$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft File: RxbLW0SB7BOu3UCywwLFD2Aa930.mft (raw, json) Hash identifier: ry2g41wDcPce4CL7TzMwKgNcR372ckVqyaOqVEJH7Y0= Subject key identifier: C2:2C:13:11:4C:CC:8B:43:21:C7:50:0F:23:AE:58:52:0E:14:F3:D7 Authority key identifier: 47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D Certificate issuer: /CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D Certificate serial: 1988 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft Manifest number: 197F Signing time: Sat 01 Jun 2024 08:55:03 +0000 Manifest this update: Sat 01 Jun 2024 08:55:02 +0000 Manifest next update: Sat 01 Jun 2024 14:55:02 +0000 Files and hashes: 1: 2sXsVY7_2Ij-UFBaTCDkxAjTHQI.roa (hash: n2pOELU8tQSAxmbcXnybdckj6tPykjWnvA6eNWU3+iI=) 2: RxbLW0SB7BOu3UCywwLFD2Aa930.crl (hash: VgVMTbs8RccdhupM6dSAQksHgy644HJoHIMvavthY/U=) 3: z8hNT_-BaDPv7L-q5i-asd7-phc.roa (hash: 1MaV40uOs5zTD5/4NL/YhZ5lzJPM/sgnUQqndz5Kmhk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 14:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6536 (0x1988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D Validity Not Before: Jun 1 08:55:02 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=C22C13114CCC8B4321C7500F23AE58520E14F3D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:b8:c4:ea:f1:00:5e:5b:39:17:4c:31:89: f5:ba:e8:28:09:65:f0:5f:6e:d7:ac:d1:0b:d9:7a: ea:56:82:9a:84:8b:c3:aa:86:dc:11:6e:20:ea:e8: 2d:5d:ed:10:1e:00:85:7d:37:2e:20:56:d0:bf:b0: 75:6a:2b:5d:32:ce:99:8c:fb:0e:e7:79:07:d9:f0: a8:98:fe:2c:08:ec:fa:33:de:94:7f:51:be:42:e3: 43:5c:ce:a0:65:dd:6c:18:2e:aa:48:05:bd:02:de: 1a:18:25:a2:e9:4c:5d:00:da:47:9a:5b:3e:53:06: 95:84:c1:e5:c9:6f:46:81:ab:1f:37:37:66:42:90: cb:7d:da:31:f5:ca:56:cc:5d:d4:43:95:15:0a:49: e7:f6:13:cc:8d:6a:b6:80:8e:1e:a0:2a:81:e5:37: fa:e1:e9:99:1c:f7:a4:08:26:65:1c:04:c9:8d:cf: e7:ff:05:7b:e5:0b:0e:c5:f7:5a:bf:c3:62:f5:0a: 3c:97:bd:25:06:4c:8a:cb:a0:de:4a:a6:cc:14:d3: ee:e5:a7:36:35:59:e0:2b:d5:17:0a:30:41:96:95: 4d:25:bc:c9:43:af:4a:0b:18:b4:39:7b:af:e4:0c: 22:84:91:59:87:79:5f:3f:90:d7:52:fd:b1:83:cd: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2C:13:11:4C:CC:8B:43:21:C7:50:0F:23:AE:58:52:0E:14:F3:D7 X509v3 Authority Key Identifier: keyid:47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2a:0d:22:43:e7:2d:db:ef:0f:ce:ba:88:c3:7f:4a:3f:8a: 4c:80:6f:f2:38:4b:0b:bf:d4:31:50:6f:d9:57:29:00:54:17: 46:a3:c0:d0:c1:e0:20:26:82:8b:f1:a0:aa:1e:5e:86:3d:ae: 92:3d:1d:8a:c4:e0:ee:c3:5a:b4:78:63:ca:20:56:ef:f9:b5: 3b:a8:db:e2:33:4e:44:3e:e7:33:40:82:6b:41:ef:21:17:0f: 30:e1:10:a3:ce:b5:7c:7b:00:15:9a:29:71:7a:07:97:50:14: 29:f3:e9:28:4e:d1:5b:c1:0c:02:59:48:ec:0b:ad:25:01:c9: db:02:96:fc:b2:ba:53:23:fc:fa:64:21:cf:c5:5b:92:f1:bb: 55:b4:d4:83:68:bb:5f:3c:3e:5b:c3:15:57:80:ec:bd:06:f7: d9:fc:bb:5c:6c:9e:00:b1:89:8e:56:b7:d9:b8:5e:59:93:f7: 3d:2b:68:84:17:d5:86:ce:01:73:65:64:8f:cc:63:d8:7d:1f: f4:af:80:fa:1d:3a:4f:98:cb:23:3e:12:06:b6:59:0e:31:6a: bf:f1:27:e2:43:3e:a1:e5:5c:46:85:16:43:5a:df:40:16:77: b2:43:fb:a5:5a:10:b3:65:8e:60:a4:51:ec:07:c8:8b:78:a6: 11:94:58:a1 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDcx NkNCNUI0NDgxRUMxM0FFREQ0MEIyQzMwMkM1MEY2MDFBRjc3RDAeFw0yNDA2MDEw ODU1MDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMyMkMxMzExNENDQzhC NDMyMUM3NTAwRjIzQUU1ODUyMEUxNEYzRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ZbjE6vEAXls5F0wxifW66CgJZfBfbtes0QvZeupWgpqEi8Oq htwRbiDq6C1d7RAeAIV9Ny4gVtC/sHVqK10yzpmM+w7neQfZ8KiY/iwI7Poz3pR/ Ub5C40NczqBl3WwYLqpIBb0C3hoYJaLpTF0A2keaWz5TBpWEweXJb0aBqx83N2ZC kMt92jH1ylbMXdRDlRUKSef2E8yNaraAjh6gKoHlN/rh6Zkc96QIJmUcBMmNz+f/ BXvlCw7F91q/w2L1CjyXvSUGTIrLoN5KpswU0+7lpzY1WeAr1RcKMEGWlU0lvMlD r0oLGLQ5e6/kDCKEkVmHeV8/kNdS/bGDzQTZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUwiwTEUzMi0Mhx1API65YUg4U89cwHwYDVR0jBBgwFoAURxbLW0SB7BOu3UCy wwLFD2Aa930wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4 L1J4YkxXMFNCN0JPdTNVQ3l3d0xGRDJBYTkzMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUnhiTFcwU0I3Qk91M1VDeXd3TEZEMkFhOTMwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4L1J4YkxXMFNCN0JPdTNV Q3l3d0xGRDJBYTkzMC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANKg0iQ+ct2+8PzrqIw39KP4pMgG/yOEsLv9QxUG/ZVykAVBdGo8DQweAgJoKL 8aCqHl6GPa6SPR2KxODuw1q0eGPKIFbv+bU7qNviM05EPuczQIJrQe8hFw8w4RCj zrV8ewAVmilxegeXUBQp8+koTtFbwQwCWUjsC60lAcnbApb8srpTI/z6ZCHPxVuS 8btVtNSDaLtfPD5bwxVXgOy9BvfZ/LtcbJ4AsYmOVrfZuF5Zk/c9K2iEF9WGzgFz ZWSPzGPYfR/0r4D6HTpPmMsjPhIGtlkOMWq/8SfiQz6h5VxGhRZDWt9AFneyQ/ul WhCzZY5gpFHsB8iLeKYRlFih -----END CERTIFICATE-----Generated at Sat Jun 1 13:43:24 2024 by rpki-client on console-fra.rpki-client.org