$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft File: vJA-IGAC4WXCtlKh9td7d9hy4io.mft (raw, json) Hash identifier: AnRK2s9A+8l8/0Hhk0QHxhO02VWQKgyYaQ56cvUo4Tk= Subject key identifier: B4:6C:C3:3E:2B:B3:08:6B:36:EA:A0:CD:93:40:F8:0E:57:98:D7:4A Authority key identifier: BC:90:3E:20:60:02:E1:65:C2:B6:52:A1:F6:D7:7B:77:D8:72:E2:2A Certificate issuer: /CN=BC903E206002E165C2B652A1F6D77B77D872E22A Certificate serial: 0694 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft Manifest number: 0694 Signing time: Fri 22 Nov 2024 15:24:32 +0000 Manifest this update: Fri 22 Nov 2024 15:24:32 +0000 Manifest next update: Fri 22 Nov 2024 21:24:32 +0000 Files and hashes: 1: vJA-IGAC4WXCtlKh9td7d9hy4io.crl (hash: ZVtsW5ZEhVLqBFHzBGmGLNcsosUGW/vCuLr7Q/ooNuA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC903E206002E165C2B652A1F6D77B77D872E22A Validity Not Before: Nov 22 15:24:32 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B46CC33E2BB3086B36EAA0CD9340F80E5798D74A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:ba:9f:68:94:97:00:a8:47:df:40:87:c4: 74:e6:9c:46:5d:a1:e8:c7:9d:f7:17:a2:f1:d3:3a: be:53:a2:cb:d8:bc:77:80:a1:c0:b6:7d:7d:e4:ad: f2:68:cb:07:cc:88:2d:cc:05:0a:66:3e:3a:32:bc: 7b:92:a2:c2:cc:f1:bc:1e:c0:7b:e2:5c:13:59:34: 93:da:2a:3c:57:36:20:09:fc:93:38:08:53:19:b0: 98:1d:21:1a:a6:86:95:25:9c:5a:60:c1:95:05:d5: be:c3:ba:64:21:fc:b6:dd:a8:6d:4f:52:5f:aa:c9: d1:0b:37:ae:b1:5e:12:36:5b:97:6c:f6:19:5a:1f: 01:d6:bc:ec:d7:e5:eb:fd:a8:f0:26:f7:64:3f:37: f3:9b:d7:43:35:f1:2d:b3:13:2f:4f:38:69:03:fd: 5c:47:bb:39:a3:5a:e0:bc:df:45:ee:e8:35:43:99: 94:13:70:17:d2:81:91:8b:6d:fd:b5:75:f5:56:2d: 50:ad:13:1e:b0:90:a4:0d:77:57:bd:96:b8:d8:ba: 57:d3:c2:68:08:0a:87:5b:4f:9f:ba:d1:e4:90:77: d9:f8:1b:e5:70:33:44:7d:13:39:f5:04:97:fd:48: cd:f1:0b:eb:7a:4e:d0:e0:93:d3:a9:7f:1e:24:4a: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6C:C3:3E:2B:B3:08:6B:36:EA:A0:CD:93:40:F8:0E:57:98:D7:4A X509v3 Authority Key Identifier: keyid:BC:90:3E:20:60:02:E1:65:C2:B6:52:A1:F6:D7:7B:77:D8:72:E2:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vJA-IGAC4WXCtlKh9td7d9hy4io.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/vJA-IGAC4WXCtlKh9td7d9hy4io.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f5:a4:52:8b:bc:c6:41:10:56:7c:6c:4d:74:b1:7a:40:ab: c8:a4:9a:73:8c:a1:ed:50:50:28:56:37:ef:88:71:e1:33:6a: 1c:09:89:6e:a8:7c:65:88:d8:36:13:52:98:49:ed:ec:6d:e1: fe:57:01:37:c6:3e:d5:06:7e:9e:a2:5a:f1:71:a2:53:e2:a3: 48:eb:37:38:3c:a8:33:d7:1b:99:a4:6e:ac:4b:96:a8:b6:e7: e2:e7:8b:b6:63:32:77:94:63:3b:9b:ba:9f:91:4a:5c:0f:0a: 13:f6:d1:74:29:c9:e2:37:7d:46:2b:f1:9f:d2:86:10:72:ec: c9:3d:2e:49:76:86:5a:4a:ee:e2:53:52:2b:4b:f8:ba:39:54: 9f:e4:8a:39:50:2f:0c:d1:ea:f3:52:90:2f:2c:b9:cc:d5:5e: 86:16:36:b9:c0:ba:11:30:20:69:5d:0c:3b:a1:65:ff:fa:94: 9d:99:e3:c0:5c:e4:93:48:96:b1:ca:dd:0e:90:4b:6b:21:d3: 9a:9a:e0:53:84:db:8e:48:c7:05:12:6e:18:ab:7d:3c:2f:76: 8b:24:28:5b:b4:5e:67:8a:b7:97:ae:f9:11:3a:a1:15:27:93: 20:9c:25:c8:e5:2e:50:6b:f0:05:6e:1f:b3:86:8e:c1:e2:48: 1d:74:63:a7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkM5 MDNFMjA2MDAyRTE2NUMyQjY1MkExRjZENzdCNzdEODcyRTIyQTAeFw0yNDExMjIx NTI0MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI0NkNDMzNFMkJCMzA4 NkIzNkVBQTBDRDkzNDBGODBFNTc5OEQ3NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5s7qfaJSXAKhH30CHxHTmnEZdoejHnfcXovHTOr5TosvYvHeA ocC2fX3krfJoywfMiC3MBQpmPjoyvHuSosLM8bwewHviXBNZNJPaKjxXNiAJ/JM4 CFMZsJgdIRqmhpUlnFpgwZUF1b7DumQh/LbdqG1PUl+qydELN66xXhI2W5ds9hla HwHWvOzX5ev9qPAm92Q/N/Ob10M18S2zEy9POGkD/VxHuzmjWuC830Xu6DVDmZQT cBfSgZGLbf21dfVWLVCtEx6wkKQNd1e9lrjYulfTwmgICodbT5+60eSQd9n4G+Vw M0R9Ezn1BJf9SM3xC+t6TtDgk9Opfx4kSkt/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUtGzDPiuzCGs26qDNk0D4DleY10owHwYDVR0jBBgwFoAUvJA+IGAC4WXCtlKh 9td7d9hy4iowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 OS92SkEtSUdBQzRXWEN0bEtoOXRkN2Q5aHk0aW8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3ZKQS1JR0FDNFdYQ3RsS2g5dGQ3ZDloeTRpby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDkvdkpBLUlHQUM0V1hD dGxLaDl0ZDdkOWh5NGlvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACD1pFKLvMZBEFZ8bE10sXpAq8ikmnOMoe1QUChWN++IceEzahwJiW6ofGWI 2DYTUphJ7ext4f5XATfGPtUGfp6iWvFxolPio0jrNzg8qDPXG5mkbqxLlqi25+Ln i7ZjMneUYzubup+RSlwPChP20XQpyeI3fUYr8Z/ShhBy7Mk9Lkl2hlpK7uJTUitL +Lo5VJ/kijlQLwzR6vNSkC8suczVXoYWNrnAuhEwIGldDDuhZf/6lJ2Z48Bc5JNI lrHK3Q6QS2sh05qa4FOE245IxwUSbhirfTwvdoskKFu0XmeKt5eu+RE6oRUnkyCc JcjlLlBr8AVuH7OGjsHiSB10Y6c= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org