$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft File: UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft (raw, json) Hash identifier: glN/LxmNmgiRUw7egUoVA3cefYx4zotPuQiriwfOYXY= Subject key identifier: 08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11 Authority key identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74 Certificate issuer: /CN=51EAB28F238FD7407C2F663960489DD6D951DA74 Certificate serial: 2E41 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft Manifest number: 2E41 Signing time: Fri 22 Nov 2024 10:25:27 +0000 Manifest this update: Fri 22 Nov 2024 10:25:27 +0000 Manifest next update: Fri 22 Nov 2024 16:25:27 +0000 Files and hashes: 1: UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl (hash: mZOKwHNfjSyL5wMY0G4BOXuzdifgWkp2FT2ycl9SP7Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11841 (0x2e41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51EAB28F238FD7407C2F663960489DD6D951DA74 Validity Not Before: Nov 22 10:25:27 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=08D414593F3DC69E2F070FCA2F84007D00761911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:2a:8f:06:e1:ae:0c:1c:3b:78:88:4e:d3: ca:38:21:47:26:7c:7d:0f:c0:b3:c3:90:a9:d0:63: c8:23:3c:2b:af:71:3f:50:04:09:b0:ae:cb:2b:5b: ae:d9:aa:b3:2a:a3:fc:82:51:0e:c0:09:a9:a9:24: c2:3c:b7:e2:78:40:dc:6e:46:ce:b2:bc:ec:e2:66: 4a:d1:22:9e:1d:1a:03:6f:0d:7b:a8:e2:3f:5e:ee: 97:86:12:6e:bc:49:b9:2e:48:82:71:cd:1c:f9:9f: 5e:c7:9e:0f:fd:7e:b2:35:d2:0d:16:3a:4f:a5:c2: 17:fb:fd:37:ad:00:45:88:a9:86:d8:85:00:00:c2: cc:aa:83:2f:cf:75:5c:d4:02:43:8e:f3:a9:53:b2: 9c:0d:81:b4:63:24:6a:0a:6d:ae:bb:ae:5d:be:3e: 23:21:ce:52:9c:be:1e:b0:72:94:a6:b5:90:25:c2: 71:ee:44:98:22:64:26:c8:1a:e6:3c:81:fb:63:25: f3:88:17:e0:b4:f1:7b:88:ed:eb:66:bc:8d:a2:d2: 1c:99:7a:3e:db:ed:48:98:00:a8:4e:8d:64:08:31: 3d:6d:f8:9b:7a:03:f2:dd:86:9a:97:93:c6:f3:86: c6:a7:32:59:5f:bb:5c:9b:2d:52:75:ab:1b:23:02: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D4:14:59:3F:3D:C6:9E:2F:07:0F:CA:2F:84:00:7D:00:76:19:11 X509v3 Authority Key Identifier: keyid:51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:a8:75:8f:e3:e5:e9:b8:e4:e0:1f:38:89:6c:c7:b1:90:b3: 4e:5a:37:1b:3b:cf:8d:97:fd:42:6f:f4:85:8b:5d:23:a8:95: 0e:de:87:cc:c2:f5:97:a5:48:50:9f:a4:ab:c8:ed:44:2d:ef: 88:30:a2:84:11:0e:6a:f9:86:a8:66:fa:b8:e5:ae:ea:2b:13: f4:66:c1:97:12:2a:5a:f6:82:d8:5f:bd:17:81:4f:38:84:0e: 4b:81:6a:f7:8c:9c:8a:27:02:55:da:62:85:e7:32:00:ea:ea: 91:b1:99:54:b9:a0:ea:7e:5d:ab:12:e1:ef:cb:8b:10:b9:65: 34:63:d2:01:41:cf:9f:2c:2e:8a:0d:b7:49:c7:f3:0c:f5:ff: b2:95:1a:5c:9e:1b:3d:7e:38:21:1e:07:9c:f9:6b:b1:8a:1b: 36:fe:79:4e:5d:be:f6:99:9d:a1:c0:83:51:23:ac:f5:98:20: 5f:57:7b:e2:07:eb:cd:79:34:4b:80:34:33:12:63:9a:4b:13: db:ab:2f:29:95:1a:58:5b:0a:a5:b4:20:cf:d7:6b:c9:dd:e9: 44:f0:1a:a7:dd:b9:e8:35:8a:14:f6:5f:97:46:cc:41:6c:31: f0:55:c7:8b:02:e1:2c:52:8a:8b:e5:0d:24:3d:a9:60:e7:c9: 5f:f5:74:5c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICLkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTFF QUIyOEYyMzhGRDc0MDdDMkY2NjM5NjA0ODlERDZEOTUxREE3NDAeFw0yNDExMjIx MDI1MjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA4RDQxNDU5M0YzREM2 OUUyRjA3MEZDQTJGODQwMDdEMDA3NjE5MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRFyqPBuGuDBw7eIhO08o4IUcmfH0PwLPDkKnQY8gjPCuvcT9Q BAmwrssrW67ZqrMqo/yCUQ7ACampJMI8t+J4QNxuRs6yvOziZkrRIp4dGgNvDXuo 4j9e7peGEm68SbkuSIJxzRz5n17Hng/9frI10g0WOk+lwhf7/TetAEWIqYbYhQAA wsyqgy/PdVzUAkOO86lTspwNgbRjJGoKba67rl2+PiMhzlKcvh6wcpSmtZAlwnHu RJgiZCbIGuY8gftjJfOIF+C08XuI7etmvI2i0hyZej7b7UiYAKhOjWQIMT1t+Jt6 A/LdhpqXk8bzhsanMllfu1ybLVJ1qxsjAgcDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUCNQUWT89xp4vBw/KL4QAfQB2GREwHwYDVR0jBBgwFoAUUeqyjyOP10B8L2Y5 YEid1tlR2nQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQw My9VZXF5anlPUDEwQjhMMlk1WUVpZDF0bFIyblEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1VlcXlqeU9QMTBCOEwyWTVZRWlkMXRsUjJuUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0MDMvVWVxeWp5T1AxMEI4 TDJZNVlFaWQxdGxSMm5RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJSodY/j5em45OAfOIlsx7GQs05aNxs7z42X/UJv9IWLXSOolQ7eh8zC9Zel SFCfpKvI7UQt74gwooQRDmr5hqhm+rjlruorE/RmwZcSKlr2gthfvReBTziEDkuB aveMnIonAlXaYoXnMgDq6pGxmVS5oOp+XasS4e/LixC5ZTRj0gFBz58sLooNt0nH 8wz1/7KVGlyeGz1+OCEeB5z5a7GKGzb+eU5dvvaZnaHAg1EjrPWYIF9Xe+IH6815 NEuANDMSY5pLE9urLymVGlhbCqW0IM/Xa8nd6UTwGqfdueg1ihT2X5dGzEFsMfBV x4sC4SxSiovlDSQ9qWDnyV/1dFw= -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:51 2024 by rpki-client on console-ams.rpki-client.org