$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.mft File: TTF1GDx--185pMMrPUT8kM7h4D4.mft (raw, json) Hash identifier: 6caewoh1w5mMj6kP89aRV3LlSLqiteowH1Ozf0l/4Xc= Subject key identifier: 15:8A:B9:0A:F4:78:35:46:D3:BB:66:3B:63:05:D8:7D:69:66:E0:7E Authority key identifier: 4D:31:75:18:3C:7E:FB:5F:39:A4:C3:2B:3D:44:FC:90:CE:E1:E0:3E Certificate issuer: /CN=4D3175183C7EFB5F39A4C32B3D44FC90CEE1E03E Certificate serial: 0846 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TTF1GDx--185pMMrPUT8kM7h4D4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.mft Manifest number: 0846 Signing time: Fri 22 Nov 2024 10:20:47 +0000 Manifest this update: Fri 22 Nov 2024 10:20:47 +0000 Manifest next update: Fri 22 Nov 2024 16:20:47 +0000 Files and hashes: 1: TTF1GDx--185pMMrPUT8kM7h4D4.crl (hash: 92Vm2itSVdEcyVrOeebzmtAiwWffN1tazFPD44JGKUI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TTF1GDx--185pMMrPUT8kM7h4D4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D3175183C7EFB5F39A4C32B3D44FC90CEE1E03E Validity Not Before: Nov 22 10:20:47 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=158AB90AF4783546D3BB663B6305D87D6966E07E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:dd:16:3b:d3:52:b9:40:2c:40:a0:aa:02: 54:b9:1c:c6:03:94:01:62:71:01:b8:3e:4e:e2:f9: 4b:7e:52:3d:8e:df:ab:93:b5:16:30:1a:99:67:2c: e0:db:6d:13:d5:9d:a3:9c:53:dc:15:6d:a9:6a:4c: 34:43:c4:d7:5e:61:41:b1:2c:3a:80:06:d4:aa:c0: a8:85:4c:af:a9:80:ea:92:d5:c0:ca:88:50:08:8c: e1:dc:dc:49:d0:be:65:95:57:64:3f:c7:c5:b6:c8: f4:6d:b7:1b:82:71:20:29:d7:fe:bc:f1:12:d8:31: 83:b7:41:c7:c5:79:53:17:eb:bb:42:5a:6d:7a:eb: 70:03:0f:db:3f:19:d2:7b:de:92:d6:d0:3d:f8:4c: 2b:ca:42:0e:dc:e0:3e:8b:33:39:56:0b:cd:fc:9a: 8e:66:0c:5e:17:0d:f1:44:72:51:c4:77:0f:cc:af: 51:9d:ab:a0:d4:f5:9b:7d:68:9f:39:33:e5:7e:ca: 6e:a9:46:78:20:3e:10:05:54:7c:84:17:4e:b8:6d: e4:87:e3:18:ec:46:33:db:cb:cd:8e:77:52:9f:e8: ab:d3:66:ee:72:a4:06:6b:2b:ef:d2:a7:de:06:fa: 0c:c2:20:be:eb:85:86:39:58:10:67:1e:e8:8b:f7: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8A:B9:0A:F4:78:35:46:D3:BB:66:3B:63:05:D8:7D:69:66:E0:7E X509v3 Authority Key Identifier: keyid:4D:31:75:18:3C:7E:FB:5F:39:A4:C3:2B:3D:44:FC:90:CE:E1:E0:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TTF1GDx--185pMMrPUT8kM7h4D4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:78:40:3b:04:c4:0a:6d:31:72:14:52:9c:5b:d6:d6:40:31: 05:08:b1:9e:79:7d:d7:cd:a4:8c:08:a1:cb:14:9a:d1:30:8b: cf:98:ae:e4:1b:9b:71:a0:8b:73:bb:fb:46:fb:17:b2:71:bf: 78:7b:c1:a4:6a:16:83:6b:8b:60:bc:19:79:fd:1b:61:43:66: 0f:46:9b:de:9e:32:1f:12:78:5a:2f:1c:c4:b1:b3:10:34:1d: f1:ac:85:be:9a:13:11:3a:ec:d2:70:8c:76:f5:b4:ac:66:b4: 38:c7:99:69:cf:fd:75:9f:a4:89:f4:9b:19:f7:e9:1a:40:62: 57:f1:94:29:ac:61:47:3b:3e:76:7f:0d:60:8e:64:91:7d:c2: 09:03:c6:04:be:1a:65:2a:8e:29:87:e1:08:0c:33:51:3d:f5: cc:da:b2:f3:18:2d:48:99:5b:dd:84:dd:ee:87:21:ff:53:b5: a7:c0:3d:ba:04:28:64:6f:ee:ac:b9:a5:f6:71:ea:2c:03:95: 8c:e4:b6:92:d8:7e:be:38:6a:e6:51:96:f3:7c:e0:e0:b7:53: 2e:4e:02:86:2d:46:29:55:a5:6d:f7:65:3c:5e:ec:14:1b:09: e2:0e:e3:e0:94:31:37:36:e8:0b:af:24:2f:5b:a1:95:43:82: 1d:8a:b5:e9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEQz MTc1MTgzQzdFRkI1RjM5QTRDMzJCM0Q0NEZDOTBDRUUxRTAzRTAeFw0yNDExMjIx MDIwNDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE1OEFCOTBBRjQ3ODM1 NDZEM0JCNjYzQjYzMDVEODdENjk2NkUwN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBit0WO9NSuUAsQKCqAlS5HMYDlAFicQG4Pk7i+Ut+Uj2O36uT tRYwGplnLODbbRPVnaOcU9wVbalqTDRDxNdeYUGxLDqABtSqwKiFTK+pgOqS1cDK iFAIjOHc3EnQvmWVV2Q/x8W2yPRttxuCcSAp1/688RLYMYO3QcfFeVMX67tCWm16 63ADD9s/GdJ73pLW0D34TCvKQg7c4D6LMzlWC838mo5mDF4XDfFEclHEdw/Mr1Gd q6DU9Zt9aJ85M+V+ym6pRnggPhAFVHyEF064beSH4xjsRjPby82Od1Kf6KvTZu5y pAZrK+/Sp94G+gzCIL7rhYY5WBBnHuiL99M9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUFYq5CvR4NUbTu2Y7YwXYfWlm4H4wHwYDVR0jBBgwFoAUTTF1GDx++185pMMr PUT8kM7h4D4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Mi9UVEYxR0R4LS0xODVwTU1yUFVUOGtNN2g0RDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RURjFHRHgtLTE4NXBNTXJQVVQ4a003aDRENC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDIvVFRGMUdEeC0tMTg1 cE1NclBVVDhrTTdoNEQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFl4QDsExAptMXIUUpxb1tZAMQUIsZ55fdfNpIwIocsUmtEwi8+YruQbm3Gg i3O7+0b7F7Jxv3h7waRqFoNri2C8GXn9G2FDZg9Gm96eMh8SeFovHMSxsxA0HfGs hb6aExE67NJwjHb1tKxmtDjHmWnP/XWfpIn0mxn36RpAYlfxlCmsYUc7PnZ/DWCO ZJF9wgkDxgS+GmUqjimH4QgMM1E99czasvMYLUiZW92E3e6HIf9TtafAPboEKGRv 7qy5pfZx6iwDlYzktpLYfr44auZRlvN84OC3Uy5OAoYtRilVpW33ZTxe7BQbCeIO 4+CUMTc26AuvJC9boZVDgh2Ktek= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org