$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft File: KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft (raw, json) Hash identifier: 15OLPnVuulgoWputc8jHOTKq7QiLthwuOLaRwjKUx2w= Subject key identifier: 30:16:10:8F:C6:33:D5:8B:30:86:6D:F7:AD:81:E9:A6:AD:6A:88:86 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 144B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft Manifest number: 13AE Signing time: Fri 22 Nov 2024 05:23:07 +0000 Manifest this update: Fri 22 Nov 2024 05:23:07 +0000 Manifest next update: Fri 22 Nov 2024 11:23:07 +0000 Files and hashes: 1: 252NqQyIuZTkdeAgrMY0JX1pvpI.roa (hash: 9u6HU0qwGL3PUcNHaDjURsGPmj4QKeKnVpw/NzKa7Yo=) 2: 33k5It7mcf95N7PCiNwan6YcTL4.roa (hash: 9o4ii5A2rE9/IL06uovELBUkUEVgU45D3bCmfDyMVcM=) 3: 3AKrpxxeglOhG4NWeRWZqa8rz_I.roa (hash: eqyGLVFAv/pYgI7DkQIsWOP7fHw7K6nVhVWVtb1B66M=) 4: 4IJ5pY64Po_XVNj0wR5HRGl5dI0.roa (hash: Wgg05jB8CjcL1vuJhoEJFpIAjjNLOrwzDwpRCgnEoAI=) 5: 59stqTAGvFuKM9PfMDusxqe5Btc.roa (hash: 7owmdboO8zmSkyQffCAiGJfGckbrcj7c6mnG0RIpXHY=) 6: 7NuPb2usTLf-kwvpAH1eltLOy1k.roa (hash: N4sjqJQZSmWgxKveNhRlzUB5PZDheAsUF6mTJ4MGLnM=) 7: CQzubkoGdWY3ol6HpTEblvlShSQ.roa (hash: xZut+ABshO0eddiywDWl2F8pIuFlJ8dsmULGpEx2Tv4=) 8: DLsMRahr8RzWzV9gSHhp6PsO1c0.roa (hash: g/Wp9z0bX3hthXcaarFR9ok9ml9Vzvjftrs5QitE8DM=) 9: FUXBfbjshHJBwXC1taJ6fCn4M5Q.roa (hash: 6jpLH8S3ZPjnCdxgljK9BIVuixoc+flHSF3na+pwQkI=) 10: HJL5RBDyBswe8c17Kee2oeu8OPc.roa (hash: D/n8ftsHAlZ2ypp/rh5Q/3krkWj+L83r0/hVkEv4FvQ=) 11: HiKBPOx6zR7xeL06yHAcguhi3tc.roa (hash: JXIP+Fyen7/TWjgXVQCeDIYkE4miEq0jLETY7LLePDg=) 12: HtIAupUjx0BuvwGrwS1Q7FQRonM.roa (hash: v6pkMnY8FTuTjmVmQUVqJqh++qia8YsYk35C0tcKg+s=) 13: ISIbX_c6jX9KdatdwiwoBasv8Ac.roa (hash: /PCfepI3+ymEQo1lmJZeO8PwMLKHN/lknmMNj0EBI8s=) 14: JxyIr7k6-KxrcmJF70ebRDEIqZA.roa (hash: PFw5DBVo9Dr6fmNN43aXR5mc0Ei7giQQxYz18EVduhc=) 15: KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl (hash: gfp4rtyJfEDhoB14f9OQZdAsrTnYbUiIA+MKIZdhXG0=) 16: L165PKAWt4p5QXHwafRgZcQhFdM.roa (hash: yl9tf5ctfRegVyRVPmAuyFdM17MfLasGRY0iCfNq6zI=) 17: LwB8c3b2KgS3WKaA8gKZKuYEWOk.roa (hash: djXJOwtgtDMeRLWUsvYm52Uw1/xjeEpc1NVORZSrQS4=) 18: Q4kkha_wEAmxJf5KjiSoHSTS_kk.roa (hash: qJw9OEhTHdrgHev8s1nQ8yJq1LiLAstIIGMav56VuIk=) 19: SbjVwWCrqg4KzxIZGclV0BhQKxg.roa (hash: 644k5QPruh1+uAc8oZADN1rq5v1BbCIU8rzWi5a2vQU=) 20: TWtbOHnaovi5XpUvR4PMcRhrcZQ.roa (hash: V0gnpYmwSriCHLqlN0HvH1B18ydk3UXfnltxJ8eb8Do=) 21: TzqJPlGgaEW0EsRL_1Sh051whkc.roa (hash: J7AGgLRzEnKFdS3HsDXaB8ibUNWRYK32UdRzw/JPmJ8=) 22: XRMlLMTfmXMD0gpyDDBfTMhzhH8.roa (hash: uA4+62zf+z7RMGaH5gAfYxcFlGI6h3ZZT16/wN139sE=) 23: YCta7MB0bEz2riDYyD-VsWqwmzg.roa (hash: QVYCpx49JEDYTyRu1SXlm12bTe56kWp2VBI5erg6UOs=) 