$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft File: -7JZNquvAsZtbrsyhSU9KZuXQFk.mft (raw, json) Hash identifier: 0JOIIQA28B0R9O96srY0KhEGYBlPerpJ8OvbiEvZLKc= Subject key identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD Authority key identifier: FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 Certificate issuer: /CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Certificate serial: 4708 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft Manifest number: 4708 Signing time: Fri 22 Nov 2024 10:23:14 +0000 Manifest this update: Fri 22 Nov 2024 10:23:14 +0000 Manifest next update: Fri 22 Nov 2024 16:23:14 +0000 Files and hashes: 1: -7JZNquvAsZtbrsyhSU9KZuXQFk.crl (hash: 2/XmHqrUqZcSdiChvG61Z4da/rRYTzsgUGoq1WufSsI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18184 (0x4708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Validity Not Before: Nov 22 10:23:14 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B468794992F37BADE13F31D88901F83D053D70FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:3e:c7:56:4d:10:09:46:e5:3d:42:bb:6e: 0c:b6:4c:30:39:58:09:b5:98:14:4b:c0:cb:f4:f7: 19:b1:d9:ac:34:d9:20:61:68:2b:d4:67:bd:ca:56: 00:6a:57:c0:76:7b:7b:62:ea:17:fa:8d:c8:79:25: a4:94:58:fc:cd:a4:91:c2:f3:fd:f5:19:43:cc:fb: 01:80:84:46:64:75:1d:ce:ff:c7:f6:d6:4a:0a:fa: 52:02:52:14:b7:b1:bb:52:08:93:5a:52:11:ef:fc: 43:42:62:07:e4:83:fd:35:a5:36:6f:5b:7b:32:24: 5b:72:2e:20:3b:a6:88:b6:3e:5f:b1:2c:5b:ae:35: 27:cc:b7:d3:64:74:9f:ca:08:7f:41:e4:40:d4:4e: be:83:02:b7:96:7a:b4:fc:35:14:a0:da:bc:41:ec: 6a:d9:59:34:81:f8:fc:b0:1a:e3:b7:28:de:9f:65: fa:1e:96:16:19:1f:e6:2b:b7:73:68:e2:ae:a7:19: ba:32:32:57:ec:a5:4e:bc:8d:ea:d1:1a:13:b0:fd: d0:06:04:70:4d:50:75:3c:6f:be:81:d4:ed:6e:90: 50:93:4d:9c:7b:ae:55:d2:4b:fc:2b:2c:c7:f9:ac: 8c:b7:14:4b:be:0f:91:79:4d:c8:24:f5:42:c0:e1: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD X509v3 Authority Key Identifier: keyid:FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b0:12:07:5a:75:81:d7:69:f8:15:be:c4:a7:04:3e:df:e5: 9f:c1:d1:1e:4d:bd:c2:ad:bf:bd:94:54:55:63:c2:37:89:51: ed:af:c5:7e:07:4c:c9:c2:de:f3:30:18:57:d0:f4:78:d8:37: 7c:8b:6c:af:a9:3b:a4:06:49:ff:ac:3f:b3:85:63:b7:51:a9: cf:ad:76:2e:80:51:64:74:62:29:65:7f:67:fa:7d:9a:d1:60: a0:81:94:6d:05:ae:40:c6:63:d1:74:8b:c5:e6:65:62:e6:f9: 23:49:c0:78:76:00:9b:5d:28:d3:e6:31:e6:cd:1b:b9:4d:b0: b0:a8:42:0c:e2:a4:5a:1a:b5:56:b6:14:9d:c7:ba:d5:4b:a0: c7:09:b6:ef:29:f7:e9:1e:5a:87:0b:46:17:1e:ef:d2:51:75: 00:53:48:f2:c8:58:47:f8:2f:f9:18:ac:54:5e:61:a7:cf:05: d9:b6:5e:18:4a:3a:f6:74:55:7f:99:c5:16:64:79:9a:60:b1: 80:87:92:2a:73:0d:69:59:4c:d3:b6:49:b0:db:53:5c:4e:f1: 7b:cd:c0:be:1a:69:14:b8:b1:59:b1:f5:81:8a:88:ee:61:a7: d8:57:60:ad:2b:ae:d4:32:69:52:fc:45:5e:5e:f6:a3:fb:ea: 06:7c:06:0b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICRwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJC MjU5MzZBQkFGMDJDNjZENkVCQjMyODUyNTNEMjk5Qjk3NDA1OTAeFw0yNDExMjIx MDIzMTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI0Njg3OTQ5OTJGMzdC QURFMTNGMzFEODg5MDFGODNEMDUzRDcwRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCBD7HVk0QCUblPUK7bgy2TDA5WAm1mBRLwMv09xmx2aw02SBh aCvUZ73KVgBqV8B2e3ti6hf6jch5JaSUWPzNpJHC8/31GUPM+wGAhEZkdR3O/8f2 1koK+lICUhS3sbtSCJNaUhHv/ENCYgfkg/01pTZvW3syJFtyLiA7poi2Pl+xLFuu NSfMt9NkdJ/KCH9B5EDUTr6DAreWerT8NRSg2rxB7GrZWTSB+PywGuO3KN6fZfoe lhYZH+Yrt3No4q6nGboyMlfspU68jerRGhOw/dAGBHBNUHU8b76B1O1ukFCTTZx7 rlXSS/wrLMf5rIy3FEu+D5F5Tcgk9ULA4XtvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUtGh5SZLze63hPzHYiQH4PQU9cP0wHwYDVR0jBBgwFoAU+7JZNquvAsZtbrsy hSU9KZuXQFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx MC8tN0paTnF1dkFzWnRicnN5aFNVOUtadVhRRmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy03SlpOcXV2QXNadGJyc3loU1U5S1p1WFFGay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTAvLTdKWk5xdXZBc1p0 YnJzeWhTVTlLWnVYUUZrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKawEgdadYHXafgVvsSnBD7f5Z/B0R5NvcKtv72UVFVjwjeJUe2vxX4HTMnC 3vMwGFfQ9HjYN3yLbK+pO6QGSf+sP7OFY7dRqc+tdi6AUWR0Yillf2f6fZrRYKCB lG0FrkDGY9F0i8XmZWLm+SNJwHh2AJtdKNPmMebNG7lNsLCoQgzipFoatVa2FJ3H utVLoMcJtu8p9+keWocLRhce79JRdQBTSPLIWEf4L/kYrFReYafPBdm2XhhKOvZ0 VX+ZxRZkeZpgsYCHkipzDWlZTNO2SbDbU1xO8XvNwL4aaRS4sVmx9YGKiO5hp9hX YK0rrtQyaVL8RV5e9qP76gZ8Bgs= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:37 2024 by rpki-client on console-fra.rpki-client.org