$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2590/wyvjBkEPi1H4fN_IAQk17ab3wq4.mft File: wyvjBkEPi1H4fN_IAQk17ab3wq4.mft (raw, json) Hash identifier: w48QtgaAKxgazEkB+KEijKe/tDPMHiRfeWPE593jB4Y= Subject key identifier: C9:A6:64:77:26:FF:5B:9E:42:E4:D2:D4:B2:F3:55:39:75:5F:E0:1A Authority key identifier: C3:2B:E3:06:41:0F:8B:51:F8:7C:DF:C8:01:09:35:ED:A6:F7:C2:AE Certificate issuer: /CN=C32BE306410F8B51F87CDFC8010935EDA6F7C2AE Certificate serial: 1181 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wyvjBkEPi1H4fN_IAQk17ab3wq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/wyvjBkEPi1H4fN_IAQk17ab3wq4.mft Manifest number: 1181 Signing time: Fri 22 Nov 2024 15:25:50 +0000 Manifest this update: Fri 22 Nov 2024 15:25:50 +0000 Manifest next update: Fri 22 Nov 2024 21:25:50 +0000 Files and hashes: 1: wyvjBkEPi1H4fN_IAQk17ab3wq4.crl (hash: ihm5pY5Psvj8GRR/Vp1CZOvsxLjMZBCNXMNp3VAMg9c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/wyvjBkEPi1H4fN_IAQk17ab3wq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/wyvjBkEPi1H4fN_IAQk17ab3wq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wyvjBkEPi1H4fN_IAQk17ab3wq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4481 (0x1181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C32BE306410F8B51F87CDFC8010935EDA6F7C2AE Validity Not Before: Nov 22 15:25:50 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C9A6647726FF5B9E42E4D2D4B2F35539755FE01A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:53:7b:80:94:f2:5d:9f:3b:71:65:15:04: 42:42:77:89:ed:5b:9e:d7:48:ca:dd:51:e1:e2:6f: 71:84:3e:0f:3d:76:09:c6:c4:5c:2b:e8:fa:63:70: bb:9d:4c:57:4b:26:73:84:6b:a9:2d:46:da:ab:d4: 93:a2:85:ed:29:24:26:51:50:c8:a0:68:d6:85:7b: 69:bf:c0:50:ca:ee:cf:44:38:95:56:f3:27:cd:dc: 52:18:42:72:06:4f:60:6e:2a:96:29:be:51:3d:e8: 1e:2f:cd:9a:bd:fa:bd:26:f6:21:1c:a1:16:cd:a0: c3:c5:80:de:c4:3e:98:72:08:d0:70:59:67:ae:97: 13:8f:50:4a:1d:5c:5c:12:7c:94:89:8a:27:15:f6: a7:2a:a9:5a:d6:b7:a2:46:a9:22:7b:e9:77:de:e8: 0c:d0:e1:79:59:31:22:d7:cd:a6:74:a6:18:e7:18: 1e:a6:53:63:02:11:dc:56:e7:f6:09:12:5c:9d:af: 07:2a:6b:a4:ce:63:92:ea:36:7c:0e:da:cb:3f:f3: 03:54:73:cf:de:78:f5:5b:9a:3b:0d:55:79:a2:a2: 00:75:6a:44:f4:11:2b:63:10:bf:09:8a:34:97:f9: d7:94:ac:d0:df:ab:32:2a:99:29:6a:f3:97:19:bd: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A6:64:77:26:FF:5B:9E:42:E4:D2:D4:B2:F3:55:39:75:5F:E0:1A X509v3 Authority Key Identifier: