$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft File: DPuANxoj3_3UCHqi5YyNldPvLjQ.mft (raw, json) Hash identifier: 6X/DQK5FfVm/+q0gdgdTUA8Zasy7/sB8m8F7gBwdu9E= Subject key identifier: 8F:44:5C:DE:2C:1D:AB:D6:7A:A1:D0:4A:D7:93:15:1A:73:5A:73:60 Authority key identifier: 0C:FB:80:37:1A:23:DF:FD:D4:08:7A:A2:E5:8C:8D:95:D3:EF:2E:34 Certificate issuer: /CN=0CFB80371A23DFFDD4087AA2E58C8D95D3EF2E34 Certificate serial: 15EE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPuANxoj3_3UCHqi5YyNldPvLjQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft Manifest number: 15E8 Signing time: Fri 22 Nov 2024 10:23:48 +0000 Manifest this update: Fri 22 Nov 2024 10:23:48 +0000 Manifest next update: Fri 22 Nov 2024 16:23:48 +0000 Files and hashes: 1: DPuANxoj3_3UCHqi5YyNldPvLjQ.crl (hash: xX6AHEEySLOcCsvIWsP4Ql0DA4cH4dG1toPv90EiFQc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPuANxoj3_3UCHqi5YyNldPvLjQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5614 (0x15ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CFB80371A23DFFDD4087AA2E58C8D95D3EF2E34 Validity Not Before: Nov 22 10:23:48 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8F445CDE2C1DABD67AA1D04AD793151A735A7360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a5:24:91:7d:38:81:07:b2:63:7c:a2:6f:12: fe:72:2f:e1:c0:2a:76:4b:3f:7f:5f:0e:d3:72:e0: 70:07:c4:52:a1:3c:96:59:c3:6a:1c:57:94:89:06: e9:e0:9d:b3:e3:04:f8:2b:01:e0:3d:8f:28:65:fd: da:cb:9b:8d:66:a0:ab:3e:b6:69:65:65:1d:77:76: ec:81:80:5c:0f:c2:ef:f4:7d:b8:1e:78:1c:53:fc: 30:52:d3:70:c0:e1:cd:19:cb:d3:0e:87:af:13:44: b0:70:39:7d:a9:dd:51:d5:13:20:b7:e5:06:e9:d6: 08:b7:55:e9:ea:a2:86:1c:b5:ff:8a:49:98:80:6a: cf:74:43:58:45:c9:db:28:7e:0d:94:63:d8:74:aa: 1a:82:33:89:ab:5d:1b:f3:71:96:b9:36:91:f9:7a: 3f:1e:04:63:e3:30:03:31:63:30:67:a4:d0:9e:9d: 99:d4:3e:72:a9:4d:4c:34:0d:7d:ba:f3:47:ef:a5: 84:0b:8d:58:a3:c0:84:80:ad:bb:bb:1b:6f:ff:11: c4:75:a2:a3:6b:b1:f2:10:bd:f0:fd:02:3c:95:92: bf:03:06:68:90:57:cf:33:11:fd:57:26:2d:e2:be: 15:77:bb:5d:3c:d4:9e:77:45:d0:43:11:9d:3b:c1: 67:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:44:5C:DE:2C:1D:AB:D6:7A:A1:D0:4A:D7:93:15:1A:73:5A:73:60 X509v3 Authority Key Identifier: keyid:0C:FB:80:37:1A:23:DF:FD:D4:08:7A:A2:E5:8C:8D:95:D3:EF:2E:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPuANxoj3_3UCHqi5YyNldPvLjQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ad:ca:7c:9e:c8:bd:3f:ad:f7:b9:50:b7:f4:b3:e9:ee:d3: 4e:d3:c6:61:46:1c:04:50:7e:4c:ab:8f:f7:dc:f7:63:f5:d6: 21:cc:93:d9:b0:33:d7:68:f5:fb:e1:2f:3d:f5:a2:b6:83:c8: 91:e0:aa:1c:69:fd:e0:85:58:d3:a6:74:25:91:95:63:dd:bd: f4:52:a8:26:87:66:71:c7:f1:48:5c:3f:60:1f:8b:ca:62:84: 80:ae:83:b6:92:8b:40:0d:fa:14:c1:86:90:db:d7:6e:93:48: de:03:19:2d:05:73:83:07:24:db:13:eb:e8:8b:4a:14:85:c4: 15:99:cc:8c:e8:f7:a5:ea:0e:33:e4:df:ad:62:f8:dd:25:0b: ab:e9:32:13:8a:54:25:db:4e:f5:95:e8:26:f8:19:7e:bb:30: 1f:4e:dd:33:92:b0:ff:03:76:1e:a2:1a:eb:89:10:7b:3f:9f: 9a:95:a9:7a:b8:b9:e5:03:67:3d:1e:ee:9d:40:cd:d0:62:3d: 44:2b:16:e2:4f:ab:fc:e2:0d:44:8f:a5:0f:86:7e:9d:2f:91: e3:38:8a:82:68:97:73:f7:de:04:4a:5f:a8:31:f8:eb:6d:53: c7:25:78:3c:06:0f:75:40:0b:6a:77:fd:e2:b3:c4:2e:fa:d6: 3b:5f:87:ea -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENG QjgwMzcxQTIzREZGREQ0MDg3QUEyRTU4QzhEOTVEM0VGMkUzNDAeFw0yNDExMjIx MDIzNDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhGNDQ1Q0RFMkMxREFC RDY3QUExRDA0QUQ3OTMxNTFBNzM1QTczNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkpSSRfTiBB7JjfKJvEv5yL+HAKnZLP39fDtNy4HAHxFKhPJZZ w2ocV5SJBungnbPjBPgrAeA9jyhl/drLm41moKs+tmllZR13duyBgFwPwu/0fbge eBxT/DBS03DA4c0Zy9MOh68TRLBwOX2p3VHVEyC35Qbp1gi3VenqooYctf+KSZiA as90Q1hFydsofg2UY9h0qhqCM4mrXRvzcZa5NpH5ej8eBGPjMAMxYzBnpNCenZnU PnKpTUw0DX2680fvpYQLjVijwISArbu7G2//EcR1oqNrsfIQvfD9AjyVkr8DBmiQ V88zEf1XJi3ivhV3u1081J53RdBDEZ07wWdPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUj0Rc3iwdq9Z6odBK15MVGnNac2AwHwYDVR0jBBgwFoAUDPuANxoj3/3UCHqi 5YyNldPvLjQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3 OS9EUHVBTnhvajNfM1VDSHFpNVl5TmxkUHZMalEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RQdUFOeG9qM18zVUNIcWk1WXlObGRQdkxqUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNzkvRFB1QU54b2ozXzNV Q0hxaTVZeU5sZFB2TGpRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGStynyeyL0/rfe5ULf0s+nu007TxmFGHARQfkyrj/fc92P11iHMk9mwM9do 9fvhLz31oraDyJHgqhxp/eCFWNOmdCWRlWPdvfRSqCaHZnHH8UhcP2Afi8pihICu g7aSi0AN+hTBhpDb126TSN4DGS0Fc4MHJNsT6+iLShSFxBWZzIzo96XqDjPk361i +N0lC6vpMhOKVCXbTvWV6Cb4GX67MB9O3TOSsP8Ddh6iGuuJEHs/n5qVqXq4ueUD Zz0e7p1AzdBiPUQrFuJPq/ziDUSPpQ+Gfp0vkeM4ioJol3P33gRKX6gx+OttU8cl eDwGD3VAC2p3/eKzxC761jtfh+o= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:38 2024 by rpki-client on console-fra.rpki-client.org