$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft File: vJA-IGAC4WXCtlKh9td7d9hy4io.mft (raw, json) Hash identifier: XIPDrvLxCfRvWmK4Oj52DFBGdzSFCbA2utIwG1JkYQI= Subject key identifier: B4:6C:C3:3E:2B:B3:08:6B:36:EA:A0:CD:93:40:F8:0E:57:98:D7:4A Authority key identifier: BC:90:3E:20:60:02:E1:65:C2:B6:52:A1:F6:D7:7B:77:D8:72:E2:2A Certificate issuer: /CN=BC903E206002E165C2B652A1F6D77B77D872E22A Certificate serial: 0334 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft Manifest number: 0334 Signing time: Sat 01 Jun 2024 10:24:38 +0000 Manifest this update: Sat 01 Jun 2024 10:24:38 +0000 Manifest next update: Sat 01 Jun 2024 16:24:38 +0000 Files and hashes: 1: vJA-IGAC4WXCtlKh9td7d9hy4io.crl (hash: p4xK8XckTt8iIvCj37A2CQN3h6CYTYdesjtqyhYtnts=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC903E206002E165C2B652A1F6D77B77D872E22A Validity Not Before: Jun 1 10:24:38 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B46CC33E2BB3086B36EAA0CD9340F80E5798D74A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:ba:9f:68:94:97:00:a8:47:df:40:87:c4: 74:e6:9c:46:5d:a1:e8:c7:9d:f7:17:a2:f1:d3:3a: be:53:a2:cb:d8:bc:77:80:a1:c0:b6:7d:7d:e4:ad: f2:68:cb:07:cc:88:2d:cc:05:0a:66:3e:3a:32:bc: 7b:92:a2:c2:cc:f1:bc:1e:c0:7b:e2:5c:13:59:34: 93:da:2a:3c:57:36:20:09:fc:93:38:08:53:19:b0: 98:1d:21:1a:a6:86:95:25:9c:5a:60:c1:95:05:d5: be:c3:ba:64:21:fc:b6:dd:a8:6d:4f:52:5f:aa:c9: d1:0b:37:ae:b1:5e:12:36:5b:97:6c:f6:19:5a:1f: 01:d6:bc:ec:d7:e5:eb:fd:a8:f0:26:f7:64:3f:37: f3:9b:d7:43:35:f1:2d:b3:13:2f:4f:38:69:03:fd: 5c:47:bb:39:a3:5a:e0:bc:df:45:ee:e8:35:43:99: 94:13:70:17:d2:81:91:8b:6d:fd:b5:75:f5:56:2d: 50:ad:13:1e:b0:90:a4:0d:77:57:bd:96:b8:d8:ba: 57:d3:c2:68:08:0a:87:5b:4f:9f:ba:d1:e4:90:77: d9:f8:1b:e5:70:33:44:7d:13:39:f5:04:97:fd:48: cd:f1:0b:eb:7a:4e:d0:e0:93:d3:a9:7f:1e:24:4a: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6C:C3:3E:2B:B3:08:6B:36:EA:A0:CD:93:40:F8:0E:57:98:D7:4A X509v3 Authority Key Identifier: keyid:BC:90:3E:20:60:02:E1:65:C2:B6:52:A1:F6:D7:7B:77:D8:72:E2:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:16:8a:ad:be:97:a9:94:ac:4c:db:27:f7:c6:25:70:e4:58: 58:e0:39:e5:97:04:ba:a4:ee:b8:fe:b3:ca:51:40:23:eb:1f: d0:19:7b:31:bd:3b:29:49:0c:b0:f5:57:4e:76:4d:dc:a8:05: 11:b5:a8:72:ee:a9:2d:16:74:7a:28:3e:a0:1b:0a:cc:10:c6: 4f:55:62:8b:97:05:bc:ca:9a:2b:5c:d5:9b:6d:53:96:19:7c: b1:9f:46:c9:67:13:b7:95:2b:73:fd:5a:8d:fb:fe:25:2e:f6: 4c:b2:70:14:fd:c6:83:d0:39:bc:07:25:bc:bf:2c:b1:36:a8: e2:f9:7a:5d:6a:50:76:47:bc:5a:a5:77:c5:00:12:8f:80:63: d1:30:e0:39:65:e9:08:da:4a:8a:c0:51:7e:2e:e1:f9:03:93: 5d:ce:6a:34:96:7c:4f:88:23:49:d4:64:58:03:3c:f1:18:6c: eb:41:52:66:65:e9:4b:5d:c0:74:2b:50:16:be:15:9d:41:21: b0:00:b3:20:84:0a:1d:b7:3c:33:94:11:81:e8:34:54:ed:05: 18:1e:af:ce:00:c7:29:1e:7a:cd:bf:b6:a6:a2:36:71:87:18: d9:87:4b:60:b2:18:a8:b4:5d:9e:92:98:cc:e4:7d:14:4f:f9: 90:ad:7a:29 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkM5 MDNFMjA2MDAyRTE2NUMyQjY1MkExRjZENzdCNzdEODcyRTIyQTAeFw0yNDA2MDEx MDI0MzhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI0NkNDMzNFMkJCMzA4 NkIzNkVBQTBDRDkzNDBGODBFNTc5OEQ3NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5s7qfaJSXAKhH30CHxHTmnEZdoejHnfcXovHTOr5TosvYvHeA ocC2fX3krfJoywfMiC3MBQpmPjoyvHuSosLM8bwewHviXBNZNJPaKjxXNiAJ/JM4 CFMZsJgdIRqmhpUlnFpgwZUF1b7DumQh/LbdqG1PUl+qydELN66xXhI2W5ds9hla HwHWvOzX5ev9qPAm92Q/N/Ob10M18S2zEy9POGkD/VxHuzmjWuC830Xu6DVDmZQT cBfSgZGLbf21dfVWLVCtEx6wkKQNd1e9lrjYulfTwmgICodbT5+60eSQd9n4G+Vw M0R9Ezn1BJf9SM3xC+t6TtDgk9Opfx4kSkt/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUtGzDPiuzCGs26qDNk0D4DleY10owHwYDVR0jBBgwFoAUvJA+IGAC4WXCtlKh 9td7d9hy4iowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 OS92SkEtSUdBQzRXWEN0bEtoOXRkN2Q5aHk0aW8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3ZKQS1JR0FDNFdYQ3RsS2g5dGQ3ZDloeTRpby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDkvdkpBLUlHQUM0V1hD dGxLaDl0ZDdkOWh5NGlvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFgWiq2+l6mUrEzbJ/fGJXDkWFjgOeWXBLqk7rj+s8pRQCPrH9AZezG9OylJ DLD1V052TdyoBRG1qHLuqS0WdHooPqAbCswQxk9VYouXBbzKmitc1ZttU5YZfLGf RslnE7eVK3P9Wo37/iUu9kyycBT9xoPQObwHJby/LLE2qOL5el1qUHZHvFqld8UA Eo+AY9Ew4Dll6QjaSorAUX4u4fkDk13OajSWfE+II0nUZFgDPPEYbOtBUmZl6Utd wHQrUBa+FZ1BIbAAsyCECh23PDOUEYHoNFTtBRger84Axykees2/tqaiNnGHGNmH S2CyGKi0XZ6SmMzkfRRP+ZCteik= -----END CERTIFICATE-----Generated at Sat Jun 1 11:37:20 2024 by rpki-client on console-fra.rpki-client.org