$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.mft File: LLZxhuKWyJ4fNHee1moHf34FDMs.mft (raw, json) Hash identifier: tfI0lqWMGxmIuGeqZ9YZMF4rSe9N9BxgHYJ/KsbieZc= Subject key identifier: EE:E7:66:07:45:31:6C:EB:B5:5D:77:23:23:D6:F3:BF:7E:02:0E:02 Authority key identifier: 2C:B6:71:86:E2:96:C8:9E:1F:34:77:9E:D6:6A:07:7F:7E:05:0C:CB Certificate issuer: /CN=2CB67186E296C89E1F34779ED66A077F7E050CCB Certificate serial: 06EE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLZxhuKWyJ4fNHee1moHf34FDMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.mft Manifest number: 06EA Signing time: Mon 25 Nov 2024 16:21:21 +0000 Manifest this update: Mon 25 Nov 2024 16:21:21 +0000 Manifest next update: Mon 25 Nov 2024 22:21:21 +0000 Files and hashes: 1: LLZxhuKWyJ4fNHee1moHf34FDMs.crl (hash: ogpx5KlCMCVdentGb18WdMFjbRCzsYbCqp8hkMtesaE=) 2: xA1ExRCLTB0US-v9AemsR7Tw1AE.roa (hash: C1h8BK9fIROK4WCFyDC6MvAzWQD9AJjZBPEUZosVPcM=) 3: yjTJ9rZ_gnUQqpbdzmBlXj0Sbfs.roa (hash: JgvlWkie5QPJoEmkANmFFI8EcaypCpMwPw34bnnFwFQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLZxhuKWyJ4fNHee1moHf34FDMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB67186E296C89E1F34779ED66A077F7E050CCB Validity Not Before: Nov 25 16:21:21 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=EEE7660745316CEBB55D772323D6F3BF7E020E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2d:23:70:38:ae:2c:7f:6d:08:58:b8:f7:eb: b8:57:c9:56:bf:b5:2a:c3:48:5b:90:7b:7a:6d:cb: 3d:10:78:c8:0c:d7:81:0b:4e:20:9a:2f:cb:dc:ec: 2e:2f:20:2e:6f:49:18:c2:2e:03:1b:f9:66:59:82: c5:db:17:c6:7b:0d:41:fa:04:14:7f:18:47:e2:c6: 56:52:56:35:d8:fc:c7:ad:bf:a2:4e:1f:2c:7d:c8: f9:ae:c7:e8:ab:9d:9f:e8:9a:f2:19:3a:48:64:e0: 20:b4:d6:ed:4d:af:d0:bb:0d:fc:47:e7:22:0f:0e: be:b0:dd:3f:bf:57:09:c5:02:a6:b3:47:5a:ef:5c: 29:e0:91:bd:0c:0c:07:b7:86:a4:e5:26:66:f0:a8: 85:9e:ee:df:4f:2e:e8:ac:da:8d:9f:31:78:21:2b: dc:c6:5c:14:a9:3f:f0:50:fa:92:9c:7a:79:01:3f: f3:23:9e:2b:58:3d:ef:33:c0:27:26:df:e1:7e:c3: e0:77:7d:9c:2a:86:fa:35:a4:91:8f:41:b0:2a:8c: 74:e3:63:ee:c0:04:48:f5:6f:92:bf:a2:98:03:e9: 2d:ca:ae:a1:9f:cb:78:e9:17:f6:af:4b:72:2b:45: 75:2f:44:82:d9:79:f6:3c:6c:09:5c:d5:d7:2e:a1: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E7:66:07:45:31:6C:EB:B5:5D:77:23:23:D6:F3:BF:7E:02:0E:02 X509v3 Authority Key Identifier: