$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3215/Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.mft File: Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.mft (raw, json) Hash identifier: 0+ORCnyJwYVoAWz3Rf3Ie7sZQBT4rZ5jlIkddhyFmwU= Subject key identifier: 06:D2:50:78:A3:F5:CF:66:4B:7D:D4:AC:D5:43:E8:20:AF:99:91:D0 Authority key identifier: 52:2E:E5:40:82:53:D5:76:1A:69:2D:46:60:9E:FF:BD:29:E0:E0:18 Certificate issuer: /CN=522EE5408253D5761A692D46609EFFBD29E0E018 Certificate serial: 0B2E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.mft Manifest number: 0B2E Signing time: Mon 25 Nov 2024 21:20:45 +0000 Manifest this update: Mon 25 Nov 2024 21:20:45 +0000 Manifest next update: Tue 26 Nov 2024 03:20:45 +0000 Files and hashes: 1: Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.crl (hash: Bf2x2x88SbX4jj1YMj2VjiXOBhRaN34XIKyBEkBVS30=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 03:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522EE5408253D5761A692D46609EFFBD29E0E018 Validity Not Before: Nov 25 21:20:45 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=06D25078A3F5CF664B7DD4ACD543E820AF9991D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fb:21:1c:2c:50:96:e9:d6:f6:c7:85:36:6a: 9e:82:29:e0:c4:4e:fb:f3:36:6d:40:29:5b:7d:b4: b9:94:37:f3:37:fb:11:58:02:ca:76:a7:05:68:07: 9e:4a:8d:d7:62:58:d9:37:c6:ed:6e:bf:c8:d0:e5: f7:79:3e:61:0e:aa:95:75:55:98:62:7e:85:d4:a8: 56:74:da:5e:83:2b:0d:d1:7f:45:66:31:fd:2a:80: 94:8c:d2:61:78:e5:d0:5a:9b:dc:5d:c4:53:67:eb: 84:a8:26:37:69:2c:3d:ba:cf:76:42:78:9c:6b:86: 46:d4:70:74:8f:0a:cb:b0:1c:1b:52:1b:12:17:e1: ab:76:e5:b9:dc:1b:1a:b5:a7:a2:f0:3e:87:06:d3: e1:97:6a:5c:b8:2e:a0:93:ab:36:62:17:57:24:41: 6d:37:75:06:62:1c:3a:66:12:51:04:0e:13:9c:0b: 5d:0f:8c:4f:60:74:96:a0:8c:03:07:eb:45:4d:22: b0:d5:d7:ff:db:91:fd:be:09:a7:36:95:36:1e:95: 71:2b:dd:da:6f:d2:fb:86:fe:11:f6:1d:59:f5:37: 1a:74:43:32:f3:0e:a7:ff:97:57:15:f3:f7:0e:0c: bb:dd:f4:3e:3b:be:eb:3b:22:d7:60:09:f4:92:c5: 03:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D2:50:78:A3:F5:CF:66:4B:7D:D4:AC:D5:43:E8:20:AF:99:91:D0 X509v3 Authority Key Identifier: keyid:52:2E:E5:40:82:53:D5:76:1A:69:2D:46:60:9E:FF:BD:29:E0:E0:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/Ui7lQIJT1XYaaS1GYJ7_vSng4Bg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e3:94:73:93:e6:0f:cd:69:a9:f4:92:96:e0:26:5d:a0:1b: 8d:de:11:e5:2f:8f:85:1d:7c:a4:1e:07:ef:25:6a:90:77:41: 2f:5e:ca:c3:f8:14:1b:3f:b0:70:4d:d7:3b:aa:38:0d:71:1a: 73:46:b1:ba:00:61:45:77:b7:93:e7:58:44:d3:a4:43:7d:87: 8a:1e:ce:47:5d:28:e1:e2:ee:46:37:4d:64:0f:fe:81:40:c4: b7:b5:28:31:a5:94:3a:9b:7d:75:77:f3:a1:df:d2:06:df:1c: e7:38:70:8e:f4:cc:2a:fa:70:1e:a2:2d:9c:0f:42:b8:85:c2: 67:6c:f4:36:7e:8c:80:9b:6c:f5:d4:6a:49:c2:9a:d3:8b:0b: 7c:a6:ad:91:11:dd:fb:07:4e:33:69:1e:e9:31:ae:0c:ef:2a: ab:7c:17:55:17:1f:cc:9b:c8:d9:4b:47:c4:bd:0c:82:da:30: 66:6c:26:90:03:38:86:a8:67:e2:89:ef:26:86:6a:d7:9a:67: 77:b6:70:fd:d0:ff:05:b0:1c:f1:3f:28:af:f6:63:ed:d5:ee: 0a:d4:fd:ad:ad:10:64:59:24:26:ea:03:a8:b7:db:c5:be:fc: 27:b7:e7:ca:aa:43:6d:f5:9c:2c:52:ee:c6:5e:d1:09:17:c4: 03:e2:1b:ba -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTIy RUU1NDA4MjUzRDU3NjFBNjkyRDQ2NjA5RUZGQkQyOUUwRTAxODAeFw0yNDExMjUy MTIwNDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA2RDI1MDc4QTNGNUNG NjY0QjdERDRBQ0Q1NDNFODIwQUY5OTkxRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDr+yEcLFCW6db2x4U2ap6CKeDETvvzNm1AKVt9tLmUN/M3+xFY Asp2pwVoB55KjddiWNk3xu1uv8jQ5fd5PmEOqpV1VZhifoXUqFZ02l6DKw3Rf0Vm Mf0qgJSM0mF45dBam9xdxFNn64SoJjdpLD26z3ZCeJxrhkbUcHSPCsuwHBtSGxIX 4at25bncGxq1p6LwPocG0+GXaly4LqCTqzZiF1ckQW03dQZiHDpmElEEDhOcC10P jE9gdJagjAMH60VNIrDV1//bkf2+Cac2lTYelXEr3dpv0vuG/hH2HVn1Nxp0QzLz Dqf/l1cV8/cODLvd9D47vus7ItdgCfSSxQONAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUBtJQeKP1z2ZLfdSs1UPoIK+ZkdAwHwYDVR0jBBgwFoAUUi7lQIJT1XYaaS1G YJ7/vSng4BgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx NS9VaTdsUUlKVDFYWWFhUzFHWUo3X3ZTbmc0QmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1VpN2xRSUpUMVhZYWFTMUdZSjdfdlNuZzRCZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTUvVWk3bFFJSlQxWFlh YVMxR1lKN192U25nNEJnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACfjlHOT5g/Naan0kpbgJl2gG43eEeUvj4UdfKQeB+8lapB3QS9eysP4FBs/ sHBN1zuqOA1xGnNGsboAYUV3t5PnWETTpEN9h4oezkddKOHi7kY3TWQP/oFAxLe1 KDGllDqbfXV386Hf0gbfHOc4cI70zCr6cB6iLZwPQriFwmds9DZ+jICbbPXUaknC mtOLC3ymrZER3fsHTjNpHukxrgzvKqt8F1UXH8ybyNlLR8S9DILaMGZsJpADOIao Z+KJ7yaGateaZ3e2cP3Q/wWwHPE/KK/2Y+3V7grU/a2tEGRZJCbqA6i328W+/Ce3 58qqQ231nCxS7sZe0QkXxAPiG7o= -----END CERTIFICATE-----Generated at Tue Nov 26 00:28:54 2024 by rpki-client on console-fra.rpki-client.org