$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft File: dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft (raw, json) Hash identifier: bf9BWlI7ajHAxIBNAwErtBdMFrCHZQNZMdksyDDBewI= Subject key identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 Certificate issuer: /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Certificate serial: 1AC0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft Manifest number: 1ABC Signing time: Fri 22 Nov 2024 15:25:55 +0000 Manifest this update: Fri 22 Nov 2024 15:25:55 +0000 Manifest next update: Fri 22 Nov 2024 21:25:55 +0000 Files and hashes: 1: dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl (hash: TNIH7R3QiH03JWdnLMVCkexWGvcrZrPchNbzhO/jYQc=) 2: mpcN_c00_qcsygTKHEC579o4zp8.roa (hash: YxIOIUqSTWFY0MNHe+CnkncD1TPvhkuAiiSonl6C1Ag=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6848 (0x1ac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791 Validity Not Before: Nov 22 15:25:55 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=83288CB51AD8489392646BFC3F9BEF4C7A18CD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:88:f8:df:ca:bf:f9:ae:84:b1:d5:3d:50: 3a:f4:7e:f5:fc:03:71:95:8a:65:1c:a1:4a:6f:0a: cd:b1:59:a2:69:70:cf:8d:8a:53:42:ff:3d:ab:7b: 24:8a:48:9f:8e:7f:c5:6e:c1:a9:1e:de:13:09:7e: b2:8e:7d:78:21:aa:d2:05:e1:1c:1c:ca:02:6b:60: 80:b7:fd:ca:97:72:cd:c6:e7:de:b4:d0:39:fa:8e: 29:8d:f9:05:72:99:e7:2d:f8:52:5f:93:af:34:d3: 44:93:70:fd:ac:70:22:0a:9c:2b:e2:cd:3b:33:20: 1a:b7:fe:fe:be:50:b6:57:7f:fb:0f:59:1c:e6:f1: 8a:ca:44:13:3d:22:92:4b:84:a4:11:ac:8e:89:30: bf:c7:4e:9e:ce:45:be:3b:c6:c6:c8:a8:a3:e7:02: 34:54:2c:ea:0b:85:c9:18:8c:be:a1:59:4e:f9:fb: 41:d1:a1:c8:be:6b:49:47:c6:5e:49:a3:64:9f:33: 23:ce:fe:15:da:df:45:3c:e2:a6:78:e5:a0:55:0e: 23:9c:54:94:da:77:56:47:61:5e:88:34:91:c9:b2: d6:85:17:cc:65:88:9c:47:05:e8:4d:fc:6b:f2:bd: 82:58:2f:87:2e:22:61:bb:c2:af:d5:3e:1a:b2:da: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:28:8C:B5:1A:D8:48:93:92:64:6B:FC:3F:9B:EF:4C:7A:18:CD:33 X509v3 Authority Key Identifier: keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ea:69:6d:21:62:78:a3:71:83:dd:cb:c2:77:31:12:e7:7d: 8a:6a:ac:7d:96:b5:13:66:30:9f:ed:01:eb:85:c5:7f:52:d8: 4e:17:7a:a0:5f:d4:f6:10:4a:04:95:92:35:7e:dc:83:92:6a: df:b0:e4:f1:ee:46:3b:b5:d6:f2:52:27:ba:17:f6:df:1c:27: c0:65:b6:de:07:57:fc:74:ee:0b:bc:f1:8b:55:0a:f0:7a:83: e3:0a:71:85:3e:31:0d:47:ff:77:fb:e6:85:40:17:a2:9e:77: 6a:71:1d:c5:3a:91:00:df:a8:e0:ee:61:ed:8d:c3:a2:5c:57: d2:c2:b5:4f:27:6d:02:95:5c:65:95:f1:67:3d:99:a0:76:b1: 95:09:70:ba:a4:8b:81:fc:79:24:79:49:f9:7c:29:5d:97:ee: 38:ed:da:9e:f0:9b:9f:88:91:a2:dc:4e:08:32:36:68:6d:bf: 1d:84:58:dc:73:33:7a:91:e1:32:d7:cf:65:9b:46:18:04:8b: 99:7e:2d:98:3d:8c:b9:52:d7:dc:2d:41:22:33:26:72:d9:b2: 69:84:a5:6a:b0:4f:5d:b1:a3:24:8d:2b:4e:68:99:89:3d:43: 9e:49:1f:d4:b4:6f:5b:90:ab:0e:5b:26:a9:4d:ae:44:4c:fe: 05:5c:ea:e4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU2 MzdCQUREODM3QjY3MTUwRTgwRjlDOEUyRjBDNUFFNTUxQjc5MTAeFw0yNDExMjIx NTI1NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDgzMjg4Q0I1MUFEODQ4 OTM5MjY0NkJGQzNGOUJFRjRDN0ExOENEMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYPYj438q/+a6EsdU9UDr0fvX8A3GVimUcoUpvCs2xWaJpcM+N ilNC/z2reySKSJ+Of8Vuwake3hMJfrKOfXghqtIF4RwcygJrYIC3/cqXcs3G5960 0Dn6jimN+QVymect+FJfk68000STcP2scCIKnCvizTszIBq3/v6+ULZXf/sPWRzm 8YrKRBM9IpJLhKQRrI6JML/HTp7ORb47xsbIqKPnAjRULOoLhckYjL6hWU75+0HR oci+a0lHxl5Jo2SfMyPO/hXa30U84qZ45aBVDiOcVJTad1ZHYV6INJHJstaFF8xl iJxHBehN/GvyvYJYL4cuImG7wq/VPhqy2uajAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUgyiMtRrYSJOSZGv8P5vvTHoYzTMwHwYDVR0jBBgwFoAUdWN7rdg3tnFQ6A+c ji8MWuVRt5EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy Mi9kV043cmRnM3RuRlE2QS1jamk4TVd1VlJ0NUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RXTjdyZGczdG5GUTZBLWNqaThNV3VWUnQ1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjIvZFdON3JkZzN0bkZR NkEtY2ppOE1XdVZSdDVFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAzqaW0hYnijcYPdy8J3MRLnfYpqrH2WtRNmMJ/tAeuFxX9S2E4XeqBf1PYQ SgSVkjV+3IOSat+w5PHuRju11vJSJ7oX9t8cJ8Bltt4HV/x07gu88YtVCvB6g+MK cYU+MQ1H/3f75oVAF6Ked2pxHcU6kQDfqODuYe2Nw6JcV9LCtU8nbQKVXGWV8Wc9 maB2sZUJcLqki4H8eSR5Sfl8KV2X7jjt2p7wm5+IkaLcTggyNmhtvx2EWNxzM3qR 4TLXz2WbRhgEi5l+LZg9jLlS19wtQSIzJnLZsmmEpWqwT12xoySNK05omYk9Q55J H9S0b1uQqw5bJqlNrkRM/gVc6uQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:43 2024 by rpki-client on console-ams.rpki-client.org