$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft File: _i1c0c9OKHJuJ3MPCnRmYEf68K4.mft (raw, json) Hash identifier: GAky9BYGWry2NDowhFcQ0MXymfL+LaKPaYEORYAotKQ= Subject key identifier: B7:CE:2D:7E:26:04:C0:FF:C0:15:9C:7A:64:A4:87:EB:FA:67:27:12 Authority key identifier: FE:2D:5C:D1:CF:4E:28:72:6E:27:73:0F:0A:74:66:60:47:FA:F0:AE Certificate issuer: /CN=FE2D5CD1CF4E28726E27730F0A74666047FAF0AE Certificate serial: 12A4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft Manifest number: 12A4 Signing time: Fri 22 Nov 2024 15:22:56 +0000 Manifest this update: Fri 22 Nov 2024 15:22:56 +0000 Manifest next update: Fri 22 Nov 2024 21:22:56 +0000 Files and hashes: 1: _i1c0c9OKHJuJ3MPCnRmYEf68K4.crl (hash: 3bpC3pTITpzSumbOKlXkBaznseo/TJoQ/yCgO9JYYFo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4772 (0x12a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE2D5CD1CF4E28726E27730F0A74666047FAF0AE Validity Not Before: Nov 22 15:22:56 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B7CE2D7E2604C0FFC0159C7A64A487EBFA672712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:c7:94:47:ec:31:e1:d2:10:1c:2f:b4:af: f6:7b:17:75:e2:ab:22:52:e1:c8:d0:73:95:f5:5a: c3:e1:37:fd:69:4e:cc:22:30:97:5b:20:27:fa:74: 4b:52:27:51:35:bb:40:90:fd:18:fd:9f:8b:ea:73: ec:bb:0d:ee:a9:73:51:e5:2d:16:d8:6c:12:51:a2: c8:b1:89:a5:23:9b:6a:74:06:0d:44:dc:f8:68:33: d4:ab:2a:80:ac:0c:ae:33:41:bd:e8:c6:5e:42:c0: d2:c3:b8:22:59:a4:32:55:d7:78:47:b3:17:ff:68: 72:12:76:4a:27:9b:8b:15:d1:07:cb:a7:01:64:62: eb:ed:89:b7:cb:d8:bc:45:c5:de:f1:2e:f8:87:5e: 60:98:1b:dc:3e:48:23:26:67:82:71:8c:f9:ff:10: 29:a0:3e:93:f9:13:67:ff:35:99:f9:af:4d:f7:99: 72:4e:c9:e6:f9:eb:ee:1a:3c:87:4d:64:0b:6f:b2: 2a:53:81:2f:00:24:a3:ab:dc:10:a3:26:d0:3b:eb: c2:84:6b:20:09:4c:4b:c5:76:1e:4d:24:14:f4:59: 94:5c:70:93:f4:3f:44:b5:20:5c:8e:bb:52:7c:6f: f6:90:65:db:01:04:06:d2:c8:50:b2:e8:a2:cb:a0: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CE:2D:7E:26:04:C0:FF:C0:15:9C:7A:64:A4:87:EB:FA:67:27:12 X509v3 Authority Key Identifier: keyid:FE:2D:5C:D1:CF:4E:28:72:6E:27:73:0F:0A:74:66:60:47:FA:F0:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_i1c0c9OKHJuJ3MPCnRmYEf68K4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/_i1c0c9OKHJuJ3MPCnRmYEf68K4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:81:c0:a5:bd:72:bd:7f:45:d1:39:68:8f:0a:59:8b:dc:1d: 7a:46:e4:0b:ca:be:db:57:21:b5:6f:76:2d:49:8e:0e:59:d0: b3:bb:c3:d7:cc:bd:e7:64:08:f6:9f:aa:d5:71:fc:de:f8:b6: b9:f0:e3:22:b1:1f:9e:32:69:30:34:bf:79:b8:a5:f5:75:64: e7:9f:57:dd:fa:bc:7e:59:4e:b2:a6:11:ca:15:59:da:67:17: ee:8e:c9:4f:35:e8:88:95:a3:65:51:6e:d7:14:15:34:1f:13: f4:b9:d7:2f:5b:11:06:ea:0b:c5:4b:00:bd:c2:4a:ce:be:b2: 59:63:07:f7:1e:3a:21:19:b1:dc:4e:d4:bb:2c:cf:d9:c2:1b: f6:5b:34:3b:fd:3f:5f:f6:6d:97:c2:fe:af:7f:ab:23:85:cd: 29:80:a1:04:bf:62:d6:88:a9:c9:15:36:ba:2b:7e:be:22:10: 40:1e:46:7e:46:77:b1:6a:90:13:31:16:96:61:49:6e:70:c7: 15:07:e0:02:5a:6f:b8:01:a4:b0:77:06:2b:c9:63:cd:4f:3b: f8:4e:23:d2:36:9b:eb:b2:a9:5d:a7:ac:d3:00:5d:f8:16:e9: 58:4f:cf:e7:95:2f:be:e3:96:64:68:22:df:cf:0d:8b:2d:6a: 7a:57:d5:ca -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkUy RDVDRDFDRjRFMjg3MjZFMjc3MzBGMEE3NDY2NjA0N0ZBRjBBRTAeFw0yNDExMjIx NTIyNTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI3Q0UyRDdFMjYwNEMw RkZDMDE1OUM3QTY0QTQ4N0VCRkE2NzI3MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKnseUR+wx4dIQHC+0r/Z7F3XiqyJS4cjQc5X1WsPhN/1pTswi MJdbICf6dEtSJ1E1u0CQ/Rj9n4vqc+y7De6pc1HlLRbYbBJRosixiaUjm2p0Bg1E 3PhoM9SrKoCsDK4zQb3oxl5CwNLDuCJZpDJV13hHsxf/aHISdkonm4sV0QfLpwFk YuvtibfL2LxFxd7xLviHXmCYG9w+SCMmZ4JxjPn/ECmgPpP5E2f/NZn5r033mXJO yeb56+4aPIdNZAtvsipTgS8AJKOr3BCjJtA768KEayAJTEvFdh5NJBT0WZRccJP0 P0S1IFyOu1J8b/aQZdsBBAbSyFCy6KLLoFJxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUt84tfiYEwP/AFZx6ZKSH6/pnJxIwHwYDVR0jBBgwFoAU/i1c0c9OKHJuJ3MP CnRmYEf68K4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 My9faTFjMGM5T0tISnVKM01QQ25SbVlFZjY4SzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19pMWMwYzlPS0hKdUozTVBDblJtWUVmNjhLNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDMvX2kxYzBjOU9LSEp1 SjNNUENuUm1ZRWY2OEs0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADqBwKW9cr1/RdE5aI8KWYvcHXpG5AvKvttXIbVvdi1Jjg5Z0LO7w9fMvedk CPafqtVx/N74trnw4yKxH54yaTA0v3m4pfV1ZOefV936vH5ZTrKmEcoVWdpnF+6O yU816IiVo2VRbtcUFTQfE/S51y9bEQbqC8VLAL3CSs6+slljB/ceOiEZsdxO1Lss z9nCG/ZbNDv9P1/2bZfC/q9/qyOFzSmAoQS/YtaIqckVNrorfr4iEEAeRn5Gd7Fq kBMxFpZhSW5wxxUH4AJab7gBpLB3BivJY81PO/hOI9I2m+uyqV2nrNMAXfgW6VhP z+eVL77jlmRoIt/PDYstanpX1co= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:45 2024 by rpki-client on console-ams.rpki-client.org