$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.mft File: n8_cuQzpJJspaS8F0cRk9itgXjE.mft (raw, json) Hash identifier: w7vdc91MZX8AgiXfwcyfkCOFvSN2M/W+Ww5gCXI5zP0= Subject key identifier: 0A:45:C8:60:B6:94:9D:F6:2E:B6:07:1A:E5:8B:2B:B0:79:90:6B:88 Authority key identifier: 9F:CF:DC:B9:0C:E9:24:9B:29:69:2F:05:D1:C4:64:F6:2B:60:5E:31 Certificate issuer: /CN=9FCFDCB90CE9249B29692F05D1C464F62B605E31 Certificate serial: 010F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/n8_cuQzpJJspaS8F0cRk9itgXjE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.mft Manifest number: 010F Signing time: Sun 02 Jun 2024 06:54:29 +0000 Manifest this update: Sun 02 Jun 2024 06:54:29 +0000 Manifest next update: Sun 02 Jun 2024 12:54:29 +0000 Files and hashes: 1: n8_cuQzpJJspaS8F0cRk9itgXjE.crl (hash: UrCfP/jopVGlMjIkDd38xO69RG+JnWanHVbW20xTo4Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/n8_cuQzpJJspaS8F0cRk9itgXjE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 11:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FCFDCB90CE9249B29692F05D1C464F62B605E31 Validity Not Before: Jun 2 06:54:29 2024 GMT Not After : Apr 1 07:51:53 2025 GMT Subject: CN=0A45C860B6949DF62EB6071AE58B2BB079906B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b9:75:d4:d2:db:ec:27:91:08:01:c0:09:ba: 89:d2:46:55:8e:1b:9f:9c:9f:9e:fb:82:cd:9f:3f: 16:c5:94:1c:3a:ad:4d:fa:f5:33:3b:94:12:ed:31: 85:3c:0f:41:1d:b3:de:7b:bf:5e:b7:23:79:f0:cf: b8:ca:79:f4:0a:e3:aa:8c:76:5f:8b:6f:7e:5e:90: 24:26:6d:e0:15:5a:40:d3:a8:75:08:4e:b9:e3:f3: 0e:07:20:35:d9:4e:32:0e:0f:6e:1c:48:45:21:40: d2:0d:61:9a:dc:80:bc:03:5a:50:1f:f0:f5:a3:60: f9:77:03:d9:c3:14:2f:62:f8:08:41:0a:10:1f:77: 79:00:20:24:4c:59:07:7d:d5:aa:7b:b1:4c:a7:2c: ce:05:72:ce:d2:72:a0:c9:39:64:23:8c:78:3b:5c: a4:74:4b:23:19:89:6a:b2:73:b1:d1:0a:48:32:b5: f1:64:a6:ba:91:5e:77:89:ed:20:12:c0:05:2f:48: 78:45:03:dd:12:33:bf:ef:a8:1d:4b:f4:8e:94:4a: b0:56:62:ea:bc:43:8c:44:c2:fc:c3:05:59:1a:48: f3:ee:d4:7b:9e:e8:71:29:82:82:35:50:72:8a:61: 44:62:68:61:d2:49:85:0f:91:da:48:1e:c9:f5:47: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:45:C8:60:B6:94:9D:F6:2E:B6:07:1A:E5:8B:2B:B0:79:90:6B:88 X509v3 Authority Key Identifier: keyid:9F:CF:DC:B9:0C:E9:24:9B:29:69:2F:05:D1:C4:64:F6:2B:60:5E:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/n8_cuQzpJJspaS8F0cRk9itgXjE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/n8_cuQzpJJspaS8F0cRk9itgXjE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:95:5f:5e:cd:6b:57:c4:93:74:d7:af:80:f3:dd:31:2e:e1: 