$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft File: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft (raw, json) Hash identifier: T999YsMESl5IBOvP1ahPVac4iUQISt+CLzE9sQrpVR4= Subject key identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1 Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Certificate serial: 1AAF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft Manifest number: 1A9F Signing time: Fri 22 Nov 2024 15:25:28 +0000 Manifest this update: Fri 22 Nov 2024 15:25:28 +0000 Manifest next update: Fri 22 Nov 2024 21:25:28 +0000 Files and hashes: 1: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl (hash: iGaUANObF+E/uofi6JRXnCVSr7yv9RloqpHVID9SBXM=) 2: EOnupcvtCMAK5OxIY4h4mWkyjzw.roa (hash: fiIIAwLLrgOkYfmjaRRf+etedHxjFxYKrT1AXkBeG4U=) 3: VH8awNGkt8Q8uZAvg8-izyTVHLM.roa (hash: sQc5umNmOnO0GLJxj1aR5vLHHvrzmr9tngeVXjSsjcc=) 4: sp_XY7K5BQY6jBo-0H97ioeGzXU.roa (hash: zEt5fauDwgCZPiZ0CxExZORg8rf4bRihuLQGnWmfUdo=) 5: wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa (hash: aCqIRJyc+3BwxvglqHW/KaXOCMDVU2ElRHQfOy6as8M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6831 (0x1aaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Validity Not Before: Nov 22 15:25:28 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1794218645C7CCC4535A9526D8E2540877324BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:34:6d:ce:47:f1:95:a2:61:f6:f5:f5:c1: 65:10:2c:cd:2c:2c:92:49:21:25:4f:88:4d:68:34: ae:ae:de:64:4b:2a:6b:c1:d5:6e:a6:80:0e:4e:01: 66:ff:de:82:b5:99:11:9f:2b:e7:38:e7:29:0d:d3: 3f:6b:a7:71:c3:1f:8a:c3:41:9d:a8:d3:14:15:70: 0e:02:fb:99:5e:8d:01:50:4f:76:11:b6:0e:1d:ff: dd:05:89:97:b2:57:89:c1:ef:0f:e0:ef:b1:25:19: c4:5f:79:ac:45:ed:6f:c6:f2:a5:2a:45:ce:bb:5f: a0:b0:9b:9f:ce:39:58:c0:c5:49:2e:7b:07:f9:39: d2:06:b1:75:6e:a4:f4:b3:a2:e4:69:e7:1c:92:29: fd:8d:8e:56:d2:da:f9:b5:6d:8f:36:f2:2a:8b:da: fd:c0:eb:c9:b8:14:c4:b4:df:d9:a1:1b:c8:e2:4f: 52:aa:90:6f:af:aa:aa:87:4f:01:e8:5c:29:98:3a: 24:82:10:3b:82:c0:b9:89:c6:67:93:51:1a:2c:00: 4b:55:2e:44:d3:38:a2:8a:72:95:e0:0c:3f:e0:ef: da:d3:4a:65:a6:7e:c8:68:9b:82:ea:86:f5:3c:ed: 97:f2:db:e4:07:de:22:11:f8:72:5b:62:14:f4:60: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1 X509v3 Authority Key Identifier: keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:11:94:e2:65:f7:7a:65:1a:a9:f6:91:36:92:a8:50:95:7e: 59:62:02:56:dd:67:ca:85:ed:59:bc:02:4d:ee:43:1c:41:5e: 87:3a:65:c2:b1:b3:2a:27:a3:be:42:11:60:f2:71:8b:fa:74: 85:cd:5f:05:bd:70:e5:5c:23:95:fd:47:5c:fb:0b:fc:1a:31: 4e:84:ae:47:f0:d5:df:62:93:14:18:9a:59:4b:f1:99:5b:0b: 9a:c8:e6:0b:d4:0b:3d:38:22:0f:fa:f1:d4:ae:60:10:76:18: 2f:dc:22:6a:66:36:34:36:d3:32:e7:2c:ce:79:98:e5:f0:3f: ef:1b:bb:38:08:c8:14:d8:87:cd:24:d9:66:4b:9c:2c:d7:82: 6e:b8:d3:f3:b9:07:24:2e:d1:f4:4f:89:72:04:12:fa:ff:4f: a0:46:e3:e4:21:ee:df:cc:80:e5:1d:00:32:a0:0f:e2:80:10: 1f:a8:ea:9d:05:dc:cd:52:90:29:56:8a:c8:08:b8:d7:df:66: ba:dd:3e:14:08:e8:d3:69:17:26:ed:5a:9d:27:5d:2f:88:74: 5b:02:96:56:49:e9:ed:86:f9:b4:dd:fc:8b:3c:81:13:07:2d: 44:64:93:e3:9c:24:ea:94:19:cb:24:98:c3:1a:b1:e7:ed:db: 8f:6f:05:3e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjZE NUFGMjE5NTlCN0Y5QzFCMjMwRDcyNTg5OEYxMTFBQUEzRjlBRTAeFw0yNDExMjIx NTI1MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE3OTQyMTg2NDVDN0ND QzQ1MzVBOTUyNkQ4RTI1NDA4NzczMjRCRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvrDRtzkfxlaJh9vX1wWUQLM0sLJJJISVPiE1oNK6u3mRLKmvB 1W6mgA5OAWb/3oK1mRGfK+c45ykN0z9rp3HDH4rDQZ2o0xQVcA4C+5lejQFQT3YR tg4d/90FiZeyV4nB7w/g77ElGcRfeaxF7W/G8qUqRc67X6Cwm5/OOVjAxUkuewf5 OdIGsXVupPSzouRp5xySKf2NjlbS2vm1bY828iqL2v3A68m4FMS039mhG8jiT1Kq kG+vqqqHTwHoXCmYOiSCEDuCwLmJxmeTURosAEtVLkTTOKKKcpXgDD/g79rTSmWm fshom4LqhvU87Zfy2+QH3iIR+HJbYhT0YCEZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUF5QhhkXHzMRTWpUm2OJUCHcyS9EwHwYDVR0jBBgwFoAU9tWvIZWbf5wbIw1y WJjxEaqj+a4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky Lzl0V3ZJWldiZjV3Ykl3MXlXSmp4RWFxai1hNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXRXdklaV2JmNXdiSXcxeVdKanhFYXFqLWE0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyLzl0V3ZJWldiZjV3Ykl3 MXlXSmp4RWFxai1hNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAeEZTiZfd6ZRqp9pE2kqhQlX5ZYgJW3WfKhe1ZvAJN7kMcQV6HOmXCsbMqJ6O+ QhFg8nGL+nSFzV8FvXDlXCOV/Udc+wv8GjFOhK5H8NXfYpMUGJpZS/GZWwuayOYL 1As9OCIP+vHUrmAQdhgv3CJqZjY0NtMy5yzOeZjl8D/vG7s4CMgU2IfNJNlmS5ws 14JuuNPzuQckLtH0T4lyBBL6/0+gRuPkIe7fzIDlHQAyoA/igBAfqOqdBdzNUpAp VorICLjX32a63T4UCOjTaRcm7VqdJ10viHRbApZWSenthvm03fyLPIETBy1EZJPj nCTqlBnLJJjDGrHn7duPbwU+ -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:39 2024 by rpki-client on console-fra.rpki-client.org