$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft File: LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft (raw, json) Hash identifier: FwA/dPiJGpxdSR1UQAKLQk1UaoYbN3jGzfGIbuoJ4Mo= Subject key identifier: 3B:F1:B4:C4:CC:5F:75:AE:31:36:9F:EA:60:3F:5A:F1:FE:7C:27:BB Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22 Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022 Certificate serial: 1AE7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft Manifest number: 1ACF Signing time: Fri 22 Nov 2024 15:21:50 +0000 Manifest this update: Fri 22 Nov 2024 15:21:50 +0000 Manifest next update: Fri 22 Nov 2024 21:21:50 +0000 Files and hashes: 1: 3us-F_JsOnUNdG4RYf3FYpfJNwQ.roa (hash: pEBOgYqWXhc+nxXhNk9HIe2fv9kVDZ+9q1r+CKSSLbA=) 2: 82HUZN1PHcM21yiLKlvgzUbpuiA.roa (hash: MGZdWX+vVPShvShzYQoKVrjhA0UM4EuEB1KN0/EVC7E=) 3: CC_Z3FqMOA6M40PVObkOH4049o0.roa (hash: xz54JSqVba2LEnEPB5qdOMvSXmalHq8yhSOwueIw1CI=) 4: HhDwzNoYcmkBZcMgeFEGhl5UBXU.roa (hash: 2E5RSWubIJ4gxm/oWyVOH6Xorz/DdKUwaGEN0R5cikI=) 5: LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl (hash: MiEkiwNNZjVMzzzdvvDrXPAYO8Al3g05hBnsi8gFK8c=) 6: hChTticOg_Igfh0977CJB4t0-GA.roa (hash: +naNd6MebVMszrh375bKWJPhqQbP2Am/duSbLeVK6zw=) 7: kGHFfqdiBK4HoRls2-q0DbbzdVQ.roa (hash: ZjTxb7gaI3O0GCktcPoRXER8ED06yfFT/TKIZ+ZbKyM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6887 (0x1ae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022 Validity Not Before: Nov 22 15:21:50 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3BF1B4C4CC5F75AE31369FEA603F5AF1FE7C27BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:38:4d:20:c0:de:68:1a:99:f1:0a:ca:8e: cc:17:f1:34:6d:3a:99:43:99:9d:96:9c:9a:47:63: 9d:b9:13:32:e9:79:b4:2d:0c:73:46:41:47:1a:5a: b9:97:4f:8d:99:43:04:b3:ff:53:97:ba:74:ab:f3: 58:05:53:04:5f:18:40:99:1f:40:7b:eb:42:85:91: c0:77:98:29:cf:6f:6e:63:4a:c8:fe:38:e8:32:c6: 90:49:a8:fa:34:db:24:8e:e4:a7:f2:bc:c4:52:69: 23:96:2a:82:08:88:46:75:1a:21:14:b0:9c:f7:b9: 85:75:0c:77:02:6b:16:d2:e3:5a:70:41:7b:ca:39: 3c:d6:10:71:e3:5e:ec:44:a3:1c:88:cd:6d:ec:bb: 94:f6:f8:ea:86:da:44:0a:ba:4e:f1:09:02:3e:b9: 74:14:1e:47:a4:72:db:f7:29:69:55:38:47:0b:94: 66:fd:c4:6a:79:67:89:2f:ee:76:78:d6:7a:5a:d3: 54:c6:36:a1:03:a8:f3:7f:d8:80:ec:05:75:c7:74: 15:b1:28:df:93:6f:6c:95:aa:5a:4c:e7:a7:49:53: 4e:e5:29:21:eb:e0:40:07:76:d3:8b:c8:63:80:f1: 17:50:da:9f:10:9d:80:31:0b:cb:85:fc:8b:b4:a9: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F1:B4:C4:CC:5F:75:AE:31:36:9F:EA:60:3F:5A:F1:FE:7C:27:BB