$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft File: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft (raw, json) Hash identifier: r81eTuvux9B5YeIxch3AYKQnDEliSiES0vHNLEPDh1M= Subject key identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 Authority key identifier: 6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB Certificate issuer: /CN=6FE13AA555489412B2892267A49DAEC44693A6AB Certificate serial: 025A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft Manifest number: 025A Signing time: Sun 02 Jun 2024 10:26:15 +0000 Manifest this update: Sun 02 Jun 2024 10:26:15 +0000 Manifest next update: Sun 02 Jun 2024 16:26:15 +0000 Files and hashes: 1: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl (hash: ptyMwHEeHedh3aEEWznLJUD8yK6NBDM2Qb2ikTDnxJg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 16:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FE13AA555489412B2892267A49DAEC44693A6AB Validity Not Before: Jun 2 10:26:15 2024 GMT Not After : Jan 31 07:15:45 2025 GMT Subject: CN=62AED79DED1AD2E1327501BE06B5E7C5A4F1CFD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:e8:18:68:cb:77:75:de:fd:11:52:33:a7: 9f:bb:ca:56:d9:e1:7e:e1:c3:f3:97:1d:8b:73:fc: 24:6b:ef:6e:8a:6a:05:0a:ca:70:b2:2c:3f:11:a7: e0:ac:8f:4d:5c:35:6e:43:ad:b1:96:82:1d:ba:d2: f5:bf:03:36:d4:13:60:6a:a0:87:09:71:95:f6:77: bc:6c:18:00:80:72:7c:31:ef:9c:03:50:2e:32:d5: 95:b0:a7:67:9e:b1:a5:01:b7:7d:c7:e9:bd:1c:0b: f9:0c:b5:7f:e1:e7:b7:a7:a6:75:04:5c:1b:ea:eb: 14:9d:f6:88:22:d1:a8:d9:5e:56:82:a5:a3:29:12: 80:7d:8a:ea:26:7f:e4:76:dc:52:06:84:d8:87:6e: f6:70:92:e9:cb:23:95:a1:4c:36:1c:b7:70:96:85: 1f:78:08:87:dc:d4:cf:87:09:a1:a7:5e:b7:ba:c6: 6c:93:77:3f:50:76:fe:f0:5c:b5:27:75:1a:bb:52: 77:63:9c:70:ed:47:b5:a5:d3:cb:f2:6c:69:9a:2d: 5f:b2:62:4c:5e:e7:5b:4a:a3:44:7b:f8:e3:b4:3a: 23:f3:46:6e:c5:92:91:43:1a:0f:f0:39:00:d5:72: 40:e0:9c:0a:3f:9b:1b:a7:ee:28:f8:34:45:f7:31: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 X509v3 Authority Key Identifier: keyid:6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:8e:67:7e:a4:35:1f:5a:0d:09:90:71:2b:a3:64:1e:e0:4c: ab:6d:f1:21:e1:df:e4:21:35:15:04:fb:0d:c9:de:8d:36:f5: 3a:37:a3:b0:eb:ed:e9:1c:2f:b5:73:9e:e3:60:a0:c8:a1:77: 5d:59:eb:35:c8:33:81:5f:4c:1d:9e:75:0a:52:96:75:4e:db: e1:81:c0:a2:53:71:f5:33:89:6c:15:70:f6:4a:f4:24:de:f5: ee:5d:fa:11:bb:22:1f:8e:c5:31:38:c1:21:d6:5d:9c:f4:1a: 9a:dc:26:1c:c4:50:16:61:c9:d2:86:bb:d3:a9:91:2b:a8:4d: 08:64:e9:18:fa:68:30:1d:9c:de:40:b3:78:dd:99:cb:89:55: d0:d6:70:e8:0f:ca:78:ae:7f:d4:cf:84:cb:9e:ac:0d:33:34: 75:fd:c7:b2:df:21:92:ef:64:12:aa:ee:19:f4:b1:4a:1f:eb: 91:8b:ac:bb:e7:f6:3c:ea:8c:cb:33:36:40:6d:1f:14:c6:c5: f4:92:6d:09:1a:ef:2b:25:84:f0:0a:0d:85:2f:79:5f:be:40: b1:1e:46:34:7f:31:f2:ad:66:d7:e1:5c:f0:fc:a6:d9:3a:29: eb:bf:8e:9b:28:0b:75:99:b7:99:27:d5:99:34:be:55:81:35: 35:8c:01:e0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZF MTNBQTU1NTQ4OTQxMkIyODkyMjY3QTQ5REFFQzQ0NjkzQTZBQjAeFw0yNDA2MDIx MDI2MTVaFw0yNTAxMzEwNzE1NDVaMDMxMTAvBgNVBAMTKDYyQUVENzlERUQxQUQy RTEzMjc1MDFCRTA2QjVFN0M1QTRGMUNGRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS7+gYaMt3dd79EVIzp5+7ylbZ4X7hw/OXHYtz/CRr726KagUK ynCyLD8Rp+Csj01cNW5DrbGWgh260vW/AzbUE2BqoIcJcZX2d7xsGACAcnwx75wD UC4y1ZWwp2eesaUBt33H6b0cC/kMtX/h57enpnUEXBvq6xSd9ogi0ajZXlaCpaMp EoB9iuomf+R23FIGhNiHbvZwkunLI5WhTDYct3CWhR94CIfc1M+HCaGnXre6xmyT dz9Qdv7wXLUndRq7UndjnHDtR7Wl08vybGmaLV+yYkxe51tKo0R7+OO0OiPzRm7F kpFDGg/wOQDVckDgnAo/mxun7ij4NEX3MRT/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUYq7Xne0a0uEydQG+BrXnxaTxz9kwHwYDVR0jBBgwFoAUb+E6pVVIlBKyiSJn pJ2uxEaTpqswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni9iLUU2cFZWSWxCS3lpU0pucEoydXhFYVRwcXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ItRTZwVlZJbEJLeWlTSm5wSjJ1eEVhVHBxcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvYi1FNnBWVklsQkt5 aVNKbnBKMnV4RWFUcHFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGCOZ36kNR9aDQmQcSujZB7gTKtt8SHh3+QhNRUE+w3J3o029To3o7Dr7ekc L7VznuNgoMihd11Z6zXIM4FfTB2edQpSlnVO2+GBwKJTcfUziWwVcPZK9CTe9e5d +hG7Ih+OxTE4wSHWXZz0GprcJhzEUBZhydKGu9OpkSuoTQhk6Rj6aDAdnN5As3jd mcuJVdDWcOgPyniuf9TPhMuerA0zNHX9x7LfIZLvZBKq7hn0sUof65GLrLvn9jzq jMszNkBtHxTGxfSSbQka7yslhPAKDYUveV++QLEeRjR/MfKtZtfhXPD8ptk6Keu/ jpsoC3WZt5kn1Zk0vlWBNTWMAeA= -----END CERTIFICATE-----Generated at Sun Jun 2 12:47:03 2024 by rpki-client on console-ams.rpki-client.org