$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft File: RHMR0DbVD1TEQW-41oIgp8uWgZk.mft (raw, json) Hash identifier: eDa63vEzfx/Vig93XoyQhvpV92VFPeMYy02Fus6sV3I= Subject key identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD Authority key identifier: 44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 Certificate issuer: /CN=447311D036D50F54C4416FB8D68220A7CB968199 Certificate serial: 0AAB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft Manifest number: 0AAB Signing time: Fri 22 Nov 2024 15:21:32 +0000 Manifest this update: Fri 22 Nov 2024 15:21:32 +0000 Manifest next update: Fri 22 Nov 2024 21:21:32 +0000 Files and hashes: 1: RHMR0DbVD1TEQW-41oIgp8uWgZk.crl (hash: l5wQZXpUDldACRwhYT5JilQUIqZ5BW3cVQM6ZH4jLDY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447311D036D50F54C4416FB8D68220A7CB968199 Validity Not Before: Nov 22 15:21:32 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E87AE688BDC7A10FDD5E9B3706E050B1F5ACABCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:b5:20:11:08:e9:94:a4:b3:1b:10:e3:3b: 8c:9b:f3:3c:66:be:c4:8c:4c:8f:32:3d:75:bf:40: 7b:bf:65:97:b4:a5:fe:86:a0:df:27:cd:91:ff:04: 80:9d:7b:92:1a:d2:53:3d:27:c4:5d:a3:5c:c3:5c: 09:da:07:ba:5a:0d:d5:1e:a4:6c:fd:17:f2:a3:54: d7:10:0c:f5:45:bd:d6:fd:89:c3:14:99:b0:96:26: bc:f2:71:99:3c:9a:25:fd:6e:3a:9f:15:5b:01:e4: f7:2c:71:0b:3b:9c:a5:e1:28:15:63:3d:3f:61:bd: 99:0c:65:f7:ea:a6:2c:32:c6:9d:ab:8c:6c:12:6b: 77:72:c5:92:9e:23:aa:85:b5:09:6f:7d:e2:b6:66: 82:64:e6:c8:d5:71:b8:db:e6:7a:ee:92:72:48:cc: 75:03:dc:86:79:a6:05:67:84:18:21:37:5e:9e:c6: fa:3b:a9:a0:c7:79:33:d5:c7:75:d6:11:4c:2e:45: 14:55:6e:95:9f:eb:2f:c8:99:ec:42:7b:89:51:79: b9:4c:8b:46:ff:73:f2:d0:7f:f8:9b:b8:2c:17:2d: 19:62:83:96:ac:c5:0c:ea:5b:04:bd:e1:b1:b2:7c: 6d:82:3a:c6:23:3d:6e:4f:20:11:17:4f:05:e1:7a: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD X509v3 Authority Key Identifier: keyid:44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6e:11:6a:8e:2d:5c:e6:4b:28:32:78:ff:9b:52:09:9e:6e: ef:a0:60:e1:77:1a:a4:9d:44:07:65:ec:12:56:02:ea:52:d0: f9:a2:67:69:f1:dd:77:60:89:d5:14:b7:69:3f:18:e5:ff:3f: e9:5d:54:26:65:07:80:1a:73:b0:78:2f:57:c9:f6:6a:ae:d5: 47:da:01:1a:46:25:67:38:b4:ae:8d:48:74:eb:14:c8:30:40: 1b:ef:dc:d2:b7:c2:d9:4a:2b:1b:f6:6b:96:e4:c5:cf:0d:f7: 9f:f6:6b:77:9a:93:3c:bf:b2:14:a3:5a:7a:27:92:63:a1:88: 34:a8:a4:67:28:f6:60:97:a3:cc:55:14:6e:5e:63:4c:7e:2a: 5a:ee:f0:64:b2:56:59:aa:10:7c:9a:32:c4:7e:c3:56:44:26: ab:02:18:c1:36:79:d3:14:53:da:e9:e8:1e:21:b9:75:27:8c: c8:bc:05:30:c5:ba:4f:96:93:d6:12:0c:14:79:bf:9b:da:90: ff:62:b6:23:06:3c:33:d4:7a:43:c4:cb:07:fb:4e:61:e7:3f: c5:f5:a2:49:08:66:bf:6f:42:cf:8e:31:86:ad:c1:ca:f3:e1: 84:d1:97:d9:da:51:ac:49:0b:1d:30:ae:91:33:20:db:f4:18: 61:8f:36:ef -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ3 MzExRDAzNkQ1MEY1NEM0NDE2RkI4RDY4MjIwQTdDQjk2ODE5OTAeFw0yNDExMjIx NTIxMzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU4N0FFNjg4QkRDN0Ex MEZERDVFOUIzNzA2RTA1MEIxRjVBQ0FCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmULUgEQjplKSzGxDjO4yb8zxmvsSMTI8yPXW/QHu/ZZe0pf6G oN8nzZH/BICde5Ia0lM9J8Rdo1zDXAnaB7paDdUepGz9F/KjVNcQDPVFvdb9icMU mbCWJrzycZk8miX9bjqfFVsB5PcscQs7nKXhKBVjPT9hvZkMZffqpiwyxp2rjGwS a3dyxZKeI6qFtQlvfeK2ZoJk5sjVcbjb5nruknJIzHUD3IZ5pgVnhBghN16exvo7 qaDHeTPVx3XWEUwuRRRVbpWf6y/ImexCe4lReblMi0b/c/LQf/ibuCwXLRlig5as xQzqWwS94bGyfG2COsYjPW5PIBEXTwXhehJPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6HrmiL3HoQ/dXps3BuBQsfWsq80wHwYDVR0jBBgwFoAURHMR0DbVD1TEQW+4 1oIgp8uWgZkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx OS9SSE1SMERiVkQxVEVRVy00MW9JZ3A4dVdnWmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JITVIwRGJWRDFURVFXLTQxb0lncDh1V2daay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvUkhNUjBEYlZEMVRF UVctNDFvSWdwOHVXZ1prLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJpuEWqOLVzmSygyeP+bUgmebu+gYOF3GqSdRAdl7BJWAupS0PmiZ2nx3Xdg idUUt2k/GOX/P+ldVCZlB4Aac7B4L1fJ9mqu1UfaARpGJWc4tK6NSHTrFMgwQBvv 3NK3wtlKKxv2a5bkxc8N95/2a3eakzy/shSjWnonkmOhiDSopGco9mCXo8xVFG5e Y0x+Klru8GSyVlmqEHyaMsR+w1ZEJqsCGME2edMUU9rp6B4huXUnjMi8BTDFuk+W k9YSDBR5v5vakP9itiMGPDPUekPEywf7TmHnP8X1okkIZr9vQs+OMYatwcrz4YTR l9naUaxJCx0wrpEzINv0GGGPNu8= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org