$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft File: G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft (raw, json) Hash identifier: 8imz9WAgWjrevlNymtZ4WqUkrX4H1P1Ge+QBD9TlaeU= Subject key identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 02FD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft Manifest number: 02F4 Signing time: Fri 22 Nov 2024 10:24:05 +0000 Manifest this update: Fri 22 Nov 2024 10:24:05 +0000 Manifest next update: Fri 22 Nov 2024 16:24:05 +0000 Files and hashes: 1: 5OEuFKPxJaq1YidFs9FhBAB9P64.roa (hash: ai6iEpYFHCC4+YcYY1ILAHS+XendDmfNBlH2O+XrO30=) 2: 5iA-h01FgjAaC-DPAOpdAAX_FUQ.roa (hash: 6Xo71nk33XT6X/k3IVsNNARD6WK9MRPdCpAx2+YpPBY=) 3: 7GZTK5QwS8vnTmYs4X-8-_ZS4PM.roa (hash: Fypc5S3wysoSbXk7yh6NHgb67GpfLGm2tLs4epy1xF8=) 4: G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl (hash: 3CIexHROyd8wdXjFWgiJ8RM/RxX4H2Pdf3mCUqeCoJs=) 5: LH2PyxaebTwUWCqIBs1Kq9jLOjU.roa (hash: L04+TBCa3SIZMlFAdOVBBd3Gf27YDwcU8ancEUoAIfY=) 6: Y2ZKD-A30k3bDBgJvwCgTOSEfgE.roa (hash: 9hA3D9MXarvGgUQCQ8E1yH6YN9fGRixIrfBTcD/M2r0=) 7: dTMFnNYS9LqVMpJIioge2ooc5gE.roa (hash: pCXNC0r3wfXitDNymXsPE77AREO+Pz310OZK4OIzz2Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Nov 22 10:24:05 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C92091CD704E8E01CB5621F4BFAA3A3F31DF49B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:a9:d9:1e:ae:44:4e:64:08:03:b8:dd:8f: d0:cf:76:8f:f3:30:8d:92:2d:f5:31:26:2c:cb:16: 3d:e4:53:4a:25:55:f4:0c:08:a7:0b:fd:7c:cb:6d: a2:dd:92:63:9b:79:f3:49:82:2c:07:00:ff:8c:46: b5:22:11:04:49:70:35:97:40:f3:6f:f3:35:ab:c1: 3b:26:2b:e6:4a:7a:5e:06:d7:eb:a7:23:7a:c4:ee: 07:38:38:23:35:dc:83:3d:f3:50:e8:69:c9:05:f4: b5:43:13:94:78:2d:49:57:dd:7d:10:05:57:f1:5c: a4:8a:cf:83:13:08:25:fd:7f:cb:b6:71:0b:36:9c: 0a:53:35:51:f5:fd:48:73:7e:f6:61:5b:00:54:14: c0:48:10:74:88:1d:1f:11:0d:f7:c6:81:7c:b9:66: 25:3c:0e:52:cd:9a:7f:9c:f9:e9:6e:dd:49:ca:c9: 3d:57:2a:5e:53:9f:fa:6a:1e:23:49:f1:01:67:5e: 2c:a1:70:bc:18:73:ea:2d:2d:ce:c6:d8:c4:5d:b0: ef:1f:1a:27:e0:f4:c8:49:d0:19:81:44:51:a5:67: d1:43:ed:c1:97:9b:69:72:3c:c2:c9:64:6c:d2:a2: 1f:d5:ef:dc:17:ea:8d:4e:a7:d9:0e:79:e6:65:d9: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:30:b2:bf:11:45:ef:59:0d:01:2c:38:87:40:1b:99:91:7b: a1:c1:a3:cf:b7:df:aa:c4:b3:9d:44:70:46:60:46:c0:72:d7: cd:a2:2b:9f:9f:2d:38:53:a5:95:fb:e6:2a:af:3c:0c:f5:84: 66:9b:3e:7f:20:c3:66:9c:8d:25:f5:a4:85:78:3b:6c:f9:a0: 8a:0a:08:cd:f2:18:7d:e5:71:1d:1e:e6:4d:89:42:f7:2d:3c: 66:8e:eb:46:0e:b5:9f:c0:61:aa:aa:df:da:db:c9:17:4d:e7: 33:d1:18:10:27:c2:b7:3c:0b:36:a7:a2:d0:24:0b:62:d9:b1: 29:53:ec:4b:75:5a:78:8c:f9:b3:af:83:25:42:65:f5:94:09: 19:14:f6:dd:95:41:d8:d1:61:f1:f1:78:dd:dc:21:c2:f1:04: 50:38:49:4b:70:c8:23:19:a8:4e:4e:7e:f1:6f:bf:1f:7f:d7: fe:41:2d:1b:5e:d0:e3:6d:c0:aa:83:db:a5:ee:2e:7b:63:39: 72:70:a2:e3:5e:92:d3:9e:97:b6:f2:2c:a5:04:23:e6:41:38: 75:97:35:54:74:07:ae:57:e5:a9:39:02:f8:e7:16:43:c7:2c: 2c:22:d0:c1:24:b1:26:fc:67:0e:bb:7b:5c:b4:4f:f1:9f:e1: 71:8f:93:ba -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNDExMjIx MDI0MDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM5MjA5MUNENzA0RThF MDFDQjU2MjFGNEJGQUEzQTNGMzFERjQ5QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLiqnZHq5ETmQIA7jdj9DPdo/zMI2SLfUxJizLFj3kU0olVfQM CKcL/XzLbaLdkmObefNJgiwHAP+MRrUiEQRJcDWXQPNv8zWrwTsmK+ZKel4G1+un I3rE7gc4OCM13IM981DoackF9LVDE5R4LUlX3X0QBVfxXKSKz4MTCCX9f8u2cQs2 nApTNVH1/UhzfvZhWwBUFMBIEHSIHR8RDffGgXy5ZiU8DlLNmn+c+elu3UnKyT1X Kl5Tn/pqHiNJ8QFnXiyhcLwYc+otLc7G2MRdsO8fGifg9MhJ0BmBRFGlZ9FD7cGX m2lyPMLJZGzSoh/V79wX6o1Op9kOeeZl2QOjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUySCRzXBOjgHLViH0v6o6PzHfSbcwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvRzhiWnFmU2lKcVlm WDZHcEZqbEIxTE5ibzFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHEwsr8RRe9ZDQEsOIdAG5mRe6HBo8+336rEs51EcEZgRsBy182iK5+fLThT pZX75iqvPAz1hGabPn8gw2acjSX1pIV4O2z5oIoKCM3yGH3lcR0e5k2JQvctPGaO 60YOtZ/AYaqq39rbyRdN5zPRGBAnwrc8CzanotAkC2LZsSlT7Et1WniM+bOvgyVC ZfWUCRkU9t2VQdjRYfHxeN3cIcLxBFA4SUtwyCMZqE5OfvFvvx9/1/5BLRte0ONt wKqD26XuLntjOXJwouNektOel7byLKUEI+ZBOHWXNVR0B65X5ak5AvjnFkPHLCwi 0MEksSb8Zw67e1y0T/Gf4XGPk7o= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:38 2024 by rpki-client on console-fra.rpki-client.org