$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft File: Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft (raw, json) Hash identifier: pKURcx4eMzzXBudOPwhF1L1IFqhJcuscEaZGKNMjN0w= Subject key identifier: DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59 Authority key identifier: 45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7 Certificate issuer: /CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7 Certificate serial: 0274 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft Manifest number: 0273 Signing time: Fri 22 Nov 2024 15:23:56 +0000 Manifest this update: Fri 22 Nov 2024 15:23:56 +0000 Manifest next update: Fri 22 Nov 2024 21:23:56 +0000 Files and hashes: 1: Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl (hash: St6paHZFyT5jxCcRixcT3h0tUFCic89k3oAyuHmhbc8=) 2: rGX-jlWmT5UXNDCJbyr29sYL8j0.roa (hash: SC8327IqDeIkUpm5PLMYz5uE5ihFgGUKeXxDbb+NB5c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7 Validity Not Before: Nov 22 15:23:56 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DBD804ECB5B5B7C6D35D7864957AB30CB3756959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:90:4d:ec:7d:11:9a:79:e8:9d:22:fa:8b: ee:d3:e5:be:21:46:76:b6:55:d3:66:c2:01:85:63: 97:ea:fc:c6:b8:d8:cf:30:9e:6a:c4:00:2d:e6:99: a0:21:9f:ab:b6:ca:03:c6:56:32:70:12:32:1a:db: 8a:8e:7c:91:8f:9e:1f:c8:e7:9b:e4:c7:8c:a7:69: 3f:9a:9a:7f:bc:69:81:2f:ad:0c:4f:94:86:70:62: d7:8b:2e:f5:88:46:f1:19:4f:0c:49:40:05:9d:47: 2e:d3:22:b6:f4:2c:b3:4c:8e:5e:d9:18:af:ad:81: 75:33:0a:9c:8a:df:16:8b:99:6c:7d:cb:19:07:80: 45:79:33:28:f5:b6:2f:10:2c:da:d9:8f:80:8e:05: cb:79:40:88:fd:d5:3a:2b:62:68:eb:bc:87:88:e3: fa:bf:a2:76:f1:38:63:2e:c0:3f:e7:b1:82:db:52: cf:68:db:56:0c:92:7a:95:a3:9a:69:f9:90:45:f9: 8c:3f:8b:88:61:7e:40:fa:55:5b:57:b5:71:7c:d6: 4a:05:bd:c1:85:42:b3:69:74:6f:d8:e6:da:14:fb: f8:41:67:3f:1d:1b:4c:b4:bc:66:2e:88:85:63:ba: 36:ae:bd:1f:a9:03:8b:8e:d2:08:cf:35:3d:80:3c: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59 X509v3 Authority Key Identifier: keyid:45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:47:59:92:a0:cd:02:79:f3:cf:2a:34:e7:5f:85:b3:26:cf: 1c:63:1f:75:d8:b9:c0:e3:99:26:b1:03:2a:aa:0b:45:5f:17: 73:75:3a:a3:4e:6f:22:fb:7b:e3:fe:fa:57:ca:5a:bd:6f:69: 3f:e9:93:2f:87:83:db:d2:97:64:7a:34:c4:a1:1b:c4:67:3c: aa:ec:74:d5:b1:ac:53:df:13:8d:86:46:dc:ad:0d:ee:1e:09: 26:2c:2b:b0:7a:e0:99:75:96:98:a6:61:a4:64:27:4c:e1:98: 4e:20:9f:ac:65:14:e4:1f:05:b1:9a:02:ac:0a:f6:f9:8b:07: 4a:f3:8a:61:9a:44:38:9e:66:75:96:1b:c6:9c:cf:b4:7f:b5: 34:e1:0a:b4:e5:64:59:4d:96:d4:5a:84:50:e8:87:2e:6a:86: 26:74:97:82:eb:93:3e:e4:95:32:ea:53:68:46:cb:9f:8c:8f: 6f:02:0d:32:b4:6b:9b:0b:6d:3d:89:b3:1b:45:42:a4:08:00: 3c:47:11:f0:85:bc:91:4a:47:12:6b:9c:ec:df:1d:f1:53:ec: b8:09:90:34:6b:3e:ad:d7:e1:05:c4:2d:b1:9e:2c:d4:19:37: d1:bf:54:97:db:41:82:f8:bc:51:db:96:14:be:5a:67:ed:c0: 91:93:72:0e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDVD RjVCMjYyQTU2Rjg1MTM0QzhGRTk1RDY0REYwODlGMUI3NjJFNzAeFw0yNDExMjIx NTIzNTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERCRDgwNEVDQjVCNUI3 QzZEMzVENzg2NDk1N0FCMzBDQjM3NTY5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdHpBN7H0RmnnonSL6i+7T5b4hRna2VdNmwgGFY5fq/Ma42M8w nmrEAC3mmaAhn6u2ygPGVjJwEjIa24qOfJGPnh/I55vkx4ynaT+amn+8aYEvrQxP lIZwYteLLvWIRvEZTwxJQAWdRy7TIrb0LLNMjl7ZGK+tgXUzCpyK3xaLmWx9yxkH gEV5Myj1ti8QLNrZj4COBct5QIj91TorYmjrvIeI4/q/onbxOGMuwD/nsYLbUs9o 21YMknqVo5pp+ZBF+Yw/i4hhfkD6VVtXtXF81koFvcGFQrNpdG/Y5toU+/hBZz8d G0y0vGYuiIVjujauvR+pA4uO0gjPNT2APFVhAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU29gE7LW1t8bTXXhklXqzDLN1aVkwHwYDVR0jBBgwFoAURc9bJipW+FE0yP6V 1k3wifG3YucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE4 Ny9SYzliSmlwVy1GRTB5UDZWMWszd2lmRzNZdWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JjOWJKaXBXLUZFMHlQNlYxazN3aWZHM1l1Yy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxODcvUmM5YkppcFctRkUw eVA2VjFrM3dpZkczWXVjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFBHWZKgzQJ5888qNOdfhbMmzxxjH3XYucDjmSaxAyqqC0VfF3N1OqNObyL7 e+P++lfKWr1vaT/pky+Hg9vSl2R6NMShG8RnPKrsdNWxrFPfE42GRtytDe4eCSYs K7B64Jl1lpimYaRkJ0zhmE4gn6xlFOQfBbGaAqwK9vmLB0rzimGaRDieZnWWG8ac z7R/tTThCrTlZFlNltRahFDohy5qhiZ0l4Lrkz7klTLqU2hGy5+Mj28CDTK0a5sL bT2JsxtFQqQIADxHEfCFvJFKRxJrnOzfHfFT7LgJkDRrPq3X4QXELbGeLNQZN9G/ VJfbQYL4vFHblhS+WmftwJGTcg4= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:42 2024 by rpki-client on console-ams.rpki-client.org