$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft File: sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft (raw, json) Hash identifier: 6Hagh71OIj91ZNEw0P9KzoJvrzQoZX3dIAJIxtcemfU= Subject key identifier: 70:9D:27:67:D8:65:E6:BE:CC:F1:F6:40:F3:07:94:F5:EC:08:00:ED Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1BD9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft Manifest number: 1BA4 Signing time: Fri 22 Nov 2024 15:25:43 +0000 Manifest this update: Fri 22 Nov 2024 15:25:43 +0000 Manifest next update: Fri 22 Nov 2024 21:25:43 +0000 Files and hashes: 1: 2U-xmiM3fTs14uJFVzwJ7mo9dIk.roa (hash: TFL0/XFUs/Zeo14zQeX9vTN9QCvF6RNed05s271HUWk=) 2: 6GsQEcfPQca6o2bycCZnXCjWJPQ.roa (hash: lft7LvfmfX1yjk7ISg3vdIULegxCHrqc4zYSF/L3YeQ=) 3: Cn_9gARHZ480zrwVP_q2NX1_sOw.roa (hash: dCY99rCYIuMYt/RNM25r7Rc8MGRjRIHGWZ+gYEZVXIM=) 4: I_M2IfoLHa9FPH9Vn1iaPXGSWSI.roa (hash: nN99pmX4MaJoqu6cF3+hEPfPGRIYxHOaeFeCvKXOynM=) 5: T2rWZVXy8FJFbwCXKXapPtPZbDg.roa (hash: hlonYY2TB94S7FVVhD9ExFwUWK8n6dOKUWgXUoJv4bc=) 6: ZmEWKrApxwhbs9uIg95rGWiGRJc.roa (hash: v/LFesTtQM+jwrZMfXUG7ie6WrkNMgQYjStQEcd0YP8=) 7: prHaGZM4cEEL2AtUdtwHNapGFOY.roa (hash: M5x7ITCKw2tVAvU4twoiSy0ZRwyiqfuuzydQ47IJNIs=) 8: sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl (hash: kIHF/qFUegv0b+ir9Tg5JukW3V+2zhnlIs1/jRjd5ao=) 9: v564Fye7mIgap2_NRLmCgx5wpq4.roa (hash: lA60g68wB8mg82qNm3heRn1tvma4PIT9vUGbypABoLA=) 10: xNap2Y8tUbfuYfhnKVOCViJKfow.roa (hash: jx4Di2kg3KQ4ZH9mf/IzC/YUy0IJd9H/m7O/yOLQL88=) 11: yNBDGOVkiYsAwisAWCDVmLNs1gQ.roa (hash: emMlJZXjdR4Q6ai98sFQXdo2DR2/iit0LIujArCR5u8=) 12: zqE4nh395wJP1jJcGdnSIPveSF0.roa (hash: ISbjcl4NvC1YzKscdQxVG3b4Uep3UT+tN4+wjXgj3Dc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7129 (0x1bd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Nov 22 15:25:43 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=709D2767D865E6BECCF1F640F30794F5EC0800ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b8:88:f8:9c:de:4a:a8:b4:7f:66:46:5e:4b: ad:9e:67:25:04:f7:94:14:9d:82:ea:f5:4b:c3:30: 20:f7:b2:7e:31:92:f3:76:7d:c2:fe:c3:fc:9a:8f: 09:e1:14:68:7d:77:dc:dc:e0:5b:95:9f:ce:c3:ea: 51:89:1a:77:a5:2e:34:ba:41:6e:50:c8:0d:cb:07: 35:72:91:9d:8f:2a:06:1c:f7:7a:53:34:b9:db:f5: b7:6d:cd:27:76:4a:93:89:d2:4d:25:45:76:36:15: e4:01:39:bb:1a:0a:00:d2:1b:bd:e3:33:63:be:a1: c5:e1:8b:1a:13:7c:80:ac:af:06:fd:59:f5:95:60: 04:d9:25:42:0a:20:0c:9d:92:9c:0b:82:c0:d6:22: da:fb:c2:58:de:f3:07:f3:72:4b:7e:9c:81:a3:35: 8c:1b:e7:3a:74:0a:6e:60:a0:f6:17:03:07:6a:e6: 