$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft File: F6w3URKlYkYZSaNmCiPH5xwGM18.mft (raw, json) Hash identifier: GAiNvAxy8tmlsMk80Ej6kLPl3z0sI4P68H4xnvzkAXU= Subject key identifier: 9A:76:F6:4D:81:A4:8D:3F:73:16:C1:32:5C:7F:77:C9:1A:3D:2C:9D Authority key identifier: 17:AC:37:51:12:A5:62:46:19:49:A3:66:0A:23:C7:E7:1C:06:33:5F Certificate issuer: /CN=17AC375112A562461949A3660A23C7E71C06335F Certificate serial: 0160 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F6w3URKlYkYZSaNmCiPH5xwGM18.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft Manifest number: 015E Signing time: Fri 22 Nov 2024 15:23:46 +0000 Manifest this update: Fri 22 Nov 2024 15:23:46 +0000 Manifest next update: Fri 22 Nov 2024 21:23:46 +0000 Files and hashes: 1: F6w3URKlYkYZSaNmCiPH5xwGM18.crl (hash: j8tz8hmWxzMJKUSOdfst6KT4XTCbX7VexFiQbARKhLc=) 2: ObV1EwOf_xKxvkjyxZX3fPfjjhg.roa (hash: aC/D4SGWKN5MpbX7jVbeUdllRiJHyjoSAnU78TKLKbs=) 3: Re3yW8Rn7krMvzvXMHzSrFM0l3c.roa (hash: 9jToPHySwiK8ywp/3AJR01tYj4lltsAKY0S9/fPicX8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F6w3URKlYkYZSaNmCiPH5xwGM18.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17AC375112A562461949A3660A23C7E71C06335F Validity Not Before: Nov 22 15:23:46 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9A76F64D81A48D3F7316C1325C7F77C91A3D2C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8a:4c:17:00:5e:7d:e8:ad:8c:dd:41:a1:96: 4c:f2:c8:90:64:0b:ce:32:3c:28:4e:e8:4a:b8:9f: 22:79:c0:03:9a:6d:a9:38:9e:6e:ac:f6:4f:b6:30: c6:d9:af:eb:e9:19:bf:4d:b4:b2:cb:2b:52:25:da: 8b:c9:42:2c:b0:ae:80:ea:5f:3a:0d:1d:33:96:41: 6c:d6:a3:b6:86:06:eb:cb:23:50:aa:5b:73:18:5c: 8f:37:3d:11:c4:e9:a7:fd:9b:b6:d8:02:f5:03:09: 61:07:52:f1:cf:6d:e6:dc:b2:b4:1e:2d:43:b4:a8: 5f:c3:6c:a8:59:c2:50:c1:13:a6:54:bb:e0:89:89: 8f:fe:43:ad:ab:23:2e:a9:cb:41:12:41:8c:e4:01: 4d:1f:47:e1:ef:d3:d5:33:a8:d1:a1:51:68:43:0c: 87:d2:a6:11:2a:02:e6:fb:03:59:40:04:98:4f:85: df:92:a1:e5:c4:26:90:64:27:67:64:e1:a2:7a:69: 55:a0:3a:38:77:ea:ae:c3:a0:cb:a6:af:f1:0e:94: 8c:eb:7c:4b:b9:d6:a2:90:95:18:7b:cb:48:0c:34: 3c:92:89:ba:ce:b2:63:88:b6:be:8d:90:2b:3c:7b: fa:20:86:ae:ba:ae:45:4f:e2:f4:4c:cd:51:f7:04: b8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:76:F6:4D:81:A4:8D:3F:73:16:C1:32:5C:7F:77:C9:1A:3D:2C:9D X509v3 Authority Key Identifier: keyid:17:AC:37:51:12:A5:62:46:19:49:A3:66:0A:23:C7:E7:1C:06:33:5F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F6w3URKlYkYZSaNmCiPH5xwGM18.