$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft File: ndo_saueLKtRkuiQnryzPkC2JkE.mft (raw, json) Hash identifier: XsQ7ZI5w3y1A4sDRRv+FIq6DJWu6iAmao+KljaXurG0= Subject key identifier: 6F:79:5B:1E:77:D8:E3:54:96:BE:0F:B2:C5:1B:9D:17:D6:80:B4:F7 Authority key identifier: 9D:DA:3F:B1:AB:9E:2C:AB:51:92:E8:90:9E:BC:B3:3E:40:B6:26:41 Certificate issuer: /CN=9DDA3FB1AB9E2CAB5192E8909EBCB33E40B62641 Certificate serial: 1187 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ndo_saueLKtRkuiQnryzPkC2JkE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft Manifest number: 1187 Signing time: Fri 22 Nov 2024 15:21:42 +0000 Manifest this update: Fri 22 Nov 2024 15:21:42 +0000 Manifest next update: Fri 22 Nov 2024 21:21:42 +0000 Files and hashes: 1: ndo_saueLKtRkuiQnryzPkC2JkE.crl (hash: iIbMFEY/0svvuoqqE6H2YqP9P5ZW47i6THdzS7R2e8U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ndo_saueLKtRkuiQnryzPkC2JkE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4487 (0x1187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDA3FB1AB9E2CAB5192E8909EBCB33E40B62641 Validity Not Before: Nov 22 15:21:42 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6F795B1E77D8E35496BE0FB2C51B9D17D680B4F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:61:f2:ca:4d:77:a1:f1:b3:bb:e9:57:92: 91:66:42:c3:10:3f:9a:6b:63:86:01:0a:83:68:0d: 1e:44:e5:6c:34:af:2f:29:1d:0b:70:a9:4e:26:2d: c5:af:82:20:dc:b0:bd:a4:8f:cd:4b:6b:a2:62:5f: 2d:98:ab:77:79:e0:4b:ec:07:f9:54:20:c3:93:6a: 53:aa:c4:86:bf:e9:36:91:f7:6e:a5:95:0d:16:79: c2:ad:de:34:b4:5b:77:55:46:9c:45:2b:b1:58:2c: 97:da:80:ed:ac:b5:6b:13:ca:85:a4:74:b1:dc:dd: 23:ac:1d:e4:2a:e0:0b:b3:bd:f6:81:4b:e6:bb:6d: b8:87:8c:b6:bc:15:9d:dc:7d:88:ea:02:1d:ce:3b: 92:fb:6f:9f:77:72:a5:94:c8:7f:5a:59:a8:92:2a: b1:75:4e:b9:3f:11:6b:9e:a2:39:cf:b6:0f:2c:d1: 56:53:ac:b4:92:c9:b7:99:ad:c2:f5:18:d5:90:1d: 75:c6:6b:c9:69:51:8b:fc:3f:df:f3:93:bb:38:fb: 18:a2:dc:a9:4c:60:47:7f:c4:ca:2e:87:9b:12:11: c7:12:2e:c3:a7:5a:f2:dc:9e:e0:40:f2:76:67:06: 00:09:fb:39:87:50:81:3b:51:33:b3:70:09:9f:3e: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:79:5B:1E:77:D8:E3:54:96:BE:0F:B2:C5:1B:9D:17:D6:80:B4:F7 X509v3 Authority Key Identifier: keyid:9D:DA:3F:B1:AB:9E:2C:AB:51:92:E8:90:9E:BC:B3:3E:40:B6:26:41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ndo_saueLKtRkuiQnryzPkC2JkE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/ndo_saueLKtRkuiQnryzPkC2JkE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b3:6a:fc:f5:e3:a5:72:d7:c5:c3:57:93:e9:13:e7:b5:cc: 