$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft File: e13JVZm-TeRUqZwMJXU9HgDHQU8.mft (raw, json) Hash identifier: KQ4OTTSokq+RT5tKyGRLgjVbhrIzdGU4TCU2x89KxEw= Subject key identifier: 22:40:38:AA:D8:41:94:E3:A8:92:01:13:F5:E5:17:74:F4:36:36:3E Authority key identifier: 7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F Certificate issuer: /CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F Certificate serial: 0682 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft Manifest number: 0679 Signing time: Fri 22 Nov 2024 12:50:34 +0000 Manifest this update: Fri 22 Nov 2024 12:50:34 +0000 Manifest next update: Fri 22 Nov 2024 18:50:34 +0000 Files and hashes: 1: D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa (hash: ElwPAAB/RBdxmPJCt34rJ3jgiG/FnJnHOmYYjmFgxQk=) 2: H4KORnDhY-VKxuYTHr3rYLKQWnQ.roa (hash: oKzTY6oapz472bUTZ5uNwL98YiUS9I+uG+Bk+tLd+40=) 3: e13JVZm-TeRUqZwMJXU9HgDHQU8.crl (hash: eR7AOPkhK1dmFHzkerlM/lG4ofEbffahkHIDSCNh/TE=) 4: ielmdqzudOhinh8eKxaKX8pOiFM.roa (hash: b1jFaNbCxCnTA5SNi3iulLcr/VBCv1DMCD/Oty6Pwms=) 5: rtLqb4gLaNofoaISUeU9kHQWtDU.roa (hash: UjglH3914lXJyAJG/QXGAiW0Ird7Y8FuX01hcUXXay0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F Validity Not Before: Nov 22 12:50:34 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=224038AAD84194E3A8920113F5E51774F436363E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:66:18:f4:fa:4e:97:03:2b:82:ef:26:5e: 9f:c5:a9:bd:97:41:e4:21:b0:41:c9:2c:19:9d:04: b3:73:de:57:74:4e:2e:bb:16:80:b2:2a:e4:f6:8d: 89:26:69:1e:73:14:7c:67:78:1c:c7:30:7c:19:e3: 5b:33:0f:1c:87:8d:d2:bf:d8:67:57:08:b5:50:93: 01:d7:c8:dc:21:61:9b:75:60:64:85:b1:b1:5e:cc: 0d:d9:5b:23:e2:83:70:17:7c:db:90:58:80:ed:1d: 01:7b:d0:df:18:e2:90:77:d1:4c:3e:b3:66:59:3d: c3:00:e3:2c:ec:c3:fb:30:93:c2:2e:a2:0a:59:49: e5:04:da:28:3c:f8:01:3b:41:4d:07:05:92:b0:00: f7:a7:3c:c3:b7:5f:0a:d1:22:17:49:68:48:be:fa: 10:05:87:55:0e:6b:3b:a4:8c:86:90:ce:de:69:dd: 68:48:c9:76:3a:c6:2f:95:bc:41:87:96:87:fb:cd: 11:01:52:d9:b0:b9:c9:28:8d:d2:42:72:bf:b6:5f: a7:af:50:a7:5a:1b:e4:3b:58:c8:52:00:7f:c5:da: d0:22:3b:c7:b1:c6:29:f7:1e:1a:1c:16:0a:76:62: f8:ce:e2:88:db:cb:a7:71:12:10:21:a6:2d:41:85: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:40:38:AA:D8:41:94:E3:A8:92:01:13:F5:E5:17:74:F4:36:36:3E X509v3 Authority Key Identifier: keyid:7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:45:9b:71:a9:53:53:8b:c0:a4:e5:8c:07:7d:58:b6:4e:4a: 48:35:34:db:17:ec:65:d6:56:17:af:73:93:56:79:10:a3:78: c9:cc:c1:27:30:2d:e3:c5:98:8c:5a:dd:9f:4e:a0:a4:39:b0: 83:59:f9:af:92:52:eb:0e:a5:5b:6c:b0:b4:c1:a2:72:83:dd: 64:ae:33:a5:45:70:04:6a:23:d2:a3:f5:f8:a7:bf:06:37:05: e9:05:eb:1e:ce:1a:e8:73:20:ae:cf:21:cc:0d:da:14:b3:e1: b2:dc:73:52:c1:97:fd:97:00:70:0b:8e:b2:49:22:3f:68:ff: cc:a0:f1:6c:50:33:41:32:e4:52:03:62:0d:12:29:85:bb:01: 97:44:04:a8:7b:cc:f5:15:8f:e2:3c:f7:ec:fc:8f:31:1c:85: 5c:9c:8a:26:e4:d0:e7:ba:91:64:8a:3e:26:8c:dc:8a:a7:f6: 2e:5b:59:54:b0:43:e9:60:74:c0:4e:98:48:ad:15:5b:82:1c: d3:1f:2b:4d:71:3a:db:13:03:ac:76:dc:2d:52:0c:c9:f7:f9: 4c:d7:d2:c1:5d:b3:fb:49:ec:21:05:51:eb:a8:88:15:32:5c: b5:78:7f:46:93:ca:38:6b:c8:70:ea:0b:6f:a3:a3:c6:7d:cf: 6e:3e:4e:9f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0I1 REM5NTU5OUJFNERFNDU0QTk5QzBDMjU3NTNEMUUwMEM3NDE0RjAeFw0yNDExMjIx MjUwMzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIyNDAzOEFBRDg0MTk0 RTNBODkyMDExM0Y1RTUxNzc0RjQzNjM2M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8N2YY9PpOlwMrgu8mXp/Fqb2XQeQhsEHJLBmdBLNz3ld0Ti67 FoCyKuT2jYkmaR5zFHxneBzHMHwZ41szDxyHjdK/2GdXCLVQkwHXyNwhYZt1YGSF sbFezA3ZWyPig3AXfNuQWIDtHQF70N8Y4pB30Uw+s2ZZPcMA4yzsw/swk8IuogpZ SeUE2ig8+AE7QU0HBZKwAPenPMO3XwrRIhdJaEi++hAFh1UOazukjIaQzt5p3WhI yXY6xi+VvEGHlof7zREBUtmwuckojdJCcr+2X6evUKdaG+Q7WMhSAH/F2tAiO8ex xin3HhocFgp2YvjO4ojby6dxEhAhpi1BhfuHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIkA4qthBlOOokgET9eUXdPQ2Nj4wHwYDVR0jBBgwFoAUe13JVZm+TeRUqZwM JXU9HgDHQU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny9lMTNKVlptLVRlUlVxWndNSlhVOUhnREhRVTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2UxM0pWWm0tVGVSVXFad01KWFU5SGdESFFVOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvZTEzSlZabS1UZVJV cVp3TUpYVTlIZ0RIUVU4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJFFm3GpU1OLwKTljAd9WLZOSkg1NNsX7GXWVhevc5NWeRCjeMnMwScwLePF mIxa3Z9OoKQ5sINZ+a+SUusOpVtssLTBonKD3WSuM6VFcARqI9Kj9finvwY3BekF 6x7OGuhzIK7PIcwN2hSz4bLcc1LBl/2XAHALjrJJIj9o/8yg8WxQM0Ey5FIDYg0S KYW7AZdEBKh7zPUVj+I89+z8jzEchVyciibk0Oe6kWSKPiaM3Iqn9i5bWVSwQ+lg dMBOmEitFVuCHNMfK01xOtsTA6x23C1SDMn3+UzX0sFds/tJ7CEFUeuoiBUyXLV4 f0aTyjhryHDqC2+jo8Z9z24+Tp8= -----END CERTIFICATE-----Generated at Fri Nov 22 13:38:13 2024 by rpki-client on console-fra.rpki-client.org