$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft File: Os4QyDgpLG_HBlhbRE667coqEbk.mft (raw, json) Hash identifier: SaJrEeCcIjqjm31rWs6GtBMA95I6KuPdsY0jShl4GHg= Subject key identifier: 8C:D7:D0:29:67:DD:CE:EB:42:93:61:96:D1:E2:6F:C4:1F:92:8C:DE Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0F80 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft Manifest number: 0F48 Signing time: Fri 22 Nov 2024 08:50:31 +0000 Manifest this update: Fri 22 Nov 2024 08:50:31 +0000 Manifest next update: Fri 22 Nov 2024 14:50:31 +0000 Files and hashes: 1: 0kpSitwevETeTUkzZBW0NW7e4RE.roa (hash: 9g8RLRE0/aBezFBQJGy1PFHLP4WTQMttNXc7SZaKHK0=) 2: 2DtKUFYHbqYrajhdvRNj_6_8Cy8.roa (hash: dg8WzZD25j6iC9irsRS1D6/CaqLVOgaVea44hW3vz9s=) 3: 2hACuV1H8e_YcZsRKQTC1iQo4jk.roa (hash: ohwYW2pU4mjsUTpEmEB/Zin6sYq/X2dAaoZdL2TYvAc=) 4: 3L1tjg6LE3cuTdpAF5i56JNLkR0.roa (hash: kzNI5l1LNaskyt/n/b32dKmY8CNJIPiX0W2XXG4xtt8=) 5: 3VnZW7WwFqBNSL14BfEg4PCtgzk.roa (hash: yKkFhNOaOcu3I7RKbXv6HkNYXEWF54tI0KhpdBfRvUc=) 6: 4kf568DWpjbcoHxlYDbJvmM-m0E.roa (hash: IbEQ4kah9P8A+5bx588CnNaofAYMyOizyXJCgHg3gvA=) 7: 6oBOTMV_iaOotQ3PHgO-UYHRfQw.roa (hash: 9LQWnC/a8vQyXjmZ40mdfbNbyTskmSan5oxULOemN0Y=) 8: 7hHzsjGRem5YfKeERjzAMwmmaXc.roa (hash: WG0CmlXDQycv77kgTDckt+dNJAZ4I331GDHmnvavTl8=) 9: 7nkAk5bajlKUgxj9RuM224_AY44.roa (hash: XJBu5/3bO5sxeDnobyo0E9F3XsGjfBjpb7OO9O3/K7Q=) 10: 7wEl8SElVcnDDbeVhImg8NAhSeQ.roa (hash: qTYAO55o9TPlBMHUgzPtiJLPMrikoijXLme7pRWzThY=) 11: 8KxjQgnHwKrfVdwyHoCsl1NcB24.roa (hash: 8uBsfjuVmtDsmRdvBHskQ0V4q1Em9AVAFO2IdqzqyNo=) 12: DyDUrzKup5E4PYrcq4Z0EI_okOA.roa (hash: PBkly3NXSO7l09ZuEp8m5/3/k94W/F2A0MXohz+pPyA=) 13: K2ikVvSng2sirFm8jOApLd6LRF8.roa (hash: rx7D/dDHu5PM49FT9uX120c5OjHXsXV8hvf6r0z4gsU=) 14: MVvWgysP4qsjHTwDN0k-e8Qiv20.roa (hash: dZnUHxrFN5GvUsbgsBtvmVHoIcULFfzF7AtgnY7xjWE=) 15: Os4QyDgpLG_HBlhbRE667coqEbk.crl (hash: V47QsYOEIqneAkdpudAYw61btEX78QBk+tJTffoDoMU=) 16: PnrZXl-JMcCcet9XYmAc9zo9G7U.roa (hash: Kph7uzTsvzk8OPS9x2US++NU7Eb6y+WvjyGGYCvnm6U=) 17: Q7jgXq4DO19QiQIyE4_pjHqTgsE.roa (hash: TkmqLOKEJLXBR0dXhdhlf87xuseYTrFgHevhS10tZbs=) 18: QJqjYWeXl7xW0IcV-CQIUI7kuYw.roa (hash: gcCQFGufJFdCxgVVyxhFltdlHoXBAufmLWG5tHR515w=) 19: S7iGxvSW-RVmddV788QgYfy2K0c.roa (hash: t+Vx40GpgSSrvYCHIrVZzdybVDWr3rJdK7hC7m/yl2E=) 20: TvgshJVja0fP62W1PQQY1yLS3zU.roa (hash: X+IHozWfpzzUGKvW+c4/qs233+WKTAL6wlexnZppUP0=) 21: W5g2hN_BwZpCh6He2nsTKMbtJEc.roa (hash: aPbXULS1U9L8DqM6TUYBYOgfqX/tVou5n/YIvZXYZHk=) 22: ZKbdq6wKJr6zNGWSpWL0a_17kgs.roa (hash: Hu/ttc6XGYHEJ5U9yPGiYtv46TcirWMcsbnl30Zp6b0=) 23: bU3XQkja_ix2S7C9tW4ZU5vCJiY.roa (hash: cqFo6ZVNEZhfPa5ZEufRQPMlb+Q6QAsSchs75bIuQVA=) 24: hJ-5pNApoZi2BtkQqv1MNjTttM4.roa (hash: Ke+FLcFrVXXfaYTYrZjaey6++IMsxU81hBXG38u83+c=) 25: irUg_yKAigtDQFQBxThR2IkkOEQ.roa (hash: pbCKp93MJxdeZU0GykA7Lm7qhfkqCIDPLQAhn/Id6+k=) 26: k5EVxIxw2DDHyBZg1_vbtujAN6g.roa (hash: DlDC238ILgWAWLdbpVjrPkg4P8et02PbFDbNHXdWj/s=) 27: lKaxXVWpNY3cEJsF4Og_qEx7TCI.roa (hash: AMrq7Abrl9xiLPYrksFHu1PyWGxDDHxfWP0cSW8/isE=) 28: pWcd6cvy-6xMIGznHDcg4O9eQwQ.roa (hash: PiBKBOSwPaB5uQr41/dtONYIqrCNOY3AnSzEpYOItEk=) 29: rvbJkAwmirX-a5XBD_hrghToK5I.roa (hash: fKEd92k5LZWZi9IpGV/TxxXQzPPomM7RInYAWT6xn9Q=) 30: uvpN6PaNyzfU0Negv55wnSUQ_lo.roa (hash: 53y//wIxceKjd0jfd+WkKFNEOEeSu/b8zSN6H8Je36s=) 31: xDuk2zOMh4lZZhdITQW1SQiq0cw.roa (hash: ow4Lr/42GgRh/OedjQFVtduqpq5NO04Tmgf5d69oZ/g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3968 (0xf80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Nov 22 08:50:31 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8CD7D02967DDCEEB42936196D1E26FC41F928CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:b9:5e:22:86:50:0c:8f:02:4d:0b:d1:d9: ea:f4:6d:9f:7f:ad:30:25:d0:6e:b6:3f:9b:72:01: 07:42:42:bb:9e:b6:e2:60:f5:a4:d7:f9:cb:b7:df: e8:71:62:cf:bc:c0:a6:6f:30:00:0e:34:a1:b5:27: 1b:ca:53:5b:d4:8f:9b:0e:08:1f:ed:78:fa:16:06: 87:b0:98:b1:e3:28:c1:f0:43:0d:ac:1c:5f:25:d9: 3c:d5:6d:f5:94:c8:0d:d4:22:88:d6:69:da:a6:59: 52:dd:dd:ee:fd:10:cc:83:2b:21:60:f2:aa:fc:fd: d0:7d:cd:32:32:e2:d3:52:6b:db:6c:3b:53:31:fd: 18:5e:08:96:95:a7:28:fa:c6:11:a5:15:56:9a:e4: 6d:43:f6:12:91:76:ae:22:65:35:ee:44:01:50:1c: c5:a6:2e:46:5b:49:36:db:22:24:a2:5a:7e:7f:67: 07:66:19:b1:5e:7d:fd:dd:ec:8a:4b:00:e1:27:11: b8:38:a2:ea:8d:ba:87:79:78:dc:9f:d0:0f:18:6d: c4:05:b4:7e:66:43:85:82:e7:d7:9e:a9:a7:ae:6e: 5a:0c:a2:e1:fd:a8:b1:2c:0d:82:53:a2:e6:a2:62: 