$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft File: eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft (raw, json) Hash identifier: tbM/BzzYejT7gtP9JCApErCQw08UO+AavdzFJt496YU= Subject key identifier: EB:02:FD:0C:61:4B:8C:F0:76:E5:7D:A3:48:28:AC:26:FA:0A:32:7C Authority key identifier: 79:25:8B:70:F2:F0:AA:7A:DF:FE:A4:84:F1:E2:95:03:35:FD:CC:49 Certificate issuer: /CN=79258B70F2F0AA7ADFFEA484F1E2950335FDCC49 Certificate serial: 06C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft Manifest number: 06C5 Signing time: Fri 22 Nov 2024 15:21:15 +0000 Manifest this update: Fri 22 Nov 2024 15:21:15 +0000 Manifest next update: Fri 22 Nov 2024 21:21:15 +0000 Files and hashes: 1: eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl (hash: hKtRFk+ZiSR04xNByGaE6taOnqQ3GEtzt+DzZ4nRqnk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79258B70F2F0AA7ADFFEA484F1E2950335FDCC49 Validity Not Before: Nov 22 15:21:15 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=EB02FD0C614B8CF076E57DA34828AC26FA0A327C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6e:bb:e8:33:9a:66:41:08:9a:48:b1:36:30: af:65:72:ee:6b:fd:bf:2a:20:03:0f:40:d3:cd:4c: 7e:43:33:c6:5a:23:4c:16:3b:7e:03:fa:ea:74:2c: c1:10:c0:2e:e9:a4:4a:83:1c:42:5b:30:c0:73:b3: c8:92:45:58:48:cb:60:9a:7d:00:95:45:73:b2:28: bd:27:37:d4:60:1c:10:c2:3f:13:66:84:a2:ce:e6: 8f:d4:8d:94:36:48:4b:f9:02:bf:77:9a:2c:06:a8: 6b:da:50:3a:67:a3:29:3a:da:15:2f:ca:dd:1c:f9: 7e:58:cf:02:4f:bc:f3:f6:99:0a:ae:49:b0:1c:59: 1f:3d:15:88:ab:ce:19:cb:9b:fd:80:e0:34:e9:68: 43:9c:fe:91:fc:60:1a:62:61:f6:7c:2e:84:f9:84: 75:47:44:5e:90:b5:db:3d:87:c7:7c:d0:0d:77:a6: b9:d0:6a:6f:29:16:c2:cd:8e:62:d1:e0:34:80:19: f1:92:c3:90:70:15:d5:20:15:c3:52:a7:40:33:43: 1a:58:72:08:2d:43:a5:64:8b:bf:fd:7b:78:e7:43: 1a:84:3c:e5:66:d0:0e:44:ae:39:ca:01:af:dc:2f: 56:37:2e:2a:b3:9c:cf:b9:76:cf:b4:7a:48:bd:8e: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:FD:0C:61:4B:8C:F0:76:E5:7D:A3:48:28:AC:26:FA:0A:32:7C X509v3 Authority Key Identifier: keyid:79:25:8B:70:F2:F0:AA:7A:DF:FE:A4:84:F1:E2:95:03:35:FD:CC:49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eSWLcPLwqnrf_qSE8eKVAzX9zEk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3248/eSWLcPLwqnrf_qSE8eKVAzX9zEk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5f:c5:99:4a:7d:cb:99:8f:5b:77:22:39:48:0d:31:db:93: 6c:45:79:b5:37:8e:22:10:fa:cd:eb:91:4e:75:7e:a2:de:f0: 6a:a9:5a:38:62:ed:35:d3:b9:b3:a4:77:52:77:31:e8:2b:7f: 8a:83:27:eb:94:75:73:09:fa:b8:18:55:9a:d1:bf:f5:c1:ba: 2e:c7:d8:4d:6d:5a:d2:5f:17:28:76:2d:1f:5a:e4:77:b2:45: 86:f0:72:eb:99:be:05:6d:eb:33:3f:63:16:ed:33:ce:34:9c: 54:e9:a7:a4:8e:98:2e:f9:a9:f9:df:11:a9:81:7e:f3:f6:e9: e7:dc:65:2a:74:95:8a:c8:c7:4a:80:25:a7:3b:d3:1a:45:fd: c1:dd:ab:5a:16:74:3d:52:7b:90:6e:e6:75:c4:28:c5:c8:74: ba:58:33:b0:d1:d8:72:f2:e0:9c:87:23:67:1a:18:88:2d:19: 1f:f0:66:50:85:0a:db:6f:0a:61:1e:37:9a:6a:29:29:77:9f: ed:90:c5:fa:56:45:5c:14:d5:53:9b:0e:ce:6d:fc:61:38:90: 54:5a:6f:e3:1e:24:7d:0d:26:0d:f8:7e:bc:ec:40:15:a5:92: 5a:30:c9:e2:b8:fb:16:b9:c1:31:2f:91:1f:22:8c:68:8e:8d: 0c:0e:06:ca -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzky NThCNzBGMkYwQUE3QURGRkVBNDg0RjFFMjk1MDMzNUZEQ0M0OTAeFw0yNDExMjIx NTIxMTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVCMDJGRDBDNjE0QjhD RjA3NkU1N0RBMzQ4MjhBQzI2RkEwQTMyN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcbrvoM5pmQQiaSLE2MK9lcu5r/b8qIAMPQNPNTH5DM8ZaI0wW O34D+up0LMEQwC7ppEqDHEJbMMBzs8iSRVhIy2CafQCVRXOyKL0nN9RgHBDCPxNm hKLO5o/UjZQ2SEv5Ar93miwGqGvaUDpnoyk62hUvyt0c+X5YzwJPvPP2mQquSbAc WR89FYirzhnLm/2A4DTpaEOc/pH8YBpiYfZ8LoT5hHVHRF6Qtds9h8d80A13prnQ am8pFsLNjmLR4DSAGfGSw5BwFdUgFcNSp0AzQxpYcggtQ6Vki7/9e3jnQxqEPOVm 0A5ErjnKAa/cL1Y3LiqznM+5ds+0eki9jp+bAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6wL9DGFLjPB25X2jSCisJvoKMnwwHwYDVR0jBBgwFoAUeSWLcPLwqnrf/qSE 8eKVAzX9zEkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 OC9lU1dMY1BMd3FucmZfcVNFOGVLVkF6WDl6RWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2VTV0xjUEx3cW5yZl9xU0U4ZUtWQXpYOXpFay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDgvZVNXTGNQTHdxbnJm X3FTRThlS1ZBelg5ekVrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH5fxZlKfcuZj1t3IjlIDTHbk2xFebU3jiIQ+s3rkU51fqLe8GqpWjhi7TXT ubOkd1J3Megrf4qDJ+uUdXMJ+rgYVZrRv/XBui7H2E1tWtJfFyh2LR9a5HeyRYbw cuuZvgVt6zM/YxbtM840nFTpp6SOmC75qfnfEamBfvP26efcZSp0lYrIx0qAJac7 0xpF/cHdq1oWdD1Se5Bu5nXEKMXIdLpYM7DR2HLy4JyHI2caGIgtGR/wZlCFCttv CmEeN5pqKSl3n+2QxfpWRVwU1VObDs5t/GE4kFRab+MeJH0NJg34frzsQBWlklow yeK4+xa5wTEvkR8ijGiOjQwOBso= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org