$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft File: Nd6o5bEoW5KyERchGKNBqy3bdrU.mft (raw, json) Hash identifier: YK0EyofQQgCHqXhUEVlFd9Kx9xXaU3/Sn/BMBXslYb8= Subject key identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 Authority key identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 Certificate issuer: /CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Certificate serial: 0969 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft Manifest number: 0969 Signing time: Fri 22 Nov 2024 15:21:14 +0000 Manifest this update: Fri 22 Nov 2024 15:21:14 +0000 Manifest next update: Fri 22 Nov 2024 21:21:14 +0000 Files and hashes: 1: Nd6o5bEoW5KyERchGKNBqy3bdrU.crl (hash: vOlt85Ka9Ds3AFcBNdp0Unu2wrJh+SorBqjqGIoU0Dg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2409 (0x969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Validity Not Before: Nov 22 15:21:14 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5BF91187435E01A842776355A2D3F3D0C6B75447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:4a:2e:e3:69:8c:36:a2:0f:c6:e1:ab:fa: a2:b8:c7:c6:f4:4f:0b:69:37:bd:7d:e9:b1:d2:d7: a3:24:85:7c:76:27:64:4d:ed:80:85:14:bb:3e:13: 65:f5:c8:27:33:60:41:5b:7d:61:d2:af:4a:c4:5d: f4:20:d5:b9:95:1d:43:95:d1:fd:ba:e7:ac:b9:6d: c7:8a:31:7c:c2:5a:43:2a:f4:7f:da:3a:06:61:59: 60:45:5f:ca:e3:dd:ac:ce:be:b3:ed:35:c9:6f:89: 0c:e8:2a:a0:99:f3:54:27:86:81:eb:1b:88:e5:55: 6e:b7:ef:a2:91:aa:4e:87:b5:be:43:4e:36:dc:d8: aa:30:14:03:f4:1e:2b:ae:1c:1a:26:0c:5d:39:e6: 68:eb:10:a7:ea:b1:6f:b0:b3:e9:f9:89:a2:8e:68: 0a:20:19:9a:91:27:df:a5:27:05:f8:79:1a:16:80: a1:0d:16:dc:2b:9c:ac:0f:8a:6b:cc:b3:3f:8d:00: 8e:5e:3f:3e:f5:77:80:e4:fc:9e:57:18:23:25:bf: 4b:c0:f7:23:72:90:43:d5:75:78:21:d0:87:e4:b2: b2:fb:d8:27:55:99:82:8e:68:53:18:f8:1a:88:95: 97:73:d4:5c:33:89:56:99:70:1a:bf:13:72:db:07: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F9:11:87:43:5E:01:A8:42:77:63:55:A2:D3:F3:D0:C6:B7:54:47 X509v3 Authority Key Identifier: keyid:35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:18:e3:41:70:29:b2:3c:b5:3a:6e:08:ea:f3:91:4f:66:cc: 5b:6e:21:c7:fa:d8:41:48:5b:47:89:30:43:15:d6:db:50:ae: 8f:bc:71:35:2b:8a:55:21:d5:34:cf:71:98:0e:07:32:ec:2c: c9:b7:7d:ca:8d:ca:f4:f3:d8:03:c6:5f:8a:4e:ae:c7:19:52: 72:c9:f2:9a:64:a6:90:98:ed:68:0c:54:8c:fa:c6:6e:0a:9b: d2:7f:71:bb:70:69:eb:d1:76:44:02:44:02:45:37:c9:d5:f0: f7:94:8f:39:44:a6:44:4a:bc:db:28:c2:0e:79:41:1e:1d:4c: 28:79:a7:50:5c:ba:cb:84:62:f0:3c:2f:33:f8:b3:cf:c3:db: e5:9b:da:e0:b2:28:1d:db:cb:bc:b4:f8:45:d4:e6:b8:f2:9e: ff:31:a6:d0:ec:1b:90:6a:f1:28:69:fc:eb:9b:82:5e:ac:2d: c8:1e:7f:70:2c:dd:1e:25:6a:81:d6:dd:01:b2:73:d3:2b:97: 2f:9d:3a:af:69:b9:ec:46:79:84:39:89:59:af:a1:66:2e:7d: 69:d8:ea:ef:d1:65:44:26:35:df:84:d0:74:7e:c8:63:61:b1: b7:fc:77:85:d4:39:d8:46:76:a0:30:2a:b2:c5:54:5d:58:8c: 40:38:2b:fb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVE RUE4RTVCMTI4NUI5MkIyMTExNzIxMThBMzQxQUIyRERCNzZCNTAeFw0yNDExMjIx NTIxMTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVCRjkxMTg3NDM1RTAx QTg0Mjc3NjM1NUEyRDNGM0QwQzZCNzU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL1kou42mMNqIPxuGr+qK4x8b0TwtpN7196bHS16MkhXx2J2RN 7YCFFLs+E2X1yCczYEFbfWHSr0rEXfQg1bmVHUOV0f2656y5bceKMXzCWkMq9H/a OgZhWWBFX8rj3azOvrPtNclviQzoKqCZ81QnhoHrG4jlVW6376KRqk6Htb5DTjbc 2KowFAP0HiuuHBomDF055mjrEKfqsW+ws+n5iaKOaAogGZqRJ9+lJwX4eRoWgKEN FtwrnKwPimvMsz+NAI5ePz71d4Dk/J5XGCMlv0vA9yNykEPVdXgh0IfksrL72CdV mYKOaFMY+BqIlZdz1FwziVaZcBq/E3LbBxk/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUW/kRh0NeAahCd2NVotPz0Ma3VEcwHwYDVR0jBBgwFoAUNd6o5bEoW5KyERch GKNBqy3bdrUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Mi9OZDZvNWJFb1c1S3lFUmNoR0tOQnF5M2JkclUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05kNm81YkVvVzVLeUVSY2hHS05CcXkzYmRyVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzIvTmQ2bzViRW9XNUt5 RVJjaEdLTkJxeTNiZHJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACUY40FwKbI8tTpuCOrzkU9mzFtuIcf62EFIW0eJMEMV1ttQro+8cTUrilUh 1TTPcZgOBzLsLMm3fcqNyvTz2APGX4pOrscZUnLJ8ppkppCY7WgMVIz6xm4Km9J/ cbtwaevRdkQCRAJFN8nV8PeUjzlEpkRKvNsowg55QR4dTCh5p1BcusuEYvA8LzP4 s8/D2+Wb2uCyKB3by7y0+EXU5rjynv8xptDsG5Bq8Shp/Oubgl6sLcgef3As3R4l aoHW3QGyc9Mrly+dOq9puexGeYQ5iVmvoWYufWnY6u/RZUQmNd+E0HR+yGNhsbf8 d4XUOdhGdqAwKrLFVF1YjEA4K/s= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org