X509v3 Authority Key Identifier: keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c5:a8:39:a8:a0:c7:d5:6c:ed:f2:6a:60:a4:09:6b:30:f7: a0:2a:3a:0c:58:1d:f9:13:8b:fe:8e:37:c0:f5:ed:f3:4b:77: 9c:20:bf:00:b3:87:60:6a:3e:91:e9:fe:59:bd:de:b7:d6:92: 60:55:7f:bc:3f:24:8f:ca:d7:e4:6d:1b:fa:4c:6c:13:39:24: f5:cd:01:3c:4a:8d:d6:9e:fe:e0:11:e8:05:ca:c3:44:9d:7d: 47:a9:08:f7:d0:93:52:fa:16:04:50:14:22:03:89:83:87:70: 83:c2:e8:35:61:03:80:9c:b8:d8:b8:71:74:de:1a:08:6b:d0: 07:63:f2:f8:6d:fc:d9:d6:36:c7:d9:8d:50:c5:57:9f:96:c2: f8:c7:14:d4:08:d3:5f:18:46:f6:7f:ed:93:ae:f4:50:91:15: d5:44:55:e1:9c:b0:ac:69:97:0a:67:f9:d8:f3:a1:bf:8c:70: 62:c3:df:ad:78:09:dd:8e:01:1f:23:28:bf:d8:52:ea:ee:1a: 18:47:c0:ae:41:0c:fd:c6:ab:bf:fc:46:d4:61:e2:d6:ed:08: 39:18:35:b1:ad:35:0b:3b:fc:9f:4c:e3:62:f7:5f:bf:01:41: e6:34:6e:d8:df:c8:12:93:b5:ec:8d:fc:c8:d0:8b:20:f3:ff: 5f:cb:1c:10 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGucwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF MTRGMkFDN0YwMjM4MTM3MDUyRUFBMzE1QzVCRDY0MzEzNDAyMjAeFw0yNDExMjIx NTIxNTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNCRjFCNEM0Q0M1Rjc1 QUUzMTM2OUZFQTYwM0Y1QUYxRkU3QzI3QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWGThNIMDeaBqZ8QrKjswX8TRtOplDmZ2WnJpHY525EzLpebQt DHNGQUcaWrmXT42ZQwSz/1OXunSr81gFUwRfGECZH0B760KFkcB3mCnPb25jSsj+ OOgyxpBJqPo02ySO5KfyvMRSaSOWKoIIiEZ1GiEUsJz3uYV1DHcCaxbS41pwQXvK OTzWEHHjXuxEoxyIzW3su5T2+OqG2kQKuk7xCQI+uXQUHkekctv3KWlVOEcLlGb9 xGp5Z4kv7nZ41npa01TGNqEDqPN/2IDsBXXHdBWxKN+Tb2yVqlpM56dJU07lKSHr 4EAHdtOLyGOA8RdQ2p8QnYAxC8uF/Iu0qfIbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUO/G0xMxfda4xNp/qYD9a8f58J7swHwYDVR0jBBgwFoAULeFPKsfwI4E3BS6q MVxb1kMTQCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9MZUZQS3Nmd0k0RTNCUzZxTVZ4YjFrTVRRQ0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xlRlBLc2Z3STRFM0JTNnFNVnhiMWtNVFFDSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvTGVGUEtzZndJNEUz QlM2cU1WeGIxa01UUUNJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACHFqDmooMfVbO3yamCkCWsw96AqOgxYHfkTi/6ON8D17fNLd5wgvwCzh2Bq PpHp/lm93rfWkmBVf7w/JI/K1+RtG/pMbBM5JPXNATxKjdae/uAR6AXKw0SdfUep CPfQk1L6FgRQFCIDiYOHcIPC6DVhA4CcuNi4cXTeGghr0Adj8vht/NnWNsfZjVDF V5+WwvjHFNQI018YRvZ/7ZOu9FCRFdVEVeGcsKxplwpn+djzob+McGLD3614Cd2O AR8jKL/YUuruGhhHwK5BDP3Gq7/8RtRh4tbtCDkYNbGtNQs7/J9M42L3X78BQeY0 btjfyBKTteyN/MjQiyDz/1/LHBA= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:42 2024 by rpki-client on console-ams.rpki-client.org