$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft File: KKY-9HFn8eZudn8uDEqFADvLlAA.mft (raw, json) Hash identifier: UOreXO/XhMlDM4IZUrPEFNJf3GPcFFsClv6Q+HO1J1s= Subject key identifier: 73:FD:CC:BD:47:6E:FB:4A:6A:C8:82:41:66:25:43:D0:FB:B7:B0:73 Authority key identifier: 28:A6:3E:F4:71:67:F1:E6:6E:76:7F:2E:0C:4A:85:00:3B:CB:94:00 Certificate issuer: /CN=28A63EF47167F1E66E767F2E0C4A85003BCB9400 Certificate serial: 22FA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KKY-9HFn8eZudn8uDEqFADvLlAA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft Manifest number: 22FA Signing time: Fri 22 Nov 2024 10:21:09 +0000 Manifest this update: Fri 22 Nov 2024 10:21:09 +0000 Manifest next update: Fri 22 Nov 2024 16:21:09 +0000 Files and hashes: 1: KKY-9HFn8eZudn8uDEqFADvLlAA.crl (hash: ste43gT0EVLpILXpqz+j+XjMcagv+oxjoFww+j5aFUQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KKY-9HFn8eZudn8uDEqFADvLlAA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8954 (0x22fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A63EF47167F1E66E767F2E0C4A85003BCB9400 Validity Not Before: Nov 22 10:21:09 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=73FDCCBD476EFB4A6AC88241662543D0FBB7B073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:da:e1:89:8e:76:94:a0:20:11:88:8c:47: d4:e9:31:d3:40:30:11:b0:f9:e6:1c:4b:fe:2c:54: 0c:b8:72:76:f8:78:2a:33:0e:15:5d:e4:c9:21:c3: 09:8c:8d:37:e8:f3:b9:78:5c:e1:e5:84:32:bb:df: cc:d3:22:71:6f:5c:8e:05:10:f8:4d:fc:04:09:80: 17:34:fd:20:34:b1:25:07:fb:43:be:3d:ed:29:e9: 60:da:74:f2:ae:ed:de:20:5a:bd:02:ba:4e:1b:1f: 3a:6e:36:13:6f:d4:5a:ca:75:f6:1c:91:7a:88:6c: 4a:d2:3d:ce:9c:71:35:39:4a:28:4c:e6:2b:2b:29: 33:34:c8:32:da:ba:5d:34:05:66:02:38:eb:c0:37: f8:ae:d0:7b:45:b5:aa:6b:bf:cc:d4:77:80:4a:45: 25:96:e5:62:7e:39:69:e0:ab:31:f7:d1:95:38:77: e0:e9:fa:e3:47:c5:56:24:96:ea:4d:2b:d3:b8:be: 70:74:14:d0:00:44:17:c3:2e:b2:14:17:8c:d8:a7: c0:4c:f3:04:4f:3a:2d:99:a6:c9:bb:12:84:60:6e: ad:55:24:3e:2a:1a:7a:df:3f:e3:ff:fd:dd:64:fc: fb:ea:ce:99:27:dd:98:90:a2:c1:7b:0d:a8:14:c3: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FD:CC:BD:47:6E:FB:4A:6A:C8:82:41:66:25:43:D0:FB:B7:B0:73 X509v3 Authority Key Identifier: keyid:28:A6:3E:F4:71:67:F1:E6:6E:76:7F:2E:0C:4A:85:00:3B:CB:94:00 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KKY-9HFn8eZudn8uDEqFADvLlAA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/KKY-9HFn8eZudn8uDEqFADvLlAA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:69:54:74:fb:ea:b2:8c:ca:62:5f:a5:fe:30:0b:5c:8e:43: 