$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft File: 0eqai1ElBZBymdo4zqW8zmEJh8s.mft (raw, json) Hash identifier: IE/MxrqTBeYwMG7sJBI/TSFkUNLyPAslQ6xY/EYGoxQ= Subject key identifier: DA:64:DD:94:12:FE:5A:7D:2E:8F:1E:EE:27:B2:AE:CD:D8:FB:68:F0 Authority key identifier: D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB Certificate issuer: /CN=D1EA9A8B512505907299DA38CEA5BCCE610987CB Certificate serial: 1EB0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft Manifest number: 1EAB Signing time: Fri 22 Nov 2024 10:22:41 +0000 Manifest this update: Fri 22 Nov 2024 10:22:41 +0000 Manifest next update: Fri 22 Nov 2024 16:22:41 +0000 Files and hashes: 1: 0eqai1ElBZBymdo4zqW8zmEJh8s.crl (hash: H+oiDc1nMMfHA7ULfuma85TadljRcsjiDQ9ynLPR5Y8=) 2: 3iLU6mOeHfqFncqKop_aHhNlRds.roa (hash: XwByMLR/iICWU3nxPJV8IELGZgDPmb3eWDiAl0p9VsU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7856 (0x1eb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1EA9A8B512505907299DA38CEA5BCCE610987CB Validity Not Before: Nov 22 10:22:41 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DA64DD9412FE5A7D2E8F1EEE27B2AECDD8FB68F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:9c:66:a0:bd:f0:07:47:2f:65:43:92:8f: a8:01:be:ec:cb:37:1e:87:37:d9:4a:be:5a:08:95: cd:c4:88:d0:b2:81:02:c3:ce:f4:ea:18:a0:60:c9: 55:c6:88:7e:60:9c:07:30:bd:88:73:85:27:08:16: 3f:c4:88:67:f3:37:72:e2:0e:96:c6:30:85:f7:d5: ef:34:f2:42:97:98:d3:b5:f0:cf:41:43:8e:b7:03: 52:8a:c1:6d:62:fd:3b:c0:da:24:07:38:55:f5:b3: 95:53:b7:ad:ea:54:90:73:f4:63:f5:44:0a:53:77: 05:88:fa:a9:52:62:e7:ba:61:c3:64:92:3d:cc:ac: c8:38:54:85:d1:d4:a2:6c:1b:12:bb:b9:6b:68:05: 4c:13:b3:33:79:f4:69:8c:b2:4a:6d:99:96:69:a9: 98:2e:14:5b:52:84:a2:96:4a:dd:00:38:d3:22:d6: 58:36:c7:9f:4b:fe:9f:7d:96:2f:93:85:b0:65:18: 25:32:45:04:2e:17:58:4b:5d:ac:83:cb:2f:e7:88: f0:e3:f0:7f:93:07:d8:a6:4c:20:4c:47:21:1d:f3: 5c:18:ce:81:34:79:f0:cf:ba:81:de:da:bd:de:10: 7f:c1:5d:dd:a6:b7:ce:91:ca:61:cf:c3:39:fe:a1: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:64:DD:94:12:FE:5A:7D:2E:8F:1E:EE:27:B2:AE:CD:D8:FB:68:F0 X509v3 Authority Key Identifier: keyid:D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:60:25:cb:73:f1:ea:fa:a7:76:92:89:52:cc:41:20:fe:3b: d4:a3:6a:98:6e:53:88:16:3b:c4:d4:ea:2d:d2:d6:99:11:fe: ab:3c:e4:ca:98:d0:31:c4:87:5b:d2:fd:37:e1:ae:70:bb:46: c2:9d:f0:03:d8:a1:c9:cd:2b:84:20:0f:ad:b6:e4:33:7e:0d: 95:a9:64:70:6a:14:e7:aa:0e:3c:d4:c4:32:c1:21:92:47:a3: f0:e2:22:03:bf:ad:42:6f:d3:25:59:57:42:4a:fd:e1:4b:ee: f8:8b:c8:6f:45:9d:f5:75:44:f8:8e:4c:70:91:65:8c:26:38: 8d:c1:d0:aa:cd:92:93:5f:9b:4d:07:7a:1d:4a:00:2c:c0:4f: 07:c6:c4:ca:1a:c1:05:69:7b:62:37:f7:79:cd:98:55:bb:9f: 2d:6d:34:0e:44:b0:ca:e2:32:06:06:60:c6:cc:37:7a:f9:ed: 76:18:36:40:b7:ae:16:7f:59:22:6a:6a:92:2b:dd:2d:17:8b: 1e:0d:4f:32:2c:49:a2:54:9a:59:b0:a4:5f:08:e9:5b:74:6f: 49:59:83:30:05:e0:ac:23:c9:e8:b8:9f:c2:a2:b2:09:95:c2: 39:45:38:2b:f4:cc:80:e0:82:d2:6d:ae:51:c0:b7:ff:10:53: 67:30:87:8a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDFF QTlBOEI1MTI1MDU5MDcyOTlEQTM4Q0VBNUJDQ0U2MTA5ODdDQjAeFw0yNDExMjIx MDIyNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERBNjRERDk0MTJGRTVB N0QyRThGMUVFRTI3QjJBRUNERDhGQjY4RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW3ZxmoL3wB0cvZUOSj6gBvuzLNx6HN9lKvloIlc3EiNCygQLD zvTqGKBgyVXGiH5gnAcwvYhzhScIFj/EiGfzN3LiDpbGMIX31e808kKXmNO18M9B Q463A1KKwW1i/TvA2iQHOFX1s5VTt63qVJBz9GP1RApTdwWI+qlSYue6YcNkkj3M rMg4VIXR1KJsGxK7uWtoBUwTszN59GmMskptmZZpqZguFFtShKKWSt0AONMi1lg2 x59L/p99li+ThbBlGCUyRQQuF1hLXayDyy/niPDj8H+TB9imTCBMRyEd81wYzoE0 efDPuoHe2r3eEH/BXd2mt86RymHPwzn+oeeDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU2mTdlBL+Wn0ujx7uJ7Kuzdj7aPAwHwYDVR0jBBgwFoAU0eqai1ElBZBymdo4 zqW8zmEJh8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYz OS8wZXFhaTFFbEJaQnltZG80enFXOHptRUpoOHMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBlcWFpMUVsQlpCeW1kbzR6cVc4em1FSmg4cy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MzkvMGVxYWkxRWxCWkJ5 bWRvNHpxVzh6bUVKaDhzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEhgJctz8er6p3aSiVLMQSD+O9SjaphuU4gWO8TU6i3S1pkR/qs85MqY0DHE h1vS/TfhrnC7RsKd8APYocnNK4QgD6225DN+DZWpZHBqFOeqDjzUxDLBIZJHo/Di IgO/rUJv0yVZV0JK/eFL7viLyG9FnfV1RPiOTHCRZYwmOI3B0KrNkpNfm00Heh1K ACzATwfGxMoawQVpe2I393nNmFW7ny1tNA5EsMriMgYGYMbMN3r57XYYNkC3rhZ/ WSJqapIr3S0Xix4NTzIsSaJUmlmwpF8I6Vt0b0lZgzAF4Kwjyei4n8KisgmVwjlF OCv0zIDggtJtrlHAt/8QU2cwh4o= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:37 2024 by rpki-client on console-fra.rpki-client.org