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ac:a9:f2:53:bc:2d:b9:f8:5f:92:77:9f:c1:ff:25:9d:12: f0:1c:3c:05:40:ee:ca:69:66:a0:56:0e:8c:ed:2a:8f:6c:b2: 9b:87:7f:c0:c5:ce:db:f5:fe:a4:d1:63:84:fd:2c:6f:ba:29: 70:0a:b1:02:3c:90:ef:a9:88:82:9c:ac:ba:26:c2:b3:66:f5: f2:ec:ef:4e:e3:8c:c5:e0:20:ea:3c:b4:e0:5e:12:e1:e3:2e: 6f:bf:8d:c3:83:1a:6d:57:8d:0b:0b:f8:91:a8:0a:1e:ed:bc: 73:84:ea:66:ff:ff:7d:62:46:b3:4a:63:f3:aa:63:ec:71:3b: 17:ee:e4:fa:3e:27:b2:85:9c:fa:ff:d7:1d:e3:dd:0c:b4:43: 77:31:de:1c:2f:e7:27:62:a5:70:30:c8:7d:ad:68:37:f2:a1: e7:50:ac:3b:59:f4:57:7b:5c:6f:fc:a6:11:d2:c3:6d:14:54: bb:f2:75:8f:a7:04:cd:e6:12:6b:5a:34:64:64:a1:66:72:9e: cd:3b:df:08:97:41:08:96:75:7c:e6:ed:32:56:a7:d5:9c:78: 0b:56:81:8c:0d:39:f3:d9:d9:4a:3a:4b:34:6a:cc:eb:5d:49: ca:19:c5:e0:41:36:1d:72:ce:0c:37:a5:e3:a6:8b:4e:03:fd: 96:55:47:a8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTdB QzM3NTExMkE1NjI0NjE5NDlBMzY2MEEyM0M3RTcxQzA2MzM1RjAeFw0yNDExMjIx NTIzNDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlBNzZGNjREODFBNDhE M0Y3MzE2QzEzMjVDN0Y3N0M5MUEzRDJDOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaikwXAF596K2M3UGhlkzyyJBkC84yPChO6Eq4nyJ5wAOabak4 nm6s9k+2MMbZr+vpGb9NtLLLK1Il2ovJQiywroDqXzoNHTOWQWzWo7aGBuvLI1Cq W3MYXI83PRHE6af9m7bYAvUDCWEHUvHPbebcsrQeLUO0qF/DbKhZwlDBE6ZUu+CJ iY/+Q62rIy6py0ESQYzkAU0fR+Hv09UzqNGhUWhDDIfSphEqAub7A1lABJhPhd+S oeXEJpBkJ2dk4aJ6aVWgOjh36q7DoMumr/EOlIzrfEu51qKQlRh7y0gMNDySibrO smOItr6NkCs8e/oghq66rkVP4vRMzVH3BLgBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUmnb2TYGkjT9zFsEyXH93yRo9LJ0wHwYDVR0jBBgwFoAUF6w3URKlYkYZSaNm CiPH5xwGM18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk5 NC9GNnczVVJLbFlrWVpTYU5tQ2lQSDV4d0dNMTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Y2dzNVUktsWWtZWlNhTm1DaVBINXh3R00xOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5OTQvRjZ3M1VSS2xZa1la U2FObUNpUEg1eHdHTTE4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAisqfJTvC25+F+Sd5/B/yWdEvAcPAVA7sppZqBWDoztKo9sspuHf8DFztv1 /qTRY4T9LG+6KXAKsQI8kO+piIKcrLomwrNm9fLs707jjMXgIOo8tOBeEuHjLm+/ jcODGm1XjQsL+JGoCh7tvHOE6mb//31iRrNKY/OqY+xxOxfu5Po+J7KFnPr/1x3j 3Qy0Q3cx3hwv5ydipXAwyH2taDfyoedQrDtZ9Fd7XG/8phHSw20UVLvydY+nBM3m EmtaNGRkoWZyns073wiXQQiWdXzm7TJWp9WceAtWgYwNOfPZ2Uo6SzRqzOtdScoZ xeBBNh1yzgw3peOmi04D/ZZVR6g= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:45 2024 by rpki-client on console-ams.rpki-client.org