$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft File: TS1a-PNilt7eZELYEcBKdAhswCk.mft (raw, json) Hash identifier: 3WGMb47kyPM8wWq/iY+PY/n3drW5hkHUzXpcD+59nvc= Subject key identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 Authority key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 Certificate issuer: /CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Certificate serial: 199B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft Manifest number: 199B Signing time: Fri 22 Nov 2024 15:25:41 +0000 Manifest this update: Fri 22 Nov 2024 15:25:41 +0000 Manifest next update: Fri 22 Nov 2024 21:25:41 +0000 Files and hashes: 1: TS1a-PNilt7eZELYEcBKdAhswCk.crl (hash: DltKFAxcqAJ+PSO3B6zCX9joaDOX72uzVgRETRL3YKQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6555 (0x199b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Validity Not Before: Nov 22 15:25:41 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FB05EB7D2AA945F23FDF3EE47C8BEE704F06A134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:4f:7d:fc:28:2d:d7:cd:f1:6e:6e:4e:d9: d7:54:74:5a:df:76:cd:82:70:0b:4d:ee:b7:b7:8a: 50:8a:b1:fd:c2:a7:0e:ac:0d:35:a3:59:47:52:b8: da:5c:4c:59:79:1d:ae:1f:06:ce:31:bb:67:03:b6: 18:7e:e6:6f:b9:2d:27:2b:59:a3:bd:d1:b7:7a:f2: c5:8f:5a:14:3c:c4:51:a6:7f:4b:42:fb:76:88:0d: 7f:f8:2d:36:29:1b:73:31:02:b2:f6:2f:84:c0:17: 67:5c:9e:b7:db:48:f1:e1:f9:1d:53:15:38:19:5e: 9e:3b:65:09:3d:2d:2b:14:9e:e9:44:ee:5c:fb:4c: 6d:31:68:42:0f:12:1f:f5:d2:50:57:ee:dc:a3:77: c4:e0:1c:65:0a:c3:fc:6d:98:0f:25:b7:51:c6:88: 34:3f:65:e9:e9:5b:8d:6e:64:75:b1:50:74:51:59: e7:21:fe:84:62:ef:e2:e4:8f:95:08:7e:7e:2f:b3: b7:d6:09:18:c8:aa:3b:86:c9:89:66:76:c6:c6:07: 8e:d9:19:9f:90:61:8e:3d:27:fb:d9:bc:21:3b:7e: f5:25:c9:e2:00:6e:22:09:21:da:1e:b3:8d:cd:73: 4c:a5:38:1f:4d:7e:47:0f:6d:cc:38:75:61:6a:b8: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 X509v3 Authority Key Identifier: keyid:4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:95:c0:f8:01:99:aa:73:35:64:03:36:0f:3b:94:db:d6:dd: b0:94:36:79:7f:49:dd:b3:3d:ae:19:8c:b9:39:7e:5b:ed:7c: fb:e0:d7:f6:94:28:1f:da:f5:60:ce:7c:24:8c:d1:96:47:de: 2e:11:ea:d9:bd:52:ac:fa:26:41:4d:68:a3:48:d3:84:77:ac: bb:b1:a8:09:78:47:1a:5d:8f:4b:12:9c:51:13:ec:b7:bd:8e: 5d:1d:51:eb:86:39:f8:c7:6b:13:50:e9:3a:1a:e6:22:51:6a: 28:cb:41:79:21:3a:9f:c7:17:7d:19:d3:aa:ad:ce:7c:ab:be: 86:e4:53:7b:57:00:bf:8c:9a:7a:ef:3f:bd:33:68:95:95:d3: 36:20:75:3c:e8:bc:20:80:b9:8e:8e:e4:52:53:3d:e1:fd:29: b4:f1:95:c4:4c:ef:1b:ca:3b:6d:31:d2:97:8c:20:20:01:7c: b0:b7:51:6e:83:6f:66:f6:64:1f:19:8c:e7:ed:24:92:b7:66: 14:3d:6a:36:6e:83:7c:d9:14:17:4d:c3:45:b4:7b:c5:aa:c7: e9:e5:a3:2c:fa:c7:67:3d:fc:fb:a7:8c:46:7a:23:f1:9f:d3: 1a:eb:46:7e:6f:2d:95:18:44:91:2a:b9:f0:f7:f6:62:ec:f2: 4c:02:08:be -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEQy RDVBRjhGMzYyOTZERURFNjQ0MkQ4MTFDMDRBNzQwODZDQzAyOTAeFw0yNDExMjIx NTI1NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZCMDVFQjdEMkFBOTQ1 RjIzRkRGM0VFNDdDOEJFRTcwNEYwNkExMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLMk99/Cgt183xbm5O2ddUdFrfds2CcAtN7re3ilCKsf3Cpw6s DTWjWUdSuNpcTFl5Ha4fBs4xu2cDthh+5m+5LScrWaO90bd68sWPWhQ8xFGmf0tC +3aIDX/4LTYpG3MxArL2L4TAF2dcnrfbSPHh+R1TFTgZXp47ZQk9LSsUnulE7lz7 TG0xaEIPEh/10lBX7tyjd8TgHGUKw/xtmA8lt1HGiDQ/ZenpW41uZHWxUHRRWech /oRi7+Lkj5UIfn4vs7fWCRjIqjuGyYlmdsbGB47ZGZ+QYY49J/vZvCE7fvUlyeIA biIJIdoes43Nc0ylOB9NfkcPbcw4dWFquOJtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+wXrfSqpRfI/3z7kfIvucE8GoTQwHwYDVR0jBBgwFoAUTS1a+PNilt7eZELY EcBKdAhswCkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc5 MC9UUzFhLVBOaWx0N2VaRUxZRWNCS2RBaHN3Q2suY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RTMWEtUE5pbHQ3ZVpFTFlFY0JLZEFoc3dDay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3OTAvVFMxYS1QTmlsdDdl WkVMWUVjQktkQWhzd0NrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIeVwPgBmapzNWQDNg87lNvW3bCUNnl/Sd2zPa4ZjLk5flvtfPvg1/aUKB/a 9WDOfCSM0ZZH3i4R6tm9Uqz6JkFNaKNI04R3rLuxqAl4Rxpdj0sSnFET7Le9jl0d UeuGOfjHaxNQ6Toa5iJRaijLQXkhOp/HF30Z06qtznyrvobkU3tXAL+MmnrvP70z aJWV0zYgdTzovCCAuY6O5FJTPeH9KbTxlcRM7xvKO20x0peMICABfLC3UW6Db2b2 ZB8ZjOftJJK3ZhQ9ajZug3zZFBdNw0W0e8Wqx+nloyz6x2c9/PunjEZ6I/Gf0xrr Rn5vLZUYRJEqufD39mLs8kwCCL4= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:39 2024 by rpki-client on console-fra.rpki-client.org