$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft File: 7JfpAsM6EGVBKiW96FhrxCFuOWI.mft (raw, json) Hash identifier: jRIUhkb+xtrY62gbYkcFWhY4u+u6nObgPX/OJ5ycG5Y= Subject key identifier: 63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA Authority key identifier: EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62 Certificate issuer: /CN=EC97E902C33A1065412A25BDE8586BC4216E3962 Certificate serial: 1AB1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft Manifest number: 1AB1 Signing time: Fri 22 Nov 2024 15:22:25 +0000 Manifest this update: Fri 22 Nov 2024 15:22:25 +0000 Manifest next update: Fri 22 Nov 2024 21:22:25 +0000 Files and hashes: 1: 7JfpAsM6EGVBKiW96FhrxCFuOWI.crl (hash: WVr73btT6ls8YlX9cU5NzNVLN270oKZ4hrjRlGjJlu4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6833 (0x1ab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC97E902C33A1065412A25BDE8586BC4216E3962 Validity Not Before: Nov 22 15:22:25 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=638B1FB2B0BC8DC785A1671871613554C07EF8EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:20:45:39:7a:52:f6:52:e2:42:7e:07:38: 42:f0:e3:50:25:dd:4c:90:03:c5:0a:86:eb:b5:3e: 0f:64:5e:f2:01:28:8c:79:da:4e:36:e1:e5:07:f7: da:ba:7b:b3:0e:85:16:95:44:d9:f6:91:ef:6b:1e: f6:4a:88:d6:5b:f9:f4:8d:d3:dc:02:51:15:c6:a7: 39:83:47:d2:6e:86:d8:56:03:43:d2:e9:4b:4c:c5: 64:92:4c:56:e4:3d:5a:25:e4:71:12:41:e9:fc:ba: 75:6c:b6:ca:e5:fa:22:23:e9:62:a6:40:c1:44:de: 0d:64:d6:fd:c6:4d:20:dc:60:8c:fb:d4:ba:d4:be: 34:e1:20:dd:73:47:8e:ca:14:30:01:d5:ed:af:0f: b4:4f:e7:26:c3:b5:ad:b3:45:8b:f6:94:47:ec:5f: 52:d1:0f:72:61:56:40:94:a2:a2:70:aa:3b:ba:3b: 4a:33:79:0f:47:fe:56:6a:e4:aa:d3:25:94:34:24: 81:19:67:dc:27:f7:01:b3:0d:9b:0e:db:9f:7b:7a: 04:be:27:99:d7:eb:c1:a4:0c:4e:81:84:72:50:d5: 80:23:cc:08:32:57:d6:9e:ef:0f:e8:5a:90:06:43: 2a:9f:cc:77:d0:41:98:d1:52:9c:6b:35:59:93:02: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA X509v3 Authority Key Identifier: keyid:EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f2:8c:81:f3:3a:b7:f0:d1:79:61:04:e9:b3:1c:ff:53:78: 2c:fd:fd:73:4e:ce:2b:83:df:0b:2c:2b:af:0d:92:80:45:ad: c2:c5:f0:de:94:85:9a:0b:19:27:5c:40:7a:2f:f0:ea:49:0e: 08:a5:75:f1:d0:50:1b:b3:c3:0d:d8:37:de:7f:d1:8b:79:6b: eb:2a:ef:54:50:43:42:86:08:82:19:3b:0a:1a:a0:32:67:c3: 17:b9:cc:24:c5:e6:65:0c:d2:b9:71:a7:3f:02:e9:58:87:3a: 09:c7:86:14:65:5e:3f:ad:d3:0d:03:a8:03:d7:69:3d:2e:33: 1a:91:aa:c8:32:9e:9b:5e:6f:28:a8:84:c5:8c:8c:88:67:97: 56:49:cf:83:d9:3a:18:92:1a:19:b0:4b:8a:4e:62:58:1b:e7: de:b2:89:06:59:3c:f6:a2:a7:77:17:66:16:1e:60:9f:b5:fe: 66:cc:48:cf:4c:7f:96:c1:da:78:d3:d6:9e:81:19:da:6a:0f: 9d:0b:1a:5d:a5:54:0b:ef:c9:a3:64:3e:8c:a5:75:52:7f:be: fc:f3:4d:0c:83:a7:a3:57:51:09:49:50:04:71:02:a9:4c:fa: 34:78:01:bb:95:c8:d1:c3:86:1a:fa:26:a2:3b:4b:82:27:f8: 46:ff:63:6b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUM5 N0U5MDJDMzNBMTA2NTQxMkEyNUJERTg1ODZCQzQyMTZFMzk2MjAeFw0yNDExMjIx NTIyMjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYzOEIxRkIyQjBCQzhE Qzc4NUExNjcxODcxNjEzNTU0QzA3RUY4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFRCBFOXpS9lLiQn4HOELw41Al3UyQA8UKhuu1Pg9kXvIBKIx5 2k424eUH99q6e7MOhRaVRNn2ke9rHvZKiNZb+fSN09wCURXGpzmDR9JuhthWA0PS 6UtMxWSSTFbkPVol5HESQen8unVstsrl+iIj6WKmQMFE3g1k1v3GTSDcYIz71LrU vjThIN1zR47KFDAB1e2vD7RP5ybDta2zRYv2lEfsX1LRD3JhVkCUoqJwqju6O0oz eQ9H/lZq5KrTJZQ0JIEZZ9wn9wGzDZsO2597egS+J5nX68GkDE6BhHJQ1YAjzAgy V9ae7w/oWpAGQyqfzHfQQZjRUpxrNVmTAo6TAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUY4sfsrC8jceFoWcYcWE1VMB++OowHwYDVR0jBBgwFoAU7JfpAsM6EGVBKiW9 6FhrxCFuOWIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTEw OS83SmZwQXNNNkVHVkJLaVc5NkZocnhDRnVPV0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdKZnBBc002RUdWQktpVzk2RmhyeENGdU9XSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzExMDkvN0pmcEFzTTZFR1ZC S2lXOTZGaHJ4Q0Z1T1dJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABzyjIHzOrfw0XlhBOmzHP9TeCz9/XNOziuD3wssK68NkoBFrcLF8N6UhZoL GSdcQHov8OpJDgildfHQUBuzww3YN95/0Yt5a+sq71RQQ0KGCIIZOwoaoDJnwxe5 zCTF5mUM0rlxpz8C6ViHOgnHhhRlXj+t0w0DqAPXaT0uMxqRqsgynptebyiohMWM jIhnl1ZJz4PZOhiSGhmwS4pOYlgb596yiQZZPPaip3cXZhYeYJ+1/mbMSM9Mf5bB 2njT1p6BGdpqD50LGl2lVAvvyaNkPoyldVJ/vvzzTQyDp6NXUQlJUARxAqlM+jR4 AbuVyNHDhhr6JqI7S4In+Eb/Y2s= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:38 2024 by rpki-client on console-fra.rpki-client.org