14:61:e9:4e:e6:bc:b9:c8:7f:55:58:d1:7f:b8:a4: a2:53:d3:24:96:b7:a4:5f:8c:7b:af:99:12:b5:a4: 76:d5:92:46:93:a3:f5:9c:e6:15:5e:ef:89:7c:e3: 1a:6e:87:d9:d3:73:9f:52:c0:ae:e2:63:34:c5:a5: 14:91:0d:7e:77:83:97:87:74:93:21:82:5f:69:f6: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9D:27:67:D8:65:E6:BE:CC:F1:F6:40:F3:07:94:F5:EC:08:00:ED X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c4:1e:c3:9e:99:30:f0:5f:e5:f9:8e:7d:9b:ce:e1:c1:3e: ba:d4:ca:36:5e:dd:c7:89:5a:d4:61:18:5f:0c:68:b9:c3:2d: dc:12:f4:44:f8:48:1c:7d:5c:11:e8:5d:60:dd:e6:cc:54:12: ab:3b:0e:6f:f7:6f:2f:cb:7f:4c:6b:1b:57:a9:1c:25:42:8c: af:80:f4:64:46:a5:a0:31:f8:46:67:53:34:12:df:c4:80:33: a6:b4:a0:12:ee:d2:49:a6:77:b5:17:fb:31:d0:7c:91:f8:71: 85:c0:5b:a7:24:59:55:26:c1:7e:12:9c:b0:59:52:71:66:dc: 4c:4b:ad:64:b5:df:df:56:65:21:ae:f5:54:02:9f:e6:35:fc: e5:ec:59:d7:8a:fe:1b:3f:ee:0a:24:ab:8c:fc:af:9c:d9:24: 1c:b1:8f:21:2d:fa:2f:1b:bb:cf:4e:3f:8b:16:b1:b9:fb:fa: cb:83:05:44:90:54:8a:ce:3c:39:dd:0d:39:9e:44:1c:46:59: e3:ad:e1:1c:aa:62:b5:28:da:cd:fb:cc:cc:75:7b:d0:2f:0e: 43:21:5f:5e:b4:a6:81:5b:f0:53:ba:8f:0a:1f:61:33:de:6d: 9f:64:91:93:41:32:0f:88:77:2d:87:28:2f:94:b0:69:2c:c4: 52:12:98:28 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICG9kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNDExMjIx NTI1NDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDcwOUQyNzY3RDg2NUU2 QkVDQ0YxRjY0MEYzMDc5NEY1RUMwODAwRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhuIj4nN5KqLR/ZkZeS62eZyUE95QUnYLq9UvDMCD3sn4xkvN2 fcL+w/yajwnhFGh9d9zc4FuVn87D6lGJGnelLjS6QW5QyA3LBzVykZ2PKgYc93pT NLnb9bdtzSd2SpOJ0k0lRXY2FeQBObsaCgDSG73jM2O+ocXhixoTfICsrwb9WfWV YATZJUIKIAydkpwLgsDWItr7wlje8wfzckt+nIGjNYwb5zp0Cm5goPYXAwdq5hRh 6U7mvLnIf1VY0X+4pKJT0ySWt6RfjHuvmRK1pHbVkkaTo/Wc5hVe74l84xpuh9nT c59SwK7iYzTFpRSRDX53g5eHdJMhgl9p9sKDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcJ0nZ9hl5r7M8fZA8weU9ewIAO0wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvc0l1UmpTMUZ0amNh eTVkd2REVlQwYjhpUndnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA7EHsOemTDwX+X5jn2bzuHBPrrUyjZe3ceJWtRhGF8MaLnDLdwS9ET4SBx9 XBHoXWDd5sxUEqs7Dm/3by/Lf0xrG1epHCVCjK+A9GRGpaAx+EZnUzQS38SAM6a0 oBLu0kmmd7UX+zHQfJH4cYXAW6ckWVUmwX4SnLBZUnFm3ExLrWS1399WZSGu9VQC n+Y1/OXsWdeK/hs/7gokq4z8r5zZJByxjyEt+i8bu89OP4sWsbn7+suDBUSQVIrO PDndDTmeRBxGWeOt4RyqYrUo2s37zMx1e9AvDkMhX160poFb8FO6jwofYTPebZ9k kZNBMg+Idy2HKC+UsGksxFISmCg= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:45 2024 by rpki-client on console-ams.rpki-client.org