$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft File: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft (raw, json) Hash identifier: WF1c3n4hULx0cub2MUJB57h1P4JyyPOz2NPLL/hq9ek= Subject key identifier: BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 1AB6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft Manifest number: 1A9D Signing time: Fri 22 Nov 2024 10:23:09 +0000 Manifest this update: Fri 22 Nov 2024 10:23:09 +0000 Manifest next update: Fri 22 Nov 2024 16:23:09 +0000 Files and hashes: 1: -4o0WGpqEV7uyxJUjvW9KVxV_2o.roa (hash: NGXO1blN+ZBBYo7yt1q8tUoEN8aw54fBZR/lgPAB56k=) 2: Pt7MKh0n-lJ3nYitp0gSzjd-3sM.roa (hash: m2WKa8y693pYufEl/GfpJuF3xdm09VTsD4N5UMrdzic=) 3: TuQpDFJK1_1qLRcTRc1_jogl7ys.roa (hash: jvBUuRfTjbK741PpO/I05hgxupPE1w40PFUdneMG4Fk=) 4: _02AP_Ab-_jw9IDmIAqp2qDpjJs.roa (hash: ZhDrB4oZVidoAiqetv4zpFhA9Kovxdk7zueVEXl3w/o=) 5: bTrvez5N-Jq_G_Qk5X90zaGxmZw.roa (hash: SXyBZkTK7VEXPzjUnZ6Gb01MMcuIlJ3Bvrwvh1T7xeQ=) 6: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl (hash: iToznDwsn1J+ls+awC3uVFEzlyeqcFGrtoPDnxTxZNg=) 7: uLl9tf16e7y8aZ3U5ALhXolfrZQ.roa (hash: c+U9W5b5DtFUAJJHBPcxrLMu67ozyjfFmii0yG6Otq8=) 8: zIkyvYCG3xltDU6QordYYLqh4z0.roa (hash: cN5JanPEHEZFoNiw34OnU87vXF/zaAl/ToJRqZKqfaA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6838 (0x1ab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Nov 22 10:23:09 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BC98CFDBBC48A5E94B32F2C4A7540E5F24A8CB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:30:f2:4e:46:12:02:76:42:18:3c:5d:8e: 31:65:87:a0:0d:ff:4f:b1:92:64:8f:82:6b:c2:ed: f0:b4:e2:0d:6d:f9:a5:5a:43:8b:59:f8:d5:7b:7d: 82:49:71:66:82:77:32:de:84:c8:ba:63:fa:01:c6: b1:e4:eb:94:47:b9:b8:2e:f2:f6:59:4a:46:a3:87: 86:b4:f0:0f:25:0a:f4:a3:00:0b:94:1b:a3:43:89: a9:80:20:c7:4a:85:12:dc:ac:4e:f5:15:80:9f:9b: d4:91:25:7b:15:e9:8b:51:41:dd:93:e0:f0:74:4a: c4:1f:76:72:46:0e:29:b2:97:07:00:bc:cd:e5:a4: fe:e1:38:19:54:9f:85:b8:70:57:2d:8c:fe:bb:ca: 56:bb:0c:d0:9e:d9:1e:a1:97:16:e3:fc:99:94:e9: 34:1e:0f:69:f8:6d:63:04:91:30:64:ac:46:3e:1c: eb:be:f4:d2:2c:fd:e3:ca:12:fe:19:e5:0e:02:b2: 2a:41:bf:f7:cb:1a:03:e1:e5:4a:53:1b:06:9e:cd: ed:8e:1d:8e:80:0c:98:57:83:52:43:98:ee:bf:8f: ec:eb:a3:c9:15:a0:c0:49:30:de:e0:f7:00:60:0a: cc:89:58:dd:d4:23:84:45:78:2d:50:fc:f7:54:0f: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d4:9e:d9:80:bd:2f:66:d0:7c:20:c3:c5:41:cd:7f:30:89: d6:dc:1d:aa:a5:63:82:1b:13:f2:db:ea:f6:45:f3:ad:dd:aa: 00:60:f6:c2:2a:18:67:7c:ca:58:82:fe:bb:72:fb:2b:fe:76: 6d:be:a6:23:38:9d:c6:57:ec:dd:a3:b8:15:5b:36:a3:e3:40: 50:31:f8:cc:14:b6:b3:a1:df:71:87:d5:2e:fd:df:46:10:ba: 58:ed:7e:66:fd:af:3c:d0:15:f9:76:96:fb:9d:1c:53:f1:9b: 86:a8:1e:22:ce:58:1e:9d:6a:5e:3a:9e:57:99:5d:38:ab:39: 6a:97:eb:e5:0d:74:f9:4d:3c:dc:a6:3c:32:a1:1f:5a:c6:1d: c7:e9:89:52:06:4c:14:63:7b:fd:ef:20:91:28:a4:8e:36:9f: 1f:40:ca:ec:b3:42:39:fc:18:e2:21:11:3a:6b:6a:9f:3f:75: f6:64:5b:81:e5:b8:a3:d2:45:d4:39:db:dc:78:d8:06:b6:cd: 89:01:e6:d7:e1:ed:e6:4e:d0:f5:7c:e2:8b:f8:3f:d2:aa:29: 88:0d:ec:f3:69:eb:f7:7b:f8:70:8e:09:94:6b:60:04:1f:21: 7f:f1:74:db:7f:c5:ad:74:31:89:36:69:26:46:aa:af:07:67: dd:02:32:62 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGrYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNDExMjIx MDIzMDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJDOThDRkRCQkM0OEE1 RTk0QjMyRjJDNEE3NTQwRTVGMjRBOENCMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWdDDyTkYSAnZCGDxdjjFlh6AN/0+xkmSPgmvC7fC04g1t+aVa Q4tZ+NV7fYJJcWaCdzLehMi6Y/oBxrHk65RHubgu8vZZSkajh4a08A8lCvSjAAuU G6NDiamAIMdKhRLcrE71FYCfm9SRJXsV6YtRQd2T4PB0SsQfdnJGDimylwcAvM3l pP7hOBlUn4W4cFctjP67yla7DNCe2R6hlxbj/JmU6TQeD2n4bWMEkTBkrEY+HOu+ 9NIs/ePKEv4Z5Q4CsipBv/fLGgPh5UpTGwaeze2OHY6ADJhXg1JDmO6/j+zro8kV oMBJMN7g9wBgCsyJWN3UI4RFeC1Q/PdUD8iBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUvJjP27xIpelLMvLEp1QOXySoyxswHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvcVRxR2NTYUVweTVk OUI4QXI2Qk1Yd0dwZHpVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALzUntmAvS9m0Hwgw8VBzX8widbcHaqlY4IbE/Lb6vZF863dqgBg9sIqGGd8 yliC/rty+yv+dm2+piM4ncZX7N2juBVbNqPjQFAx+MwUtrOh33GH1S7930YQuljt fmb9rzzQFfl2lvudHFPxm4aoHiLOWB6dal46nleZXTirOWqX6+UNdPlNPNymPDKh H1rGHcfpiVIGTBRje/3vIJEopI42nx9AyuyzQjn8GOIhETprap8/dfZkW4HluKPS RdQ529x42Aa2zYkB5tfh7eZO0PV84ov4P9KqKYgN7PNp6/d7+HCOCZRrYAQfIX/x dNt/xa10MYk2aSZGqq8HZ90CMmI= -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:26 2024 by rpki-client on console-ams.rpki-client.org