keyid:2C:B6:71:86:E2:96:C8:9E:1F:34:77:9E:D6:6A:07:7F:7E:05:0C:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLZxhuKWyJ4fNHee1moHf34FDMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:e2:16:33:11:ca:bf:f4:4c:e6:c8:ac:5e:34:d6:39:35:3c: d4:0e:93:48:e4:79:2f:83:8a:5e:92:18:19:e8:f2:fb:bb:37: 0c:88:c0:dd:00:36:09:44:bd:f9:23:40:8a:b3:54:37:83:da: 0a:2e:80:43:58:69:e6:ce:d0:1c:4b:72:7c:c5:a4:e5:c9:df: 5b:69:2c:9a:03:23:d7:17:19:31:dc:db:6e:fc:0e:2c:25:ec: 4f:8e:06:b9:0d:6e:31:0f:44:9f:6d:c8:15:1c:08:a0:ba:53: 6e:ec:72:a5:c0:28:ed:69:8e:f5:f4:11:f9:e8:1b:6a:dc:0f: 27:d7:0c:51:c1:8b:ad:b8:c2:65:cd:eb:b0:a4:89:80:e0:22: 90:3d:17:60:9b:dc:d0:f4:19:f2:25:39:77:b4:40:47:f5:58: fd:07:ed:51:10:7e:62:8c:d0:4b:56:ee:00:4f:3a:b5:17:cb: ea:0b:53:3e:80:3a:62:b5:ad:19:55:ca:13:e4:86:4a:3b:44: 47:e2:2e:8c:f5:b4:aa:be:89:6a:f4:2c:b9:24:f6:00:39:55: 3f:14:f7:6f:5f:70:d1:5c:b4:72:9a:8e:83:c9:90:db:41:6a: 46:73:84:76:c3:08:3a:b3:f2:7b:42:6f:c1:be:6e:1d:15:d2: 77:51:ff:25 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNC NjcxODZFMjk2Qzg5RTFGMzQ3NzlFRDY2QTA3N0Y3RTA1MENDQjAeFw0yNDExMjUx NjIxMjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVFRTc2NjA3NDUzMTZD RUJCNTVENzcyMzIzRDZGM0JGN0UwMjBFMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkLSNwOK4sf20IWLj367hXyVa/tSrDSFuQe3ptyz0QeMgM14EL TiCaL8vc7C4vIC5vSRjCLgMb+WZZgsXbF8Z7DUH6BBR/GEfixlZSVjXY/Metv6JO Hyx9yPmux+irnZ/omvIZOkhk4CC01u1Nr9C7DfxH5yIPDr6w3T+/VwnFAqazR1rv XCngkb0MDAe3hqTlJmbwqIWe7t9PLuis2o2fMXghK9zGXBSpP/BQ+pKcenkBP/Mj nitYPe8zwCcm3+F+w+B3fZwqhvo1pJGPQbAqjHTjY+7ABEj1b5K/opgD6S3KrqGf y3jpF/avS3IrRXUvRILZefY8bAlc1dcuoXGlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7udmB0UxbOu1XXcjI9bzv34CDgIwHwYDVR0jBBgwFoAULLZxhuKWyJ4fNHee 1moHf34FDMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Ni9MTFp4aHVLV3lKNGZOSGVlMW1vSGYzNEZETXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xMWnhodUtXeUo0Zk5IZWUxbW9IZjM0RkRNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDYvTExaeGh1S1d5SjRm TkhlZTFtb0hmMzRGRE1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJLiFjMRyr/0TObIrF401jk1PNQOk0jkeS+Dil6SGBno8vu7NwyIwN0ANglE vfkjQIqzVDeD2gougENYaebO0BxLcnzFpOXJ31tpLJoDI9cXGTHc2278Diwl7E+O BrkNbjEPRJ9tyBUcCKC6U27scqXAKO1pjvX0EfnoG2rcDyfXDFHBi624wmXN67Ck iYDgIpA9F2Cb3ND0GfIlOXe0QEf1WP0H7VEQfmKM0EtW7gBPOrUXy+oLUz6AOmK1 rRlVyhPkhko7REfiLoz1tKq+iWr0LLkk9gA5VT8U929fcNFctHKajoPJkNtBakZz hHbDCDqz8ntCb8G+bh0V0ndR/yU= -----END CERTIFICATE-----Generated at Mon Nov 25 18:05:36 2024 by rpki-client on console-fra.rpki-client.org