$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft File: 6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft (raw, json) Hash identifier: n98SgEGumIyDqJAvJoktHKEYbdfPzoUVMWrPgF50LYA= Subject key identifier: 95:04:C6:72:57:F7:D1:E8:BD:CA:CE:86:67:6A:E2:6E:D0:1C:E8:D0 Authority key identifier: E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53 Certificate issuer: /CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53 Certificate serial: 1C5F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft Manifest number: 1C5A Signing time: Fri 22 Nov 2024 15:24:14 +0000 Manifest this update: Fri 22 Nov 2024 15:24:14 +0000 Manifest next update: Fri 22 Nov 2024 21:24:14 +0000 Files and hashes: 1: 6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl (hash: z4C3HogkqHtmTko5s9A1Ey/4fuz2D7Tc+d/9ZhYo2zc=) 2: hbtBkv7Ldz4-Uzd8orATr6lvH5c.roa (hash: Xu3JhRoRGaYJa17fR0G8cWnAkny2NsbMcw9/I5GDiWA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7263 (0x1c5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53 Validity Not Before: Nov 22 15:24:14 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9504C67257F7D1E8BDCACE86676AE26ED01CE8D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:c2:38:5d:ef:6d:62:88:61:35:41:9f:07: 3c:dd:f7:29:98:e8:22:b1:85:65:c7:87:ef:98:d6: 59:a4:a2:d1:21:11:87:29:f4:f8:94:fe:f5:63:c9: ba:43:50:68:2d:ea:38:3d:15:9d:a2:52:09:7d:50: a2:d4:89:9a:f5:42:a9:d0:6d:7a:3d:eb:89:cb:b9: 27:4e:c8:3e:2b:31:d3:e0:d8:94:68:29:ec:45:e9: e3:26:33:6b:4b:14:c2:4e:81:27:e4:60:ea:24:23: bb:40:cc:6d:b5:fa:cd:db:53:06:64:ae:92:40:04: 6f:68:c3:58:f5:be:50:a4:af:63:e7:97:ea:60:34: 10:e3:36:45:10:98:a2:d0:08:6c:d5:e7:1c:2d:b3: 77:d0:40:6e:e8:91:2a:c4:f8:71:ae:21:f4:39:25: 2a:91:f2:18:31:7c:04:cf:5a:19:09:50:6d:50:22: 9b:9d:d5:93:01:74:a3:51:c8:90:00:2d:87:9f:0c: 66:34:c8:33:bf:6c:1f:a6:fd:4e:fb:29:9c:7c:26: 9b:80:71:75:05:a8:ea:90:ce:fb:32:37:f2:16:34: b0:aa:db:2a:a7:a9:ab:f5:6c:a4:10:4f:80:45:1b: 64:e3:8b:78:18:0d:03:ba:58:e2:cc:be:b7:c6:42: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:04:C6:72:57:F7:D1:E8:BD:CA:CE:86:67:6A:E2:6E:D0:1C:E8:D0 X509v3 Authority Key Identifier: keyid:E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9f:f5:76:6a:db:45:33:8c:c6:0e:d5:30:d1:d8:67:2a:7f: c9:2d:8d:60:bc:7d:fa:fc:01:7d:de:24:99:3f:1b:64:76:f0: 18:09:2b:1c:b6:eb:b1:1d:37:11:4a:5d:bd:cf:98:3b:22:8b: 91:94:50:67:c0:8b:ac:43:b0:0b:3b:9a:7a:5d:d4:62:6e:f3: 4f:29:fd:3d:50:9d:5d:2e:06:6d:69:9b:45:30:f8:c7:04:2d: 84:48:33:b5:66:3b:e5:23:fa:88:24:f8:77:9b:f4:0a:ad:c7: b5:38:bf:5e:80:47:0c:32:eb:c4:6e:62:85:4d:83:6f:3b:c9: e2:d3:86:45:cb:fe:c2:68:23:24:92:71:fb:27:c2:77:55:08: 4e:ab:9b:03:32:72:cd:cb:3b:df:8f:fd:4a:56:06:f9:a1:18: 6d:6b:a4:75:b8:98:f0:5c:3c:7d:f5:80:32:28:b8:1d:4e:8e: 63:f7:2a:7a:ec:be:1a:84:73:ef:aa:e4:4c:48:11:ab:23:2c: 9b:a2:b0:2d:3d:c1:95:9c:f9:cb:d7:21:58:27:b8:58:c9:c7: 5a:0f:d6:18:c4:69:39:87:92:40:6a:a0:5d:ed:ed:12:05:8d: a7:7e:35:59:d8:f7:c4:66:83:27:5b:78:43:53:6b:16:27:91: 3e:5b:66:64 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTgy Mjg3QkI1NkZBQzhFNjc1M0FCREUzNkIzQjZBOTM5Q0I1OUE1MzAeFw0yNDExMjIx NTI0MTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk1MDRDNjcyNTdGN0Qx RThCRENBQ0U4NjY3NkFFMjZFRDAxQ0U4RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWo8I4Xe9tYohhNUGfBzzd9ymY6CKxhWXHh++Y1lmkotEhEYcp 9PiU/vVjybpDUGgt6jg9FZ2iUgl9UKLUiZr1QqnQbXo964nLuSdOyD4rMdPg2JRo KexF6eMmM2tLFMJOgSfkYOokI7tAzG21+s3bUwZkrpJABG9ow1j1vlCkr2Pnl+pg NBDjNkUQmKLQCGzV5xwts3fQQG7okSrE+HGuIfQ5JSqR8hgxfATPWhkJUG1QIpud 1ZMBdKNRyJAALYefDGY0yDO/bB+m/U77KZx8JpuAcXUFqOqQzvsyN/IWNLCq2yqn qav1bKQQT4BFG2Tji3gYDQO6WOLMvrfGQuF1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUlQTGclf30ei9ys6GZ2ribtAc6NAwHwYDVR0jBBgwFoAU6CKHu1b6yOZ1Or3j aztqk5y1mlMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjI5 MS82Q0tIdTFiNnlPWjFPcjNqYXp0cWs1eTFtbE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzZDS0h1MWI2eU9aMU9yM2phenRxazV5MW1sTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIyOTEvNkNLSHUxYjZ5T1ox T3IzamF6dHFrNXkxbWxNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGOf9XZq20UzjMYO1TDR2Gcqf8ktjWC8ffr8AX3eJJk/G2R28BgJKxy267Ed NxFKXb3PmDsii5GUUGfAi6xDsAs7mnpd1GJu808p/T1QnV0uBm1pm0Uw+McELYRI M7VmO+Uj+ogk+Heb9Aqtx7U4v16ARwwy68RuYoVNg287yeLThkXL/sJoIySScfsn wndVCE6rmwMycs3LO9+P/UpWBvmhGG1rpHW4mPBcPH31gDIouB1OjmP3KnrsvhqE c++q5ExIEasjLJuisC09wZWc+cvXIVgnuFjJx1oP1hjEaTmHkkBqoF3t7RIFjad+ NVnY98RmgydbeENTaxYnkT5bZmQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:42 2024 by rpki-client on console-ams.rpki-client.org