$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft File: Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft (raw, json) Hash identifier: ozBLV0N8pmq+uZTI3kXFddUzslI0TrAiVIYJmGDYS44= Subject key identifier: 6F:FA:CD:7C:0D:1C:23:69:3C:22:25:6D:B8:AF:B2:DE:DC:36:EB:75 Authority key identifier: 46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56 Certificate issuer: /CN=46F8343DCDAD3AAC408560492C21B59D762BC456 Certificate serial: 1779 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft Manifest number: 1770 Signing time: Sun 02 Jun 2024 00:55:29 +0000 Manifest this update: Sun 02 Jun 2024 00:55:29 +0000 Manifest next update: Sun 02 Jun 2024 06:55:29 +0000 Files and hashes: 1: Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl (hash: TPH+f3BIqCZ0fxknUPNTlg9Cg2knrCUtTSZ2L0qTxFA=) 2: WLgZSzwzcbxcVm3iBvxhD6d_TnM.roa (hash: nRNAHYVeSSJ36NTk3mf19ffMvnL4Gt+meOVBenyfm24=) 3: mPJb61oPRDRGv0Vw_YVHs56UF2Q.roa (hash: NmzCYXxDVY/ATD5/MpyQR6rrgCQwGMZYKgy/zJdwIuY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 06:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6009 (0x1779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46F8343DCDAD3AAC408560492C21B59D762BC456 Validity Not Before: Jun 2 00:55:29 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6FFACD7C0D1C23693C22256DB8AFB2DEDC36EB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:c1:71:53:38:1a:90:ab:b1:98:a8:98:08: db:a8:5e:4e:ce:f6:b4:9e:e7:e3:d4:c4:63:5a:51: 33:31:3b:9d:51:08:4f:7a:42:e1:b7:52:87:ed:b8: dd:6a:72:9b:fd:7c:4b:ff:8c:36:2f:ed:c8:11:31: d4:ec:18:05:eb:ed:03:6a:96:be:af:43:f4:b8:bf: 4e:d3:2b:1d:11:9b:66:2b:f0:2a:7a:7b:c9:a6:74: d8:10:30:5a:6a:83:92:0f:9e:3b:1d:04:bf:5e:23: 51:71:2d:36:ec:a8:bf:07:bb:21:92:5e:33:e8:e6: 7e:60:e6:33:15:74:73:10:6c:98:f4:51:4f:81:74: 8d:f7:41:97:39:5c:89:fc:a8:b9:1c:41:f2:7b:99: 13:e9:b8:44:54:e9:e8:99:58:3d:8a:4f:c2:c4:e6: 0e:c9:b4:a6:17:6f:47:18:5f:ed:ba:ce:35:d4:f2: 90:18:b2:12:eb:b9:aa:57:3b:8f:48:14:c8:1e:c8: b8:7f:0c:7f:17:bd:ec:58:4b:03:6b:52:18:04:52: a1:cd:41:cb:4b:9b:3b:fa:26:3c:45:d1:45:40:83: 23:50:b7:01:fa:d5:86:79:c7:da:a7:12:a9:59:c8: d2:09:fe:75:34:4f:41:5d:3e:31:0f:48:d6:39:75: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FA:CD:7C:0D:1C:23:69:3C:22:25:6D:B8:AF:B2:DE:DC:36:EB:75 X509v3 Authority Key Identifier: keyid:46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e1:c7:a1:14:22:b6:0e:25:a7:97:c0:8d:1f:15:a6:c3:be: 9e:b9:2a:2a:c4:3a:34:52:91:48:7e:99:be:c5:a7:d5:c7:80: 17:89:be:3f:15:8c:f2:9b:40:96:0d:ce:21:6d:b9:bd:d8:f9: 2d:38:78:20:3d:ed:eb:12:dd:43:13:10:d4:6f:5e:ee:14:e5: e7:51:80:2e:f7:e9:31:f7:91:c0:39:eb:48:51:bc:4b:b1:7d: c9:a7:3f:06:1c:47:72:1d:eb:c6:aa:3c:03:25:6f:89:74:9e: 37:f6:f2:b0:16:fb:de:84:e6:51:ff:6a:4c:20:f6:27:f2:d2: a6:95:48:03:a7:46:72:56:1c:a2:e4:68:9f:77:52:44:96:9b: 43:ea:97:fe:7f:11:af:cc:72:ee:d9:e6:fc:13:5e:86:b8:58: 5f:a9:2f:57:21:3b:43:09:ef:89:7a:fb:dc:76:af:0b:ce:e1: 93:25:bd:73:a1:8a:dd:39:13:ac:51:03:b0:86:da:2c:2c:d1: 0d:79:e4:e0:cd:40:5e:d0:9b:03:fa:7b:55:81:29:87:89:c6: ce:e0:68:74:16:37:df:46:70:9b:73:bb:2c:b4:ae:b2:b2:80: 8e:86:2c:14:df:f8:04:5e:79:35:c7:27:80:ec:a4:38:d7:72: d2:18:03:1b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICF3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDZG ODM0M0RDREFEM0FBQzQwODU2MDQ5MkMyMUI1OUQ3NjJCQzQ1NjAeFw0yNDA2MDIw MDU1MjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZGRkFDRDdDMEQxQzIz NjkzQzIyMjU2REI4QUZCMkRFREMzNkVCNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPvsFxUzgakKuxmKiYCNuoXk7O9rSe5+PUxGNaUTMxO51RCE96 QuG3UoftuN1qcpv9fEv/jDYv7cgRMdTsGAXr7QNqlr6vQ/S4v07TKx0Rm2Yr8Cp6 e8mmdNgQMFpqg5IPnjsdBL9eI1FxLTbsqL8HuyGSXjPo5n5g5jMVdHMQbJj0UU+B dI33QZc5XIn8qLkcQfJ7mRPpuERU6eiZWD2KT8LE5g7JtKYXb0cYX+26zjXU8pAY shLruapXO49IFMgeyLh/DH8XvexYSwNrUhgEUqHNQctLmzv6JjxF0UVAgyNQtwH6 1YZ5x9qnEqlZyNIJ/nU0T0FdPjEPSNY5dQ41AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUb/rNfA0cI2k8IiVtuK+y3tw263UwHwYDVR0jBBgwFoAURvg0Pc2tOqxAhWBJ LCG1nXYrxFYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDk3 L1J2ZzBQYzJ0T3F4QWhXQkpMQ0cxblhZcnhGWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUnZnMFBjMnRPcXhBaFdCSkxDRzFuWFlyeEZZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDk3L1J2ZzBQYzJ0T3F4QWhX QkpMQ0cxblhZcnhGWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCX4cehFCK2DiWnl8CNHxWmw76euSoqxDo0UpFIfpm+xafVx4AXib4/FYzym0CW Dc4hbbm92PktOHggPe3rEt1DExDUb17uFOXnUYAu9+kx95HAOetIUbxLsX3Jpz8G HEdyHevGqjwDJW+JdJ439vKwFvvehOZR/2pMIPYn8tKmlUgDp0ZyVhyi5Gifd1JE lptD6pf+fxGvzHLu2eb8E16GuFhfqS9XITtDCe+Jevvcdq8LzuGTJb1zoYrdOROs UQOwhtosLNENeeTgzUBe0JsD+ntVgSmHicbO4Gh0FjffRnCbc7sstK6ysoCOhiwU 3/gEXnk1xyeA7KQ413LSGAMb -----END CERTIFICATE-----Generated at Sun Jun 2 02:26:43 2024 by rpki-client on console-ams.rpki-client.org