$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft File: dbRxTE9hvqBKAs-c9WOuE09HnIU.mft (raw, json) Hash identifier: Qd16sfFUNqwK8iqZ/0pGAVQi9fvDw+MpZIB6Ns5gR0U= Subject key identifier: 46:2E:77:D3:92:0D:A8:64:B0:FB:31:15:EE:D3:43:B5:6D:52:0A:B1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 0E3B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft Manifest number: 0DF8 Signing time: Fri 17 May 2024 06:04:49 +0000 Manifest this update: Fri 17 May 2024 06:04:49 +0000 Manifest next update: Fri 17 May 2024 12:04:49 +0000 Files and hashes: 1: 8zcG8rJRFsFSMXhNB2gTJpZvxq4.roa (hash: 0RI5FyIcbXWePvg45tt+uJu66JcqlKXmIAoKAtdCAVE=) 2: GIDWPNH8gIFzFviLLsFWzA_F8D0.roa (hash: lX7mayy9rWGDf/79uHlDk+qgzhzW01SLU0a2ns0pnN0=) 3: IDR-G_z25UGnUqu7WOSypS29Utk.roa (hash: /+uHZLFOZPbokZdEb+71PmazzqGljCXPmhoBAH+LK4c=) 4: RYFznQyO7W45CFscOc8SHDGQHJg.roa (hash: bRgPmoyTkX+V4vuDzCpHpuqBC7kbn8Ahwy5U8Ppk8Gg=) 5: UBI3193ZFe8HGZb4h1YM1JydMiQ.roa (hash: S31pvLaULIElcyP7WWPy/CTTqaT9IK/gpsPTkPI/y0Y=) 6: UD4Rvlz5yWhUaXcgbnx6uCxv_Bs.roa (hash: 47TT+6Wqw50jwoVY46de6eEo/O++fuFWOdfjIWxXdNI=) 7: UJOyOphSKYh11vThQ0_iW9sJMW8.roa (hash: nSF3GUFV478SD378DMrV+kCtuZQlWMKVRcDjRwWCOlg=) 8: dbRxTE9hvqBKAs-c9WOuE09HnIU.crl (hash: seTy3M2OPyIbN7VvLnVqQdGpT2tE0Xe4zQJxd3kKsGc=) 9: eg_XHxjB62oIIV0-PEYPN8uPZ1M.roa (hash: sYGNOhrYa43MD6OCtBp42Ye9dthHY0Zjr4+pCdEmCTo=) 10: i4fA8DR37zxs6roi3rnh-5gz02g.roa (hash: CXR6eEL8esSmAPX04fE1O/sRhyyZo4YX8Lydm6Ciy9c=) 11: kROLUB_S-GEBkGaL_mNmP6PTBSs.roa (hash: oomSJuKxjRnNINGmEKmJIlRTRF/e3CAz4IaIYV8YwHQ=) 12: mYzaMvVbTi5iWbZ6HsV6bhAOV50.roa (hash: ZJOdac6fL711XleGCigIs6lcy63Bin6iInB7UalgfhE=) 13: mvP71bb9pE1BF7N__8Ez_g6IwLk.roa (hash: VNZlX9UzzPO+VyEpyaHqhK/6E0EEii7UeE1mxPeCBCc=) 14: nKDrGk5EuV-C34mIUk0N41qN84U.roa (hash: CjBy5+2dBF5YIMTSw8pR5jUMZsubE7bqn3ICeVSK4as=) 15: ve3RGkzVcpxfzEOCfvFpJKzEVyk.roa (hash: ndf34yKE3E3i8DvN//j2ynIEtxvTyj/o2yaysd9+NBY=) 16: yCeqnaIST1aP1FxkEweFhwFuQuk.roa (hash: d1E6z0w+3sMWgR5vr3tr6y6ZjcyoJf77hhKPcbdCnq4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 11:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3643 (0xe3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: May 17 06:04:49 2024 GMT Not After : Jun 7 02:16:11 2024 GMT Subject: CN=462E77D3920DA864B0FB3115EED343B56D520AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e7:c7:d6:ee:87:b6:1c:61:cb:3d:47:70:c7: a3:29:4d:7f:6f:b7:d9:10:5a:12:db:86:19:0e:92: 05:7b:23:e9:bd:62:af:48:94:9b:70:52:a7:eb:83: f8:28:8c:b6:7c:57:ed:be:2d:c6:c0:af:6d:57:1c: 2b:1b:49:54:d2:56:e8:67:e1:fa:bd:1a:ec:24:4d: d4:dd:5a:53:42:58:7d:4b:59:c2:a4:80:0e:5b:6d: ed:f5:cd:4a:7e:3e:5f:e2:e9:3f:f0:91:69:a4:d5: f2:49:07:5a:17:54:c5:2a:88:ce:23:8a:4b:68:07: 