24: Zxfwg1jqSXYUk_Dudf_0uN6d554.roa (hash: 8aUTqunXY7vdfyiinZg7j4FNYNmCbkTFe/7GxfrX/BM=) 25: Zyp-lEzyX6rJXI4OObT2w32M8TE.roa (hash: ocXHDzvEHjVALhZ/wkceMWddNnpnFozl5D4EBuN1NFA=) 26: b9kHLrsoG04rS2p1BnAPGln4LzQ.roa (hash: AJU9ogzF8gLdmoL/+HxdT32YnUtsEw19p+gffCYaAig=) 27: bldXqgx243FB8sVodBULRxzVRGA.roa (hash: lGAjxqBwpaC2uegYgVnmD4YtbKswiDHXzkWva8D1K1o=) 28: c_xK-3L1H5aq4hkqGimx6fiNR34.roa (hash: S3I+CTElceBgERjFByP02U9n9x51lrs9o7yUJBeBIuo=) 29: cvXcghsRG1VCVF-IgqqoEdFmmpM.roa (hash: nOCCrZVdK6NGkBGI9+Doy4uuY//vL6O85FvniyvZzM0=) 30: cw4q5H7z1JTODLVTRyPUeOXtd6o.roa (hash: UHU8ZgTGXkF8xNBg+bY8URyVMLoFr+xSus0XNZe4cds=) 31: eLFQtH7LboY_4l_PE69fvIns728.roa (hash: hidcESIdbbOWKg+m85CebwmiGWGf+gnrkA3O2+h5xm8=) 32: gY1QWEuD4LsooTe6TT5BeIwzZbg.roa (hash: 3o9A7+Lp2jKIC3PyVWEXuCzjAMOqBBvvneo8+HDg74A=) 33: jSCoSeAujfYn-33UpDl2Rb6aCAc.roa (hash: ckUMecTzn44KjVKv+qnoaePiJnMAFMsOfS+r/OQfN2w=) 34: jg4Nhg6lQNBUy_vQl7UJBCNRVXc.roa (hash: MP1lNYsMFzByV8LGwgdCEleKGfrknEqxvBGeB5F6LhM=) 35: kOfg6CMy5yxcC4i_SEMMPux55wY.roa (hash: 5oQSr0+YNjZk2GrVJ6TCQ9gX5gakv0/xfXYDjuPcp4A=) 36: kXJYveIuuGmErvWtyisvEepx0_o.roa (hash: DeRfPF8EVHWLbOZJZoE/3rik8Pz72B77qe9o4hM0/mA=) 37: lXHKh8VmdoBwBwOeRl-ZIw8lhR8.roa (hash: d7ErjWgbceHyK798qa61yNuJoW72d1CFNZPUefyJKws=) 38: mQbR9Jr3eS9clstGSAISSAFU4IQ.roa (hash: I+FXdDKg8HDHcoCFO6oWjktmY8np2YK30KvPwzVnZLc=) 39: oQS-tAbY6FQm-usEo4mrBHnOpL8.roa (hash: Z0M4Mbgv/yDhw5opEm6BeXEar3uMtVEiDDW/68Td83E=) 40: rdUZhda3nvxbYPe5c3TnSvWFMZo.roa (hash: 6cjSsjlPWyIeYFkRzhs3iL1EhuZvxevmkbUuNc+MnJk=) 41: tmkYROUx5FyAk5XQgbIsLp1KU3k.roa (hash: AcM33/2djmpquu2dqvhb3XGefRwAg8tkD+zDWkZ9Vdg=) 42: u7bdYWTVzy2HCxOPNwyWeOO30Nk.roa (hash: 8spUb0jPvVPhJ5i4sTBQz+ChRJ4k0pJ+miFPgWzDhqc=) 43: uzBgf9POeEEAYvYy8DB1i8c_2qQ.roa (hash: NtkBnKMBAqw2hQDlFj/FO4l5MepGW6I8nTvHzkKoM6w=) 44: vaBNN8RhluZH-_Fm0JyXiIiCh_g.roa (hash: oURSWZhRMdqLETIGkCOo2THyF2f7v/WwciofCyq5zKs=) 45: w9pyRzgx0MYiecZtcVfwwBK8-co.roa (hash: lEDsc1g5G4ahlHdoYd1+71gojJ6zOE9d6jS7R3MrP80=) 46: x4-dnfaRZp4bApRBQAwMpwh2Tc4.roa (hash: vQtUNh+IpQq6TJCrDToxh2+OZf5DhGPG8kadqm7yeG4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5195 (0x144b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Nov 22 05:23:07 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3016108FC633D58B30866DF7AD81E9A6AD6A8886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:33:e3:a5:12:24:21:e8:10:32:6f:c6:2c: 07:28:3b:e8:b4:cb:93:97:4b:12:2a:ca:68:75:89: 23:0f:7b:bd:e0:72:a2:10:39:3f:e4:de:34:3f:14: 6c:9e:99:4a:10:60:76:a1:b6:6c:ee:27:34:47:75: 81:a5:75:f9:ee:a5:8d:d0:fc:83:8d:85:fc:9a:04: 96:d8:ec:8b:c9:67:72:1f:d8:7e:a1:5b:f7:88:cc: 7b:2c:e5:90:7c:3d:9a:99:99:69:64:72:90:77:2e: 