$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.mft File: zez04eD7Tx2VgkDeiymD-UEiEzg.mft (raw, json) Hash identifier: 9TbWCKKe6jkRQzbaladDl0MeAuE8DTZL6sfUmxpXuSs= Subject key identifier: AD:A5:DD:83:E8:7F:9B:33:C6:58:CE:F3:04:20:D2:CA:77:91:89:EC Authority key identifier: CD:EC:F4:E1:E0:FB:4F:1D:95:82:40:DE:8B:29:83:F9:41:22:13:38 Certificate issuer: /CN=CDECF4E1E0FB4F1D958240DE8B2983F941221338 Certificate serial: 445C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zez04eD7Tx2VgkDeiymD-UEiEzg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.mft Manifest number: 445C Signing time: Fri 22 Nov 2024 08:52:41 +0000 Manifest this update: Fri 22 Nov 2024 08:52:41 +0000 Manifest next update: Fri 22 Nov 2024 14:52:41 +0000 Files and hashes: 1: zez04eD7Tx2VgkDeiymD-UEiEzg.crl (hash: nZ3GPKuzWoMSpOKmVuo5Y/KAZPOBPolJBgsL3uzuvFM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zez04eD7Tx2VgkDeiymD-UEiEzg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17500 (0x445c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDECF4E1E0FB4F1D958240DE8B2983F941221338 Validity Not Before: Nov 22 08:52:41 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=ADA5DD83E87F9B33C658CEF30420D2CA779189EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:90:5d:c7:30:ad:15:3f:b4:74:52:8b:af: e0:9d:40:3b:9d:20:c4:ac:5e:88:5d:fb:4b:6b:3e: 81:16:74:2b:d7:53:b1:1b:80:6c:82:aa:0a:54:7f: eb:13:5d:94:fc:57:2e:9b:af:23:71:92:78:c0:2f: 67:c1:e8:88:17:38:6d:48:a8:57:7d:1f:c9:7d:ea: a1:4c:a1:dd:9a:b1:1b:c6:71:b2:88:5d:19:22:c9: 2e:43:27:7c:3b:39:37:52:1c:73:71:63:2c:37:56: 74:ff:56:fe:ce:3e:f1:f0:1d:03:08:1c:09:6a:0c: cc:2e:ce:57:c6:79:5d:79:7a:1e:0d:90:a7:71:85: ce:e5:36:96:46:a0:3a:b4:b6:1b:9c:eb:95:4c:db: 7f:e0:74:b6:4e:36:1b:27:ab:21:e6:1e:cc:fd:f6: 48:ac:47:3c:23:b9:7c:d4:60:e8:02:ce:0c:59:5d: 60:72:a7:8e:17:09:86:93:60:1f:05:ae:ce:9c:24: 01:42:31:5f:bc:59:27:31:81:a7:8b:c4:a4:98:26: 19:77:bd:e4:33:b4:37:c5:48:7a:33:80:a8:4d:60: 7e:5f:d3:31:e7:46:c9:9a:bb:3c:54:f6:49:ba:2a: a3:b6:95:12:be:a4:fe:f7:a1:56:eb:5b:47:54:a8: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A5:DD:83:E8:7F:9B:33:C6:58:CE:F3:04:20:D2:CA:77:91:89:EC X509v3 Authority Key Identifier: keyid:CD:EC:F4:E1:E0:FB:4F:1D:95:82:40:DE:8B:29:83:F9:41:22:13:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zez04eD7Tx2VgkDeiymD-UEiEzg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/11/zez04eD7Tx2VgkDeiymD-UEiEzg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:da:d4:70:d1:70:7a:3b:ec:ab:9b:e7:8c:bb:5e:58:88:2d: e2:ed:76:0a:b8:6f:de:a3:95:b7:88:32:5c:60:83:94:88:df: bf:64:7b:83:23:cf:45:ba:bc:01:76:2a:10:bb:c3:35:a4:8d: 31:ed:65:cb:46:b0:e7:49:8f:0a:8b:be:6f:35:d1:cb:ca:6b: c7:ae:1b:f7:f5:b5:bd:e9:bc:76:4d:bc:05:8f:a6:64:eb:ef: 70:7e:79:18:d7:75:8c:af:8f:a1:3c:de:2e:6c:44:bf:94:4a: 57:3e:77:cc:3c:d6:7c:a6:f0:b5:94:a0:98:aa:a7:9a:0b:15: 71:6e:f5:35:45:73:1e:47:38:4c:bd:37:27:ff:31:e6:ff:e0: bb:c8:b8:6f:94:6e:f0:fc:4e:fa:ce:6f:da:e6:90:5b:c1:93: f0:bd:f2:4e:0f:73:46:dd:a6:1c:7b:a1:9c:6c:b5:e2:ff:4a: eb:2d:6d:0e:09:6c:70:81:43:d5:8a:cc:29:82:98:3f:a5:33: 05:cf:f1:b3:41:1c:da:52:8c:5f:d9:dc:75:66:e9:7c:4c:93: 3a:c4:64:56:57:1a:be:1e:af:08:64:a3:1f:02:b4:fb:db:31: ea:dd:e3:5b:7a:f4:b3:b4:2a:a2:41:9b:4f:34:33:df:8c:6a: 23:c8:a8:f9 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICRFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF Q0Y0RTFFMEZCNEYxRDk1ODI0MERFOEIyOTgzRjk0MTIyMTMzODAeFw0yNDExMjIw ODUyNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFEQTVERDgzRTg3RjlC MzNDNjU4Q0VGMzA0MjBEMkNBNzc5MTg5RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJNJBdxzCtFT+0dFKLr+CdQDudIMSsXohd+0trPoEWdCvXU7Eb gGyCqgpUf+sTXZT8Vy6bryNxknjAL2fB6IgXOG1IqFd9H8l96qFMod2asRvGcbKI XRkiyS5DJ3w7OTdSHHNxYyw3VnT/Vv7OPvHwHQMIHAlqDMwuzlfGeV15eh4NkKdx hc7lNpZGoDq0thuc65VM23/gdLZONhsnqyHmHsz99kisRzwjuXzUYOgCzgxZXWBy p44XCYaTYB8Frs6cJAFCMV+8WScxgaeLxKSYJhl3veQztDfFSHozgKhNYH5f0zHn RsmauzxU9km6KqO2lRK+pP73oVbrW0dUqAYbAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUraXdg+h/mzPGWM7zBCDSyneRiewwHwYDVR0jBBgwFoAUzez04eD7Tx2VgkDe iymD+UEiEzgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTEv emV6MDRlRDdUeDJWZ2tEZWl5bUQtVUVpRXpnLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC96ZXowNGVEN1R4MlZna0RlaXltRC1VRWlFemcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMS96ZXowNGVEN1R4MlZna0Rl aXltRC1VRWlFemcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA JtrUcNFwejvsq5vnjLteWIgt4u12Crhv3qOVt4gyXGCDlIjfv2R7gyPPRbq8AXYq ELvDNaSNMe1ly0aw50mPCou+bzXRy8prx64b9/W1vem8dk28BY+mZOvvcH55GNd1 jK+PoTzeLmxEv5RKVz53zDzWfKbwtZSgmKqnmgsVcW71NUVzHkc4TL03J/8x5v/g u8i4b5Ru8PxO+s5v2uaQW8GT8L3yTg9zRt2mHHuhnGy14v9K6y1tDglscIFD1YrM KYKYP6UzBc/xs0Ec2lKMX9ncdWbpfEyTOsRkVlcavh6vCGSjHwK0+9sx6t3jW3r0 s7QqokGbTzQz34xqI8io+Q== -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:50 2024 by rpki-client on console-ams.rpki-client.org