38:8b:b2:e5:cf:bc:cf:06:22:f4:dc:fc:61:df:29: 11:19:1a:6d:70:d5:19:23:43:ce:98:81:df:e9:17: db:fd:71:68:6f:7a:cf:99:5c:92:e1:7c:ff:3c:0c: 31:5a:e4:5e:32:86:a8:ca:07:28:95:ae:9c:36:54: c8:73:30:d5:16:13:07:3a:48:e0:48:f1:1b:e1:51: d8:ad:ad:91:1d:c3:23:bb:64:a3:f7:c9:16:c7:1d: 0e:34:18:b1:45:b2:22:6e:f1:14:90:45:b1:4e:ba: 3c:b6:9d:22:67:c7:46:25:2e:8a:26:28:b9:26:11: 6c:63:eb:a3:b9:13:1f:59:90:8e:97:cd:1e:09:94: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2E:77:D3:92:0D:A8:64:B0:FB:31:15:EE:D3:43:B5:6D:52:0A:B1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c7:d2:e5:d4:64:83:1f:d7:9f:ce:d4:80:2b:9e:97:26:30: b1:a2:e7:2c:d3:3e:df:20:13:3f:a9:2b:46:51:79:21:38:20: 03:1c:5e:48:b5:eb:e2:cd:59:91:f8:cb:73:77:9e:80:4c:5a: bf:c8:ae:a9:84:31:97:ac:c4:dc:6c:a7:8f:6b:84:07:c8:ed: 61:a2:bb:f5:43:d4:ef:43:44:02:f0:d9:cd:09:3d:d5:de:79: 34:b1:a5:92:79:26:d3:4c:c2:c9:9a:c8:32:bd:89:7a:22:5d: 0d:01:6b:7b:5c:5b:29:f9:ec:1a:a9:6f:4f:06:f5:7e:70:9b: 3e:81:2c:eb:53:8f:a8:5f:14:01:20:57:ba:3b:fe:d2:1c:41: bf:c8:f5:72:2a:2d:f8:b2:60:20:a0:62:a7:03:45:d0:60:63: 37:92:3d:62:ee:0e:09:a4:75:0b:77:d2:56:01:7b:61:56:41: b3:d6:87:64:39:06:87:e0:a7:5f:f1:ac:42:e1:f7:43:67:dd: ee:41:91:b4:b7:c0:45:fe:98:7b:1d:0c:25:c9:9f:f9:97:8a: 82:9f:21:8b:43:07:d9:96:d7:13:85:04:47:a2:a8:36:65:4b: a1:8e:c3:55:3c:c7:26:63:64:9a:6c:87:1e:71:0c:f3:8d:5a: b2:c4:94:1b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICDjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA1MTcw NjA0NDlaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDQ2MkU3N0QzOTIwREE4 NjRCMEZCMzExNUVFRDM0M0I1NkQ1MjBBQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDy58fW7oe2HGHLPUdwx6MpTX9vt9kQWhLbhhkOkgV7I+m9Yq9I lJtwUqfrg/gojLZ8V+2+LcbAr21XHCsbSVTSVuhn4fq9GuwkTdTdWlNCWH1LWcKk gA5bbe31zUp+Pl/i6T/wkWmk1fJJB1oXVMUqiM4jiktoBziLsuXPvM8GIvTc/GHf KREZGm1w1RkjQ86Ygd/pF9v9cWhves+ZXJLhfP88DDFa5F4yhqjKByiVrpw2VMhz MNUWEwc6SOBI8RvhUditrZEdwyO7ZKP3yRbHHQ40GLFFsiJu8RSQRbFOujy2nSJn x0YlLoomKLkmEWxj66O5Ex9ZkI6XzR4JlCmrAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURi5305INqGSw+zEV7tNDtW1SCrEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2RiUnhURTlodnFCS0Fz LWM5V091RTA5SG5JVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMx9Ll1GSDH9efztSAK56XJjCxoucs0z7fIBM/qStGUXkhOCADHF5ItevizVmR +Mtzd56ATFq/yK6phDGXrMTcbKePa4QHyO1horv1Q9TvQ0QC8NnNCT3V3nk0saWS eSbTTMLJmsgyvYl6Il0NAWt7XFsp+ewaqW9PBvV+cJs+gSzrU4+oXxQBIFe6O/7S HEG/yPVyKi34smAgoGKnA0XQYGM3kj1i7g4JpHULd9JWAXthVkGz1odkOQaH4Kdf 8axC4fdDZ93uQZG0t8BF/ph7HQwlyZ/5l4qCnyGLQwfZltcThQRHoqg2ZUuhjsNV PMcmY2SabIcecQzzjVqyxJQb -----END CERTIFICATE-----Generated at Fri May 17 08:16:36 2024 by rpki-client on console-fra.rpki-client.org