$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft File: _APy-Wb2K_3GawQVYum6QAMtoJ4.mft (raw, json) Hash identifier: ai+SaB3HwGHAW4wD9HfNw+f/nuwWD7Q8aMvWGbXh2B4= Subject key identifier: 6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99 Authority key identifier: FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E Certificate issuer: /CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E Certificate serial: 1C18 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft Manifest number: 1C13 Signing time: Fri 22 Nov 2024 10:22:52 +0000 Manifest this update: Fri 22 Nov 2024 10:22:52 +0000 Manifest next update: Fri 22 Nov 2024 16:22:52 +0000 Files and hashes: 1: OSi-i3xSKX2UarBh7wXuyu7gwRU.roa (hash: dIWZKhjbirWV52qPasBc607gwnD/E8xFksQL1hy1AT4=) 2: _APy-Wb2K_3GawQVYum6QAMtoJ4.crl (hash: 15aA26Ik7uVepDzc2PvWzcAqcHFSuhnoIZtDdAnbLzE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7192 (0x1c18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E Validity Not Before: Nov 22 10:22:52 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6BBB7649DCD7DA21A07DB3A61B5E61604AAD1499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:1f:a3:40:9e:ad:bd:4a:db:7b:e9:45:00: 93:7e:81:b8:fe:f0:3b:18:64:0f:5d:24:a9:3e:c5: e4:6f:72:06:04:ed:37:4e:0c:3f:10:7e:d7:6a:9e: c3:c7:89:4e:82:d5:e2:bf:58:b0:12:e4:c9:4e:af: e8:db:b5:fa:af:bc:47:f8:d9:ec:22:38:41:0d:ca: 65:97:c4:af:04:8b:30:54:a8:ce:63:4d:f5:74:cb: 77:7a:1b:ae:b7:11:38:8c:a4:80:70:4c:61:4f:38: b3:07:03:91:9f:97:d9:83:ac:4d:e3:38:7e:99:11: 6c:2e:09:ba:c0:05:a6:43:7c:77:65:a9:78:05:63: a2:83:88:9c:4f:4d:a3:aa:92:e0:5c:64:a4:2a:37: c5:2f:60:cf:58:7a:92:01:ac:c4:18:37:13:4f:ba: 3e:5e:63:8e:aa:1d:2b:dc:83:74:24:df:4b:e6:cf: 60:ae:6b:64:f7:f0:45:b2:9d:b1:10:5c:89:78:a7: f6:6b:f9:78:08:2e:06:e7:fa:8e:17:3c:5c:ac:1e: 99:1b:a4:cf:0b:6a:18:e5:a7:c7:72:0a:32:9c:e5: ef:e6:cd:1b:b1:71:5b:2f:7c:ea:a7:bf:d3:0d:a1: 37:cd:b6:f0:8e:f4:0b:eb:8b:a5:f6:0e:59:34:5a: 30:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99 X509v3 Authority Key Identifier: keyid:FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9f:ca:cc:9c:f3:5f:d3:0b:2b:f3:67:b2:a9:6a:4d:e6:65: f3:76:45:a8:b0:8c:b3:d1:30:b2:7f:80:7d:8b:15:bf:21:36: 4c:a7:11:2d:2c:2c:1b:af:96:19:80:95:21:80:cd:84:77:0f: 9f:3a:c6:c2:d2:50:f8:1d:96:0f:0c:66:5e:9e:05:d9:d8:e8: 48:ec:16:ef:b0:6e:c9:08:3c:8b:2a:3b:1b:e1:87:29:29:e4: 44:10:32:a1:dd:09:75:13:fe:8a:65:71:63:4c:eb:f6:1f:5b: 5a:ac:3b:fa:c6:ac:8a:5f:cd:03:10:62:5f:59:1b:53:2d:a4: 13:e3:59:bb:1a:2c:6e:22:1d:65:1e:d0:be:34:bd:fa:e9:34: 96:c7:68:13:aa:7a:34:11:50:b4:c3:f8:22:23:ff:0a:1e:fe: 4e:ae:9d:7c:5b:19:16:d9:9b:8f:90:11:e1:eb:b2:d2:a1:91: 16:4e:50:6b:a7:59:84:6c:f7:19:74:94:53:db:a6:6b:f1:10: 7e:c6:7e:88:40:80:a9:30:86:64:fe:76:43:b7:33:00:fe:80: 3b:c3:a2:c2:0f:2e:d2:9f:f3:0f:e5:cb:a8:eb:87:80:e3:34: e5:b9:0a:1a:92:a6:cd:46:c1:6f:12:74:f0:e3:8b:17:0a:0b: e9:f3:37:cc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkMw M0YyRjk2NkY2MkJGREM2NkIwNDE1NjJFOUJBNDAwMzJEQTA5RTAeFw0yNDExMjIx MDIyNTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZCQkI3NjQ5RENEN0RB MjFBMDdEQjNBNjFCNUU2MTYwNEFBRDE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2xR+jQJ6tvUrbe+lFAJN+gbj+8DsYZA9dJKk+xeRvcgYE7TdO DD8QftdqnsPHiU6C1eK/WLAS5MlOr+jbtfqvvEf42ewiOEENymWXxK8EizBUqM5j TfV0y3d6G663ETiMpIBwTGFPOLMHA5Gfl9mDrE3jOH6ZEWwuCbrABaZDfHdlqXgF Y6KDiJxPTaOqkuBcZKQqN8UvYM9YepIBrMQYNxNPuj5eY46qHSvcg3Qk30vmz2Cu a2T38EWynbEQXIl4p/Zr+XgILgbn+o4XPFysHpkbpM8Lahjlp8dyCjKc5e/mzRux cVsvfOqnv9MNoTfNtvCO9Avri6X2Dlk0WjAxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUa7t2SdzX2iGgfbOmG15hYEqtFJkwHwYDVR0jBBgwFoAU/APy+Wb2K/3GawQV Yum6QAMtoJ4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA1 MS9fQVB5LVdiMktfM0dhd1FWWXVtNlFBTXRvSjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19BUHktV2IyS18zR2F3UVZZdW02UUFNdG9KNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNTEvX0FQeS1XYjJLXzNH YXdRVll1bTZRQU10b0o0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAACfysyc81/TCyvzZ7Kpak3mZfN2RaiwjLPRMLJ/gH2LFb8hNkynES0sLBuv lhmAlSGAzYR3D586xsLSUPgdlg8MZl6eBdnY6EjsFu+wbskIPIsqOxvhhykp5EQQ MqHdCXUT/oplcWNM6/YfW1qsO/rGrIpfzQMQYl9ZG1MtpBPjWbsaLG4iHWUe0L40 vfrpNJbHaBOqejQRULTD+CIj/woe/k6unXxbGRbZm4+QEeHrstKhkRZOUGunWYRs 9xl0lFPbpmvxEH7GfohAgKkwhmT+dkO3MwD+gDvDosIPLtKf8w/ly6jrh4DjNOW5 ChqSps1GwW8SdPDjixcKC+nzN8w= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:38 2024 by rpki-client on console-fra.rpki-client.org