$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.mft File: 5s9GyFg2VMtp4t_DroPdwUXkkyo.mft (raw, json) Hash identifier: S3akVwAjLL+WzctlOgtApnvyGWCXqdxwvAocSnXJA2o= Subject key identifier: EB:F9:58:93:BB:F2:35:A4:59:F7:6A:B1:31:AB:D0:26:84:AD:05:8E Authority key identifier: E6:CF:46:C8:58:36:54:CB:69:E2:DF:C3:AE:83:DD:C1:45:E4:93:2A Certificate issuer: /CN=E6CF46C8583654CB69E2DFC3AE83DDC145E4932A Certificate serial: 064A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5s9GyFg2VMtp4t_DroPdwUXkkyo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.mft Manifest number: 0648 Signing time: Fri 22 Nov 2024 20:22:54 +0000 Manifest this update: Fri 22 Nov 2024 20:22:54 +0000 Manifest next update: Sat 23 Nov 2024 02:22:54 +0000 Files and hashes: 1: 5s9GyFg2VMtp4t_DroPdwUXkkyo.crl (hash: zjPBHnsdaFo0pWi95iC9XkbM4cLQNjT5dVGsDJCmPQA=) 2: zdJu4QnKRaHD0_YXIkQaZGeiUro.roa (hash: +04P1Vm9IRIA9tao6xmvNBnB1mgFbD+JfN92H8hrzlM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5s9GyFg2VMtp4t_DroPdwUXkkyo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6CF46C8583654CB69E2DFC3AE83DDC145E4932A Validity Not Before: Nov 22 20:22:54 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=EBF95893BBF235A459F76AB131ABD02684AD058E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:9f:fb:f0:a0:f6:1d:d7:bc:ad:30:0c:69: 6a:ab:77:00:50:af:9a:d1:2f:ab:6e:fe:04:68:8a: f4:fa:7f:51:0e:e2:57:be:24:70:16:6c:ac:55:49: ed:f8:3c:0f:a2:10:0d:2e:79:8c:e1:e6:0e:13:27: 04:b5:f8:cf:a8:0c:70:c3:2b:6a:00:37:6c:87:a1: b9:29:02:5f:7a:27:0d:68:30:59:4b:e3:04:8f:9e: 24:13:68:ce:06:18:12:f8:0b:b5:e1:3a:a4:b0:48: 86:31:a6:08:54:83:d9:6e:de:25:f9:c7:9e:cd:66: 95:a5:03:13:db:4d:8e:56:b7:fe:b1:fa:6d:4b:4d: 9f:21:4f:e8:c1:c7:f3:d2:ab:87:c3:91:a9:22:4f: da:59:28:2c:55:51:5a:f9:4b:b3:a8:21:a3:dc:55: d4:76:1c:d7:06:db:06:48:df:16:82:10:c8:7a:9d: 12:07:3d:df:42:91:a4:71:69:c9:14:6e:20:6b:42: 0c:9c:65:17:da:26:a3:84:33:79:a4:7e:b0:ec:00: ac:c7:d8:4c:f0:1d:e8:fd:63:b7:2c:51:1b:11:bb: 70:c5:0e:d2:4e:ec:01:d8:7e:30:03:71:57:f7:54: d3:54:35:65:87:51:5a:5b:37:08:28:73:a9:ce:c2: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F9:58:93:BB:F2:35:A4:59:F7:6A:B1:31:AB:D0:26:84:AD:05:8E X509v3 Authority Key Identifier: keyid:E6:CF:46:C8:58:36:54:CB:69:E2:DF:C3:AE:83:DD:C1:45:E4:93:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5s9GyFg2VMtp4t_DroPdwUXkkyo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b9:03:9a:a8:f1:b5:ef:1c:12:2f:0d:7a:ca:4c:21:5a:cd: