWWBFX8rj3azOvrPtNclviQzoKqCZ81QnhoHrG4jlVW6376KRqk6Htb5DTjbc 2KowFAP0HiuuHBomDF055mjrEKfqsW+ws+n5iaKOaAogGZqRJ9+lJwX4eRoWgKEN FtwrnKwPimvMsz+NAI5ePz71d4Dk/J5XGCMlv0vA9yNykEPVdXgh0IfksrL72CdV mYKOaFMY+BqIlZdz1FwziVaZcBq/E3LbBxk/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUW/kRh0NeAahCd2NVotPz0Ma3VEcwHwYDVR0jBBgwFoAUNd6o5bEoW5KyERch GKNBqy3bdrUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Mi9OZDZvNWJFb1c1S3lFUmNoR0tOQnF5M2JkclUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05kNm81YkVvVzVLeUVSY2hHS05CcXkzYmRyVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzIvTmQ2bzViRW9XNUt5 RVJjaEdLTkJxeTNiZHJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEyp4EyNI3X7odRj3TuIJG8Gm8hcF8WSbFMRSPQsqI96IzpRj+NVZ7u1wQ21 uHqotDDCgBXsImw3a9r+vHA3IfLGx19PFh/W6Rbyy8Ih78y7ZbReOWDA6jrFRvxM Uqg1wt8HZWyaTXxezLqJUZnkc5Dnddroqqh5c9hU72oyvwctScHYcjD+YYaQcbmf ilTRvhAZvJROMfd48c3X3D9rlrqHaheDgPCHD/p9kL/cFrh9zZvPnj/9ftbwtcQY f4pSz2vlOULOSpKsJF3Y4R22tHj/jlG8lNNR2CSapDZEkEarC6QjQgCaW9vOmBoX pR7gh0xca+J3/7hMoxSirh+cKtI= -----END CERTIFICATE-----Generated at Tue Jun 18 11:50:17 2024 by rpki-client on console-fra.rpki-client.org