$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft File: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft (raw, json) Hash identifier: mJE2WIfBVvfVdMYYHvQ2d3ICoDcVEXD1jkyhotNaU4Y= Subject key identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1 Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Certificate serial: 199C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft Manifest number: 198C Signing time: Fri 27 Sep 2024 17:52:36 +0000 Manifest this update: Fri 27 Sep 2024 17:52:36 +0000 Manifest next update: Fri 27 Sep 2024 23:52:36 +0000 Files and hashes: 1: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl (hash: q6gnP+RKU7RDPLDNEQ/tEULaWyHnLd7cmCU/Bwqv2v4=) 2: EOnupcvtCMAK5OxIY4h4mWkyjzw.roa (hash: fiIIAwLLrgOkYfmjaRRf+etedHxjFxYKrT1AXkBeG4U=) 3: VH8awNGkt8Q8uZAvg8-izyTVHLM.roa (hash: sQc5umNmOnO0GLJxj1aR5vLHHvrzmr9tngeVXjSsjcc=) 4: sp_XY7K5BQY6jBo-0H97ioeGzXU.roa (hash: zEt5fauDwgCZPiZ0CxExZORg8rf4bRihuLQGnWmfUdo=) 5: wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa (hash: aCqIRJyc+3BwxvglqHW/KaXOCMDVU2ElRHQfOy6as8M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 23:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6556 (0x199c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Validity Not Before: Sep 27 17:52:36 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1794218645C7CCC4535A9526D8E2540877324BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:34:6d:ce:47:f1:95:a2:61:f6:f5:f5:c1: 65:10:2c:cd:2c:2c:92:49:21:25:4f:88:4d:68:34: ae:ae:de:64:4b:2a:6b:c1:d5:6e:a6:80:0e:4e:01: 66:ff:de:82:b5:99:11:9f:2b:e7:38:e7:29:0d:d3: 3f:6b:a7:71:c3:1f:8a:c3:41:9d:a8:d3:14:15:70: 0e:02:fb:99:5e:8d:01:50:4f:76:11:b6:0e:1d:ff: dd:05:89:97:b2:57:89:c1:ef:0f:e0:ef:b1:25:19: c4:5f:79:ac:45:ed:6f:c6:f2:a5:2a:45:ce:bb:5f: a0:b0:9b:9f:ce:39:58:c0:c5:49:2e:7b:07:f9:39: d2:06:b1:75:6e:a4:f4:b3:a2:e4:69:e7:1c:92:29: fd:8d:8e:56:d2:da:f9:b5:6d:8f:36:f2:2a:8b:da: fd:c0:eb:c9:b8:14:c4:b4:df:d9:a1:1b:c8:e2:4f: 52:aa:90:6f:af:aa:aa:87:4f:01:e8:5c:29:98:3a: 24:82:10:3b:82:c0:b9:89:c6:67:93:51:1a:2c:00: 4b:55:2e:44:d3:38:a2:8a:72:95:e0:0c:3f:e0:ef: da:d3:4a:65:a6:7e:c8:68:9b:82:ea:86:f5:3c:ed: 97:f2:db:e4:07:de:22:11:f8:72:5b:62:14:f4:60: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1 X509v3 Authority Key Identifier: keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b0:6e:b3:f6:e0:f0:6e:a6:3c:94:80:c0:f5:67:62:65:8d: bd:7a:60:d5:d1:9e:42:ed:56:ae:b4:ee:84:b8:5b:2d:6d:48: ad:4e:bd:c9:70:a3:30:82:7f:59:dd:b5:97:1b:dc:26:51:fe: 48:56:bb:63:3a:2e:5e:3f:0e:ec:84:41:c0:c7:3d:37:fd:94: 4c:c6:7f:31:48:39:60:d0:cb:a2:9f:9a:2b:c9:3d:c1:17:f1: 67:2b:24:42:2e:60:7f:6a:1d:15:be:d6:26:01:dc:1a:55:ec: 31:d5:72:2d:3b:86:e3:37:3c:3b:97:44:dc:b7:49:96:98:a7: 05:1d:1a:07:22:45:af:3d:82:2a:28:b1:7f:83:24:89:6f:d9: 4a:58:f8:4e:c9:6a:37:45:4f:2d:f6:e9:6e:3e:45:51:10:c6: f1:ef:e0:48:ed:1b:38:bc:7e:5c:44:de:1e:0a:b2:4e:3e:fe: cb:d6:eb:d9:2a:ae:82:bd:3f:c1:77:23:d4:93:4f:6f:ca:f6: 5e:4c:94:f1:27:e2:a9:4e:2d:32:7c:ca:25:3a:14:5e:60:c0: 65:85:5e:2d:80:ba:f9:da:43:af:31:73:46:59:44:87:4c:1d: 36:51:ba:b5:29:fb:78:7d:2a:bd:22:25:70:77:a6:bb:08:e3: 43:94:80:8e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGZwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjZE NUFGMjE5NTlCN0Y5QzFCMjMwRDcyNTg5OEYxMTFBQUEzRjlBRTAeFw0yNDA5Mjcx NzUyMzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE3OTQyMTg2NDVDN0ND QzQ1MzVBOTUyNkQ4RTI1NDA4NzczMjRCRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvrDRtzkfxlaJh9vX1wWUQLM0sLJJJISVPiE1oNK6u3mRLKmvB 1W6mgA5OAWb/3oK1mRGfK+c45ykN0z9rp3HDH4rDQZ2o0xQVcA4C+5lejQFQT3YR tg4d/90FiZeyV4nB7w/g77ElGcRfeaxF7W/G8qUqRc67X6Cwm5/OOVjAxUkuewf5 OdIGsXVupPSzouRp5xySKf2NjlbS2vm1bY828iqL2v3A68m4FMS039mhG8jiT1Kq kG+vqqqHTwHoXCmYOiSCEDuCwLmJxmeTURosAEtVLkTTOKKKcpXgDD/g79rTSmWm fshom4LqhvU87Zfy2+QH3iIR+HJbYhT0YCEZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUF5QhhkXHzMRTWpUm2OJUCHcyS9EwHwYDVR0jBBgwFoAU9tWvIZWbf5wbIw1y WJjxEaqj+a4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky Lzl0V3ZJWldiZjV3Ykl3MXlXSmp4RWFxai1hNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXRXdklaV2JmNXdiSXcxeVdKanhFYXFqLWE0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyLzl0V3ZJWldiZjV3Ykl3 MXlXSmp4RWFxai1hNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASsG6z9uDwbqY8lIDA9WdiZY29emDV0Z5C7VautO6EuFstbUitTr3JcKMwgn9Z 3bWXG9wmUf5IVrtjOi5ePw7shEHAxz03/ZRMxn8xSDlg0Muin5oryT3BF/FnKyRC LmB/ah0VvtYmAdwaVewx1XItO4bjNzw7l0Tct0mWmKcFHRoHIkWvPYIqKLF/gySJ b9lKWPhOyWo3RU8t9uluPkVREMbx7+BI7Rs4vH5cRN4eCrJOPv7L1uvZKq6CvT/B dyPUk09vyvZeTJTxJ+KpTi0yfMolOhReYMBlhV4tgLr52kOvMXNGWUSHTB02Ubq1 Kft4fSq9IiVwd6a7CONDlICO -----END CERTIFICATE-----Generated at Fri Sep 27 18:47:13 2024 by rpki-client on console-fra.rpki-client.org