$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft File: j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft (raw, json) Hash identifier: lbaka38nz29uOihHUqnbSGp4T63wE6+62koiYgZq2Xs= Subject key identifier: 4F:E2:C1:B7:B3:09:50:13:64:74:2C:B0:B0:2E:59:23:C3:13:D0:69 Authority key identifier: 8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63 Certificate issuer: /CN=8FC6D3D0A09DB52EA3DEC0D26F549D5F11AA3963 Certificate serial: 1A6D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft Manifest number: 1A6D Signing time: Fri 22 Nov 2024 10:25:25 +0000 Manifest this update: Fri 22 Nov 2024 10:25:25 +0000 Manifest next update: Fri 22 Nov 2024 16:25:25 +0000 Files and hashes: 1: j8bT0KCdtS6j3sDSb1SdXxGqOWM.crl (hash: k87/nAdQz/xMFUfaoXTm57F22vUyEFnjKDfrnBTBq2w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6765 (0x1a6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC6D3D0A09DB52EA3DEC0D26F549D5F11AA3963 Validity Not Before: Nov 22 10:25:25 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4FE2C1B7B309501364742CB0B02E5923C313D069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:5a:23:eb:8f:71:c8:f2:cc:e5:03:c1:0d: 00:4a:8f:92:e8:f0:30:fb:8b:7d:85:85:3e:8c:d7: e5:ca:b1:b6:b4:a1:3f:03:5b:9a:08:6a:87:21:cb: fd:97:fd:09:f2:99:89:96:5b:b5:83:62:36:87:7d: 53:c0:fa:66:50:ee:d8:b2:0c:ab:19:7d:41:c2:cc: 66:3c:8d:84:8e:44:a3:22:e1:64:11:22:85:72:26: d0:74:17:3f:e5:1a:4e:c7:cc:91:a1:6d:c6:43:65: e0:e2:f9:f9:5a:0c:16:57:fa:d8:f9:7a:88:cc:c6: 48:06:62:80:7a:f1:6b:ad:c2:81:51:87:f4:1a:69: d8:5d:80:3f:ce:4e:d9:20:2d:ba:ed:a1:33:51:72: eb:c7:7d:2a:b8:d1:45:9e:6a:6d:9f:63:67:53:08: 39:1c:39:77:4d:d2:36:77:41:69:ec:ee:53:78:5b: 07:21:17:78:51:25:5d:ed:0c:0b:15:2e:fe:4f:f0: 4a:73:1d:82:96:8d:54:f3:4a:9d:84:c2:de:eb:aa: 0d:3c:59:23:d5:0f:6f:67:d8:11:8e:39:1e:19:34: 09:07:30:d1:50:53:52:26:29:e7:e9:8d:73:40:9c: 3b:4f:e2:e7:43:12:49:18:e3:9b:40:f1:3a:db:85: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E2:C1:B7:B3:09:50:13:64:74:2C:B0:B0:2E:59:23:C3:13:D0:69 X509v3 Authority Key Identifier: keyid:8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:54:89:82:34:5d:5b:ed:70:fd:4d:93:d3:3e:84:b0:c5:05: 63:31:0b:bf:1c:5e:da:96:7a:ed:5d:c0:08:3b:16:54:07:09: ad:ea:cf:a1:7f:53:13:8c:32:11:bd:18:fb:15:a0:67:f1:6c: ab:b6:39:59:a3:f5:6d:57:67:8f:12:8c:07:90:b2:21:55:07: 16:ba:88:c6:73:fb:61:b0:79:5d:98:01:68:8a:e7:38:c0:3d: 57:78:1b:db:4f:e2:da:70:b7:b1:9d:12:e4:a8:b0:dd:68:88: c5:c3:28:6d:cd:42:58:ce:9a:87:37:46:28:6a:30:bf:9d:6e: ab:0b:4e:b1:48:59:20:6a:bc:8e:17:71:c6:aa:bd:89:07:2e: 9f:ea:cd:ca:2b:01:db:02:b7:f1:d7:dc:c5:ea:80:0b:3c:d4: 23:5e:0e:c3:15:92:c3:e3:c9:cd:cc:6f:ec:b6:a3:74:65:01: ff:6c:1c:19:5c:f9:50:99:9d:66:d4:d2:b5:9b:22:18:b8:36: f3:60:6a:fb:0c:99:de:20:9c:1c:63:b8:1d:6a:bb:f9:b7:0e: ca:48:85:fd:53:e2:ae:9c:f3:dc:35:22:f5:7c:b4:e8:02:f7: 54:8f:7e:2b:c1:9f:ad:29:94:1b:6c:ec:1c:1c:00:5f:88:31: 4c:86:00:32 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEZD NkQzRDBBMDlEQjUyRUEzREVDMEQyNkY1NDlENUYxMUFBMzk2MzAeFw0yNDExMjIx MDI1MjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRGRTJDMUI3QjMwOTUw MTM2NDc0MkNCMEIwMkU1OTIzQzMxM0QwNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC10Foj649xyPLM5QPBDQBKj5Lo8DD7i32FhT6M1+XKsba0oT8D W5oIaochy/2X/QnymYmWW7WDYjaHfVPA+mZQ7tiyDKsZfUHCzGY8jYSORKMi4WQR IoVyJtB0Fz/lGk7HzJGhbcZDZeDi+flaDBZX+tj5eojMxkgGYoB68WutwoFRh/Qa adhdgD/OTtkgLbrtoTNRcuvHfSq40UWeam2fY2dTCDkcOXdN0jZ3QWns7lN4Wwch F3hRJV3tDAsVLv5P8EpzHYKWjVTzSp2Ewt7rqg08WSPVD29n2BGOOR4ZNAkHMNFQ U1ImKefpjXNAnDtP4udDEkkY45tA8TrbhVHVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUT+LBt7MJUBNkdCywsC5ZI8MT0GkwHwYDVR0jBBgwFoAUj8bT0KCdtS6j3sDS b1SdXxGqOWMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYw My9qOGJUMEtDZHRTNmozc0RTYjFTZFh4R3FPV00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2o4YlQwS0NkdFM2ajNzRFNiMVNkWHhHcU9XTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MDMvajhiVDBLQ2R0UzZq M3NEU2IxU2RYeEdxT1dNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIlUiYI0XVvtcP1Nk9M+hLDFBWMxC78cXtqWeu1dwAg7FlQHCa3qz6F/UxOM MhG9GPsVoGfxbKu2OVmj9W1XZ48SjAeQsiFVBxa6iMZz+2GweV2YAWiK5zjAPVd4 G9tP4tpwt7GdEuSosN1oiMXDKG3NQljOmoc3RihqML+dbqsLTrFIWSBqvI4Xccaq vYkHLp/qzcorAdsCt/HX3MXqgAs81CNeDsMVksPjyc3Mb+y2o3RlAf9sHBlc+VCZ nWbU0rWbIhi4NvNgavsMmd4gnBxjuB1qu/m3DspIhf1T4q6c89w1IvV8tOgC91SP fivBn60plBts7BwcAF+IMUyGADI= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:37 2024 by rpki-client on console-fra.rpki-client.org