$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft File: zJxrrh4RAiWutPnSb5WBXY-SoY4.mft (raw, json) Hash identifier: 9uUHKnlQJawCdG7kxdG/yC8MwMKYLRGPC2lfn1FJxxU= Subject key identifier: 22:32:CE:EE:9F:2C:0E:9D:8E:C6:18:70:CE:6F:50:A9:37:F4:82:C5 Authority key identifier: CC:9C:6B:AE:1E:11:02:25:AE:B4:F9:D2:6F:95:81:5D:8F:92:A1:8E Certificate issuer: /CN=CC9C6BAE1E110225AEB4F9D26F95815D8F92A18E Certificate serial: 02DF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zJxrrh4RAiWutPnSb5WBXY-SoY4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft Manifest number: 02DF Signing time: Sun 02 Jun 2024 05:56:07 +0000 Manifest this update: Sun 02 Jun 2024 05:56:07 +0000 Manifest next update: Sun 02 Jun 2024 11:56:07 +0000 Files and hashes: 1: zJxrrh4RAiWutPnSb5WBXY-SoY4.crl (hash: 2pvwq5/7+B27oIR3Jh64jZq88jk7yRqeonqwXhLG6go=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zJxrrh4RAiWutPnSb5WBXY-SoY4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 11:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC9C6BAE1E110225AEB4F9D26F95815D8F92A18E Validity Not Before: Jun 2 05:56:07 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=2232CEEE9F2C0E9D8EC61870CE6F50A937F482C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:7d:69:60:a4:5b:19:24:87:10:8a:4a:9d: bc:c3:45:30:06:4b:14:c8:35:f2:1d:3e:5a:eb:27: 9b:4b:ee:c4:7e:1c:70:d5:ec:6f:0a:fe:5d:56:34: 22:b2:a0:2b:8d:44:a9:5f:1d:00:9f:16:b5:7a:45: d6:83:a8:fe:fe:84:05:f2:c4:36:60:96:26:f7:cd: 1b:0f:f6:3c:8f:41:1f:87:7d:a7:7a:f4:a3:10:85: 68:7d:da:85:35:83:53:da:34:4a:06:53:8d:3f:1b: 66:ec:bb:31:27:68:3b:eb:d5:8a:2e:51:a2:d6:d7: 1b:64:ac:61:49:ed:23:eb:60:6a:3f:07:38:40:92: 5a:08:b6:7f:3e:db:13:f7:e5:ea:b6:b8:12:ef:56: ab:bb:1b:49:f3:a7:b4:48:22:c6:ef:12:e1:5b:a9: 34:0e:f3:54:b0:49:0f:3b:db:6c:2b:d2:03:77:c8: a2:38:4a:ed:e3:56:75:f6:f2:84:00:cf:2f:52:f2: 87:e2:bc:f5:09:6d:63:9a:7a:fc:29:1c:6e:a8:05: 1c:c6:9f:3d:f1:86:f2:bc:5b:c8:01:1d:a0:66:61: aa:ba:d2:9e:a4:20:b1:49:7f:58:87:c4:f6:f4:4c: 5b:bd:bb:9a:3c:f8:30:e8:82:77:21:90:fd:ec:d8: 5a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:32:CE:EE:9F:2C:0E:9D:8E:C6:18:70:CE:6F:50:A9:37:F4:82:C5 X509v3 Authority Key Identifier: keyid:CC:9C:6B:AE:1E:11:02:25:AE:B4:F9:D2:6F:95:81:5D:8F:92:A1:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zJxrrh4RAiWutPnSb5WBXY-SoY4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ff:66:7c:11:83:f5:6d:01:90:e0:4c:c0:fd:14:81:59:c4: 