$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft File: jTTVmB17agASe58mh0ik4SM-E48.mft (raw, json) Hash identifier: G2iTLBIPhshFshj+BsjCwBr3raACXjRkZawfLKgf1sg= Subject key identifier: 62:89:5A:E1:1E:72:D5:04:B6:EF:03:F4:35:F2:56:61:C1:1D:48:FD Authority key identifier: 8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F Certificate issuer: /CN=8D34D5981D7B6A00127B9F268748A4E1233E138F Certificate serial: 0324 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft Manifest number: 031F Signing time: Sun 02 Jun 2024 05:54:57 +0000 Manifest this update: Sun 02 Jun 2024 05:54:57 +0000 Manifest next update: Sun 02 Jun 2024 11:54:57 +0000 Files and hashes: 1: anhawBPuq_1XPPzWxQg-Bim5AoA.roa (hash: c2oScWP4CqP81amT5vbfRl5r2ddDHZ3UkLJlwRNqBY8=) 2: jTTVmB17agASe58mh0ik4SM-E48.crl (hash: 1MM8nZB9lN6s2YQsqmNV/f1FRRzF15zv+8jzo05ZhG8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 11:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D34D5981D7B6A00127B9F268748A4E1233E138F Validity Not Before: Jun 2 05:54:57 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=62895AE11E72D504B6EF03F435F25661C11D48FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:1f:5b:a5:f5:c1:65:07:d0:b5:5e:98:c5: a5:d2:7f:63:80:f8:06:4d:8f:6b:4c:2f:0b:db:f3: dd:65:86:d3:9b:85:ba:02:93:37:f1:57:63:20:6a: ef:a4:73:24:d0:b2:19:25:5e:0d:b7:ec:e2:96:a7: 59:58:cc:60:0d:77:46:d8:cc:f0:7e:37:3b:b4:67: 7e:bd:02:d6:a7:51:3c:7e:af:17:43:2c:42:b4:0c: a8:26:a5:78:da:ba:a9:ab:cc:1b:1f:06:4b:12:74: b4:b7:5e:c0:15:af:25:37:47:34:10:4e:3c:3b:e8: 04:f1:ce:db:d3:18:1b:c5:01:e3:40:d7:18:0e:04: 44:5c:11:6d:d5:bd:6d:99:f6:31:d8:15:da:5e:0f: 8c:f7:10:99:22:65:31:41:bb:00:f9:a0:ea:36:20: 56:80:f0:c7:23:b5:e9:77:bf:59:85:af:aa:82:2a: 34:ac:e9:63:0a:3d:b4:a3:2d:42:84:e4:df:c0:f3: da:10:21:47:41:09:79:d8:f8:4e:c7:36:6a:a2:84: ca:ce:d0:82:24:fe:e5:51:21:11:a8:9a:64:e4:aa: 9c:fc:83:c6:ed:c6:15:18:fe:5a:eb:bc:a1:e5:84: ed:ca:d9:42:aa:76:49:c2:f9:20:c5:de:9c:b2:af: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:89:5A:E1:1E:72:D5:04:B6:EF:03:F4:35:F2:56:61:C1:1D:48:FD X509v3 Authority Key Identifier: keyid:8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a6:d5:58:cb:91:0b:df:54:dc:6a:a1:c9:32:4b:bb:eb:e2: 90:e4:85:ae:4e:b5:9e:87:4c:64:e5:62:39:76:4c:ec:46:36: f4:35:78:de:23:6c:2e:0b:86:b5:0e:52:e3:a8:56:0a:f5:82: 1a:b3:5f:36:13:da:98:f3:a5:b9:5e:ed:4c:b8:4b:a6:65:ed: 09:ea:00:e0:80:b2:cb:e6:84:f2:89:50:d5:99:3f:3f:8d:e4: 9d:6c:c7:d6:a2:0b:ce:11:4f:74:db:51:75:e7:a5:7e:9e:01: 7a:89:21:34:ee:c9:2e:f4:40:b2:17:ea:9e:4e:1c:a0:b1:92: 2f:66:62:b7:71:fa:8d:02:f9:f0:e8:53:ac:46:78:5a:a0:52: 02:03:e8:98:99:00:75:64:ae:b4:ad:a4:b4:bb:25:e1:aa:a2: 1f:81:e2:59:dd:b4:8b:75:a8:13:36:a9:ac:ee:02:c0:2d:4f: 18:99:b5:de:8e:6a:92:13:88:95:11:22:3d:4c:29:f6:09:9a: 55:0f:f7:6b:33:ed:37:87:7b:0d:02:ed:03:d4:17:cc:0a:0c: 13:c9:65:d4:c9:47:4e:7c:02:41:98:58:78:c7:83:be:f6:8c: ff:7d:53:b8:3f:a6:73:72:21:26:ed:c2:ad:b1:61:40:2e:c2: 6b:a6:3b:5c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQz NEQ1OTgxRDdCNkEwMDEyN0I5RjI2ODc0OEE0RTEyMzNFMTM4RjAeFw0yNDA2MDIw NTU0NTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDYyODk1QUUxMUU3MkQ1 MDRCNkVGMDNGNDM1RjI1NjYxQzExRDQ4RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0+B9bpfXBZQfQtV6YxaXSf2OA+AZNj2tMLwvb891lhtObhboC kzfxV2Mgau+kcyTQshklXg237OKWp1lYzGANd0bYzPB+Nzu0Z369AtanUTx+rxdD LEK0DKgmpXjauqmrzBsfBksSdLS3XsAVryU3RzQQTjw76ATxztvTGBvFAeNA1xgO BERcEW3VvW2Z9jHYFdpeD4z3EJkiZTFBuwD5oOo2IFaA8Mcjtel3v1mFr6qCKjSs 6WMKPbSjLUKE5N/A89oQIUdBCXnY+E7HNmqihMrO0IIk/uVRIRGommTkqpz8g8bt xhUY/lrrvKHlhO3K2UKqdknC+SDF3pyyr9PnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUYola4R5y1QS27wP0NfJWYcEdSP0wHwYDVR0jBBgwFoAUjTTVmB17agASe58m h0ik4SM+E48wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 MC9qVFRWbUIxN2FnQVNlNThtaDBpazRTTS1FNDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pUVFZtQjE3YWdBU2U1OG1oMGlrNFNNLUU0OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTAvalRUVm1CMTdhZ0FT ZTU4bWgwaWs0U00tRTQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE6m1VjLkQvfVNxqockyS7vr4pDkha5OtZ6HTGTlYjl2TOxGNvQ1eN4jbC4L hrUOUuOoVgr1ghqzXzYT2pjzpble7Uy4S6Zl7QnqAOCAssvmhPKJUNWZPz+N5J1s x9aiC84RT3TbUXXnpX6eAXqJITTuyS70QLIX6p5OHKCxki9mYrdx+o0C+fDoU6xG eFqgUgID6JiZAHVkrrStpLS7JeGqoh+B4lndtIt1qBM2qazuAsAtTxiZtd6OapIT iJURIj1MKfYJmlUP92sz7TeHew0C7QPUF8wKDBPJZdTJR058AkGYWHjHg772jP99 U7g/pnNyISbtwq2xYUAuwmumO1w= -----END CERTIFICATE-----Generated at Sun Jun 2 09:22:42 2024 by rpki-client on console-ams.rpki-client.org