$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.mft File: YLPIasbP0CN84cnspVtYB15oi9A.mft (raw, json) Hash identifier: DanOyKXOzN8B5u24hzCVVDtywR1AfAP+R+fv0AXP/tQ= Subject key identifier: 5B:2A:6B:40:7B:CA:5C:5D:C8:A5:61:5C:9A:79:75:49:2E:45:E4:3E Authority key identifier: 60:B3:C8:6A:C6:CF:D0:23:7C:E1:C9:EC:A5:5B:58:07:5E:68:8B:D0 Certificate issuer: /CN=60B3C86AC6CFD0237CE1C9ECA55B58075E688BD0 Certificate serial: 0B32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLPIasbP0CN84cnspVtYB15oi9A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.mft Manifest number: 0B32 Signing time: Fri 22 Nov 2024 15:22:23 +0000 Manifest this update: Fri 22 Nov 2024 15:22:23 +0000 Manifest next update: Fri 22 Nov 2024 21:22:23 +0000 Files and hashes: 1: YLPIasbP0CN84cnspVtYB15oi9A.crl (hash: EpXKF8RKERyHpaqQR+GgxYcIMLfsSUjdogoOjT1tEYo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLPIasbP0CN84cnspVtYB15oi9A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B3C86AC6CFD0237CE1C9ECA55B58075E688BD0 Validity Not Before: Nov 22 15:22:23 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5B2A6B407BCA5C5DC8A5615C9A7975492E45E43E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:f4:08:03:c9:cf:c2:00:39:bb:8d:be:03: 5f:85:6c:c8:04:b2:b2:42:a8:34:11:d4:d8:4b:73: 3b:ac:e4:77:23:b5:be:c5:50:f1:07:6f:8e:05:9d: 14:b0:db:4e:11:1f:a2:d2:78:31:58:14:ea:c1:b0: 95:77:68:cb:94:c1:0b:dc:f9:e0:aa:21:27:20:c9: 8a:b6:44:2d:ed:40:c6:25:e0:be:23:0b:e6:7a:fd: da:f8:02:1c:8e:62:8f:62:01:56:ca:74:40:c8:7f: cf:2d:7a:87:0f:3b:a4:29:58:76:63:a7:3f:98:4b: b2:00:2d:01:ba:81:a2:0e:95:72:80:81:c8:4d:ee: de:be:63:5c:5e:5e:fd:ba:62:75:a2:6e:80:86:8a: bf:29:99:81:f2:80:c1:cf:5b:be:4c:86:0c:5d:b8: b4:50:5e:8f:0b:84:b9:23:4e:02:17:94:7b:93:7e: 64:4a:68:bd:35:ff:38:97:20:5b:8d:3b:fa:56:08: 52:9b:ad:cc:04:fc:2c:95:5a:f2:f1:25:39:7e:3f: 78:cf:92:25:c3:73:98:db:51:26:28:bb:83:dc:e9: fa:37:28:42:5f:7f:ff:db:1f:d4:28:5f:3c:a7:8d: 5c:7a:d9:aa:8a:84:b0:7c:53:cb:71:20:3f:a0:60: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2A:6B:40:7B:CA:5C:5D:C8:A5:61:5C:9A:79:75:49:2E:45:E4:3E X509v3 Authority Key Identifier: keyid:60:B3:C8:6A:C6:CF:D0:23:7C:E1:C9:EC:A5:5B:58:07:5E:68:8B:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLPIasbP0CN84cnspVtYB15oi9A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/YLPIasbP0CN84cnspVtYB15oi9A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f9:8a:15:39:fb:71:74:bc:d2:5e:b2:02:bb:81:2f:f8:96: e7:08:7a:c3:52:45:e8:3c:85:d7:f0:c1:f9:ee:eb:d1:5a:54: de:3b:36:1c:41:86:8c:42:1b:49:ca:10:38:d8:bc:98:75:fc: aa:92:21:a5:37:01:12:42:27:80:b5:0e:2b:d8:85:d3:1f:5b: b1:0e:a6:78:89:2f:d3:5b:cd:4f:cc:30:5c:d4:c5:d9:ab:a3: 58:f9:70:8d:c7:04:56:ea:c4:dc:73:52:02:3d:df:8f:3f:c9: a4:38:85:c9:d6:78:82:d1:7b:94:13:f7:5c:0e:1d:6a:c7:b7: 22:38:5e:9d:b4:33:e8:e6:b1:20:5c:04:60:43:c4:30:e5:29: ce:70:b6:63:4a:74:7b:02:f4:b1:c4:03:84:63:92:68:f2:7e: 0d:9f:76:ef:0a:00:10:8e:08:53:9c:e5:b7:78:f2:49:89:de: 7d:c8:5c:01:23:3b:ab:3d:8e:77:81:56:4c:9d:5b:69:19:ad: 15:2c:d6:90:31:bf:23:9d:48:b5:89:1e:8a:31:47:e5:89:21: c3:65:03:e0:f8:36:f4:f6:dd:80:06:6d:73:a2:06:ff:5c:8a: 31:10:26:a7:31:0c:25:bb:1d:a3:71:4a:13:61:e4:35:68:a3: 82:d7:5d:90 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjBC M0M4NkFDNkNGRDAyMzdDRTFDOUVDQTU1QjU4MDc1RTY4OEJEMDAeFw0yNDExMjIx NTIyMjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVCMkE2QjQwN0JDQTVD NURDOEE1NjE1QzlBNzk3NTQ5MkU0NUU0M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1ePQIA8nPwgA5u42+A1+FbMgEsrJCqDQR1NhLczus5Hcjtb7F UPEHb44FnRSw204RH6LSeDFYFOrBsJV3aMuUwQvc+eCqIScgyYq2RC3tQMYl4L4j C+Z6/dr4AhyOYo9iAVbKdEDIf88teocPO6QpWHZjpz+YS7IALQG6gaIOlXKAgchN 7t6+Y1xeXv26YnWiboCGir8pmYHygMHPW75MhgxduLRQXo8LhLkjTgIXlHuTfmRK aL01/ziXIFuNO/pWCFKbrcwE/CyVWvLxJTl+P3jPkiXDc5jbUSYou4Pc6fo3KEJf f//bH9QoXzynjVx62aqKhLB8U8txID+gYKLTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUWyprQHvKXF3IpWFcmnl1SS5F5D4wHwYDVR0jBBgwFoAUYLPIasbP0CN84cns pVtYB15oi9AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx My9ZTFBJYXNiUDBDTjg0Y25zcFZ0WUIxNW9pOUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1lMUElhc2JQMENOODRjbnNwVnRZQjE1b2k5QS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTMvWUxQSWFzYlAwQ044 NGNuc3BWdFlCMTVvaTlBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEr5ihU5+3F0vNJesgK7gS/4lucIesNSReg8hdfwwfnu69FaVN47NhxBhoxC G0nKEDjYvJh1/KqSIaU3ARJCJ4C1DivYhdMfW7EOpniJL9NbzU/MMFzUxdmro1j5 cI3HBFbqxNxzUgI9348/yaQ4hcnWeILRe5QT91wOHWrHtyI4Xp20M+jmsSBcBGBD xDDlKc5wtmNKdHsC9LHEA4Rjkmjyfg2fdu8KABCOCFOc5bd48kmJ3n3IXAEjO6s9 jneBVkydW2kZrRUs1pAxvyOdSLWJHooxR+WJIcNlA+D4NvT23YAGbXOiBv9cijEQ JqcxDCW7HaNxShNh5DVoo4LXXZA= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org