$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft File: j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft (raw, json) Hash identifier: lSBFZpWHHAkSN2WywnuPD8UWqWKvD1yNgX3MRenXbrE= Subject key identifier: 9A:A0:75:E6:08:52:AF:1E:4C:C0:07:87:13:A9:C0:F1:94:2F:E3:83 Authority key identifier: 8F:4A:A5:C4:72:5A:EA:B7:4E:BF:AA:4F:CE:AF:1D:E6:60:B5:95:05 Certificate issuer: /CN=8F4AA5C4725AEAB74EBFAA4FCEAF1DE660B59505 Certificate serial: 1193 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j0qlxHJa6rdOv6pPzq8d5mC1lQU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft Manifest number: 1193 Signing time: Fri 22 Nov 2024 15:22:10 +0000 Manifest this update: Fri 22 Nov 2024 15:22:10 +0000 Manifest next update: Fri 22 Nov 2024 21:22:10 +0000 Files and hashes: 1: j0qlxHJa6rdOv6pPzq8d5mC1lQU.crl (hash: Xj/CKoUS3hfKPaqFBSYUBEO2pc6SzoyBplzZmWTU+6s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j0qlxHJa6rdOv6pPzq8d5mC1lQU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4499 (0x1193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F4AA5C4725AEAB74EBFAA4FCEAF1DE660B59505 Validity Not Before: Nov 22 15:22:10 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9AA075E60852AF1E4CC0078713A9C0F1942FE383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:fd:e0:3c:e8:6d:dc:49:d9:37:09:96:bc: 16:01:60:9c:c4:0e:7e:1a:c6:a1:6a:ba:ea:17:2e: 14:02:ef:ea:9f:0c:70:0f:a3:34:97:fe:3e:64:fc: 76:02:06:0f:de:6c:70:bd:60:d8:2c:0e:2d:7a:0a: 56:76:aa:1f:31:ed:4a:cc:09:a1:5a:15:82:93:38: 49:d9:6d:f7:0a:70:8b:6c:23:2a:12:cc:ec:a5:d7: 6f:b6:1e:8e:f2:56:5f:0d:3f:80:4b:7b:3b:6e:85: 50:21:b9:16:05:a4:70:16:70:59:c4:66:46:8a:97: a4:4f:86:64:a7:15:6e:1b:de:b5:07:9f:b4:05:49: 64:08:46:7b:cc:58:6e:62:ff:7d:76:8c:00:f3:39: b0:5b:1d:84:12:c4:dc:69:47:9d:b6:7d:e8:42:50: f2:c5:71:84:2c:4e:9d:b2:31:53:62:c9:54:74:b1: fa:53:11:4c:99:23:92:3a:e0:30:3c:62:e5:ab:3a: 9a:f9:d7:7e:07:37:b8:98:88:bc:15:59:4c:de:02: 89:14:b4:85:08:ee:99:2d:41:38:52:f3:bd:92:7a: 41:7c:fe:d8:6e:fd:03:04:d7:98:88:7b:44:a3:bf: 97:ec:7f:f3:51:5d:f3:c6:46:04:a9:a9:ee:63:8d: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A0:75:E6:08:52:AF:1E:4C:C0:07:87:13:A9:C0:F1:94:2F:E3:83 X509v3 Authority Key Identifier: keyid:8F:4A:A5:C4:72:5A:EA:B7:4E:BF:AA:4F:CE:AF:1D:E6:60:B5:95:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j0qlxHJa6rdOv6pPzq8d5mC1lQU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/j0qlxHJa6rdOv6pPzq8d5mC1lQU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:68:c2:9b:3e:6f:f4:92:cc:bb:9b:e4:d8:32:0d:28:37:c4: e4:52:c2:55:9a:c6:10:f8:2e:2c:49:16:42:73:df:3d:80:77: 4d:c4:f0:02:bb:a5:64:27:08:de:c4:0e:3f:a1:0d:ab:15:50: dd:af:03:60:d9:f9:33:d5:d2:d7:b6:bc:2b:b2:7d:fe:4e:3b: 99:e2:ad:88:3c:cf:26:aa:c6:e9:9c:b5:74:e9:03:7c:89:5a: 2f:2a:25:46:d3:15:0e:2c:64:3b:fe:ee:11:67:49:d5:36:83: 87:60:07:ca:bb:2b:cc:43:c1:66:1e:b1:16:4f:2b:98:75:d3: 5a:fa:5f:a4:80:b9:65:7f:46:0d:20:89:2f:a6:fc:e4:93:c7: 39:10:92:31:e3:34:8f:65:fa:46:fa:e2:2d:19:73:7e:a9:78: b6:be:71:72:2b:e8:fd:12:3c:3c:90:66:4e:ca:65:19:2e:80: 6e:85:82:8e:ab:a2:30:c7:bd:20:09:88:37:b3:5b:60:97:0d: 62:51:3f:ae:23:d6:29:47:08:5e:6c:ec:8f:b1:fa:c7:5c:89: f4:27:3f:e6:cb:77:ce:13:1a:17:0c:d2:dd:f7:79:c0:17:cc: ff:f4:b1:a6:1d:5f:0b:28:22:45:47:08:5b:49:7d:b6:cf:9f: d4:9a:0e:88 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEY0 QUE1QzQ3MjVBRUFCNzRFQkZBQTRGQ0VBRjFERTY2MEI1OTUwNTAeFw0yNDExMjIx NTIyMTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlBQTA3NUU2MDg1MkFG MUU0Q0MwMDc4NzEzQTlDMEYxOTQyRkUzODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8kf3gPOht3EnZNwmWvBYBYJzEDn4axqFquuoXLhQC7+qfDHAP ozSX/j5k/HYCBg/ebHC9YNgsDi16ClZ2qh8x7UrMCaFaFYKTOEnZbfcKcItsIyoS zOyl12+2Ho7yVl8NP4BLeztuhVAhuRYFpHAWcFnEZkaKl6RPhmSnFW4b3rUHn7QF SWQIRnvMWG5i/312jADzObBbHYQSxNxpR522fehCUPLFcYQsTp2yMVNiyVR0sfpT EUyZI5I64DA8YuWrOpr5134HN7iYiLwVWUzeAokUtIUI7pktQThS872SekF8/thu /QME15iIe0Sjv5fsf/NRXfPGRgSpqe5jjZjdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmqB15ghSrx5MwAeHE6nA8ZQv44MwHwYDVR0jBBgwFoAUj0qlxHJa6rdOv6pP zq8d5mC1lQUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 Ny9qMHFseEhKYTZyZE92NnBQenE4ZDVtQzFsUVUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2owcWx4SEphNnJkT3Y2cFB6cThkNW1DMWxRVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODcvajBxbHhISmE2cmRP djZwUHpxOGQ1bUMxbFFVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIpowps+b/SSzLub5NgyDSg3xORSwlWaxhD4LixJFkJz3z2Ad03E8AK7pWQn CN7EDj+hDasVUN2vA2DZ+TPV0te2vCuyff5OO5nirYg8zyaqxumctXTpA3yJWi8q JUbTFQ4sZDv+7hFnSdU2g4dgB8q7K8xDwWYesRZPK5h101r6X6SAuWV/Rg0giS+m /OSTxzkQkjHjNI9l+kb64i0Zc36peLa+cXIr6P0SPDyQZk7KZRkugG6Fgo6rojDH vSAJiDezW2CXDWJRP64j1ilHCF5s7I+x+sdcifQnP+bLd84TGhcM0t33ecAXzP/0 saYdXwsoIkVHCFtJfbbPn9SaDog= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:43 2024 by rpki-client on console-ams.rpki-client.org