$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft File: nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft (raw, json) Hash identifier: MbUrybMkyMn8f44csSX6hMxXGUNotmdYyuLpVUttdqw= Subject key identifier: DB:8C:29:CD:FC:A2:83:85:EF:7F:BE:E3:D3:F7:B3:69:54:4B:36:8A Authority key identifier: 9C:BB:DC:7D:D6:96:66:87:39:04:CC:31:66:E3:EB:0B:45:B4:28:90 Certificate issuer: /CN=9CBBDC7DD69666873904CC3166E3EB0B45B42890 Certificate serial: 010D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nLvcfdaWZoc5BMwxZuPrC0W0KJA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft Manifest number: 010D Signing time: Sun 02 Jun 2024 15:26:23 +0000 Manifest this update: Sun 02 Jun 2024 15:26:23 +0000 Manifest next update: Sun 02 Jun 2024 21:26:23 +0000 Files and hashes: 1: nLvcfdaWZoc5BMwxZuPrC0W0KJA.crl (hash: PVe8TAmqKSwKGMnHURihBmeLxQ3s7zJuCrhUL2Gt/0s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nLvcfdaWZoc5BMwxZuPrC0W0KJA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CBBDC7DD69666873904CC3166E3EB0B45B42890 Validity Not Before: Jun 2 15:26:23 2024 GMT Not After : Apr 2 06:15:58 2025 GMT Subject: CN=DB8C29CDFCA28385EF7FBEE3D3F7B369544B368A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:45:d7:e8:ed:8d:ad:45:8a:b7:61:5e:6a: ee:ed:ac:2c:92:a5:f0:9d:ca:4f:a5:06:a3:78:22: 84:e1:72:5f:38:f5:f0:e5:c2:da:0a:f1:25:82:79: 51:92:93:c1:19:31:ce:8e:69:7c:d7:fc:bd:2e:f8: 9e:4c:5e:1f:28:5f:02:c6:58:b7:49:cd:fe:66:ed: 87:e9:d4:be:fb:38:e3:42:ac:dc:58:ed:92:ca:09: a6:01:85:c0:68:cf:be:4b:28:12:db:77:14:cc:ed: a6:92:90:d7:d8:d2:ea:ca:0d:7f:25:c4:d9:08:ae: 73:44:07:01:e4:a9:cc:ac:94:5a:2a:58:a5:b8:b9: 04:d2:e5:55:f9:32:2b:47:dd:aa:03:86:06:ef:46: 43:ef:c9:4b:e1:af:5e:07:b4:47:6b:15:a7:7f:ee: 04:f6:14:5c:1c:be:f8:08:69:31:f4:53:c8:7c:6b: 66:50:30:48:d4:4c:d2:61:0e:3e:f0:ba:9b:da:9a: 1d:f8:f0:79:ea:de:4c:1c:4c:6b:d4:12:9e:59:00: 2a:f0:14:b7:28:1f:ea:e8:6f:74:ce:4e:4e:f7:fd: f2:5a:bd:8c:51:27:8b:e3:50:2f:71:66:8f:54:13: 3c:cd:14:ff:27:f3:92:68:1a:90:49:c1:f9:53:20: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8C:29:CD:FC:A2:83:85:EF:7F:BE:E3:D3:F7:B3:69:54:4B:36:8A X509v3 Authority Key Identifier: keyid:9C:BB:DC:7D:D6:96:66:87:39:04:CC:31:66:E3:EB:0B:45:B4:28:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nLvcfdaWZoc5BMwxZuPrC0W0KJA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:67:74:6c:53:cd:0b:9d:a5:a1:c1:eb:84:05:c6:99:8d:6f: 