$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3238/Gccs5xh6Xgfm0PjjUb15hYmxEcw.mft File: Gccs5xh6Xgfm0PjjUb15hYmxEcw.mft (raw, json) Hash identifier: mJoi4KqN8tnFl8+U1kBlIniTbVEg98iG6SgzZUZ+8Gg= Subject key identifier: 9C:07:B0:C0:B9:D8:7D:0B:3A:FC:5D:42:8E:37:23:42:0E:63:3E:71 Authority key identifier: 19:C7:2C:E7:18:7A:5E:07:E6:D0:F8:E3:51:BD:79:85:89:B1:11:CC Certificate issuer: /CN=19C72CE7187A5E07E6D0F8E351BD798589B111CC Certificate serial: 08C7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gccs5xh6Xgfm0PjjUb15hYmxEcw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/Gccs5xh6Xgfm0PjjUb15hYmxEcw.mft Manifest number: 08C4 Signing time: Fri 22 Nov 2024 15:22:43 +0000 Manifest this update: Fri 22 Nov 2024 15:22:43 +0000 Manifest next update: Fri 22 Nov 2024 21:22:43 +0000 Files and hashes: 1: Gccs5xh6Xgfm0PjjUb15hYmxEcw.crl (hash: AfEqRtQc00GJqeTZjcC3uLYVKI2hUBCy/xEYuy+Wfvg=) 2: d5KUtbMJ0zY3qyxXev80syzOgrI.roa (hash: HfM1riKkZy1xpm6dibIgNBu3AAtot+IUYpemOy0Hh14=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/Gccs5xh6Xgfm0PjjUb15hYmxEcw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/Gccs5xh6Xgfm0PjjUb15hYmxEcw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gccs5xh6Xgfm0PjjUb15hYmxEcw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19C72CE7187A5E07E6D0F8E351BD798589B111CC Validity Not Before: Nov 22 15:22:43 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9C07B0C0B9D87D0B3AFC5D428E3723420E633E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:a5:a1:31:aa:7e:7e:43:d2:b8:c2:8d:51: 86:41:3f:36:a2:3d:a3:83:9f:7e:9c:ca:e9:8e:ea: 72:c6:5d:8c:05:d5:20:3e:e5:e0:42:70:19:55:b3: f4:56:3a:fa:3b:a7:5e:1f:38:68:6c:4c:9a:bf:b4: 11:44:3d:4e:f9:ff:ba:b4:c9:f6:d2:3b:de:52:4b: 14:5d:dd:b7:51:b0:0d:f7:4c:9b:a0:11:18:6a:fc: 8e:d2:3e:02:e2:88:a1:92:5f:8c:c4:11:2d:37:e3: 32:e0:8e:dd:c8:88:b8:62:18:ed:f9:6f:4d:57:62: ce:a4:32:4d:7f:f8:19:14:7e:e5:2b:0a:f7:35:4e: 1b:0e:bc:c6:8c:21:8f:b0:2f:59:4a:18:25:ce:16: 39:bd:23:68:22:57:ba:6f:1b:39:70:2d:d4:3d:74: 9f:19:77:5d:f7:fc:28:30:98:2a:61:67:e4:92:4d: 29:c4:05:49:78:76:ec:af:48:e7:64:57:3e:16:43: c9:70:18:fa:ee:25:ba:bc:ab:b6:40:7f:d5:35:06: 76:ce:85:66:39:45:b5:f7:43:56:c3:46:9c:bd:b5: d5:33:8d:ec:50:e3:d4:f9:92:3c:96:87:50:09:5d: b9:38:3b:8b:b3:8d:f6:3d:54:8a:59:f9:15:a4:cb: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:07:B0:C0:B9:D8:7D:0B:3A:FC:5D:42:8E:37:23:42:0E:63:3E:71 X509v3 Authority Key Identifier: