$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft File: NJtamVn9EvndSwGEz41q1msimH4.mft (raw, json) Hash identifier: EbAX3gC6REZkgYT1GquKIrYpQOdqu1SO1TXc8Ujl2Wo= Subject key identifier: AB:45:AE:51:8A:99:E0:5D:CF:F5:FF:68:77:5A:DE:38:D2:A3:D3:D4 Authority key identifier: 34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E Certificate issuer: /CN=349B5A9959FD12F9DD4B0184CF8D6AD66B22987E Certificate serial: 02F0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NJtamVn9EvndSwGEz41q1msimH4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft Manifest number: 02F0 Signing time: Sun 02 Jun 2024 10:25:09 +0000 Manifest this update: Sun 02 Jun 2024 10:25:09 +0000 Manifest next update: Sun 02 Jun 2024 16:25:09 +0000 Files and hashes: 1: NJtamVn9EvndSwGEz41q1msimH4.crl (hash: xCAs7TDS6VKeL+/REDXzp6T6W27//c4QqmoeQPXlviQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NJtamVn9EvndSwGEz41q1msimH4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 16:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B5A9959FD12F9DD4B0184CF8D6AD66B22987E Validity Not Before: Jun 2 10:25:09 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=AB45AE518A99E05DCFF5FF68775ADE38D2A3D3D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:b3:af:34:78:48:86:be:f3:3d:49:3e:7d: 6e:25:57:57:1c:86:8a:91:79:fe:16:12:12:8a:04: 12:50:65:23:e2:c6:94:34:d1:b1:25:09:e4:a6:c8: 71:df:02:8d:a9:9e:b9:b0:09:86:74:23:41:aa:18: eb:14:54:6e:6d:46:2d:f4:98:ce:fe:02:43:f5:2b: 4c:a4:e7:ab:4a:fa:17:cb:48:2e:94:9f:cc:a5:30: 0c:84:d3:d3:fb:4e:39:7f:f2:f1:ff:67:c2:fa:b6: bb:e4:e3:f3:6d:c1:27:4f:46:fe:4d:5c:93:93:50: f8:2d:6d:53:1d:c1:56:08:52:df:56:a1:c3:a2:57: 63:c8:89:c8:11:57:59:cb:cd:00:24:0d:bd:ee:8b: 9b:c1:52:a9:3d:02:64:01:a1:71:44:e7:21:c5:88: 64:be:29:63:4c:3c:62:65:b1:75:84:43:13:df:2f: 79:d0:90:82:73:91:55:09:55:02:06:42:de:0f:9a: db:9b:a2:92:95:27:61:03:b9:16:92:0e:b3:43:4b: 6b:dd:1a:e3:27:90:9e:52:67:9c:7c:f8:4f:1a:9e: 57:eb:c5:82:3a:b7:8e:d4:fc:01:cc:8c:18:89:07: f4:ce:8a:ae:48:fc:fa:b3:3e:aa:be:2c:14:17:61: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:45:AE:51:8A:99:E0:5D:CF:F5:FF:68:77:5A:DE:38:D2:A3:D3:D4 X509v3 Authority Key Identifier: keyid:34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NJtamVn9EvndSwGEz41q1msimH4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:87:3e:70:c5:d1:60:fd:1a:5e:06:f7:ea:ba:7e:76:a4:0a: f5:4c:ab:4d:b3:76:07:48:9d:f3:91:e7:49:fa:62:b6:c6:a2: 23:c8:81:92:b4:8b:b6:04:6e:81:2a:7a:67:2a:17:27:62:73: 27:04:7d:11:0d:97:d6:c7:9b:d5:b9:80:1a:9b:2c:60:89:37: 0d:e2:8d:4a:d6:27:09:60:76:6e:a8:e7:3a:27:1b:fd:c3:6b: 50:4a:0a:78:ed:4e:be:c9:17:d4:c6:a7:fb:87:a1:e8:6f:db: 89:c4:df:d9:2a:22:4b:15:35:b2:cc:df:d7:52:3e:f5:5d:ec: 54:6f:f2:2d:98:a5:b0:ad:cc:d7:e4:1a:2d:bf:60:db:68:ed: 05:71:9e:f0:49:e8:d4:8c:db:11:3e:53:73:6e:23:a6:88:40: 23:ef:a7:df:bd:30:d3:2d:f9:ea:5a:10:f1:f8:bd:e9:85:60: 38:6f:d0:7e:a4:69:28:ef:e8:46:fc:96:16:07:07:47:8d:90: 05:7f:a8:e2:a7:de:65:cb:d1:4c:b6:36:e2:6e:a9:99:ef:57: e3:b1:d8:60:a1:cb:61:8b:49:d6:74:b2:60:92:be:71:c8:9c: 0f:81:3e:2d:96:78:8f:b6:16:5c:01:9b:76:50:a1:21:d0:b2: bb:93:ae:db -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjVBOTk1OUZEMTJGOURENEIwMTg0Q0Y4RDZBRDY2QjIyOTg3RTAeFw0yNDA2MDIx MDI1MDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFCNDVBRTUxOEE5OUUw NURDRkY1RkY2ODc3NUFERTM4RDJBM0QzRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNSrOvNHhIhr7zPUk+fW4lV1cchoqRef4WEhKKBBJQZSPixpQ0 0bElCeSmyHHfAo2pnrmwCYZ0I0GqGOsUVG5tRi30mM7+AkP1K0yk56tK+hfLSC6U n8ylMAyE09P7Tjl/8vH/Z8L6trvk4/NtwSdPRv5NXJOTUPgtbVMdwVYIUt9WocOi V2PIicgRV1nLzQAkDb3ui5vBUqk9AmQBoXFE5yHFiGS+KWNMPGJlsXWEQxPfL3nQ kIJzkVUJVQIGQt4PmtubopKVJ2EDuRaSDrNDS2vdGuMnkJ5SZ5x8+E8anlfrxYI6 t47U/AHMjBiJB/TOiq5I/PqzPqq+LBQXYcS7AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUq0WuUYqZ4F3P9f9od1reONKj09QwHwYDVR0jBBgwFoAUNJtamVn9EvndSwGE z41q1msimH4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 My9OSnRhbVZuOUV2bmRTd0dFejQxcTFtc2ltSDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05KdGFtVm45RXZuZFN3R0V6NDFxMW1zaW1INC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTMvTkp0YW1WbjlFdm5k U3dHRXo0MXExbXNpbUg0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEqHPnDF0WD9Gl4G9+q6fnakCvVMq02zdgdInfOR50n6YrbGoiPIgZK0i7YE boEqemcqFydicycEfRENl9bHm9W5gBqbLGCJNw3ijUrWJwlgdm6o5zonG/3Da1BK CnjtTr7JF9TGp/uHoehv24nE39kqIksVNbLM39dSPvVd7FRv8i2YpbCtzNfkGi2/ YNto7QVxnvBJ6NSM2xE+U3NuI6aIQCPvp9+9MNMt+epaEPH4vemFYDhv0H6kaSjv 6Eb8lhYHB0eNkAV/qOKn3mXL0Uy2NuJuqZnvV+Ox2GChy2GLSdZ0smCSvnHInA+B Pi2WeI+2FlwBm3ZQoSHQsruTrts= -----END CERTIFICATE-----Generated at Sun Jun 2 11:54:53 2024 by rpki-client on console-fra.rpki-client.org