$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft File: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft (raw, json) Hash identifier: aVV6d2bPzM8UlbYjHROpTxwpEuA+ctOLhPJQVlJlvBI= Subject key identifier: 33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53 Certificate serial: 4C09 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft Manifest number: 4BFC Signing time: Fri 22 Nov 2024 10:21:53 +0000 Manifest this update: Fri 22 Nov 2024 10:21:53 +0000 Manifest next update: Fri 22 Nov 2024 16:21:53 +0000 Files and hashes: 1: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl (hash: 5q+nll8RH6x8zYoMHzb1k7F2bRQae2H4qsTMDnw3Pyg=) 2: Dda1ORCU2_NRmawDQ95QYagO1-g.roa (hash: HDFHBOwUGh5p+Tl1qSvZ6ShpFv1JqorTkzI8IXMu/Ns=) 3: ECubqOJ0Nbgz9GzRt_mG6Crbxjw.roa (hash: B/DSRwSSaZLffjLzyunUGY6agZRG8qb5OZJR6SeKp08=) 4: JQh0YI1zlwjxJib2fxbt31XPM30.roa (hash: FhQhq4wFLmGrLGvzg9ibXbdanVTTSgBvjiIGrXPQfR8=) 5: ODRAR04nY1r69_eFMBmJQr5Rs_Q.roa (hash: CbMW/Zj94wzq5OS5Dfli8zwBWxJv6wPZ2iqacgZNzHc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19465 (0x4c09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53 Validity Not Before: Nov 22 10:21:53 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=339CE041528F9C61F954C6F0EBB8166EFB62E93A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e6:45:9a:5e:6f:d5:e6:df:34:4a:eb:9c:c4: 81:f4:30:d4:e4:49:ab:f8:bc:e5:31:7c:db:aa:97: 31:91:30:9f:12:80:99:cb:5a:5f:c4:27:6b:ff:98: 04:b1:a1:72:03:32:10:d4:8a:4f:15:6c:f9:a6:dc: e9:7a:3c:4b:e9:3f:4a:06:90:33:ef:9a:76:36:87: 12:62:7d:94:07:fa:4e:d0:ee:c4:f5:00:b7:90:55: aa:a5:79:23:32:36:02:0b:f3:98:c3:7c:fc:2e:90: d3:c6:f4:e8:93:b7:f3:54:84:b1:ea:58:82:f0:9d: 6b:10:91:18:df:67:81:8b:c7:2c:6f:51:8d:b8:35: cd:29:e7:09:5e:91:3b:4c:33:9a:3b:96:08:6d:96: a1:0d:00:d2:27:04:6c:d1:1f:40:8a:7c:4f:c0:a8: 92:65:1c:41:32:41:37:bc:67:f4:6c:10:94:51:b1: 07:be:ec:21:57:6a:0e:4d:ac:26:1f:aa:c5:19:11: f3:1a:8b:28:f7:a0:67:25:b5:b5:62:fa:14:9f:5c: fe:ab:b5:25:c0:eb:c0:f4:c2:57:0f:14:82:e9:7f: 2b:b8:97:cd:4e:3e:53:b5:d8:2c:a2:6d:73:69:3f: 5f:56:4a:94:3b:d3:ff:b7:ff:9f:8f:d8:94:9b:d1: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A X509v3 Authority Key Identifier: keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:0e:05:00:c1:fd:91:f6:8c:f4:25:f4:87:ab:a1:9a:3a:66: f7:41:8f:62:61:cb:1a:7e:ff:e5:e2:e7:b8:c9:48:e1:1c:9a: 1c:55:c7:61:ea:ae:a2:db:4f:77:d7:7a:f5:11:b1:10:3f:ec: 77:f6:90:40:dc:f3:af:c6:a4:ac:59:e7:42:9d:09:59:41:bf: ef:9f:ba:46:a5:8e:3f:26:f9:36:ee:40:59:ab:0a:4d:73:e3: a5:a2:65:65:13:46:e3:e6:b0:d9:c3:ae:55:a0:70:5e:1c:87: 9c:84:28:e6:3f:7a:08:af:6f:63:31:d4:28:f7:31:76:08:b4: d2:9a:ba:93:66:8c:a6:39:83:fc:e6:04:7b:eb:fe:56:8d:b8: e2:32:da:c4:71:c0:2b:d5:f4:13:81:29:b5:d6:14:8a:d1:fe: 7c:ad:36:78:d4:c8:7f:aa:a7:6d:46:02:11:e6:23:12:cc:97: 1a:40:18:07:d3:28:7b:d4:a9:6d:4f:ec:7f:c5:6b:ee:3d:84: b8:71:29:0c:dd:c9:4a:3c:56:d3:93:77:5b:c5:1b:e1:28:38: c1:1e:cd:93:e4:83:98:5b:9a:cc:3b:1a:0e:72:c8:a9:cd:76: 1f:21:61:04:0a:4c:7c:0e:0a:6e:69:c8:11:b7:56:19:ea:34: ed:78:d1:47 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICTAkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTk4 QTU5NTg2NjVGMzRBMjZBM0RDQUY5NEM2M0IzM0EwNzA1OUE1MzAeFw0yNDExMjIx MDIxNTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMzOUNFMDQxNTI4RjlD NjFGOTU0QzZGMEVCQjgxNjZFRkI2MkU5M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDo5kWaXm/V5t80SuucxIH0MNTkSav4vOUxfNuqlzGRMJ8SgJnL Wl/EJ2v/mASxoXIDMhDUik8VbPmm3Ol6PEvpP0oGkDPvmnY2hxJifZQH+k7Q7sT1 ALeQVaqleSMyNgIL85jDfPwukNPG9OiTt/NUhLHqWILwnWsQkRjfZ4GLxyxvUY24 Nc0p5wlekTtMM5o7lghtlqENANInBGzRH0CKfE/AqJJlHEEyQTe8Z/RsEJRRsQe+ 7CFXag5NrCYfqsUZEfMaiyj3oGcltbVi+hSfXP6rtSXA68D0wlcPFILpfyu4l81O PlO12CyibXNpP19WSpQ70/+3/5+P2JSb0QItAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUM5zgQVKPnGH5VMbw67gWbvti6TowHwYDVR0jBBgwFoAU6YpZWGZfNKJqPcr5 TGOzOgcFmlMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA3 NS82WXBaV0daZk5LSnFQY3I1VEdPek9nY0ZtbE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzZZcFpXR1pmTktKcVBjcjVUR096T2djRm1sTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNzUvNllwWldHWmZOS0px UGNyNVRHT3pPZ2NGbWxNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHEOBQDB/ZH2jPQl9IeroZo6ZvdBj2Jhyxp+/+Xi57jJSOEcmhxVx2HqrqLb T3fXevURsRA/7Hf2kEDc86/GpKxZ50KdCVlBv++fukaljj8m+TbuQFmrCk1z46Wi ZWUTRuPmsNnDrlWgcF4ch5yEKOY/egivb2Mx1Cj3MXYItNKaupNmjKY5g/zmBHvr /laNuOIy2sRxwCvV9BOBKbXWFIrR/nytNnjUyH+qp21GAhHmIxLMlxpAGAfTKHvU qW1P7H/Fa+49hLhxKQzdyUo8VtOTd1vFG+EoOMEezZPkg5hbmsw7Gg5yyKnNdh8h YQQKTHwOCm5pyBG3VhnqNO140Uc= -----END CERTIFICATE-----Generated at Fri Nov 22 13:38:13 2024 by rpki-client on console-fra.rpki-client.org