$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft File: j3yfJPFqzfopGAszfzITYCfMNNc.mft (raw, json) Hash identifier: 6y+dIPKBuMYNzxNn2tMeWNBFjB0FDtrRRJOgHNet+9Q= Subject key identifier: C4:A8:B3:49:D0:33:B6:14:30:EC:AD:A5:F6:4B:C3:6D:0A:E9:9B:30 Authority key identifier: 8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7 Certificate issuer: /CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7 Certificate serial: 2C82 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft Manifest number: 2C7D Signing time: Mon 25 Nov 2024 21:21:55 +0000 Manifest this update: Mon 25 Nov 2024 21:21:55 +0000 Manifest next update: Tue 26 Nov 2024 03:21:55 +0000 Files and hashes: 1: hA0YjLsz08uvTbdYus_U1IoDr7U.roa (hash: qf9VRnkExwNHbRiHqpKYTuHXeTB5WyacG8OiMRx4Zbs=) 2: j3yfJPFqzfopGAszfzITYCfMNNc.crl (hash: B7oDtGvNdblt206t+T7VvLwZjPJHRB6+OY4w8r3Mjkg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 03:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11394 (0x2c82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7 Validity Not Before: Nov 25 21:21:55 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C4A8B349D033B61430ECADA5F64BC36D0AE99B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:ab:9c:e1:fd:aa:a3:d3:c6:48:74:77:2c: 5c:7b:9f:1e:6d:2a:4e:75:90:40:99:b2:55:3c:68: 45:7b:0d:85:da:5f:6d:b0:f6:c7:d0:1a:3e:77:b9: ac:71:8c:3b:8b:97:b2:4b:3f:35:b3:fc:6d:54:ec: 08:d7:f2:1e:a1:7a:fe:34:5d:5a:74:e9:b0:ff:31: e5:dd:cd:9b:e3:0a:03:ad:4b:4b:30:cb:9a:1e:5b: fa:ae:77:fd:43:d4:86:59:96:36:fa:1e:ec:ef:57: 48:1c:e7:04:e6:73:ed:b8:0c:f7:46:9c:e7:99:fd: 29:f2:82:9e:78:cc:8c:21:a9:b5:c2:f3:f5:1e:1f: e7:e7:fd:2a:f0:ab:64:4e:63:cc:6a:11:7e:72:c2: 69:bd:f2:2c:38:04:44:5d:6f:63:69:85:4e:c3:28: 68:69:10:ea:a5:60:f9:a4:5b:f0:76:76:4e:ec:c6: 51:b9:4f:24:46:03:3d:68:02:15:6f:9c:b1:1d:2a: 69:ec:d0:93:c3:4c:7b:0d:db:f7:08:50:6e:12:01: 9a:5c:6a:cb:c1:28:31:ae:d1:be:4e:28:ed:30:b7: da:bb:27:2a:97:33:12:11:d3:3a:3e:a9:ce:e3:dd: 68:6c:b1:d2:b9:a0:79:4c:8f:4d:1a:6f:13:b8:33: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A8:B3:49:D0:33:B6:14:30:EC:AD:A5:F6:4B:C3:6D:0A:E9:9B:30 X509v3 Authority Key Identifier: keyid:8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fb:70:da:48:87:c9:3c:17:16:0e:f7:43:86:46:99:75:32: 17:84:45:e5:0b:58:90:74:b0:b3:ea:05:62:e6:10:87:5a:d7: a5:a1:ce:fe:aa:92:1b:cc:38:da:ec:8a:35:30:cc:f0:48:74: 3d:ab:29:3c:ca:7b:b0:31:19:d3:98:1c:e3:92:f6:43:db:97: 00:8d:7e:b6:86:d4:01:48:6d:ec:d4:76:b7:b4:6e:49:40:68: 8f:7f:ad:62:2f:e2:a3:94:b6:37:e6:fe:1a:35:fe:ec:ed:42: be:42:5b:23:97:30:c8:4d:81:25:3d:1b:34:52:57:28:d4:ba: b5:05:74:7a:e9:6a:b0:6a:30:7a:4f:43:55:d1:8b:51:1f:b2: da:f3:71:76:a6:9b:ae:f3:10:56:18:be:d7:be:99:ed:c3:e9: 8f:7f:0b:ab:b7:f1:f8:5a:8c:32:5c:b6:11:3f:54:e4:65:e3: 95:10:f1:10:55:96:a0:e3:bb:08:56:d7:85:46:51:23:1e:29: 52:1c:35:11:cb:35:40:b6:76:ab:49:3c:66:9c:f9:6f:aa:73: c0:2f:80:dc:4b:24:51:81:37:08:3b:1f:c3:cf:1e:16:d3:95: 32:ba:0a:73:89:84:97:95:45:35:3e:b6:85:ba:73:8d:ae:79: 89:22:dd:7a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICLIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEY3 QzlGMjRGMTZBQ0RGQTI5MTgwQjMzN0YzMjEzNjAyN0NDMzRENzAeFw0yNDExMjUy MTIxNTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM0QThCMzQ5RDAzM0I2 MTQzMEVDQURBNUY2NEJDMzZEMEFFOTlCMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+1quc4f2qo9PGSHR3LFx7nx5tKk51kECZslU8aEV7DYXaX22w 9sfQGj53uaxxjDuLl7JLPzWz/G1U7AjX8h6hev40XVp06bD/MeXdzZvjCgOtS0sw y5oeW/qud/1D1IZZljb6HuzvV0gc5wTmc+24DPdGnOeZ/Snygp54zIwhqbXC8/Ue H+fn/Srwq2ROY8xqEX5ywmm98iw4BERdb2NphU7DKGhpEOqlYPmkW/B2dk7sxlG5 TyRGAz1oAhVvnLEdKmns0JPDTHsN2/cIUG4SAZpcasvBKDGu0b5OKO0wt9q7JyqX MxIR0zo+qc7j3WhssdK5oHlMj00abxO4M/edAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUxKizSdAzthQw7K2l9kvDbQrpmzAwHwYDVR0jBBgwFoAUj3yfJPFqzfopGAsz fzITYCfMNNcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY5 NC9qM3lmSlBGcXpmb3BHQXN6ZnpJVFlDZk1OTmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ozeWZKUEZxemZvcEdBc3pmeklUWUNmTU5OYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2OTQvajN5ZkpQRnF6Zm9w R0FzemZ6SVRZQ2ZNTk5jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADH7cNpIh8k8FxYO90OGRpl1MheEReULWJB0sLPqBWLmEIda16Whzv6qkhvM ONrsijUwzPBIdD2rKTzKe7AxGdOYHOOS9kPblwCNfraG1AFIbezUdre0bklAaI9/ rWIv4qOUtjfm/ho1/uztQr5CWyOXMMhNgSU9GzRSVyjUurUFdHrparBqMHpPQ1XR i1EfstrzcXamm67zEFYYvte+me3D6Y9/C6u38fhajDJcthE/VORl45UQ8RBVlqDj uwhW14VGUSMeKVIcNRHLNUC2dqtJPGac+W+qc8AvgNxLJFGBNwg7H8PPHhbTlTK6 CnOJhJeVRTU+toW6c42ueYki3Xo= -----END CERTIFICATE-----Generated at Tue Nov 26 00:28:15 2024 by rpki-client on console-ams.rpki-client.org