$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft File: A8JGgRHqHFTvizzN765RbDCabsg.mft (raw, json) Hash identifier: FZQjryUKy0a6HbKQzl7P+xw1gQmtd1T8rp1DH9aHDSQ= Subject key identifier: 40:E8:44:62:90:F9:7A:3A:6D:7C:48:87:B3:13:FC:D3:B1:AE:09:A3 Authority key identifier: 03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8 Certificate issuer: /CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8 Certificate serial: 1189 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft Manifest number: 1189 Signing time: Fri 22 Nov 2024 15:23:25 +0000 Manifest this update: Fri 22 Nov 2024 15:23:25 +0000 Manifest next update: Fri 22 Nov 2024 21:23:25 +0000 Files and hashes: 1: A8JGgRHqHFTvizzN765RbDCabsg.crl (hash: doazUY2GUw2He6cZc7UNg2ElGfe3bDxhW6uTmhDyvwc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4489 (0x1189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8 Validity Not Before: Nov 22 15:23:25 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=40E8446290F97A3A6D7C4887B313FCD3B1AE09A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:e5:02:3a:07:fe:b0:b7:77:17:ee:fa:a3: ea:3b:73:73:27:29:98:72:24:b2:bd:ae:95:48:b6: 3c:52:8e:6c:fd:80:4e:c8:f2:aa:d4:c2:09:50:f6: 47:6e:46:ba:9b:bf:a6:e1:a2:7f:16:73:fc:4d:bb: 50:f6:48:ad:82:22:44:28:ff:c0:81:50:71:dd:25: b6:a3:7b:3d:0f:b6:5c:fc:ff:86:47:9e:19:86:f0: e8:62:31:44:33:73:40:de:f2:e4:29:ea:c9:c0:b5: 81:3e:6d:5a:03:e0:2f:ab:f4:86:d7:fc:89:95:ca: db:b9:ba:7d:e9:b9:3c:04:f0:c4:02:ae:38:e8:f4: 5b:22:8e:76:8e:ad:ee:4b:2b:5d:35:4e:ef:d1:78: 94:89:1a:e4:94:1f:31:ec:f8:31:3a:56:3e:44:35: 56:3f:9d:6f:17:5e:91:ef:55:cc:d6:fd:4d:84:55: 91:08:17:41:b6:35:b5:86:50:8a:b6:83:3e:7c:d4: d4:e2:f5:5b:6a:d3:53:26:f0:6c:9f:5b:0d:1a:6f: e6:ee:d7:d0:fd:8e:40:82:8c:0b:16:6b:96:ef:5d: 13:f6:bd:8c:1a:52:b5:9f:67:88:ff:3e:d0:e0:de: 74:a7:0a:cd:1f:c4:da:0d:34:9d:09:ea:35:63:2d: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E8:44:62:90:F9:7A:3A:6D:7C:48:87:B3:13:FC:D3:B1:AE:09:A3 X509v3 Authority Key Identifier: keyid:03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:45:6c:45:ac:25:8a:39:34:f8:05:9d:11:73:d4:45:38:08: 40:9e:16:b3:0d:60:02:61:b8:4c:8c:69:3d:b5:94:fe:75:38: 00:4c:a8:fc:9e:2b:7c:a6:9e:5d:06:5b:9c:af:bc:46:e6:05: 47:cf:22:01:b4:f7:6e:2b:ee:60:7d:0c:4d:b6:eb:24:82:c8: e9:d6:df:0a:3e:90:83:62:45:4f:cc:7f:fd:4d:e9:a6:bf:1a: 61:b8:0b:8d:15:d3:0d:3a:1d:fb:26:93:59:1a:fd:e6:1c:58: 23:90:0c:10:e1:cd:0a:c1:c3:11:e9:89:98:7e:49:0f:50:3e: 8b:16:4f:e0:42:1d:5b:32:2d:04:79:8a:0e:96:2f:f4:03:7c: 45:df:1c:06:0e:96:66:a5:39:c7:d1:c2:66:72:b5:0c:ee:b3: 4a:71:1b:6f:0b:83:b7:f9:88:42:c1:07:1b:e2:a2:b9:75:d5: 49:4e:72:6c:9f:7e:9d:84:97:ce:78:28:dc:8e:d2:c8:4d:b4: c0:ca:14:bc:88:c2:52:98:8e:65:4c:ad:09:95:27:91:64:c2: 46:a2:17:a9:bf:7a:b6:0f:4e:87:b8:54:b6:16:5c:81:e4:2c: 63:54:f6:73:43:11:bf:fc:d0:92:7e:d8:a4:3c:1c:8d:5c:c4: 6b:d4:25:9a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDND MjQ2ODExMUVBMUM1NEVGOEIzQ0NERUZBRTUxNkMzMDlBNkVDODAeFw0yNDExMjIx NTIzMjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQwRTg0NDYyOTBGOTdB M0E2RDdDNDg4N0IzMTNGQ0QzQjFBRTA5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjmuUCOgf+sLd3F+76o+o7c3MnKZhyJLK9rpVItjxSjmz9gE7I 8qrUwglQ9kduRrqbv6bhon8Wc/xNu1D2SK2CIkQo/8CBUHHdJbajez0Ptlz8/4ZH nhmG8OhiMUQzc0De8uQp6snAtYE+bVoD4C+r9IbX/ImVytu5un3puTwE8MQCrjjo 9FsijnaOre5LK101Tu/ReJSJGuSUHzHs+DE6Vj5ENVY/nW8XXpHvVczW/U2EVZEI F0G2NbWGUIq2gz581NTi9Vtq01Mm8GyfWw0ab+bu19D9jkCCjAsWa5bvXRP2vYwa UrWfZ4j/PtDg3nSnCs0fxNoNNJ0J6jVjLVIZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQOhEYpD5ejptfEiHsxP807GuCaMwHwYDVR0jBBgwFoAUA8JGgRHqHFTvizzN 765RbDCabsgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTA4 Mi9BOEpHZ1JIcUhGVHZpenpONzY1UmJEQ2Fic2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0E4SkdnUkhxSEZUdml6ek43NjVSYkRDYWJzZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwODIvQThKR2dSSHFIRlR2 aXp6Tjc2NVJiRENhYnNnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAItFbEWsJYo5NPgFnRFz1EU4CECeFrMNYAJhuEyMaT21lP51OABMqPyeK3ym nl0GW5yvvEbmBUfPIgG0924r7mB9DE226ySCyOnW3wo+kINiRU/Mf/1N6aa/GmG4 C40V0w06Hfsmk1ka/eYcWCOQDBDhzQrBwxHpiZh+SQ9QPosWT+BCHVsyLQR5ig6W L/QDfEXfHAYOlmalOcfRwmZytQzus0pxG28Lg7f5iELBBxviorl11UlOcmyffp2E l854KNyO0shNtMDKFLyIwlKYjmVMrQmVJ5FkwkaiF6m/erYPToe4VLYWXIHkLGNU 9nNDEb/80JJ+2KQ8HI1cxGvUJZo= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:38 2024 by rpki-client on console-fra.rpki-client.org