$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.mft File: Xo14MK3O_WYKGdfr-bRmxrl8UFU.mft (raw, json) Hash identifier: ogTKaec+GlHDqRpTkkK806RVnbp8bXMAA0gps8nxgHw= Subject key identifier: 58:7A:8F:2E:52:FB:7A:5F:E5:43:A8:8C:2C:F6:C3:F7:83:A3:74:10 Authority key identifier: 5E:8D:78:30:AD:CE:FD:66:0A:19:D7:EB:F9:B4:66:C6:B9:7C:50:55 Certificate issuer: /CN=5E8D7830ADCEFD660A19D7EBF9B466C6B97C5055 Certificate serial: 1783 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xo14MK3O_WYKGdfr-bRmxrl8UFU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.mft Manifest number: 1783 Signing time: Fri 22 Nov 2024 15:25:53 +0000 Manifest this update: Fri 22 Nov 2024 15:25:53 +0000 Manifest next update: Fri 22 Nov 2024 21:25:53 +0000 Files and hashes: 1: Xo14MK3O_WYKGdfr-bRmxrl8UFU.crl (hash: aCjzwHcDnJ5Fk+5/7f1hp0gObSBfX35DlC/EMUmMCKA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xo14MK3O_WYKGdfr-bRmxrl8UFU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6019 (0x1783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D7830ADCEFD660A19D7EBF9B466C6B97C5055 Validity Not Before: Nov 22 15:25:53 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=587A8F2E52FB7A5FE543A88C2CF6C3F783A37410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:11:7d:fe:20:3d:e8:fc:b5:81:59:5a:ae:7c: 35:17:aa:c3:1d:7d:43:c6:ae:8b:44:3f:a2:36:a7: a8:46:d2:21:5c:e4:55:58:af:55:3d:fb:36:92:8c: 74:ad:d9:41:b8:53:89:d8:aa:e4:48:30:78:9b:9d: ba:9e:53:d1:7a:7c:5e:86:6a:15:69:69:c2:98:19: 78:3b:fb:24:df:5b:82:83:d6:4d:06:e8:1b:80:60: 98:c8:47:eb:25:1e:f2:17:39:8f:81:4a:98:52:5e: 5a:6e:25:75:00:da:e2:f3:0e:fc:e7:88:db:da:28: 83:ab:31:13:e8:89:33:98:1b:dc:f1:e4:2a:ff:cb: 9b:dd:66:95:a7:e6:13:86:1d:f5:5f:e6:94:0a:f1: 51:a4:2f:dd:54:ba:dd:df:4c:ea:a3:e2:f0:1b:73: d1:66:a3:c3:b7:77:30:b4:19:25:8b:bb:14:04:94: 9c:4d:a5:03:7f:02:60:67:5d:64:1d:a1:cd:56:ef: 31:39:94:dd:26:a2:a1:95:00:1a:74:a9:48:45:7d: ca:c6:5e:63:e3:97:e3:79:6a:0d:3c:ef:f5:bf:48: 00:c2:1a:97:87:12:88:1e:a0:84:a7:98:b9:29:14: 6a:d7:f7:dc:29:7a:7b:e6:dc:49:e1:05:20:eb:f3: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7A:8F:2E:52:FB:7A:5F:E5:43:A8:8C:2C:F6:C3:F7:83:A3:74:10 X509v3 Authority Key Identifier: keyid:5E:8D:78:30:AD:CE:FD:66:0A:19:D7:EB:F9:B4:66:C6:B9:7C:50:55 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xo14MK3O_WYKGdfr-bRmxrl8UFU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/Xo14MK3O_WYKGdfr-bRmxrl8UFU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f1:31:8b:71:36:e3:31:a7:6d:ec:31:23:9a:f7:26:b7:36: ba:8d:df:37:a1:8d:ff:2a:95:d9:89:ef:90:c5:d0:55:55:dd: 5b:1e:c8:a4:ce:98:af:b4:45:97:e9:43:7a:3f:fa:8a:5e:7a: a2:67:6f:de:c5:59:11:e1:6d:42:9c:bb:fd:ce:cc:81:e9:80: e6:ef:52:c9:8f:df:f5:80:83:73:15:10:49:ab:c4:03:9d:50: 57:82:29:b5:c9:6f:d9:2d:df:cc:8d:7c:8e:49:61:ca:fd:cb: 99:01:9d:69:9f:e7:b9:a3:63:bb:2a:f7:4f:83:6b:85:0e:33: 4f:a8:28:97:4e:75:eb:22:fb:f2:d3:d5:94:0d:ad:c1:c5:37: c8:84:da:ab:16:fd:e9:b0:b5:fe:bc:18:74:c9:33:14:47:f1: 33:35:e9:5e:e9:36:87:05:45:e0:7b:20:5a:0d:93:c7:ad:2a: 6a:9b:07:7b:b5:c5:ac:f9:2f:93:4b:9b:61:cd:ea:06:8c:df: b3:7f:da:ce:9b:db:67:39:e7:15:f5:e8:f5:33:cd:85:df:cc: 4b:e0:f0:69:99:68:79:a3:87:dd:c8:e8:54:6f:fd:d5:f8:9e: 41:c7:04:38:ed:7c:fc:e2:42:3c:29:27:f7:18:66:83:f4:34: b3:fc:fa:ec -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICF4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUU4 RDc4MzBBRENFRkQ2NjBBMTlEN0VCRjlCNDY2QzZCOTdDNTA1NTAeFw0yNDExMjIx NTI1NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU4N0E4RjJFNTJGQjdB NUZFNTQzQTg4QzJDRjZDM0Y3ODNBMzc0MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbEX3+ID3o/LWBWVqufDUXqsMdfUPGrotEP6I2p6hG0iFc5FVY r1U9+zaSjHSt2UG4U4nYquRIMHibnbqeU9F6fF6GahVpacKYGXg7+yTfW4KD1k0G 6BuAYJjIR+slHvIXOY+BSphSXlpuJXUA2uLzDvzniNvaKIOrMRPoiTOYG9zx5Cr/ y5vdZpWn5hOGHfVf5pQK8VGkL91Uut3fTOqj4vAbc9Fmo8O3dzC0GSWLuxQElJxN pQN/AmBnXWQdoc1W7zE5lN0moqGVABp0qUhFfcrGXmPjl+N5ag087/W/SADCGpeH EogeoISnmLkpFGrX99wpenvm3EnhBSDr87cxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUWHqPLlL7el/lQ6iMLPbD94OjdBAwHwYDVR0jBBgwFoAUXo14MK3O/WYKGdfr +bRmxrl8UFUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg0 Mi9YbzE0TUszT19XWUtHZGZyLWJSbXhybDhVRlUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1hvMTRNSzNPX1dZS0dkZnItYlJteHJsOFVGVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4NDIvWG8xNE1LM09fV1lL R2Rmci1iUm14cmw4VUZVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH3xMYtxNuMxp23sMSOa9ya3NrqN3zehjf8qldmJ75DF0FVV3VseyKTOmK+0 RZfpQ3o/+opeeqJnb97FWRHhbUKcu/3OzIHpgObvUsmP3/WAg3MVEEmrxAOdUFeC KbXJb9kt38yNfI5JYcr9y5kBnWmf57mjY7sq90+Da4UOM0+oKJdOdesi+/LT1ZQN rcHFN8iE2qsW/emwtf68GHTJMxRH8TM16V7pNocFReB7IFoNk8etKmqbB3u1xaz5 L5NLm2HN6gaM37N/2s6b22c55xX16PUzzYXfzEvg8GmZaHmjh93I6FRv/dX4nkHH BDjtfPziQjwpJ/cYZoP0NLP8+uw= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:42 2024 by rpki-client on console-ams.rpki-client.org