c3:14:94:01:52:e0:33:ea:69:ce:f5:ef:5e:6f:ae:0b:9f:ec: 15:c3:19:75:61:67:e8:9f:46:04:39:24:ae:5d:02:c4:1b:06: b9:36:36:16:5d:26:73:75:4a:38:73:68:06:72:01:c5:71:13: 7d:b3:6a:ab:7c:f3:2d:c0:c1:1f:9c:53:f7:55:c0:cf:5a:cd: c6:35:7f:40:1f:5f:2c:14:b4:ea:48:56:92:9b:ee:5d:08:3c: 79:86:8f:b3:61:0c:cb:4d:26:25:07:b3:04:8c:99:b1:24:31: cd:e9:77:c7:51:7b:a7:8d:df:f8:70:dc:e5:36:92:38:64:2b: 21:e7:97:ed:a5:46:96:3a:2f:ea:bb:9a:86:df:25:20:25:6c: b6:eb:f3:ab:1d:06:1b:cb:87:03:8e:8b:6a:30:e7:c2:42:33: 7b:3b:8a:c1:54:66:05:0b:09:56:f1:68:56:6f:19:2e:24:8f: cc:cb:a2:46:bd:31:f2:64:31:6d:ef:84:4f:44:72:0e:9c:62: 61:34:8d:a4:12:0b:f0:e6:58:7b:42:f4:7e:ed:f9:a1:c7:dd: a0:3a:07:cd:81:ea:b8:bf:6c:03:3e:c5:6a:fd:27:19:80:7c: 5b:82:58:26 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTZD RjQ2Qzg1ODM2NTRDQjY5RTJERkMzQUU4M0REQzE0NUU0OTMyQTAeFw0yNDExMjIy MDIyNTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVCRjk1ODkzQkJGMjM1 QTQ1OUY3NkFCMTMxQUJEMDI2ODRBRDA1OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM+Z/78KD2Hde8rTAMaWqrdwBQr5rRL6tu/gRoivT6f1EO4le+ JHAWbKxVSe34PA+iEA0ueYzh5g4TJwS1+M+oDHDDK2oAN2yHobkpAl96Jw1oMFlL 4wSPniQTaM4GGBL4C7XhOqSwSIYxpghUg9lu3iX5x57NZpWlAxPbTY5Wt/6x+m1L TZ8hT+jBx/PSq4fDkakiT9pZKCxVUVr5S7OoIaPcVdR2HNcG2wZI3xaCEMh6nRIH Pd9CkaRxackUbiBrQgycZRfaJqOEM3mkfrDsAKzH2EzwHej9Y7csURsRu3DFDtJO 7AHYfjADcVf3VNNUNWWHUVpbNwgoc6nOwgLHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU6/lYk7vyNaRZ92qxMavQJoStBY4wHwYDVR0jBBgwFoAU5s9GyFg2VMtp4t/D roPdwUXkkyowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Mi81czlHeUZnMlZNdHA0dF9Ecm9QZHdVWGtreW8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVzOUd5RmcyVk10cDR0X0Ryb1Bkd1VYa2t5by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTIvNXM5R3lGZzJWTXRw NHRfRHJvUGR3VVhra3lvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACC5A5qo8bXvHBIvDXrKTCFazcMUlAFS4DPqac71715vrguf7BXDGXVhZ+if RgQ5JK5dAsQbBrk2NhZdJnN1SjhzaAZyAcVxE32zaqt88y3AwR+cU/dVwM9azcY1 f0AfXywUtOpIVpKb7l0IPHmGj7NhDMtNJiUHswSMmbEkMc3pd8dRe6eN3/hw3OU2 kjhkKyHnl+2lRpY6L+q7mobfJSAlbLbr86sdBhvLhwOOi2ow58JCM3s7isFUZgUL CVbxaFZvGS4kj8zLoka9MfJkMW3vhE9Ecg6cYmE0jaQSC/DmWHtC9H7t+aHH3aA6 B82B6ri/bAM+xWr9JxmAfFuCWCY= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:11 2024 by rpki-client on console-fra.rpki-client.org