$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft File: Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft (raw, json) Hash identifier: WwujHqlIE3c8BaU6d99720fs9w0TtecjLQGfFZnXESk= Subject key identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 Authority key identifier: 1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A Certificate issuer: /CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Certificate serial: 1AD1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft Manifest number: 1AD1 Signing time: Fri 22 Nov 2024 13:50:40 +0000 Manifest this update: Fri 22 Nov 2024 13:50:40 +0000 Manifest next update: Fri 22 Nov 2024 19:50:40 +0000 Files and hashes: 1: Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl (hash: x/s/xaHz6R3L6iLJc3w65DCR7mWwAT5h8OU3xULZ5e0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6865 (0x1ad1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Validity Not Before: Nov 22 13:50:40 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DB081190A93335A4E93878C7856B0F9DA70C2A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:29:0c:3c:46:6f:85:b2:e2:b1:63:21:68: 78:37:d6:ca:8c:b0:f4:28:08:6a:2f:b0:56:4c:b8: ab:b8:65:6a:2e:77:ca:96:2d:4f:c4:ec:5e:56:50: 2e:f2:5f:04:cf:cd:18:d3:37:83:04:9e:78:bc:82: 4d:ed:18:62:1f:54:86:e5:f8:9d:d4:b3:c9:c0:15: e2:3b:d2:85:1c:6b:0b:bb:7c:af:4b:a0:9c:61:f2: 0d:dd:13:59:77:88:64:2d:0e:96:ef:3e:77:b3:8b: 14:a2:aa:59:fc:7b:a1:0a:ad:7e:74:a6:d7:d2:8b: 0c:ce:85:db:61:dd:bf:5b:02:a0:26:2c:a1:58:dc: e0:2c:89:65:99:c5:d9:e1:7d:02:12:0f:68:46:19: 29:fe:9b:12:f2:8d:2c:02:45:01:ac:46:59:4e:80: 02:79:18:1c:f6:fc:04:c6:5e:07:56:58:ef:89:cc: 31:5d:f6:93:59:61:8c:b5:9c:ad:ea:74:d4:33:7d: b1:50:db:51:f9:3c:b5:13:d5:30:46:72:77:f3:10: 59:04:89:dd:1b:8a:d2:5c:e2:da:fb:44:59:6d:81: 86:3c:f7:7f:0e:db:6f:83:d4:b2:2d:65:37:da:b5: 21:38:b8:15:9e:a2:69:79:d6:a1:5b:3b:78:c2:00: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 X509v3 Authority Key Identifier: keyid:1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:f8:63:3a:85:90:8a:fd:72:d2:4a:60:68:7d:f8:f4:35:d5: ee:b3:37:c8:49:de:58:ce:5e:d2:22:10:48:8d:22:44:68:43: 77:89:23:66:0d:1f:cd:91:b6:e7:93:52:0d:ef:56:82:9a:fa: 5b:5e:21:2c:1c:d1:7e:98:c8:d9:cc:59:b0:66:0f:b0:14:b2: 81:dd:fd:a1:e6:b4:3c:61:15:ec:53:11:fd:c3:08:1c:5d:35: 78:56:52:6b:3f:7e:fc:23:c5:d9:29:44:81:d7:bb:b8:dd:5e: a9:41:25:07:0f:56:df:31:33:59:de:48:63:97:b0:49:1d:29: 55:2a:05:ed:a1:13:fc:85:e8:7b:d0:5d:46:22:46:c4:49:cd: e0:79:47:db:d6:4a:62:f1:9d:4a:23:e4:68:2c:4e:fa:82:54: 7a:19:74:92:e7:bb:05:b4:d9:27:5d:bc:89:c6:45:c0:59:85: df:e9:c2:53:07:42:ab:be:bc:f9:3d:6b:a9:bf:fe:9d:70:28: e9:ac:e5:f3:14:c3:20:4d:06:a2:c9:0d:bd:f0:0c:e0:e0:87: 42:85:ad:0e:61:06:ba:ba:49:d1:fe:c2:f4:1e:21:66:c3:8d: ba:41:62:39:76:33:df:46:05:83:18:3d:ea:cd:69:82:c0:f2: 87:fb:2b:87 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUEz Q0I3MzI2NzBGRTVDRTVGMkI1QkMxRkE4MTI1RTk1Mzg2MzI3QTAeFw0yNDExMjIx MzUwNDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERCMDgxMTkwQTkzMzM1 QTRFOTM4NzhDNzg1NkIwRjlEQTcwQzJBNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9sCkMPEZvhbLisWMhaHg31sqMsPQoCGovsFZMuKu4ZWoud8qW LU/E7F5WUC7yXwTPzRjTN4MEnni8gk3tGGIfVIbl+J3Us8nAFeI70oUcawu7fK9L oJxh8g3dE1l3iGQtDpbvPnezixSiqln8e6EKrX50ptfSiwzOhdth3b9bAqAmLKFY 3OAsiWWZxdnhfQISD2hGGSn+mxLyjSwCRQGsRllOgAJ5GBz2/ATGXgdWWO+JzDFd 9pNZYYy1nK3qdNQzfbFQ21H5PLUT1TBGcnfzEFkEid0bitJc4tr7RFltgYY8938O 22+D1LItZTfatSE4uBWeoml51qFbO3jCAPZlAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU2wgRkKkzNaTpOHjHhWsPnacMKlMwHwYDVR0jBBgwFoAUGjy3MmcP5c5fK1vB +oEl6VOGMnowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1 L0dqeTNNbWNQNWM1ZksxdkItb0VsNlZPR01uby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvR2p5M01tY1A1YzVmSzF2Qi1vRWw2Vk9HTW5vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1L0dqeTNNbWNQNWM1Zksx dkItb0VsNlZPR01uby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDL+GM6hZCK/XLSSmBoffj0NdXuszfISd5Yzl7SIhBIjSJEaEN3iSNmDR/Nkbbn k1IN71aCmvpbXiEsHNF+mMjZzFmwZg+wFLKB3f2h5rQ8YRXsUxH9wwgcXTV4VlJr P378I8XZKUSB17u43V6pQSUHD1bfMTNZ3khjl7BJHSlVKgXtoRP8heh70F1GIkbE Sc3geUfb1kpi8Z1KI+RoLE76glR6GXSS57sFtNknXbyJxkXAWYXf6cJTB0Krvrz5 PWupv/6dcCjprOXzFMMgTQaiyQ298Azg4IdCha0OYQa6uknR/sL0HiFmw426QWI5 djPfRgWDGD3qzWmCwPKH+yuH -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:37 2024 by rpki-client on console-fra.rpki-client.org