$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft File: AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft (raw, json) Hash identifier: CMTtY9xyh04GhnD6kz52uoD92BfYVuzKuPhYp5zJXec= Subject key identifier: 0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20 Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 20C8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft Manifest number: 20AE Signing time: Fri 22 Nov 2024 15:24:44 +0000 Manifest this update: Fri 22 Nov 2024 15:24:44 +0000 Manifest next update: Fri 22 Nov 2024 21:24:44 +0000 Files and hashes: 1: AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl (hash: ZlGyWwCYlYdAEwz1GwE9eRP9/mDy47/XEsxU0NyvLJU=) 2: CSaBvGQb1_hE05MX1xgcWBPmIiI.roa (hash: m38WSCj4tITebeslyaiqZI1AEvpgsNgg10zBRf31qKA=) 3: IdSYZ564NqGCV_ffZwk7Sqi0Dts.roa (hash: rYtvN7f7juMpttQmpW2teaqmcKzbU26Ih/k3JPD9GZI=) 4: KUju08L-usP_Yr1lDh5ITxKH6eQ.roa (hash: e7zv3No7BKZ5I9Nr1Dt9jkNIhRWV0EIS6TMFEHeZTro=) 5: KfP0ZCUuC1PhF8CzdtWtzcszduY.roa (hash: r/AGnm9YcBTVWRVhDcRk7BQDUKW02eT+VxXbyfnGKHY=) 6: YvkkzfNsMG-gGMhGG-RDkQr1SrQ.roa (hash: vShACIoA0Afzj3wrgfnkp6iISiTjbVGZ73quUmTzGSE=) 7: YxFSqle41GMyJITKCjdPWjHnH0M.roa (hash: awTNs5ayoiAAs+vrlSqsjGB3zkXCqChWbBnObGOG/8Q=) 8: nsm0ltu_2TAhjT1a6iu2VujuIrU.roa (hash: tq9U4/mdZYJKH1UcdouftPM9SkoI9OUoRPY6rb63K2k=) 9: snatyuWsFSZzK5vGm6qsS-IIVAU.roa (hash: 4YvjozQGgdv4XL+O1fkM/nvc/ouZfW1B9xa4puoDW2E=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8392 (0x20c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Nov 22 15:24:44 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0ACA00C337354773164EFA107456DA00F2479420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:6d:48:bc:f4:25:1f:b6:54:5a:ee:62:35: 84:9c:47:d7:7d:e3:39:fc:84:de:e4:9c:24:10:c4: 15:b7:6a:c7:11:c4:7a:8b:84:71:f9:fe:56:b0:a5: 55:e5:2c:e0:99:ec:1e:c2:20:1c:39:ff:aa:83:ba: 61:e1:52:d5:35:6b:a6:2d:39:a4:44:90:3f:e5:0c: 56:ec:4e:3f:c2:d9:77:be:01:06:66:00:c8:80:d0: bc:c2:e3:42:04:bb:38:ab:43:86:a8:97:53:18:6d: e9:4f:3d:56:6a:20:08:0d:dc:58:2f:f6:a9:ed:16: 1c:19:48:1a:b7:b9:47:ff:1c:c7:df:21:34:df:60: c9:d2:ae:fa:f4:ed:6c:a6:40:db:db:85:ae:42:1c: 87:4c:54:29:21:40:8b:e6:48:51:71:ba:a5:5a:5e: 75:55:fb:22:6e:af:74:49:cd:9b:50:46:a4:40:4c: fc:4b:8d:45:98:1f:29:ce:1a:ea:7e:56:df:7d:5b: fd:38:47:91:f1:20:47:12:aa:21:6b:30:12:eb:91: a2:b1:ed:36:b4:bd:26:0f:bf:8d:c0:de:7f:e5:70: b4:b4:8b:40:72:89:15:2a:55:81:12:a5:54:1c:e7: 28:5c:7c:f5:c0:de:43:07:f2:76:e1:c8:74:53:62: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:9e:6a:77:76:22:79:2c:1c:1c:1d:61:87:c1:18:1b:56:b2: 92:7c:00:71:2b:0e:62:79:6c:ce:4c:1e:c6:14:df:2a:2b:1c: 5c:c2:ff:67:d1:72:ce:1a:07:28:ca:1d:bf:36:b9:1a:80:30: 1b:8e:0b:40:f4:e2:c3:04:12:57:87:d5:87:36:84:da:9b:ce: 0f:a3:af:76:23:ee:55:ee:19:90:7e:7f:97:06:55:87:bf:0b: 2f:10:80:d9:7b:97:45:aa:c7:e6:b2:46:6f:2a:06:58:75:da: 3e:e4:27:0c:a5:ed:51:96:7a:00:6e:bc:e6:a3:2b:e4:62:85: 2b:d4:78:59:b7:f8:79:43:a5:5c:b2:8f:34:a4:1c:50:d7:fb: bc:8b:97:f3:0b:b2:a0:33:e2:cc:c9:24:d0:74:bc:5e:25:8d: 8b:ab:46:1a:f8:71:52:78:77:f1:92:df:b3:60:ee:b9:7a:14: 01:ed:77:8b:60:91:77:3a:d1:b8:fe:7f:f7:34:17:46:cf:de: 23:14:63:2d:b8:a3:31:f7:fb:12:81:01:c1:f2:2b:f0:9f:ed: 79:c5:cd:91:1c:aa:66:98:d3:ec:94:55:62:39:09:7f:42:0d: 3a:34:d7:0b:cf:42:a1:30:dd:e7:6e:2a:4f:8b:60:a5:b5:84: 7c:c3:37:2e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNDExMjIx NTI0NDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBBQ0EwMEMzMzczNTQ3 NzMxNjRFRkExMDc0NTZEQTAwRjI0Nzk0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjR21IvPQlH7ZUWu5iNYScR9d94zn8hN7knCQQxBW3ascRxHqL hHH5/lawpVXlLOCZ7B7CIBw5/6qDumHhUtU1a6YtOaREkD/lDFbsTj/C2Xe+AQZm AMiA0LzC40IEuzirQ4aol1MYbelPPVZqIAgN3Fgv9qntFhwZSBq3uUf/HMffITTf YMnSrvr07WymQNvbha5CHIdMVCkhQIvmSFFxuqVaXnVV+yJur3RJzZtQRqRATPxL jUWYHynOGup+Vt99W/04R5HxIEcSqiFrMBLrkaKx7Ta0vSYPv43A3n/lcLS0i0By iRUqVYESpVQc5yhcfPXA3kMH8nbhyHRTYrWbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUCsoAwzc1R3MWTvoQdFbaAPJHlCAwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvQVMxREY3eWhaZy1J Qm0tSkQ0d0VyMVZ3QU1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABmeand2InksHBwdYYfBGBtWspJ8AHErDmJ5bM5MHsYU3yorHFzC/2fRcs4a ByjKHb82uRqAMBuOC0D04sMEEleH1Yc2hNqbzg+jr3Yj7lXuGZB+f5cGVYe/Cy8Q gNl7l0Wqx+ayRm8qBlh12j7kJwyl7VGWegBuvOajK+RihSvUeFm3+HlDpVyyjzSk HFDX+7yLl/MLsqAz4szJJNB0vF4ljYurRhr4cVJ4d/GS37Ng7rl6FAHtd4tgkXc6 0bj+f/c0F0bP3iMUYy24ozH3+xKBAcHyK/Cf7XnFzZEcqmaY0+yUVWI5CX9CDTo0 1wvPQqEw3eduKk+LYKW1hHzDNy4= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:40 2024 by rpki-client on console-fra.rpki-client.org