$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft File: LoPrDhy3tKdhegSteoJinZi5W5Q.mft (raw, json) Hash identifier: wtq1Yu5vlSfstp+MxLp4GiNBHUdZyzQldO9gX29HPHQ= Subject key identifier: F9:23:71:57:61:C6:43:5B:8D:73:F8:9D:83:9A:04:96:16:48:52:38 Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Certificate serial: 1B96 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft Manifest number: 1B18 Signing time: Fri 22 Nov 2024 05:21:54 +0000 Manifest this update: Fri 22 Nov 2024 05:21:54 +0000 Manifest next update: Fri 22 Nov 2024 11:21:54 +0000 Files and hashes: 1: -aVnrM62LtJotWL1oNEDSb_4C0g.roa (hash: FVGKCtb7UAxbkerK9d9Ud7WYGD26fLOXyFMI4lHQ/DI=) 2: 6Aiwu63JyFHZbTj6A2agWs7PyZc.roa (hash: mn9jIfH0kO4o/DU6euYyzzQni6oHHIlRJ3lW/5DfCIk=) 3: 6rAL7l6HrJGgC3YtrvDcIru56_E.roa (hash: F6OuuwYt5yqrXK6k8Lt6+oDz4ZlH+/4/oyU1zF8HJl4=) 4: FA4OPm-4AdYK8dCJSi0KBP0Qt88.roa (hash: G28GGBTwAxXqYeXJe4wR4sdvZ9Mux7RfdAVSXqpd+xk=) 5: FLVIGbsruxVWVDpy-8qGy3_w5jY.roa (hash: /mnYVQ/yZMEqRo2dCkTnU6O8eqJ/xyzKsJGvGGnpF8Y=) 6: H_sNX_9y0kZwIsnVLsMAQMfkEY4.roa (hash: GWcksK6asZuMaUGmBzZsX8kdmEWGv0Vp3NDA4bcb4qE=) 7: Ip4wiMjQf7PPNiBUkcw-7E5cBM0.roa (hash: msr8Ocw28cNSQMRzLr1Lsc6EpxVgFXiyiQFHQUtLtc8=) 8: JynpDsSDkWV5dekeW1fq5pnqy3w.roa (hash: RFpoMPy6U13YCdc2oKIn/tjTfjtqRZYp6WXwUO7ksk4=) 9: LoPrDhy3tKdhegSteoJinZi5W5Q.crl (hash: c4l42s4KPUGRx4TAYFGK53gq5R112UJrm30pWGGwKhw=) 10: PpUXGNPslCX0qyKJDnCSMSpzKwo.roa (hash: oluQaDkOyQXq2mFek2GyoUcx+6m7hZXDULeRxcmBAv4=) 11: UYKj6w8oc00gF7JMZ0EwSFtcBi0.roa (hash: iPF47oq2G1H6nraaho7yTyXLa2vk3+qJjR/kxpbRaFY=) 12: VYryJDxFQ9pVsktPdS7I7aO79LU.roa (hash: EyLQPQpxzWzRFp+2LoIN/y3eg3CSRL9NQo+epTvIh2I=) 13: XtXDlnhs5rhRL_5-jFwWwSMuZps.roa (hash: a6jDMzm94Asoeyf60OIohSUyCZiYpy8MluLph5eME7M=) 14: Z4NU5xe0EBj9RIuaovYwI5tnPM0.roa (hash: MYFq2Melvc4J1leQU22ot/HNUSE6awkr0RXWxWdWbiw=) 15: eHJWiqsGCG9ZLkRLTHRsGltYIS4.roa (hash: hyWQF1LXsHiVIwgtK9t0cmYGbdq03Hyk+mzotFIK7xQ=) 16: kJTH_Pa1Q7q-za4UTf5iFF7mJak.roa (hash: HxqU7QXHxJ3SUWYza6DwlQdO53jyF6ZlCNM0DzPU/DA=) 17: qBHwFIITHb9vcCPPC7SuclSTLnw.roa (hash: aQM5TysVLiOxOc2xtUIDmdRXdLsNsYbSG7K6fJuB45o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7062 (0x1b96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Validity Not Before: Nov 22 05:21:54 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F923715761C6435B8D73F89D839A049616485238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f3:45:5e:15:75:d4:dd:4e:7f:45:f2:68:4e: cc:61:a8:67:26:13:3f:ac:9d:2b:9c:7a:f6:9f:80: 85:d3:8f:7f:67:c9:af:6b:7a:3a:dc:26:33:e3:9f: 17:77:8d:f1:24:38:ae:98:b7:1a:80:19:bd:68:9e: 27:d9:4a:6e:d0:0b:4f:43:3b:65:70:71:20:7b:b2: 9b:4b:30:b8:0e:98:05:a3:52:bc:14:c2:b7:96:85: 7b:34:18:a3:11:2d:29:5b:76:7f:1d:f8:89:bd:6e: 87:2c:a1:ec:4f:cc:4a:7e:12:7d:50:0e:e8:5a:48: bb:23:98:8b:6f:8b:49:ca:ff:3d:06:45:f9:64:87: a2:ca:2b:db:42:9b:26:1d:c3:62:36:a0:2a:89:15: 85:bb:c8:dc:31:33:58:21:33:2d:84:13:8b:a5:b6: 07:48:f7:f1:ed:fa:b9:23:6a:71:59:78:ca:b9:26: 88:a3:9e:87:c1:15:f3:9c:ba:4f:b3:75:b0:a3:6b: e7:dc:b3:b1:4b:55:d2:f9:9b:c4:e3:9a:da:50:60: ca:3b:13:14:44:93:a5:c2:2e:4e:ba:d2:58:62:c3: 3a:f1:63:be:bc:a7:d2:e8:1a:db:1e:6d:c6:72:dd: 1e:ee:9a:6d:d2:27:7d:d8:65:7b:6c:8e:7e:d2:91: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:23:71:57:61:C6:43:5B:8D:73:F8:9D:83:9A:04:96:16:48:52:38 X509v3 Authority Key Identifier: keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:33:b3:f1:06:32:54:c9:7b:33:f5:f4:c7:92:ae:e2:75:ea: 2a:a1:d4:71:55:6e:cc:9d:fd:60:10:45:7d:f7:4e:a8:50:c2: 55:99:32:37:37:92:72:8d:9f:8c:4d:7b:83:74:8f:ad:fb:90: 42:4c:18:c4:7b:0e:ac:14:66:bd:93:c7:83:f9:ee:a7:d5:55: 90:57:0b:f3:1f:d0:0e:32:64:3d:56:ae:33:16:46:78:06:31: 17:eb:01:0d:aa:45:cf:ba:de:54:0f:70:57:4a:4e:0d:ec:07: bc:41:33:37:10:66:a3:9d:35:ed:a3:46:90:c5:08:65:ea:4d: f4:07:6e:1c:13:16:63:ec:65:d2:f0:12:bb:ad:e7:19:63:2c: e7:a4:de:98:55:54:e5:b8:8d:db:5e:88:ed:1d:2d:61:60:92: 0d:45:61:d2:3b:7d:e8:99:fe:2b:91:fd:d2:2d:2f:94:1e:05: 0e:34:ca:a0:37:8f:75:9b:f2:d6:de:05:b6:42:14:6a:db:26: e5:f6:d2:2f:60:46:7b:65:d2:c2:1f:9f:fc:49:fc:1b:bd:7c: 5f:c7:e3:ca:6f:23:68:29:d0:e9:f5:31:38:49:ef:48:71:62: a6:16:73:14:6f:dd:d5:6f:6b:fc:d9:5e:bd:bf:1f:5f:17:ab: cb:59:00:1a -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICG5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4 M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yNDExMjIw NTIxNTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEY5MjM3MTU3NjFDNjQz NUI4RDczRjg5RDgzOUEwNDk2MTY0ODUyMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa80VeFXXU3U5/RfJoTsxhqGcmEz+snSucevafgIXTj39nya9r ejrcJjPjnxd3jfEkOK6YtxqAGb1onifZSm7QC09DO2VwcSB7sptLMLgOmAWjUrwU wreWhXs0GKMRLSlbdn8d+Im9bocsoexPzEp+En1QDuhaSLsjmItvi0nK/z0GRflk h6LKK9tCmyYdw2I2oCqJFYW7yNwxM1ghMy2EE4ultgdI9/Ht+rkjanFZeMq5Joij nofBFfOcuk+zdbCja+fcs7FLVdL5m8TjmtpQYMo7ExREk6XCLk660lhiwzrxY768 p9LoGtsebcZy3R7umm3SJ33YZXtsjn7SkRGJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU+SNxV2HGQ1uNc/idg5oElhZIUjgwHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL0xvUHJEaHkzdEtkaGVn U3Rlb0ppblppNVc1US5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjM7PxBjJUyXsz9fTHkq7ideoqodRxVW7Mnf1gEEV9906oUMJVmTI3N5JyjZ+M TXuDdI+t+5BCTBjEew6sFGa9k8eD+e6n1VWQVwvzH9AOMmQ9Vq4zFkZ4BjEX6wEN qkXPut5UD3BXSk4N7Ae8QTM3EGajnTXto0aQxQhl6k30B24cExZj7GXS8BK7recZ YyznpN6YVVTluI3bXojtHS1hYJINRWHSO33omf4rkf3SLS+UHgUONMqgN491m/LW 3gW2QhRq2ybl9tIvYEZ7ZdLCH5/8SfwbvXxfx+PKbyNoKdDp9TE4Se9IcWKmFnMU b93Vb2v82V69vx9fF6vLWQAa -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:13 2024 by rpki-client on console-ams.rpki-client.org