3f:b5:58:01:37:03:27:f8:e9:d5:ba:fa:93:d7:c8:b9:fb:9f: 6a:5b:37:84:47:7c:0b:26:96:6e:3b:04:a4:0c:6c:5c:19:0c: 16:e3:4c:68:06:3f:4e:3e:6e:20:81:58:b9:db:e5:4b:6c:f9: 46:64:65:3c:cc:79:d4:35:9b:35:71:4b:48:87:98:2d:17:ca: a4:7c:50:85:68:3a:9f:52:53:b7:63:99:6e:cc:50:bd:6c:2b: e4:d1:21:5b:97:50:98:20:2e:41:a4:60:54:ea:f4:98:d9:8a: bd:22:a6:2f:4d:69:fc:ab:3b:e4:ad:9d:f1:d1:5e:f5:c8:5a: d7:6e:37:e6:18:62:9e:ff:04:e0:57:69:f5:3a:6a:dd:76:5e: 09:65:af:9b:a4:be:40:22:33:c9:de:8d:c3:1e:47:d3:11:6f: e4:38:fd:67:4f:d0:2a:9f:99:9b:4b:57:c2:ec:96:eb:bb:5f: c1:48:9c:87:cf:7d:07:9d:17:a2:cd:d2:83:86:ed:82:47:5a: fb:7e:ee:83:df:87:ac:5f:6c:b4:60:78:3c:2c:cf:e5:cf:12: 42:42:02:4a:22:e8:78:d1:7c:c2:a0:da:ae:92:09:80:a2:d6: a0:fa:c7:dd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUZD RkRDQjkwQ0U5MjQ5QjI5NjkyRjA1RDFDNDY0RjYyQjYwNUUzMTAeFw0yNDA2MDIw NjU0MjlaFw0yNTA0MDEwNzUxNTNaMDMxMTAvBgNVBAMTKDBBNDVDODYwQjY5NDlE RjYyRUI2MDcxQUU1OEIyQkIwNzk5MDZCODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDluXXU0tvsJ5EIAcAJuonSRlWOG5+cn577gs2fPxbFlBw6rU36 9TM7lBLtMYU8D0Eds957v163I3nwz7jKefQK46qMdl+Lb35ekCQmbeAVWkDTqHUI Trnj8w4HIDXZTjIOD24cSEUhQNINYZrcgLwDWlAf8PWjYPl3A9nDFC9i+AhBChAf d3kAICRMWQd91ap7sUynLM4Fcs7ScqDJOWQjjHg7XKR0SyMZiWqyc7HRCkgytfFk prqRXneJ7SASwAUvSHhFA90SM7/vqB1L9I6USrBWYuq8Q4xEwvzDBVkaSPPu1Hue 6HEpgoI1UHKKYURiaGHSSYUPkdpIHsn1R3EtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUCkXIYLaUnfYutgca5YsrsHmQa4gwHwYDVR0jBBgwFoAUn8/cuQzpJJspaS8F 0cRk9itgXjEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My9uOF9jdVF6cEpKc3BhUzhGMGNSazlpdGdYakUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL244X2N1UXpwSkpzcGFTOEYwY1JrOWl0Z1hqRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvbjhfY3VRenBKSnNw YVM4RjBjUms5aXRnWGpFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHeVX17Na1fEk3TXr4Dz3TEu4T+1WAE3Ayf46dW6+pPXyLn7n2pbN4RHfAsm lm47BKQMbFwZDBbjTGgGP04+biCBWLnb5Uts+UZkZTzMedQ1mzVxS0iHmC0XyqR8 UIVoOp9SU7djmW7MUL1sK+TRIVuXUJggLkGkYFTq9JjZir0ipi9NafyrO+StnfHR XvXIWtduN+YYYp7/BOBXafU6at12Xgllr5ukvkAiM8nejcMeR9MRb+Q4/WdP0Cqf mZtLV8Lsluu7X8FInIfPfQedF6LN0oOG7YJHWvt+7oPfh6xfbLRgeDwsz+XPEkJC Akoi6HjRfMKg2q6SCYCi1qD6x90= -----END CERTIFICATE-----Generated at Sun Jun 2 07:55:09 2024 by rpki-client on console-fra.rpki-client.org