keyid:19:C7:2C:E7:18:7A:5E:07:E6:D0:F8:E3:51:BD:79:85:89:B1:11:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/Gccs5xh6Xgfm0PjjUb15hYmxEcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gccs5xh6Xgfm0PjjUb15hYmxEcw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/Gccs5xh6Xgfm0PjjUb15hYmxEcw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2c:9f:c2:62:9e:ff:d9:08:74:79:e9:e6:59:62:60:d5:c7: cf:40:05:19:97:de:33:92:d9:5b:05:08:2c:c2:8c:8c:de:f3: 55:46:d0:40:2f:36:96:63:d4:77:ce:5f:f9:0d:31:da:b8:e9: 4f:d0:f9:53:d3:d4:5a:22:56:a4:a4:22:56:29:2a:9a:c4:3c: 3f:f2:c0:78:30:a9:5c:7a:77:10:5b:9f:3c:25:b6:fa:a3:5f: 13:08:87:f2:59:ac:d6:97:b8:c8:8c:47:c4:45:cb:af:f5:18: f3:42:5f:6f:2e:1e:3b:f1:1c:d8:8a:65:97:33:25:a9:b2:94: ad:e1:53:64:8d:38:5d:bb:6b:f3:eb:d0:c6:1e:bd:20:9a:6e: bf:7a:e6:0c:52:bc:c4:10:66:9d:3d:d3:e4:9e:b5:09:ff:35: 1b:2f:bf:db:a0:43:9c:b9:16:4f:ee:b9:57:66:86:96:d0:45: ef:fa:5a:09:19:c9:b6:23:1f:1b:fe:45:ae:71:36:17:20:dd: d4:04:ec:92:76:e3:20:2e:36:22:0c:e7:82:77:5b:19:b7:30: dd:bf:b1:b6:f6:cb:54:10:63:f2:78:56:48:39:4c:1e:cc:da: 24:a9:a1:3c:63:94:b4:fd:55:f8:65:b2:80:3d:64:91:f1:82: 5a:95:69:62 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTlD NzJDRTcxODdBNUUwN0U2RDBGOEUzNTFCRDc5ODU4OUIxMTFDQzAeFw0yNDExMjIx NTIyNDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlDMDdCMEMwQjlEODdE MEIzQUZDNUQ0MjhFMzcyMzQyMEU2MzNFNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNFaWhMap+fkPSuMKNUYZBPzaiPaODn36cyumO6nLGXYwF1SA+ 5eBCcBlVs/RWOvo7p14fOGhsTJq/tBFEPU75/7q0yfbSO95SSxRd3bdRsA33TJug ERhq/I7SPgLiiKGSX4zEES034zLgjt3IiLhiGO35b01XYs6kMk1/+BkUfuUrCvc1 ThsOvMaMIY+wL1lKGCXOFjm9I2giV7pvGzlwLdQ9dJ8Zd133/CgwmCphZ+SSTSnE BUl4duyvSOdkVz4WQ8lwGPruJbq8q7ZAf9U1BnbOhWY5RbX3Q1bDRpy9tdUzjexQ 49T5kjyWh1AJXbk4O4uzjfY9VIpZ+RWky9aLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUnAewwLnYfQs6/F1CjjcjQg5jPnEwHwYDVR0jBBgwFoAUGccs5xh6Xgfm0Pjj Ub15hYmxEcwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz OC9HY2NzNXhoNlhnZm0wUGpqVWIxNWhZbXhFY3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0djY3M1eGg2WGdmbTBQampVYjE1aFlteEVjdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzgvR2NjczV4aDZYZ2Zt MFBqalViMTVoWW14RWN3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABQsn8Jinv/ZCHR56eZZYmDVx89ABRmX3jOS2VsFCCzCjIze81VG0EAvNpZj 1HfOX/kNMdq46U/Q+VPT1FoiVqSkIlYpKprEPD/ywHgwqVx6dxBbnzwltvqjXxMI h/JZrNaXuMiMR8RFy6/1GPNCX28uHjvxHNiKZZczJamylK3hU2SNOF27a/Pr0MYe vSCabr965gxSvMQQZp090+SetQn/NRsvv9ugQ5y5Fk/uuVdmhpbQRe/6WgkZybYj Hxv+Ra5xNhcg3dQE7JJ24yAuNiIM54J3Wxm3MN2/sbb2y1QQY/J4Vkg5TB7M2iSp oTxjlLT9VfhlsoA9ZJHxglqVaWI= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org