$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/PIYlusoHmRHisoKZtL1E_cv_9gw.mft File: PIYlusoHmRHisoKZtL1E_cv_9gw.mft (raw, json) Hash identifier: BK7F932lXN0mlnSIG1+n1mSC2hUdbW9VQcHrBgj+YU0= Subject key identifier: D8:72:26:4D:CF:C7:DA:58:21:47:F0:83:D5:09:58:92:85:88:AF:DC Authority key identifier: 3C:86:25:BA:CA:07:99:11:E2:B2:82:99:B4:BD:44:FD:CB:FF:F6:0C Certificate issuer: /CN=3C8625BACA079911E2B28299B4BD44FDCBFFF60C Certificate serial: 0B73 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PIYlusoHmRHisoKZtL1E_cv_9gw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/PIYlusoHmRHisoKZtL1E_cv_9gw.mft Manifest number: 0B6F Signing time: Mon 25 Nov 2024 04:21:05 +0000 Manifest this update: Mon 25 Nov 2024 04:21:05 +0000 Manifest next update: Mon 25 Nov 2024 10:21:05 +0000 Files and hashes: 1: PIYlusoHmRHisoKZtL1E_cv_9gw.crl (hash: RdS9SV3NDeEpCoL9GCRqgiPw48xFt+2bko5wOpw58Ak=) 2: oNx-2622tESiWCt9JkvnNZDXVFE.roa (hash: AqzUw5v02HW+kpBq/ImcwWJ9YIWHcvConEAWor/jLtE=) 3: on-b8f788nGSMHvTWYPBnwzDYPg.roa (hash: WWldnJzndnqwOqhpl1CZe4jravnw7e2aGa2/dfTBa7o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/PIYlusoHmRHisoKZtL1E_cv_9gw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/PIYlusoHmRHisoKZtL1E_cv_9gw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PIYlusoHmRHisoKZtL1E_cv_9gw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C8625BACA079911E2B28299B4BD44FDCBFFF60C Validity Not Before: Nov 25 04:21:05 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D872264DCFC7DA582147F083D50958928588AFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:6e:76:93:1e:a7:8e:df:ff:c4:75:58:02: 00:40:f3:02:a7:b0:b4:7f:50:01:eb:83:56:b4:42: 86:c7:7b:23:3c:3a:55:8d:41:1a:67:28:b9:1b:7b: 7e:e1:50:f6:e9:c6:65:ba:e4:70:06:cf:fd:8c:f1: 73:bd:fe:ad:27:d4:29:d3:19:5a:72:77:35:4d:84: 21:e4:b2:ca:e3:51:7c:31:76:4a:a9:da:5f:9d:d6: b7:00:ee:bc:f9:54:9b:2e:bc:20:77:7c:a3:87:05: da:07:3a:44:42:c9:14:05:1d:74:01:c2:8e:b4:c6: c0:61:af:55:ea:a7:09:2c:ed:c6:c2:75:52:d2:52: 8a:64:ff:fa:3c:5a:b5:83:5d:6b:ac:0d:11:f7:da: f7:bb:bd:27:e7:03:27:72:c9:f6:36:42:29:30:79: 14:31:1d:61:82:52:96:8a:75:65:34:eb:ae:18:bb: 31:90:3d:83:9a:dd:9c:c8:2a:0b:df:b3:e7:33:50: 79:a4:dd:70:d0:92:a4:4c:ff:55:9d:28:b7:c3:fe: 87:28:a5:6b:34:14:a3:29:f0:04:18:4a:de:96:c5: f0:7f:4c:37:f6:d5:7d:a9:3b:d7:58:da:2c:17:c9: 24:96:a7:58:50:a2:a2:fd:06:5a:a9:96:2e:ec:2e: 77:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:72:26:4D:CF:C7:DA:58:21:47:F0:83:D5:09:58:92:85:88:AF:DC X509v3 Authority Key Identifier: keyid:3C:86:25:BA:CA:07:99:11:E2:B2:82:99:B4:BD:44:FD:CB:FF:F6:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/PIYlusoHmRHisoKZtL1E_cv_9gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PIYlusoHmRHisoKZtL1E_cv_9gw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/PIYlusoHmRHisoKZtL1E_cv_9gw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8b:e5:ad:be:4c:27:fe:2a:98:ee:24:9d:14:90:83:6d:cb: 7a:5c:1b:66:b8:1b:7e:11:4c:c8:ec:32:ec:e1:a4:38:dd:9f: 6d:cd:22:de:18:bd:fd:24:1a:12:d2:17:57:40:b4:4b:61:dc: 39:7e:73:8d:2a:c3:68:da:71:26:f7:25:c3:42:2b:51:f2:89: 99:12:9d:97:32:76:28:65:41:85:c7:2a:77:bf:4a:0e:ba:1b: 9c:2b:5b:31:20:22:a4:d2:62:19:d8:2b:86:d0:6a:15:c2:11: ea:a4:a9:22:b1:67:1f:ef:08:8e:9b:15:95:bc:f9:98:15:44: ac:4d:31:bb:4f:0a:48:e8:07:d8:c2:85:64:54:e0:ad:ba:1d: a5:70:37:65:70:88:38:a6:d7:6f:15:1c:d8:d0:f0:db:1e:c7: 21:26:c3:57:83:1a:cd:6e:7f:ef:d5:c4:3e:2d:ec:f8:97:6c: fe:8b:7d:af:45:13:80:a5:f8:5c:b9:3b:47:aa:81:04:76:1f: 2a:15:23:a7:aa:d0:67:c0:73:fe:f1:4c:8d:e4:ff:0c:69:13: 10:90:04:f8:ef:02:2b:ef:4f:c9:f1:40:d1:0d:ef:5d:8e:7f: 31:e8:1d:12:38:d7:8a:b4:35:58:8e:4e:1c:c0:77:26:7f:84: dc:c0:69:2e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0M4 NjI1QkFDQTA3OTkxMUUyQjI4Mjk5QjRCRDQ0RkRDQkZGRjYwQzAeFw0yNDExMjUw NDIxMDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ4NzIyNjREQ0ZDN0RB NTgyMTQ3RjA4M0Q1MDk1ODkyODU4OEFGREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeam52kx6njt//xHVYAgBA8wKnsLR/UAHrg1a0QobHeyM8OlWN QRpnKLkbe37hUPbpxmW65HAGz/2M8XO9/q0n1CnTGVpydzVNhCHkssrjUXwxdkqp 2l+d1rcA7rz5VJsuvCB3fKOHBdoHOkRCyRQFHXQBwo60xsBhr1Xqpwks7cbCdVLS Uopk//o8WrWDXWusDRH32ve7vSfnAydyyfY2QikweRQxHWGCUpaKdWU0664YuzGQ PYOa3ZzIKgvfs+czUHmk3XDQkqRM/1WdKLfD/ocopWs0FKMp8AQYSt6WxfB/TDf2 1X2pO9dY2iwXySSWp1hQoqL9Blqpli7sLnd/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU2HImTc/H2lghR/CD1QlYkoWIr9wwHwYDVR0jBBgwFoAUPIYlusoHmRHisoKZ tL1E/cv/9gwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0 MS9QSVlsdXNvSG1SSGlzb0tadEwxRV9jdl85Z3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1BJWWx1c29IbVJIaXNvS1p0TDFFX2N2Xzlndy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDEvUElZbHVzb0htUkhp c29LWnRMMUVfY3ZfOWd3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ2L5a2+TCf+KpjuJJ0UkINty3pcG2a4G34RTMjsMuzhpDjdn23NIt4Yvf0k GhLSF1dAtEth3Dl+c40qw2jacSb3JcNCK1HyiZkSnZcydihlQYXHKne/Sg66G5wr WzEgIqTSYhnYK4bQahXCEeqkqSKxZx/vCI6bFZW8+ZgVRKxNMbtPCkjoB9jChWRU 4K26HaVwN2VwiDim128VHNjQ8NsexyEmw1eDGs1uf+/VxD4t7PiXbP6Lfa9FE4Cl +Fy5O0eqgQR2HyoVI6eq0GfAc/7xTI3k/wxpExCQBPjvAivvT8nxQNEN712OfzHo HRI414q0NViOThzAdyZ/hNzAaS4= -----END CERTIFICATE-----Generated at Mon Nov 25 06:06:50 2024 by rpki-client on console-ams.rpki-client.org