7b:87:d5:45:06:ea:c6:65:31:fe:4f:78:59:9e:2a: 4d:12:a4:97:34:fd:75:bc:52:d5:fd:2b:a7:f0:1e: 5c:26:b3:a5:a8:20:e5:cb:ee:e7:e3:e9:e7:7a:48: 5e:9d:01:03:0c:4c:69:91:94:7c:e9:15:42:b4:2f: d1:6c:6f:d8:9d:4b:38:98:92:dd:5c:b1:f5:74:7c: 4b:fc:69:ef:99:b1:a1:6b:b3:f3:34:a6:3c:cf:de: 9f:c3:1b:9c:e1:4a:f5:bb:09:a3:d7:b2:79:17:a6: 01:a5:cf:a5:3f:68:ae:36:3a:cf:b6:42:c7:3d:89: b6:6c:61:7e:7f:bb:e9:57:15:3c:0e:66:8e:d3:80: e6:57:b0:e4:e1:99:53:ca:f6:4d:d6:e6:14:8c:83: b1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:16:10:8F:C6:33:D5:8B:30:86:6D:F7:AD:81:E9:A6:AD:6A:88:86 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3c:64:16:bc:e1:a3:ac:b7:fd:f4:8b:a3:18:8f:aa:21:94: db:db:cc:b3:ae:90:06:b0:39:c7:db:71:73:a6:15:4c:f9:a9: db:bb:09:b0:b1:9e:6b:a2:ba:64:74:88:0f:45:21:83:88:20: 83:26:a0:bd:49:de:c5:a5:23:3c:e1:73:99:69:f2:25:5e:b1: d9:7c:9f:20:0b:b5:a7:53:12:98:11:5a:b7:f8:9e:b9:d0:8b: c9:5b:a4:95:7a:3a:4b:b3:93:94:fd:1e:e6:df:64:10:d3:43: 0a:0e:ae:47:4a:51:bc:fa:f0:63:64:55:a5:92:0c:69:6c:bd: 74:ca:af:ef:db:e7:7e:74:9c:84:29:81:7b:be:9c:90:14:01: 22:0d:38:fb:74:d5:3a:f9:49:b9:fc:04:12:7c:2c:bc:02:8d: 21:85:73:36:31:15:b7:d9:56:92:09:f8:95:94:a3:09:0f:08: ea:e2:63:72:d9:34:38:59:7c:7b:c3:4f:ca:64:04:a4:e5:26: d0:49:9f:29:fa:ea:06:8f:e0:f2:3e:14:83:52:48:ea:ec:aa: a2:2b:8c:51:a6:6e:c5:04:0d:b8:dc:5b:16:b9:f5:eb:5c:af: eb:fb:f9:20:33:b5:f8:14:71:e3:69:a0:eb:c7:50:10:ea:6b: 2b:6a:ff:26 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDExMjIw NTIzMDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMwMTYxMDhGQzYzM0Q1 OEIzMDg2NkRGN0FEODFFOUE2QUQ2QTg4ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEYzPjpRIkIegQMm/GLAcoO+i0y5OXSxIqymh1iSMPe73gcqIQ OT/k3jQ/FGyemUoQYHahtmzuJzRHdYGldfnupY3Q/IONhfyaBJbY7IvJZ3If2H6h W/eIzHss5ZB8PZqZmWlkcpB3LnuH1UUG6sZlMf5PeFmeKk0SpJc0/XW8UtX9K6fw Hlwms6WoIOXL7ufj6ed6SF6dAQMMTGmRlHzpFUK0L9Fsb9idSziYkt1csfV0fEv8 ae+ZsaFrs/M0pjzP3p/DG5zhSvW7CaPXsnkXpgGlz6U/aK42Os+2Qsc9ibZsYX5/ u+lXFTwOZo7TgOZXsOThmVPK9k3W5hSMg7HdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMBYQj8Yz1Yswhm33rYHppq1qiIYwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvS3d4UVZDeW9lcVBC THpEREl5TUdMSWNRSWlFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALo8ZBa84aOst/30i6MYj6ohlNvbzLOukAawOcfbcXOmFUz5qdu7CbCxnmui umR0iA9FIYOIIIMmoL1J3sWlIzzhc5lp8iVesdl8nyALtadTEpgRWrf4nrnQi8lb pJV6Okuzk5T9HubfZBDTQwoOrkdKUbz68GNkVaWSDGlsvXTKr+/b5350nIQpgXu+ nJAUASINOPt01Tr5Sbn8BBJ8LLwCjSGFczYxFbfZVpIJ+JWUowkPCOriY3LZNDhZ fHvDT8pkBKTlJtBJnyn66gaP4PI+FINSSOrsqqIrjFGmbsUEDbjcWxa59etcr+v7 +SAztfgUceNpoOvHUBDqaytq/yY= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:11 2024 by rpki-client on console-ams.rpki-client.org