$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft File: yWewb7xL_3HCRTp9vkkVFDS7jW8.mft (raw, json) Hash identifier: LEvVgl86pinNV++qGGgO6BnLnD8NlKr5xTAlINA6MoI= Subject key identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E Authority key identifier: C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F Certificate issuer: /CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Certificate serial: 091F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft Manifest number: 091F Signing time: Fri 22 Nov 2024 15:21:10 +0000 Manifest this update: Fri 22 Nov 2024 15:21:10 +0000 Manifest next update: Fri 22 Nov 2024 21:21:10 +0000 Files and hashes: 1: yWewb7xL_3HCRTp9vkkVFDS7jW8.crl (hash: VLBfgLxkQtkse43WtfaN/MCNmiqwVBR6GqEVqqBLGLI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2335 (0x91f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Validity Not Before: Nov 22 15:21:10 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=894F37F63950F05EB10F706A509A4894914F608E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:42:42:64:e9:69:8a:58:4a:14:ac:ad:1b: aa:3d:86:55:37:d2:e9:45:06:57:01:57:fb:eb:4e: 9a:93:2c:5f:5b:25:14:d1:ff:f4:6a:47:47:90:7c: a6:43:28:ff:82:5f:9b:b2:1d:d6:69:8e:ac:76:02: fc:d0:5a:6e:ee:6a:7f:6f:98:82:54:57:f7:de:97: 9f:7b:a4:6d:ec:0c:81:78:ca:eb:52:95:cd:51:cf: 82:a7:a8:00:74:51:2f:32:34:da:42:85:bb:5e:b6: c6:37:a0:a8:ef:ea:02:a7:06:5c:06:b4:a8:d8:f1: 9e:d9:b2:98:35:55:a1:b5:06:1d:5f:80:ab:d5:9a: b9:f2:49:55:98:c5:e6:83:fa:ba:78:5b:8a:e0:68: fa:df:41:0c:49:6f:0e:57:0e:a2:10:40:27:9d:4f: 06:eb:84:0c:95:3f:73:20:c2:bb:ea:6c:0a:51:4e: 35:30:3e:e0:11:e9:12:84:cd:88:b3:29:97:e9:67: 70:62:d6:0d:ab:a6:e3:5c:de:86:55:89:c5:ff:82: db:5e:b0:7b:fa:86:57:eb:94:1d:56:09:66:ae:29: b9:e6:27:94:4d:5e:d4:2f:5f:fb:4b:f7:ac:bc:9f: 95:6d:c6:64:68:7a:83:fb:0d:d6:6a:fd:b0:fe:cd: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E X509v3 Authority Key Identifier: keyid:C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:c4:87:b1:c0:1d:a3:e9:6f:c2:29:08:fd:fe:18:c4:4e:b5: 5f:98:6a:4a:6b:34:a6:75:f9:d5:fb:67:d3:19:10:24:64:a1: 32:1a:83:36:ef:a5:e7:1e:46:04:91:ed:cb:e0:38:13:f9:9d: 84:08:b3:eb:e3:9d:b8:a0:be:62:12:59:7a:f9:20:ce:56:e4: 75:28:d5:07:38:d3:5e:2c:4c:c4:3b:6e:3d:ef:21:36:55:c3: 43:e6:03:57:b3:b1:f1:22:ea:8d:af:e0:99:bb:b7:ff:49:08: 25:09:60:e8:3e:77:6a:37:8b:53:14:22:39:a4:2d:9d:89:04: d0:61:72:bb:12:33:f0:93:ac:ca:78:55:b1:07:6f:ab:f0:dd: cd:17:df:dd:6e:f5:67:e6:a6:84:53:12:fa:4b:68:eb:19:ee: dd:75:be:af:a4:d0:01:52:17:52:ae:a5:f0:0a:10:1f:5d:21: 4d:55:20:32:a4:01:72:08:4b:ec:b0:25:a6:51:17:cc:1b:99: ab:2c:da:9b:3a:76:6e:2d:5b:a9:5c:49:3c:c4:66:f1:1a:64: d8:88:5e:61:b1:1f:3e:97:cd:e1:a6:3e:f4:04:73:18:b8:b6: 3f:bf:18:9f:25:4b:9b:78:8e:0c:21:d3:b7:87:fd:99:06:93: 8a:d5:08:22 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk2 N0IwNkZCQzRCRkY3MUMyNDUzQTdEQkU0OTE1MTQzNEJCOEQ2RjAeFw0yNDExMjIx NTIxMTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg5NEYzN0Y2Mzk1MEYw NUVCMTBGNzA2QTUwOUE0ODk0OTE0RjYwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc9EJCZOlpilhKFKytG6o9hlU30ulFBlcBV/vrTpqTLF9bJRTR //RqR0eQfKZDKP+CX5uyHdZpjqx2AvzQWm7uan9vmIJUV/fel597pG3sDIF4yutS lc1Rz4KnqAB0US8yNNpChbtetsY3oKjv6gKnBlwGtKjY8Z7Zspg1VaG1Bh1fgKvV mrnySVWYxeaD+rp4W4rgaPrfQQxJbw5XDqIQQCedTwbrhAyVP3MgwrvqbApRTjUw PuAR6RKEzYizKZfpZ3Bi1g2rpuNc3oZVicX/gttesHv6hlfrlB1WCWauKbnmJ5RN XtQvX/tL96y8n5VtxmRoeoP7DdZq/bD+zdpXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUiU839jlQ8F6xD3BqUJpIlJFPYI4wHwYDVR0jBBgwFoAUyWewb7xL/3HCRTp9 vkkVFDS7jW8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx Ni95V2V3Yjd4TF8zSENSVHA5dmtrVkZEUzdqVzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3lXZXdiN3hMXzNIQ1JUcDl2a2tWRkRTN2pXOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTYveVdld2I3eExfM0hD UlRwOXZra1ZGRFM3alc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMXEh7HAHaPpb8IpCP3+GMROtV+YakprNKZ1+dX7Z9MZECRkoTIagzbvpece RgSR7cvgOBP5nYQIs+vjnbigvmISWXr5IM5W5HUo1Qc4014sTMQ7bj3vITZVw0Pm A1ezsfEi6o2v4Jm7t/9JCCUJYOg+d2o3i1MUIjmkLZ2JBNBhcrsSM/CTrMp4VbEH b6vw3c0X391u9WfmpoRTEvpLaOsZ7t11vq+k0AFSF1KupfAKEB9dIU1VIDKkAXII S+ywJaZRF8wbmass2ps6dm4tW6lcSTzEZvEaZNiIXmGxHz6XzeGmPvQEcxi4tj+/ GJ8lS5t4jgwh07eH/ZkGk4rVCCI= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:40 2024 by rpki-client on console-fra.rpki-client.org