76:cb:e6:d7:ee:51:b2:96:9e:67:eb:1a:24:16:1d:dc:39:90: d8:79:a0:3c:f4:d0:4d:92:62:c7:f1:56:a9:d4:86:41:d4:27: 09:af:1f:06:e7:fa:b1:bd:6f:37:f6:d2:d9:c9:aa:c3:63:bd: 16:a8:44:5d:d1:57:f9:81:e8:ff:cb:4d:6d:57:84:fe:2c:61: 66:5d:e9:51:a5:2b:f5:48:d8:1b:60:7a:6a:7e:01:5b:9b:dc: b8:1a:34:b9:e2:e0:4b:8e:14:2f:ef:f0:74:9f:fe:03:05:08: 67:c3:c5:65:11:5a:20:cf:f1:a2:65:a5:1f:5e:9a:68:61:f3: a1:65:3f:37:94:3e:89:5f:25:87:a8:cc:64:50:05:dc:7d:59: 10:3d:1f:8f:dd:29:5f:b8:41:a7:8e:26:12:71:a2:d2:ef:16: 87:a0:7b:17:b3:0a:5b:01:fc:e6:13:57:d4:a5:ae:da:db:70: d3:d4:ea:d0:4b:c8:a4:6c:2a:06:c8:7a:48:97:e3:ec:2a:48: 9e:f0:c6:a4:15:a4:b6:d1:e8:61:35:01:64:db:67:10:f4:3d: 2f:e6:b0:33:e7:d3:6b:d7:36:90:17:40:43:6a:32:29:b3:e5: d6:96:35:b8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUNC QkRDN0RENjk2NjY4NzM5MDRDQzMxNjZFM0VCMEI0NUI0Mjg5MDAeFw0yNDA2MDIx NTI2MjNaFw0yNTA0MDIwNjE1NThaMDMxMTAvBgNVBAMTKERCOEMyOUNERkNBMjgz ODVFRjdGQkVFM0QzRjdCMzY5NTQ0QjM2OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCH0XX6O2NrUWKt2Feau7trCySpfCdyk+lBqN4IoThcl849fDl wtoK8SWCeVGSk8EZMc6OaXzX/L0u+J5MXh8oXwLGWLdJzf5m7Yfp1L77OONCrNxY 7ZLKCaYBhcBoz75LKBLbdxTM7aaSkNfY0urKDX8lxNkIrnNEBwHkqcyslFoqWKW4 uQTS5VX5MitH3aoDhgbvRkPvyUvhr14HtEdrFad/7gT2FFwcvvgIaTH0U8h8a2ZQ MEjUTNJhDj7wupvamh348Hnq3kwcTGvUEp5ZACrwFLcoH+rob3TOTk73/fJavYxR J4vjUC9xZo9UEzzNFP8n85JoGpBJwflTIBHBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU24wpzfyig4Xvf77j0/ezaVRLNoowHwYDVR0jBBgwFoAUnLvcfdaWZoc5BMwx ZuPrC0W0KJAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Ni9uTHZjZmRhV1pvYzVCTXd4WnVQckMwVzBLSkEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25MdmNmZGFXWm9jNUJNd3hadVByQzBXMEtKQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzYvbkx2Y2ZkYVdab2M1 Qk13eFp1UHJDMFcwS0pBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA9ndGxTzQudpaHB64QFxpmNb3bL5tfuUbKWnmfrGiQWHdw5kNh5oDz00E2S YsfxVqnUhkHUJwmvHwbn+rG9bzf20tnJqsNjvRaoRF3RV/mB6P/LTW1XhP4sYWZd 6VGlK/VI2Btgemp+AVub3LgaNLni4EuOFC/v8HSf/gMFCGfDxWURWiDP8aJlpR9e mmhh86FlPzeUPolfJYeozGRQBdx9WRA9H4/dKV+4QaeOJhJxotLvFoegexezClsB /OYTV9SlrtrbcNPU6tBLyKRsKgbIekiX4+wqSJ7wxqQVpLbR6GE1AWTbZxD0PS/m sDPn02vXNpAXQENqMimz5daWNbg= -----END CERTIFICATE-----Generated at Sun Jun 2 17:08:11 2024 by rpki-client on console-fra.rpki-client.org