$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft File: T04zJwO54ZxdoBGkjEsnbpsp11w.mft (raw, json) Hash identifier: 1NZdlEyBwM9wJcRbwwLdpRH6hjViQDoezgFpOie6J9Q= Subject key identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 Authority key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C Certificate issuer: /CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Certificate serial: 31EC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft Manifest number: 31EC Signing time: Fri 22 Nov 2024 15:24:47 +0000 Manifest this update: Fri 22 Nov 2024 15:24:47 +0000 Manifest next update: Fri 22 Nov 2024 21:24:47 +0000 Files and hashes: 1: T04zJwO54ZxdoBGkjEsnbpsp11w.crl (hash: 8n68QOK8LqJ02pXMkP5r0T4oGCqJJ3cymkeEsrA1bYQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12780 (0x31ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C Validity Not Before: Nov 22 15:24:47 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=470D131A7541923CA9A1A4C76A5788ADFD240CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:41:3b:cc:83:cc:71:a2:fc:27:62:37:91: ee:ce:92:88:cc:36:35:05:5d:e9:49:34:1a:8d:c0: 55:1f:c3:63:38:e4:56:b7:80:7a:b8:e4:0f:d7:00: 60:61:32:c1:b4:27:22:0d:3c:c4:4b:99:32:17:12: 56:19:47:d1:11:01:8a:98:c5:db:9f:b6:b9:b4:fb: 45:68:aa:4b:32:4b:e9:f8:a2:3f:79:86:ad:19:15: 73:3f:42:7e:99:5a:e3:ea:e4:9e:cb:30:17:dc:ef: 3f:41:52:03:b1:bc:c5:4e:27:7e:1e:53:80:9b:6f: a8:2f:13:4c:b7:52:16:a6:cf:8f:06:9c:50:b3:07: a3:b9:10:33:1c:69:53:51:39:93:25:8b:89:63:32: 34:c9:2e:ed:f1:04:87:0f:5c:d6:7e:fd:9d:1a:f8: 0b:cb:7d:7b:5b:7b:74:17:c5:c6:9a:0c:91:af:3d: 4a:49:12:7b:f0:7b:81:fe:8d:d0:c1:84:9b:c9:ae: f5:61:5d:16:ab:73:48:03:32:39:34:eb:7a:54:a0: 68:73:1b:59:33:20:28:c2:70:d6:0c:aa:6d:b0:98: 02:cd:eb:f5:17:cc:cc:28:c9:7b:a2:32:39:fb:b5: 32:d9:7a:07:cd:53:91:88:41:f2:00:e6:a6:85:28: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7 X509v3 Authority Key Identifier: keyid:4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d1:0a:99:a3:7d:87:a8:9e:3d:91:11:2d:67:f6:95:8b:b1: 7e:b3:96:dc:01:5d:d7:6e:e1:68:22:ef:26:cb:78:bd:19:aa: 83:a0:cc:b0:4b:9e:e4:25:e7:8c:f8:7f:d1:d6:1a:45:43:04: 76:9a:91:42:aa:68:48:c9:70:8b:65:81:dc:d7:6e:fc:08:2a: df:47:94:72:e4:04:dc:fc:8b:2b:f5:7f:e2:e4:e8:c2:79:fe: 7b:92:08:18:09:7c:ae:0e:09:e0:2e:41:1f:c5:31:fc:57:c5: f7:3c:7f:5e:67:4b:5e:bb:6e:24:63:23:a3:75:2e:1e:3a:46: 73:da:0a:54:58:25:c8:09:91:61:4f:73:33:49:0b:4d:7f:2a: 66:8f:18:b1:fb:27:29:98:49:5b:6a:8d:9f:ae:1d:20:4d:1a: 7f:b6:06:c6:c3:4e:26:dd:0b:5d:0c:9c:47:f8:b4:45:82:23: 27:14:4c:f4:4f:d7:6c:8a:eb:f7:f5:40:8e:3f:36:76:bc:5b: 48:a5:fe:78:9e:e2:ac:b8:a2:cc:6d:bb:62:73:5c:df:eb:62: 27:ef:06:f6:93:f9:22:79:92:81:a6:e4:ac:12:44:be:1f:35: 25:f2:dd:f0:9b:74:d1:15:94:e8:3e:46:80:e3:45:b0:49:ab: 38:8e:c8:56 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICMewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEY0 RTMzMjcwM0I5RTE5QzVEQTAxMUE0OEM0QjI3NkU5QjI5RDc1QzAeFw0yNDExMjIx NTI0NDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ3MEQxMzFBNzU0MTky M0NBOUExQTRDNzZBNTc4OEFERkQyNDBDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQbEE7zIPMcaL8J2I3ke7OkojMNjUFXelJNBqNwFUfw2M45Fa3 gHq45A/XAGBhMsG0JyINPMRLmTIXElYZR9ERAYqYxduftrm0+0VoqksyS+n4oj95 hq0ZFXM/Qn6ZWuPq5J7LMBfc7z9BUgOxvMVOJ34eU4Cbb6gvE0y3Uhamz48GnFCz B6O5EDMcaVNROZMli4ljMjTJLu3xBIcPXNZ+/Z0a+AvLfXtbe3QXxcaaDJGvPUpJ Envwe4H+jdDBhJvJrvVhXRarc0gDMjk063pUoGhzG1kzICjCcNYMqm2wmALN6/UX zMwoyXuiMjn7tTLZegfNU5GIQfIA5qaFKJYdAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURw0TGnVBkjypoaTHaleIrf0kDKcwHwYDVR0jBBgwFoAUT04zJwO54ZxdoBGk jEsnbpsp11wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4 L1QwNHpKd081NFp4ZG9CR2tqRXNuYnBzcDExdy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVDA0ekp3TzU0Wnhkb0JHa2pFc25icHNwMTF3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4L1QwNHpKd081NFp4ZG9C R2tqRXNuYnBzcDExdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBy0QqZo32HqJ49kREtZ/aVi7F+s5bcAV3XbuFoIu8my3i9GaqDoMywS57kJeeM +H/R1hpFQwR2mpFCqmhIyXCLZYHc1278CCrfR5Ry5ATc/Isr9X/i5OjCef57kggY CXyuDgngLkEfxTH8V8X3PH9eZ0teu24kYyOjdS4eOkZz2gpUWCXICZFhT3MzSQtN fypmjxix+ycpmElbao2frh0gTRp/tgbGw04m3QtdDJxH+LRFgiMnFEz0T9dsiuv3 9UCOPzZ2vFtIpf54nuKsuKLMbbtic1zf62In7wb2k/kieZKBpuSsEkS+HzUl8t3w m3TRFZToPkaA40WwSas4jshW -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:40 2024 by rpki-client on console-fra.rpki-client.org