11:f3:c0:ff:fe:c8:05:f3:e7:3f:d1:29:1e:02:ba:ba:33:b9: 89:c0:da:f2:a5:51:45:96:4d:93:b0:f1:db:33:eb:dc:1e:b3: e9:e0:6e:7d:ea:c4:87:10:f8:3a:c1:e4:ae:d3:d5:98:51:30: 1b:35:80:db:fc:98:53:7d:89:0b:ff:fd:67:45:36:44:b9:9a: 87:b6:d2:ad:ce:68:a2:7e:91:aa:24:ba:1b:63:f0:1a:1e:91: 93:95:10:8f:be:9c:a2:32:16:3c:5d:88:74:ed:c0:60:eb:e3: 8d:37:bf:21:9a:cb:a5:91:c7:f2:1b:ed:9f:f1:39:2c:27:d0: 59:60:eb:26:39:bc:5b:58:48:4e:8c:a7:2b:ae:dd:9a:7c:3d: f5:4d:44:52:d1:7e:5f:9a:85:45:01:2b:2b:9f:57:b1:8d:7c: e0:5f:e9:17:ff:27:0c:3d:09:79:a0:c2:92:78:a4:84:e5:26: f0:e2:f9:f3:a9:8d:5c:86:77:1d:b9:bd:53:e6:d1:58:86:2a: cd:fa:4c:a8:20:0b:eb:47:c2:6b:18:6b:ee:12:08:cf:c8:74: 6f:d4:b1:10:21:02:7e:d5:c4:f9:06:82:3b:c9:3c:02:f9:48: b8:2c:01:f6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0M5 QzZCQUUxRTExMDIyNUFFQjRGOUQyNkY5NTgxNUQ4RjkyQTE4RTAeFw0yNDA2MDIw NTU2MDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIyMzJDRUVFOUYyQzBF OUQ4RUM2MTg3MENFNkY1MEE5MzdGNDgyQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvk31pYKRbGSSHEIpKnbzDRTAGSxTINfIdPlrrJ5tL7sR+HHDV 7G8K/l1WNCKyoCuNRKlfHQCfFrV6RdaDqP7+hAXyxDZglib3zRsP9jyPQR+Hfad6 9KMQhWh92oU1g1PaNEoGU40/G2bsuzEnaDvr1YouUaLW1xtkrGFJ7SPrYGo/BzhA kloItn8+2xP35eq2uBLvVqu7G0nzp7RIIsbvEuFbqTQO81SwSQ8722wr0gN3yKI4 Su3jVnX28oQAzy9S8ofivPUJbWOaevwpHG6oBRzGnz3xhvK8W8gBHaBmYaq60p6k ILFJf1iHxPb0TFu9u5o8+DDognchkP3s2FoBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIjLO7p8sDp2Oxhhwzm9QqTf0gsUwHwYDVR0jBBgwFoAUzJxrrh4RAiWutPnS b5WBXY+SoY4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 NC96Snhycmg0UkFpV3V0UG5TYjVXQlhZLVNvWTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pKeHJyaDRSQWlXdXRQblNiNVdCWFktU29ZNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTQvekp4cnJoNFJBaVd1 dFBuU2I1V0JYWS1Tb1k0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKr/ZnwRg/VtAZDgTMD9FIFZxBHzwP/+yAXz5z/RKR4CurozuYnA2vKlUUWW TZOw8dsz69wes+ngbn3qxIcQ+DrB5K7T1ZhRMBs1gNv8mFN9iQv//WdFNkS5moe2 0q3OaKJ+kaokuhtj8BoekZOVEI++nKIyFjxdiHTtwGDr4403vyGay6WRx/Ib7Z/x OSwn0Flg6yY5vFtYSE6Mpyuu3Zp8PfVNRFLRfl+ahUUBKyufV7GNfOBf6Rf/Jww9 CXmgwpJ4pITlJvDi+fOpjVyGdx25vVPm0ViGKs36TKggC+tHwmsYa+4SCM/IdG/U sRAhAn7VxPkGgjvJPAL5SLgsAfY= -----END CERTIFICATE-----Generated at Sun Jun 2 07:06:21 2024 by rpki-client on console-fra.rpki-client.org