keyid:C3:2B:E3:06:41:0F:8B:51:F8:7C:DF:C8:01:09:35:ED:A6:F7:C2:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/wyvjBkEPi1H4fN_IAQk17ab3wq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wyvjBkEPi1H4fN_IAQk17ab3wq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/wyvjBkEPi1H4fN_IAQk17ab3wq4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:b0:4f:06:dc:63:ef:8a:ce:cc:99:51:77:bc:00:84:7d:87: 65:b0:a3:21:5d:8c:75:ba:a3:a0:02:eb:41:b8:0e:ab:90:44: 65:89:50:13:4a:e5:3d:e3:0f:e1:65:db:ab:2b:97:ee:7d:0e: 35:2b:0a:d5:01:89:cf:ad:91:b7:3e:a8:76:28:9b:b9:79:6a: 87:b4:53:e1:e5:6c:94:2a:a2:00:ea:9f:89:36:c5:fe:d6:2e: a4:84:dc:88:81:ce:76:9e:f5:0e:c0:02:fd:d3:a7:e6:a4:2c: 3e:a0:94:bc:49:46:e3:d4:e0:7f:27:8a:12:9a:dd:4a:48:7b: 8c:79:61:4a:ad:09:a6:d5:5e:0e:ad:64:e1:03:b8:a8:5d:c1: d5:68:f8:98:58:ea:05:04:80:41:40:5d:00:34:2b:f1:77:23: b8:87:37:22:62:f1:32:37:b5:ac:ca:92:d8:74:df:44:5e:a4: 6b:d0:c6:56:8c:f1:15:08:b7:5d:2d:6b:ae:44:6e:51:f4:97: 78:f8:69:73:b8:f0:b1:d4:ae:0d:2c:f7:94:99:96:c0:96:c7: c2:db:f0:48:f6:85:43:ab:8b:c8:70:c9:45:2e:45:07:f1:32: d7:6b:17:af:4f:77:d3:4a:cc:b6:63:ac:bf:47:46:74:ed:fb: 35:8b:93:f4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzMy QkUzMDY0MTBGOEI1MUY4N0NERkM4MDEwOTM1RURBNkY3QzJBRTAeFw0yNDExMjIx NTI1NTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM5QTY2NDc3MjZGRjVC OUU0MkU0RDJENEIyRjM1NTM5NzU1RkUwMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUNlN7gJTyXZ87cWUVBEJCd4ntW57XSMrdUeHib3GEPg89dgnG xFwr6PpjcLudTFdLJnOEa6ktRtqr1JOihe0pJCZRUMigaNaFe2m/wFDK7s9EOJVW 8yfN3FIYQnIGT2BuKpYpvlE96B4vzZq9+r0m9iEcoRbNoMPFgN7EPphyCNBwWWeu lxOPUEodXFwSfJSJiicV9qcqqVrWt6JGqSJ76Xfe6AzQ4XlZMSLXzaZ0phjnGB6m U2MCEdxW5/YJElydrwcqa6TOY5LqNnwO2ss/8wNUc8/eePVbmjsNVXmiogB1akT0 EStjEL8JijSX+deUrNDfqzIqmSlq85cZvWdNAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyaZkdyb/W55C5NLUsvNVOXVf4BowHwYDVR0jBBgwFoAUwyvjBkEPi1H4fN/I AQk17ab3wq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU5 MC93eXZqQmtFUGkxSDRmTl9JQVFrMTdhYjN3cTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3d5dmpCa0VQaTFINGZOX0lBUWsxN2FiM3dxNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1OTAvd3l2akJrRVBpMUg0 Zk5fSUFRazE3YWIzd3E0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANywTwbcY++KzsyZUXe8AIR9h2WwoyFdjHW6o6AC60G4DquQRGWJUBNK5T3j D+Fl26srl+59DjUrCtUBic+tkbc+qHYom7l5aoe0U+HlbJQqogDqn4k2xf7WLqSE 3IiBznae9Q7AAv3Tp+akLD6glLxJRuPU4H8nihKa3UpIe4x5YUqtCabVXg6tZOED uKhdwdVo+JhY6gUEgEFAXQA0K/F3I7iHNyJi8TI3tazKkth030RepGvQxlaM8RUI t10ta65EblH0l3j4aXO48LHUrg0s95SZlsCWx8Lb8Ej2hUOri8hwyUUuRQfxMtdr F69Pd9NKzLZjrL9HRnTt+zWLk/Q= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:42 2024 by rpki-client on console-ams.rpki-client.org