29:eb:56:b1:7a:3a:da:ae:9f:ca:2b:ff:24:b1:13:ca:ff:ca: f4:6e:48:ab:b4:98:63:af:ed:5c:00:8c:92:a9:3b:c8:43:46: aa:f1:df:a1:1e:d4:11:54:ea:d5:7e:85:90:ef:c0:5f:71:2f: 9f:a3:2c:2d:1d:04:37:4d:6f:af:82:a0:ea:7a:9f:63:20:ae: 9d:cc:bc:1b:c9:92:8c:30:6b:3c:71:2d:9c:c6:ab:f2:ae:e7: 79:53:87:79:9f:35:60:2f:ad:3b:c1:8d:0a:53:52:d4:80:0c: 3f:53:45:8a:c7:76:bd:0a:a4:e4:a9:04:a2:f6:7e:38:12:22: 57:b1:e7:51:2f:9e:92:cf:fa:80:0c:c8:48:e7:ba:09:82:03: c7:63:52:ea:d5:99:c3:82:b5:a3:51:06:95:ab:8d:cf:00:f2: 5e:2c:a3:86:32:5e:31:4d:98:85:ee:68:4f:41:19:7d:dd:84: 7e:ad:f1:d1:db:28:26:25:f2:af:25:11:c2:75:82:1e:f7:f4: 35:96:20:42:9a:91:24:62:83:4c:ff:83:05:fe:a2:b4:a2:9c: 95:72:8a:6e:bb:56:98:23:f9:81:b2:be:c4:23:54:55:9e:cb: af:0e:07:b3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjhB NjNFRjQ3MTY3RjFFNjZFNzY3RjJFMEM0QTg1MDAzQkNCOTQwMDAeFw0yNDExMjIx MDIxMDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDczRkRDQ0JENDc2RUZC NEE2QUM4ODI0MTY2MjU0M0QwRkJCN0IwNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBa9rhiY52lKAgEYiMR9TpMdNAMBGw+eYcS/4sVAy4cnb4eCoz DhVd5MkhwwmMjTfo87l4XOHlhDK738zTInFvXI4FEPhN/AQJgBc0/SA0sSUH+0O+ Pe0p6WDadPKu7d4gWr0Cuk4bHzpuNhNv1FrKdfYckXqIbErSPc6ccTU5SihM5isr KTM0yDLaul00BWYCOOvAN/iu0HtFtaprv8zUd4BKRSWW5WJ+OWngqzH30ZU4d+Dp +uNHxVYklupNK9O4vnB0FNAARBfDLrIUF4zYp8BM8wRPOi2Zpsm7EoRgbq1VJD4q GnrfP+P//d1k/Pvqzpkn3ZiQosF7DagUw8VPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUc/3MvUdu+0pqyIJBZiVD0Pu3sHMwHwYDVR0jBBgwFoAUKKY+9HFn8eZudn8u DEqFADvLlAAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 Ny9LS1ktOUhGbjhlWnVkbjh1REVxRkFEdkxsQUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0tLWS05SEZuOGVadWRuOHVERXFGQUR2TGxBQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTcvS0tZLTlIRm44ZVp1 ZG44dURFcUZBRHZMbEFBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEBpVHT76rKMymJfpf4wC1yOQynrVrF6Otqun8or/ySxE8r/yvRuSKu0mGOv 7VwAjJKpO8hDRqrx36Ee1BFU6tV+hZDvwF9xL5+jLC0dBDdNb6+CoOp6n2Mgrp3M vBvJkowwazxxLZzGq/Ku53lTh3mfNWAvrTvBjQpTUtSADD9TRYrHdr0KpOSpBKL2 fjgSIlex51EvnpLP+oAMyEjnugmCA8djUurVmcOCtaNRBpWrjc8A8l4so4YyXjFN mIXuaE9BGX3dhH6t8dHbKCYl8q8lEcJ1gh739DWWIEKakSRig0z/gwX+orSinJVy im67Vpgj+YGyvsQjVFWey68OB7M= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:38 2024 by rpki-client on console-fra.rpki-client.org