$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json) Hash identifier: lvrsu6+86Dn1Xn5uthePTlKdjuAd90Ti6+Xp/mboE0c= Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Certificate serial: 0997 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft Manifest number: 0997 Signing time: Fri 22 Nov 2024 15:23:31 +0000 Manifest this update: Fri 22 Nov 2024 15:23:31 +0000 Manifest next update: Fri 22 Nov 2024 21:23:31 +0000 Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: ZgcdVdt7xXPJCZ5fdKUnv8EjeTlYyfaNQGu/iPEhkzA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Validity Not Before: Nov 22 15:23:31 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c: 6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62: a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5: 2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04: 54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03: df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db: c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2: 30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32: 00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92: 4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1: 6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac: c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4: 24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c: fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42: 8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc: 30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03: 1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 X509v3 Authority Key Identifier: keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:31:99:16:a8:41:67:61:8d:c4:7b:94:6d:c9:26:a0:f7:56: c1:93:7f:c6:7d:2c:40:d7:01:0d:37:e6:16:44:a7:ec:12:40: df:f9:91:b5:d8:30:54:96:b1:ef:73:b1:a5:ad:3a:27:3d:59: 10:25:2c:20:b4:48:56:fc:15:ea:e7:6b:15:87:4e:3b:dc:7f: 0f:df:c4:9c:f4:46:c4:84:f2:2e:a1:eb:a6:98:c2:d7:36:98: 29:2e:13:18:c9:78:31:cb:b9:92:6e:02:1c:a4:d7:d4:92:cf: e3:2b:a1:98:2d:6a:b4:6c:4a:27:f3:99:7b:a0:76:f3:5f:6c: 52:9c:8e:06:18:84:d7:e4:b5:9b:b5:e9:0c:6c:03:1d:55:f8: c0:35:f4:e2:da:86:ae:cb:7c:95:90:ab:73:a1:3c:0a:1c:ad: 4f:cd:04:f2:27:b5:56:59:03:b8:83:41:0a:22:f9:2f:1e:7d: 39:9a:5e:6d:4c:5d:c3:2d:21:bf:86:3c:55:f9:96:95:5c:63: e0:92:9b:f2:47:63:b0:40:50:17:1e:04:76:6e:d9:7f:15:88: 3f:62:cd:55:39:e3:39:cd:c8:6b:8c:00:e4:a7:33:f0:af:ab: b5:14:11:34:f3:9c:52:66:38:af:e3:cd:62:0e:11:8f:e6:c2: 04:f4:bd:a9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzM0 NjhGNTY4MjYxRjJEODA4RjcwMzBFMDlDRkFCQkUxRUUwRUQxNDAeFw0yNDExMjIx NTIzMzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVEMzZBOTRBNUFEMEVD RkUwRDZFODFBREI3RTM3NUQyRTVDMjQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWa6duO8ddF5qkZmdJjGqWxoZBwN8Axaodn82PYqHXwy+JjOBP WcpEQGpLpSu8XrwLB53CadTFHAZABFRQW4cutdCsMz0KAcbgA9/3sh36A+ex9Un3 41wP28awOQgBeG+ISWWkCd61ojAG1miKFb/3UXd03zPfMgCiQtgBPf7Vk1InO+U1 kkxFZ7Y3GGWUDtjncnDL0W1E75gcI44rf3tSj30RrMRBKaMXo95HFKObmOpwtCRh 2MPN1GZ3NsDd8J+MnPxYV+0QpUdRWFhUx4CCQo65x55RavW5MSokneSPzDD9JB6u BELPrn9AKLEjAx18HZ6mjkdJUB3oGYBeGCzlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7TapSlrQ7P4NboGtt+N10uXCQBMwHwYDVR0jBBgwFoAUM0aPVoJh8tgI9wMO Cc+rvh7g7RQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy OC9NMGFQVm9KaDh0Z0k5d01PQ2MtcnZoN2c3UlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL00wYVBWb0poOHRnSTl3TU9DYy1ydmg3ZzdSUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjgvTTBhUFZvSmg4dGdJ OXdNT0NjLXJ2aDdnN1JRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI8xmRaoQWdhjcR7lG3JJqD3VsGTf8Z9LEDXAQ035hZEp+wSQN/5kbXYMFSW se9zsaWtOic9WRAlLCC0SFb8FernaxWHTjvcfw/fxJz0RsSE8i6h66aYwtc2mCku ExjJeDHLuZJuAhyk19SSz+MroZgtarRsSifzmXugdvNfbFKcjgYYhNfktZu16Qxs Ax1V+MA19OLahq7LfJWQq3OhPAocrU/NBPIntVZZA7iDQQoi+S8efTmaXm1MXcMt Ib+GPFX5lpVcY+CSm/JHY7BAUBceBHZu2X8ViD9izVU54znNyGuMAOSnM/Cvq7UU ETTznFJmOK/jzWIOEY/mwgT0vak= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:40 2024 by rpki-client on console-fra.rpki-client.org