$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft File: hTRSS_5XzTyFZI-ryLwRC4vixb4.mft (raw, json) Hash identifier: fyVu5Glbl3YoXpPz1vb6A22t3Xx8DDDRy9lBqtPhZtM= Subject key identifier: BA:2C:1F:6C:2C:B7:DB:92:11:15:6E:20:50:46:2B:59:6D:96:98:ED Authority key identifier: 85:34:52:4B:FE:57:CD:3C:85:64:8F:AB:C8:BC:11:0B:8B:E2:C5:BE Certificate issuer: /CN=8534524BFE57CD3C85648FABC8BC110B8BE2C5BE Certificate serial: 0B42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft Manifest number: 0B42 Signing time: Fri 22 Nov 2024 15:21:41 +0000 Manifest this update: Fri 22 Nov 2024 15:21:41 +0000 Manifest next update: Fri 22 Nov 2024 21:21:41 +0000 Files and hashes: 1: hTRSS_5XzTyFZI-ryLwRC4vixb4.crl (hash: CEXXBnafAhnPF7+AOeaUjkbMoDI0XrUUoSyVBsCp08s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2882 (0xb42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8534524BFE57CD3C85648FABC8BC110B8BE2C5BE Validity Not Before: Nov 22 15:21:41 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BA2C1F6C2CB7DB9211156E2050462B596D9698ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:dd:d7:aa:d0:74:4b:22:b1:24:f7:f1:14: c1:33:a3:eb:aa:a6:5a:88:83:ca:99:e6:6b:db:07: 5e:c5:55:8d:c5:01:59:2a:4f:9e:1f:01:1c:0f:59: c3:c8:07:d7:cb:c0:1b:36:4c:69:58:ed:62:53:26: d6:8a:00:fd:10:57:fe:d6:6c:83:46:01:81:22:fc: 6d:c7:d5:3f:d3:60:c9:74:ff:ce:6b:e8:9f:20:cd: de:ae:a4:a7:20:2f:d5:7a:8e:14:6a:d1:4b:aa:2d: c8:f3:81:71:cd:d5:c0:ba:d8:fd:47:5c:de:27:4b: e3:40:69:3b:43:8d:d8:29:39:5c:58:28:6b:96:4b: 2c:60:70:eb:98:12:ff:ec:1d:8e:85:e5:f3:76:7b: 50:7e:5b:0a:98:d2:6e:c1:d8:91:6c:8e:2e:bd:61: e6:7b:bd:88:00:63:46:d3:40:8f:f6:97:d4:02:0c: 92:4d:1a:f3:e9:1e:74:cd:1d:d5:ae:1c:eb:3a:f9: 95:7d:e7:09:f8:58:a5:92:b7:3f:b4:64:0a:a9:9a: bc:8b:16:8d:b6:e1:af:4a:48:8f:ac:9f:eb:c8:a0: 96:99:ef:59:89:23:d7:e7:33:1d:c6:7b:63:86:10: 15:cd:48:7b:06:4e:07:70:4b:cf:67:b6:49:c4:85: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2C:1F:6C:2C:B7:DB:92:11:15:6E:20:50:46:2B:59:6D:96:98:ED X509v3 Authority Key Identifier: keyid:85:34:52:4B:FE:57:CD:3C:85:64:8F:AB:C8:BC:11:0B:8B:E2:C5:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hTRSS_5XzTyFZI-ryLwRC4vixb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/hTRSS_5XzTyFZI-ryLwRC4vixb4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:db:5b:e7:9a:1e:c3:68:e3:e2:f3:86:46:d4:fd:45:04:ed: a3:ee:99:34:45:21:6d:75:2e:97:b7:bb:cc:7f:17:48:79:85: a3:7f:3a:d3:93:fe:20:bd:2f:da:83:dd:de:10:00:ae:46:7c: c7:e1:ca:df:1c:3e:18:8b:71:95:24:2c:a8:b1:61:60:72:04: f0:76:5e:6f:02:0a:9a:c7:b3:39:30:1e:34:bb:ad:b3:95:5a: a7:d9:90:f2:75:74:27:a6:5f:b0:e8:1b:77:1d:e6:87:05:a6: 89:00:48:f6:52:92:8b:68:3a:ea:ec:9a:99:2e:94:d2:32:06: fa:30:95:a1:9d:12:89:68:83:ed:bf:3e:54:78:f8:39:e4:65: 77:01:ef:99:55:49:97:90:e8:42:57:0a:64:1d:92:f5:fd:95: e5:29:69:fd:47:b4:c3:03:c2:b2:f6:8e:91:19:fd:ba:68:8d: fb:ca:a4:df:cf:f8:ab:56:06:b9:67:85:90:90:a6:34:a8:c5: 49:51:9d:db:25:15:4a:f9:16:05:7e:0f:de:ef:bd:f5:76:c2: 27:5f:69:b2:e4:a2:9c:b0:5c:54:d4:3b:3e:d4:5f:22:03:99: ef:02:9e:d5:68:31:18:0d:11:a0:16:e7:0c:dc:8d:32:e8:cd: 98:85:2c:57 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODUz NDUyNEJGRTU3Q0QzQzg1NjQ4RkFCQzhCQzExMEI4QkUyQzVCRTAeFw0yNDExMjIx NTIxNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJBMkMxRjZDMkNCN0RC OTIxMTE1NkUyMDUwNDYyQjU5NkQ5Njk4RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0Hd3XqtB0SyKxJPfxFMEzo+uqplqIg8qZ5mvbB17FVY3FAVkq T54fARwPWcPIB9fLwBs2TGlY7WJTJtaKAP0QV/7WbINGAYEi/G3H1T/TYMl0/85r 6J8gzd6upKcgL9V6jhRq0UuqLcjzgXHN1cC62P1HXN4nS+NAaTtDjdgpOVxYKGuW SyxgcOuYEv/sHY6F5fN2e1B+WwqY0m7B2JFsji69YeZ7vYgAY0bTQI/2l9QCDJJN GvPpHnTNHdWuHOs6+ZV95wn4WKWStz+0ZAqpmryLFo224a9KSI+sn+vIoJaZ71mJ I9fnMx3Ge2OGEBXNSHsGTgdwS89ntknEheXXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUuiwfbCy325IRFW4gUEYrWW2WmO0wHwYDVR0jBBgwFoAUhTRSS/5XzTyFZI+r yLwRC4vixb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OS9oVFJTU181WHpUeUZaSS1yeUx3UkM0dml4YjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hUUlNTXzVYelR5RlpJLXJ5THdSQzR2aXhiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvaFRSU1NfNVh6VHlG WkktcnlMd1JDNHZpeGI0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIrbW+eaHsNo4+LzhkbU/UUE7aPumTRFIW11Lpe3u8x/F0h5haN/OtOT/iC9 L9qD3d4QAK5GfMfhyt8cPhiLcZUkLKixYWByBPB2Xm8CCprHszkwHjS7rbOVWqfZ kPJ1dCemX7DoG3cd5ocFpokASPZSkotoOursmpkulNIyBvowlaGdEolog+2/PlR4 +DnkZXcB75lVSZeQ6EJXCmQdkvX9leUpaf1HtMMDwrL2jpEZ/bpojfvKpN/P+KtW BrlnhZCQpjSoxUlRndslFUr5FgV+D97vvfV2widfabLkopywXFTUOz7UXyIDme8C ntVoMRgNEaAW5wzcjTLozZiFLFc= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:39 2024 by rpki-client on console-fra.rpki-client.org