8f:bd:c5:f6:79:3f:19:4b:68:b9:af:18:e2:79:d3: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D7:D0:29:67:DD:CE:EB:42:93:61:96:D1:E2:6F:C4:1F:92:8C:DE X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:05:72:ab:73:07:d4:e0:23:a5:c1:9c:6c:8a:ce:73:e3:b2: 20:a0:76:b0:1f:5c:ea:48:06:4f:80:25:26:f5:16:15:56:e7: fc:96:e9:b6:6c:f8:d5:b5:bd:0c:23:42:28:23:03:10:d0:f4: 5c:63:6d:0f:7c:ba:79:32:85:c6:f9:51:70:a5:5a:c7:7a:40: cc:72:9b:67:67:b2:f9:15:78:68:74:c2:1a:d1:f4:9d:81:bf: 83:39:79:c4:47:8b:47:16:1d:f4:3a:0d:f2:ed:1b:11:27:dc: e7:b8:08:24:da:e3:84:0a:83:b5:46:aa:06:d9:c6:b1:20:09: 20:13:b1:70:42:7b:3a:a1:f1:dc:e5:75:ba:c1:3d:5d:a4:78: 6b:ff:c9:f2:5d:2a:7f:f6:f6:ad:68:fc:ef:0d:03:bd:45:c8: e0:17:6f:3d:73:42:9a:7a:c9:66:98:4d:97:d7:b2:1a:36:e5: 09:4e:24:80:cc:bc:2d:9c:cb:d3:66:d1:bb:e6:cf:11:6e:c1: bc:89:53:df:be:20:e1:f9:b7:e4:ba:61:99:a5:f9:bc:8d:2b: 09:be:d0:d7:ac:a0:08:6f:0b:5e:ba:ea:6d:8c:a6:ab:59:13: 7b:0b:c7:0f:e6:15:5d:77:29:80:0b:3d:f6:4b:aa:5e:2f:24: ab:42:b8:71 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDExMjIw ODUwMzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhDRDdEMDI5NjdERENF RUI0MjkzNjE5NkQxRTI2RkM0MUY5MjhDREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpULleIoZQDI8CTQvR2er0bZ9/rTAl0G62P5tyAQdCQruetuJg 9aTX+cu33+hxYs+8wKZvMAAONKG1JxvKU1vUj5sOCB/tePoWBoewmLHjKMHwQw2s HF8l2TzVbfWUyA3UIojWadqmWVLd3e79EMyDKyFg8qr8/dB9zTIy4tNSa9tsO1Mx /RheCJaVpyj6xhGlFVaa5G1D9hKRdq4iZTXuRAFQHMWmLkZbSTbbIiSiWn5/Zwdm GbFeff3d7IpLAOEnEbg4ouqNuod5eNyf0A8YbcQFtH5mQ4WC59eeqaeubloMouH9 qLEsDYJTouaiYo+9xfZ5PxlLaLmvGOJ50/o7AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUjNfQKWfdzutCk2GW0eJvxB+SjN4wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvT3M0UXlEZ3BMR19I QmxoYlJFNjY3Y29xRWJrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIcFcqtzB9TgI6XBnGyKznPjsiCgdrAfXOpIBk+AJSb1FhVW5/yW6bZs+NW1 vQwjQigjAxDQ9FxjbQ98unkyhcb5UXClWsd6QMxym2dnsvkVeGh0whrR9J2Bv4M5 ecRHi0cWHfQ6DfLtGxEn3Oe4CCTa44QKg7VGqgbZxrEgCSATsXBCezqh8dzldbrB PV2keGv/yfJdKn/29q1o/O8NA71FyOAXbz1zQpp6yWaYTZfXsho25QlOJIDMvC2c y9Nm0bvmzxFuwbyJU9++IOH5t+S6YZml+byNKwm+0NesoAhvC1666m2MpqtZE3sL xw/mFV13KYALPfZLql4vJKtCuHE= -----END CERTIFICATE-----Generated at Fri Nov 22 09:32:44 2024 by rpki-client on console-fra.rpki-client.org