$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft File: _RcrCSdVjbeuit47T13UnttFtYI.mft (raw, json) Hash identifier: WnRUv65bEZph+jcFYlX6U67Gonp9nXucjtdDazRgMPA= Subject key identifier: BA:C0:BE:93:0C:6F:B2:3A:14:6F:2C:FE:AB:B2:C3:1E:12:51:DC:FA Authority key identifier: FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82 Certificate issuer: /CN=FD172B0927558DB7AE8ADE3B4F5DD49EDB45B582 Certificate serial: 08F6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_RcrCSdVjbeuit47T13UnttFtYI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft Manifest number: 08F6 Signing time: Fri 22 Nov 2024 13:20:35 +0000 Manifest this update: Fri 22 Nov 2024 13:20:35 +0000 Manifest next update: Fri 22 Nov 2024 19:20:35 +0000 Files and hashes: 1: _RcrCSdVjbeuit47T13UnttFtYI.crl (hash: huJTJr9/yehI9bV+DKZ6dMB38VnrsSUbNI6MQMSDPxc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_RcrCSdVjbeuit47T13UnttFtYI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD172B0927558DB7AE8ADE3B4F5DD49EDB45B582 Validity Not Before: Nov 22 13:20:35 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BAC0BE930C6FB23A146F2CFEABB2C31E1251DCFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:ab:1a:a5:83:5f:12:80:b0:22:4b:21:78: 4a:c7:c5:39:29:89:85:6c:06:2b:a7:35:76:ce:38: 26:fe:07:7c:70:75:4c:5b:ae:a4:ff:63:9b:05:a8: 76:67:47:62:c2:d5:3b:a2:32:6d:2e:cc:05:20:86: 44:cf:91:86:8c:c9:f7:3b:14:5d:07:5b:c0:58:8f: f4:ab:f7:bd:4f:56:d3:d2:80:25:e0:e8:c5:3b:8c: ff:a4:0d:0f:fe:4c:be:d1:8e:b5:a3:d1:01:f3:dc: 62:c0:86:db:fb:e8:b9:ca:cf:12:a3:d8:74:92:14: 31:64:61:af:8a:83:6e:e4:ac:93:1d:e1:0a:20:f4: 4c:69:e0:07:4f:ef:3b:d6:61:b3:e6:42:49:0d:40: f4:7f:8e:fa:11:ad:b4:9a:80:96:28:cd:50:fc:68: 14:13:e7:dd:05:41:c2:25:50:06:ab:4b:fb:c1:d9: 28:29:73:4c:d6:38:3b:ce:e1:f6:d0:de:0a:38:a5: 2f:83:fb:b2:8d:1d:09:f3:b2:e0:5e:82:61:30:12: 35:6d:32:c8:5b:92:63:19:07:d3:ad:48:ed:8e:09: 7f:b7:b8:09:91:60:75:90:f6:54:c3:69:08:da:cc: ba:87:68:79:7e:8a:5a:7a:ba:85:57:95:16:fe:c8: 49:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C0:BE:93:0C:6F:B2:3A:14:6F:2C:FE:AB:B2:C3:1E:12:51:DC:FA X509v3 Authority Key Identifier: keyid:FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_RcrCSdVjbeuit47T13UnttFtYI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:42:88:36:ff:8f:91:77:4e:30:b2:8f:bf:68:9e:01:80:ef: 90:11:5d:30:a3:15:a0:e9:bd:ac:25:8b:2c:fa:8b:fa:8c:81: cb:e8:0e:1d:6a:61:c3:57:d1:12:d9:00:06:38:fe:db:56:27: d8:eb:89:78:fd:a8:58:8c:7d:8f:27:7f:25:e2:05:d3:72:23: 90:8f:73:d8:19:37:d1:89:82:57:3b:29:8c:4f:a1:0e:bd:6a: d5:ea:ad:17:a6:25:69:32:5a:46:3a:74:b7:19:8c:53:0e:aa: ab:bc:65:f6:78:9c:3b:56:d8:94:2c:75:68:b6:00:a0:d3:87: 3d:28:6f:47:cc:0d:b1:7d:2d:00:06:0a:92:ed:2f:dc:a1:2c: db:64:fa:87:91:03:c5:ee:f2:4b:12:4e:cb:41:50:8f:ed:7e: da:6c:14:3a:27:4b:c1:a7:12:70:13:0e:72:5d:77:a9:55:21: 87:b3:0b:9b:e3:38:5f:4f:a4:60:88:5f:ee:29:8c:3b:ff:83: 5b:fb:db:c7:9a:ed:b7:26:61:a6:39:8c:08:0e:93:0c:6f:9d: 0d:1b:30:d8:42:29:de:15:46:9a:90:f8:9e:c0:a2:fd:dd:da: 3b:8a:59:48:ba:01:86:b1:fb:1b:4d:a2:5e:ad:47:93:02:18: 9e:b3:96:f2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQx NzJCMDkyNzU1OERCN0FFOEFERTNCNEY1REQ0OUVEQjQ1QjU4MjAeFw0yNDExMjIx MzIwMzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJBQzBCRTkzMEM2RkIy M0ExNDZGMkNGRUFCQjJDMzFFMTI1MURDRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwoKsapYNfEoCwIksheErHxTkpiYVsBiunNXbOOCb+B3xwdUxb rqT/Y5sFqHZnR2LC1TuiMm0uzAUghkTPkYaMyfc7FF0HW8BYj/Sr971PVtPSgCXg 6MU7jP+kDQ/+TL7RjrWj0QHz3GLAhtv76LnKzxKj2HSSFDFkYa+Kg27krJMd4Qog 9Exp4AdP7zvWYbPmQkkNQPR/jvoRrbSagJYozVD8aBQT590FQcIlUAarS/vB2Sgp c0zWODvO4fbQ3go4pS+D+7KNHQnzsuBegmEwEjVtMshbkmMZB9OtSO2OCX+3uAmR YHWQ9lTDaQjazLqHaHl+ilp6uoVXlRb+yEmvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUusC+kwxvsjoUbyz+q7LDHhJR3PowHwYDVR0jBBgwFoAU/RcrCSdVjbeuit47 T13UnttFtYIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Ni9fUmNyQ1NkVmpiZXVpdDQ3VDEzVW50dEZ0WUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19SY3JDU2RWamJldWl0NDdUMTNVbnR0RnRZSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzYvX1JjckNTZFZqYmV1 aXQ0N1QxM1VudHRGdFlJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMZCiDb/j5F3TjCyj79ongGA75ARXTCjFaDpvawliyz6i/qMgcvoDh1qYcNX 0RLZAAY4/ttWJ9jriXj9qFiMfY8nfyXiBdNyI5CPc9gZN9GJglc7KYxPoQ69atXq rRemJWkyWkY6dLcZjFMOqqu8ZfZ4nDtW2JQsdWi2AKDThz0ob0fMDbF9LQAGCpLt L9yhLNtk+oeRA8Xu8ksSTstBUI/tftpsFDonS8GnEnATDnJdd6lVIYezC5vjOF9P pGCIX+4pjDv/g1v728ea7bcmYaY5jAgOkwxvnQ0bMNhCKd4VRpqQ+J7Aov3d2juK WUi6AYax+xtNol6tR5MCGJ6zlvI= -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:53 2024 by rpki-client on console-ams.rpki-client.org