$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft File: IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft (raw, json) Hash identifier: 2hNUk8pk0P4YH4zDDfhqc+gCZreOQZraAbo/wJ793co= Subject key identifier: 8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39 Authority key identifier: 23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F Certificate issuer: /CN=23320A4BAF0AF9313530EC99D3686433703E071F Certificate serial: 1DC9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft Manifest number: 1DB8 Signing time: Fri 22 Nov 2024 10:22:19 +0000 Manifest this update: Fri 22 Nov 2024 10:22:19 +0000 Manifest next update: Fri 22 Nov 2024 16:22:19 +0000 Files and hashes: 1: IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl (hash: rKil6ayQ4YsR+rQwTNLWuuwhC32OwhUPNecEDzpDwkY=) 2: X4pYNSPJeXNKBqvcrBnAcLKoIaw.roa (hash: O0PQ+gk9UDE/Gvwvy0bV4DHIQ7RX9GTWMViTdZfSQCY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7625 (0x1dc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23320A4BAF0AF9313530EC99D3686433703E071F Validity Not Before: Nov 22 10:22:19 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8F6708B24768C9A14D5BC9B93B5E04D0CB885139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:aa:75:54:3b:4a:b7:b6:b1:9b:96:0e:b2: 44:eb:c9:95:cf:2a:16:e8:ac:69:9c:59:10:60:de: 9e:f5:06:1f:2f:65:02:b9:44:52:cb:c0:c6:27:9d: f2:fe:6e:24:5f:b6:c3:1f:23:63:b4:b7:e0:16:28: 4c:fb:88:23:b0:d6:b5:62:95:91:7e:a1:f3:c6:30: 62:5d:ce:0a:45:0e:3c:af:83:73:9f:b1:1e:3a:79: 40:98:40:37:4a:bc:89:d7:3e:f8:90:28:e9:51:86: b3:a6:36:13:55:5f:cc:08:42:d3:3d:a0:4b:55:6d: 75:a4:1b:bf:32:31:c1:ff:8b:84:90:45:ce:ba:0e: 0d:b4:cf:51:31:40:a7:f9:46:0b:06:67:86:f1:7f: bd:94:2a:ce:ce:e0:e4:0a:01:eb:79:12:e3:74:0f: 2c:9a:d6:fe:0c:07:bf:2b:b7:bf:92:37:47:cd:db: 14:13:7a:cb:5b:3f:46:ba:2d:91:3a:e7:1f:dd:47: 0b:d5:90:f4:cb:00:47:88:22:c9:d6:72:2c:69:a4: 90:13:97:78:59:20:80:1e:c0:b7:b2:e0:34:01:e3: ce:e3:92:f7:aa:f0:83:a7:55:f5:b8:30:7c:fb:7a: 7f:1a:47:b2:98:42:cc:c5:8f:80:8e:1a:77:44:f2: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39 X509v3 Authority Key Identifier: keyid:23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7c:85:5e:5a:10:bb:bb:6a:ec:6f:fa:d0:25:92:f8:f2:75: 09:cc:1d:bd:c3:80:6b:61:69:db:e2:29:48:fc:e4:24:96:43: 80:81:9c:31:36:46:f0:d8:fb:35:aa:90:f5:50:a1:9e:25:da: 33:ff:7f:68:a3:da:15:36:e2:c7:1b:2b:cd:c1:e3:9a:9a:98: 59:63:20:a4:3e:6a:1d:1e:79:46:e4:e9:47:cc:86:56:db:ba: ce:2b:3d:0e:e6:b0:5d:8e:93:39:5e:64:df:f0:9a:77:c4:5f: f9:69:b4:d1:45:6b:ef:a0:b5:ea:fe:e5:e6:46:6c:0e:5d:31: 40:01:1e:8d:51:3b:96:04:fe:c3:d6:90:31:66:35:7b:ac:d8: 04:cf:4d:f2:f1:77:91:94:28:0f:8a:e7:6e:7f:cd:ba:67:a7: d3:5b:10:2a:b9:54:4e:28:ca:30:96:5e:f8:cf:1f:31:aa:6c: a3:4c:a3:27:36:5d:30:5e:17:5e:95:5a:de:d3:10:c0:a5:67: 42:8b:24:f8:d6:32:00:26:87:b5:1d:54:4f:4f:db:f7:97:f4: 66:67:6e:e3:0c:6c:d6:b7:22:64:d2:9e:e7:14:c1:78:0b:b1: f1:d1:69:12:40:32:8f:c2:f2:4b:7b:f0:0f:64:96:78:71:10: 40:13:67:1e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjMz MjBBNEJBRjBBRjkzMTM1MzBFQzk5RDM2ODY0MzM3MDNFMDcxRjAeFw0yNDExMjIx MDIyMTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhGNjcwOEIyNDc2OEM5 QTE0RDVCQzlCOTNCNUUwNEQwQ0I4ODUxMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7gap1VDtKt7axm5YOskTryZXPKhborGmcWRBg3p71Bh8vZQK5 RFLLwMYnnfL+biRftsMfI2O0t+AWKEz7iCOw1rVilZF+ofPGMGJdzgpFDjyvg3Of sR46eUCYQDdKvInXPviQKOlRhrOmNhNVX8wIQtM9oEtVbXWkG78yMcH/i4SQRc66 Dg20z1ExQKf5RgsGZ4bxf72UKs7O4OQKAet5EuN0Dyya1v4MB78rt7+SN0fN2xQT estbP0a6LZE65x/dRwvVkPTLAEeIIsnWcixppJATl3hZIIAewLey4DQB487jkveq 8IOnVfW4MHz7en8aR7KYQszFj4COGndE8nkDAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUj2cIskdoyaFNW8m5O14E0MuIUTkwHwYDVR0jBBgwFoAUIzIKS68K+TE1MOyZ 02hkM3A+Bx8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3 L0l6SUtTNjhLLVRFMU1PeVowMmhrTTNBLUJ4OC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvSXpJS1M2OEstVEUxTU95WjAyaGtNM0EtQng4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3L0l6SUtTNjhLLVRFMU1P eVowMmhrTTNBLUJ4OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqfIVeWhC7u2rsb/rQJZL48nUJzB29w4BrYWnb4ilI/OQklkOAgZwxNkbw2Ps1 qpD1UKGeJdoz/39oo9oVNuLHGyvNweOamphZYyCkPmodHnlG5OlHzIZW27rOKz0O 5rBdjpM5XmTf8Jp3xF/5abTRRWvvoLXq/uXmRmwOXTFAAR6NUTuWBP7D1pAxZjV7 rNgEz03y8XeRlCgPiuduf826Z6fTWxAquVROKMowll74zx8xqmyjTKMnNl0wXhde lVre0xDApWdCiyT41jIAJoe1HVRPT9v3l/RmZ27jDGzWtyJk0p7nFMF4C7Hx0WkS QDKPwvJLe/APZJZ4cRBAE2ce -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:37 2024 by rpki-client on console-fra.rpki-client.org