8e:ea:d5:50:7f:7f:c3:ec:c7:f4:c7:a2:b0:7c:16:cf:0a:fd: b8:c0:22:04:ab:21:15:99:a5:25:90:f6:fa:b8:c5:d2:9e:3b: 24:4e:cb:ee:9a:b2:22:9d:12:39:d3:59:4a:a7:38:1d:b8:a4: e3:7f:2d:0d:b0:5a:aa:f7:34:5a:90:e4:10:ee:a8:81:ef:7b: 55:3f:4a:f7:e0:04:d3:c9:eb:bf:81:d2:cc:79:9b:62:5d:52: 24:6a:72:2f:21:42:bd:ab:5f:ae:d3:46:98:6a:65:18:d2:2c: 8c:e7:4c:71:96:83:47:80:a7:81:38:ab:7d:c5:60:a8:0e:c5: d2:cb:2d:8f:e7:c5:fd:eb:b2:5d:cd:79:a9:db:87:99:e3:33: dd:5e:73:43:a5:45:4f:5c:7b:aa:72:5c:e9:2f:42:db:62:c8: 65:b7:da:04:eb:39:25:f9:3b:47:ac:9e:17:79:2d:c3:4b:ff: d2:25:a3:5d:43:dc:23:3d:97:51:8f:31:b4:82:bc:2b:3c:2e: 3d:05:00:a7:a7:7a:db:f6:c3:9a:4d:44:57:da:e5:e0:7a:32: 1b:4a:dc:35:ca:d5:3b:a7:9f:a5:4d:4b:2c:eb:b9:cb:25:7e: ef:68:7c:55 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURE QTNGQjFBQjlFMkNBQjUxOTJFODkwOUVCQ0IzM0U0MEI2MjY0MTAeFw0yNDExMjIx NTIxNDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZGNzk1QjFFNzdEOEUz NTQ5NkJFMEZCMkM1MUI5RDE3RDY4MEI0RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEs2Hyyk13ofGzu+lXkpFmQsMQP5prY4YBCoNoDR5E5Ww0ry8p HQtwqU4mLcWvgiDcsL2kj81La6JiXy2Yq3d54EvsB/lUIMOTalOqxIa/6TaR926l lQ0WecKt3jS0W3dVRpxFK7FYLJfagO2stWsTyoWkdLHc3SOsHeQq4AuzvfaBS+a7 bbiHjLa8FZ3cfYjqAh3OO5L7b593cqWUyH9aWaiSKrF1Trk/EWueojnPtg8s0VZT rLSSybeZrcL1GNWQHXXGa8lpUYv8P9/zk7s4+xii3KlMYEd/xMouh5sSEccSLsOn WvLcnuBA8nZnBgAJ+zmHUIE7UTOzcAmfPuBzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUb3lbHnfY41SWvg+yxRudF9aAtPcwHwYDVR0jBBgwFoAUndo/saueLKtRkuiQ nryzPkC2JkEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk5 MS9uZG9fc2F1ZUxLdFJrdWlRbnJ5elBrQzJKa0UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25kb19zYXVlTEt0Umt1aVFucnl6UGtDMkprRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5OTEvbmRvX3NhdWVMS3RS a3VpUW5yeXpQa0MySmtFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGSzavz146Vy18XDV5PpE+e1zI7q1VB/f8Psx/THorB8Fs8K/bjAIgSrIRWZ pSWQ9vq4xdKeOyROy+6asiKdEjnTWUqnOB24pON/LQ2wWqr3NFqQ5BDuqIHve1U/ SvfgBNPJ67+B0sx5m2JdUiRqci8hQr2rX67TRphqZRjSLIznTHGWg0eAp4E4q33F YKgOxdLLLY/nxf3rsl3Neanbh5njM91ec0OlRU9ce6pyXOkvQttiyGW32gTrOSX5 O0esnhd5LcNL/9Ilo11D3CM9l1GPMbSCvCs8Lj0FAKenetv2w5pNRFfa5eB6MhtK 3DXK1Tunn6VNSyzrucslfu9ofFU= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:40 2024 by rpki-client on console-fra.rpki-client.org