$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft File: vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json) Hash identifier: /S9lueLvObB3faqSvXwXQUvYl9q8mUvfUZrpO2B9fao= Subject key identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 5BDD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft Manifest number: 3F5C Signing time: Fri 22 Nov 2024 10:22:30 +0000 Manifest this update: Fri 22 Nov 2024 10:22:29 +0000 Manifest next update: Fri 22 Nov 2024 16:22:29 +0000 Files and hashes: 1: BPwbl2E3hmx2EUpWuWYORyxN8yE.roa (hash: 6kfzV7CI3M37fO5MxZgdrdcrrDV+M3SBHaoJoDh6lsA=) 2: hUwqPu6t8tUYFc-peBX6xMI4HBc.roa (hash: jOkPLxA3qJXTVDxX+ALBQiv9GL9hiNSiQhqdZqM62Co=) 3: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: szVsFt1k5WsuNTjJQemw3/ZB9ftu8H/877+krLD6ASY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23517 (0x5bdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Nov 22 10:22:29 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c: a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef: 6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d: e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06: 74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe: aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a: f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c: 74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86: 4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab: 21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c: 3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c: d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70: 45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed: 42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c: 95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce: e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4: 4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:78:40:70:9f:a6:02:bb:95:b7:a1:89:f5:43:ba:af:37:cb: e9:17:5f:01:47:39:9b:87:1e:2d:af:2b:e1:f3:c6:c0:ea:23: e8:e3:88:d6:83:30:47:47:9e:1a:1b:12:8d:4a:bb:d0:29:71: 45:b2:bd:77:90:49:af:00:d3:21:31:76:4d:04:2d:91:4f:d9: 54:78:19:4e:70:e1:c2:e0:b9:c5:36:7c:48:4b:c9:29:00:65: 89:e8:34:16:64:54:69:0b:aa:ff:74:79:7a:65:81:69:83:f4: a6:fc:d8:9c:cc:69:41:d3:bd:6c:35:91:34:bd:a4:7e:5c:b7: 0f:19:72:ea:a4:cd:f9:fe:3b:4a:a7:5b:1a:e9:53:7b:ca:bf: 33:72:c1:80:53:46:1f:11:39:9a:27:1d:6e:11:71:80:66:84: ad:6e:38:e9:13:f3:34:ea:24:99:77:8e:c5:1c:67:da:5d:8c: 78:30:56:b9:b5:39:a4:56:98:66:9f:c1:77:ea:f9:f1:78:6a: b0:26:27:5d:ce:c2:18:64:80:a7:df:d2:f1:a8:ba:d0:6d:61: b3:17:dd:60:a1:03:10:93:e9:0c:64:6f:10:be:30:ab:d5:f1: 72:a8:0c:e6:f2:21:9b:23:52:d8:c5:30:ff:ba:77:50:b1:5d: 16:f1:e3:ad -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICW90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDExMjIx MDIyMjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU4OTI0NjVCMEE0RjM1 NjEzRDY5MkIzQjY4NTM2RThFQzEwRTBCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7L9Ho9iRXPO+XbdUrbKBD92Jo4hqyRWVeI5vv72/4T+WgxRZ3 rrlAbdLsXegiVk778yzSIfVM4jHeBnRYnNEsORB8iiOzTXun/qpK8GUJuVuyCdMB GFP8KvHPBO3tCet6lEqP53bYfHTj+C1SRbBX/I9d7fyrhkwa1OcktwCGfYmwKt8L qyH4tEKCze3EczTun8mELDtJxrhkRo+Cm8iA7U8FfNPgIwB9UksmEmgJJlhYcEW/ 1yZ9BX9g13l4e0kP7UJxhrP+X3vnQvpu6HaMDJWLWfuI6Upq8hK7eII2zulAUS8J LKXIbCv+YVtU5ErAzbOsYEj1vSqTCvyqrY79AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU6JJGWwpPNWE9aSs7aFNujsEOC7MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZldnRoa0RMcGxrOXFm bWozU0tOT0pFa1dPby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCieEBwn6YCu5W3oYn1Q7qvN8vpF18BRzmbhx4tryvh88bA6iPo44jWgzBHR54a GxKNSrvQKXFFsr13kEmvANMhMXZNBC2RT9lUeBlOcOHC4LnFNnxIS8kpAGWJ6DQW ZFRpC6r/dHl6ZYFpg/Sm/NiczGlB071sNZE0vaR+XLcPGXLqpM35/jtKp1sa6VN7 yr8zcsGAU0YfETmaJx1uEXGAZoStbjjpE/M06iSZd47FHGfaXYx4MFa5tTmkVphm n8F36vnxeGqwJiddzsIYZICn39LxqLrQbWGzF91goQMQk+kMZG8QvjCr1fFyqAzm 8iGbI1LYxTD/undQsV0W8eOt -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:36 2024 by rpki-client on console-fra.rpki-client.org