$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json) Hash identifier: bdPdFC8LN//YW97Uc1patWnhSDifp9W+QiakYS93pF4= Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1F03 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft Manifest number: 1EA4 Signing time: Fri 22 Nov 2024 05:51:02 +0000 Manifest this update: Fri 22 Nov 2024 05:51:02 +0000 Manifest next update: Fri 22 Nov 2024 11:51:02 +0000 Files and hashes: 1: 2sf_uVfTHcks65OIerwSzPzxLTU.roa (hash: z2Dlo+At49NXiKLzv4VRgN452gkSeterlfMyzK5knAs=) 2: 49Y06P6mO_0cONNfsOUaWXQWNHQ.roa (hash: v7Ahc7BpfLkfI0PHrXW+ecXVmeWtQwsQ8fg23R7iEO8=) 3: 6Emp2W8u59WS5JboZYAavTJkNBU.roa (hash: lcC0WHij2YeKvOGeR45MPCTYcjr6i8wHCTLhMFVHfsw=) 4: 6tzQ7nCeNJ19naIwALqmtn5G0Kg.roa (hash: cJYLiw9PltpvUw8IOXoAyMGHl5zud1sahOEUIk43cvA=) 5: 9gt3sO4F8VAgCaBkAYLAR6qVEaY.roa (hash: HI7bNEM2v6YnEaabTFCNifxaIefAPVp+TCEal4K6UEw=) 6: 9gyhefr517RfAOABu_cie3qCUzI.roa (hash: 6sobxHCNKmaGVVt7YwHG1OcydeZhTaYgDzswsVljJzk=) 7: A9TUrVS0yyWsFiXRXoUjZMwCuE8.roa (hash: EFKz7Qp1KC/9PcB/sJjZQGIz1kMrAX+BBN9PMH0no/g=) 8: AwFgeqEkjXom2-0T327HGFL3gi4.roa (hash: 0oqryPTJmmVhxUPDI8LVI7lYGQf4UgyKUyfm6yQQrMI=) 9: FCtRjJjsQGIsoNO2UFr_8M1AHBk.roa (hash: BZNx/ZT2DCXGum/LQnLwUMvoYEJFjCYVIoVWWfszF7o=) 10: HdJLKpkoeZyxS_7duFCOOPm1Cek.roa (hash: 9InvhN8+FXug48UdtBBNIrncxJdfYy/D8MF6e6EgVhs=) 11: Q54pfvHPGWJGTum-n_-Hlj86ytE.roa (hash: Vki/FeyqKTBXXZ7rjofJE0i7oTbZg7MS6U5KQXHbj54=) 12: QSkRe6ewYXXxezbrTF3VMPaVhSM.roa (hash: z8EIZfwPDu6c0pr/1wfvDy11M1TTLb7Tf1Hu9x+lc0Q=) 13: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: oqTYv/hlVk8lXo4ohuNMTX0DHrR1igY8VIIjcxjTtFs=) 14: VxpBL63XZ_e2iG_yt3OFJCzJDlg.roa (hash: uqRsjxMLXecrPfYhOOWzzB3zX6eVYDFiccg9y1eEQN0=) 15: XPYIUyDnLRSes7GeVyB94AB9O24.roa (hash: aLE36WnV0gfnPcj2f32ypWtr3rhDy3JSuGaju+VwkFk=) 16: YOemi9gc7140p-sqI5J1Y-u6eew.roa (hash: sEZYcSYkvxIytzwDH9djs20Bg7imWiTJLATybXeI6ok=) 17: aASXeOzVTrhPUbwsoJokrZwrC18.roa (hash: kMg64xQE+MBX4TxtPWzQ5GbjhnHesWhs/8WCwl94HJM=) 18: bI7qJDaBx__3-IW_pp53GfEC6M0.roa (hash: CSGTZ1FRGgeCLzTYboZeZjjfVJFP3kcNz3zU9OGRJYM=) 19: cgeD06WA50rSUr6AR_gxdu2XQXk.roa (hash: 8gvgYS1s6Q4SVX0dsa5V1LHQPb/qfRX6tMA918UHBdg=) 20: e_W__lhZil4gfIEsiWn6OSkFOdc.roa (hash: Z7V4EQH2mr8/aMflJgQYXxAIsQ/UZwSrbEqb3h6L+N4=) 21: fbfxmtCp0ZdCcgvrmBScMggNB6g.roa (hash: CUV8JwHwLOA4XmIRIUoOdJSYCX8L55+3JGVo/VIktAo=) 22: il48wMOcWKJXqTM6mlGip4hQEQc.roa (hash: 8mI3F84+eS+u1HAS3j2dxh5M8SUD2ckwDfpE5xnbNYE=) 23: o7ZmOW9qOsqZ0bHchQ6Nv-vA914.roa (hash: EpikzgR5XeVLPyQXbMACsFePHc6e8L/dPN7LjpPduTI=) 24: qKVEJVfnw8gyBjGM98vZSoLRpv0.roa (hash: T6r81Wt5ZgeYdxno5PWOqavrUNWRfwZJGU71jQxQtTY=) 25: qrk3fOWqrR88lRbak1aREmEH1i8.roa (hash: H0XO7xWQSzvd3I3jPIKJjik6LsRNG4lhtFRyXmqZo9E=) 26: t8xdPLb9kQp9DDa5XyaEgGglR70.roa (hash: /Qlr+yGjNqzeZQm7HCKVOoKb5ZeWWL3df37Rd5Bjy/s=) 27: tj9JxGTBgvMxpol8F2NSODl-y8A.roa (hash: u3QMdWdKkqCnZy+HmzKL4Gu/KB1TLmdel08ZBdtoyZk=) 28: vkvnSUCSxZEq-uqTbuQg1WfIoA0.roa (hash: EiDIvsXVbTOyIyQk1/0E6vY4k1ZqbRhKNSDNFMW+cOA=) 29: xxW-2WEuhe9ieSFFNxR6Sa8BlRk.roa (hash: Ly95fDZjsIPZ510IJYSooOWSbRN4M/pWdTrNi//PSjA=) 30: z4xK6fZw9Z9a-kGnU-Slx5APbB8.roa (hash: 8AfnlIbLW5rFC2pEe6q/sAbTzmI60oguNVNTLPIupR0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7939 (0x1f03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Nov 22 05:51:02 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18: a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53: ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a: 95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49: 3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6: 6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9: 34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7: 8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71: 05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42: 14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f: 30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f: e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2: 91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc: 8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb: 4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1: 33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f: 84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80: fd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:aa:af:b6:7c:54:18:93:45:5e:c6:3d:26:e3:18:4f:89:5b: d2:51:2d:b4:6f:88:81:84:25:ec:aa:c5:0c:94:9f:98:e7:d0: 83:ac:1f:fc:1d:a9:88:13:e4:c8:58:a2:65:9e:c4:b7:b2:83: c7:04:d6:6c:11:81:01:26:94:5e:dd:1a:ac:1e:bb:3e:18:c8: 14:9a:0c:87:15:e4:0d:1d:b4:94:86:b1:6b:a1:8f:d0:15:4d: bc:6e:87:91:b2:9a:18:5a:a9:01:e6:26:1f:f4:6b:29:47:96: 6f:00:9d:fc:58:28:22:3f:91:f8:6d:0d:eb:5b:9d:55:e1:53: d4:cc:8c:de:74:d3:98:36:5b:62:73:b2:1c:d6:d6:a6:05:f7: 8b:f9:8e:36:9e:3b:b3:4e:19:23:37:d3:18:ae:43:ae:d5:1e: d1:99:b6:3e:07:c8:c9:fa:58:8b:33:cb:97:13:41:fd:56:61: 94:69:56:80:21:dd:fb:f8:ea:bd:1b:35:bd:b5:54:ca:e3:b8: 84:97:72:a0:85:d8:2f:f8:f8:00:7f:48:fe:76:37:7c:21:9b: 8a:ee:8d:c2:c3:f4:ff:23:cc:59:7e:71:49:ac:1c:82:8a:a3: 2a:1b:df:3b:fa:6d:66:26:bd:37:28:97:41:52:ad:96:21:ce: 7d:a3:03:39 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDExMjIw NTUxMDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlDNkM2RTdGQjE2ODhF MEY2RjYzMTMyRDhGREIxNzI2OTUwOTk5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7Dzg4Ax8pgav3sXorGKOdSuQyc990+KGyGimLU8oCdLkLw9od VhCJoKddepVWd4PpuP/1cEqsJPJmSTwtaypYqrvB4AObS2Hb1myMwR4uNVWbVbb2 3Oke6TSjrKBX7Iye7qtiCotVp4sfm4TQPHP4wfR5588scQXKOYzDjDpLSvU1vbtd QhQIORu5cH327wCQiQhyPzCsinYVuzDFJWx50Oq0X+BOKAEjIz4dtQlOyarP8pGx Yq5mYZjkbKdUKNZO/IuRSrGu6DKdc1bKrfSU+0ssKbE6AOay7OAXYYMfsTOsoub7 HuWZqiyuCwusD4QG+moq3gv3d9ll+FM+gP13AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUnGxuf7Fojg9vYxMtj9sXJpUJmSAwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvU1JITGJWUkxPMmtG VXlsa3lPR2tjcjNMd21jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKuqr7Z8VBiTRV7GPSbjGE+JW9JRLbRviIGEJeyqxQyUn5jn0IOsH/wdqYgT 5MhYomWexLeyg8cE1mwRgQEmlF7dGqweuz4YyBSaDIcV5A0dtJSGsWuhj9AVTbxu h5GymhhaqQHmJh/0aylHlm8AnfxYKCI/kfhtDetbnVXhU9TMjN5005g2W2JzshzW 1qYF94v5jjaeO7NOGSM30xiuQ67VHtGZtj4HyMn6WIszy5cTQf1WYZRpVoAh3fv4 6r0bNb21VMrjuISXcqCF2C/4+AB/SP52N3whm4rujcLD9P8jzFl+cUmsHIKKoyob 3zv6bWYmvTcol0FSrZYhzn2jAzk= -----END CERTIFICATE-----Generated at Fri Nov 22 09:32:42 2024 by rpki-client on console-fra.rpki-client.org