$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft File: NJtamVn9EvndSwGEz41q1msimH4.mft (raw, json) Hash identifier: VQEF7vWzXOF8Sd3HvM0t5XI9LuR1LGu5TEdpbQ7nm+c= Subject key identifier: AB:45:AE:51:8A:99:E0:5D:CF:F5:FF:68:77:5A:DE:38:D2:A3:D3:D4 Authority key identifier: 34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E Certificate issuer: /CN=349B5A9959FD12F9DD4B0184CF8D6AD66B22987E Certificate serial: 0653 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NJtamVn9EvndSwGEz41q1msimH4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft Manifest number: 0653 Signing time: Mon 25 Nov 2024 02:21:45 +0000 Manifest this update: Mon 25 Nov 2024 02:21:45 +0000 Manifest next update: Mon 25 Nov 2024 08:21:45 +0000 Files and hashes: 1: NJtamVn9EvndSwGEz41q1msimH4.crl (hash: acRl8a4/S0XeFvRJqgeHomXT3z+WuNA33ox6D8ypCUE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NJtamVn9EvndSwGEz41q1msimH4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B5A9959FD12F9DD4B0184CF8D6AD66B22987E Validity Not Before: Nov 25 02:21:45 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=AB45AE518A99E05DCFF5FF68775ADE38D2A3D3D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:b3:af:34:78:48:86:be:f3:3d:49:3e:7d: 6e:25:57:57:1c:86:8a:91:79:fe:16:12:12:8a:04: 12:50:65:23:e2:c6:94:34:d1:b1:25:09:e4:a6:c8: 71:df:02:8d:a9:9e:b9:b0:09:86:74:23:41:aa:18: eb:14:54:6e:6d:46:2d:f4:98:ce:fe:02:43:f5:2b: 4c:a4:e7:ab:4a:fa:17:cb:48:2e:94:9f:cc:a5:30: 0c:84:d3:d3:fb:4e:39:7f:f2:f1:ff:67:c2:fa:b6: bb:e4:e3:f3:6d:c1:27:4f:46:fe:4d:5c:93:93:50: f8:2d:6d:53:1d:c1:56:08:52:df:56:a1:c3:a2:57: 63:c8:89:c8:11:57:59:cb:cd:00:24:0d:bd:ee:8b: 9b:c1:52:a9:3d:02:64:01:a1:71:44:e7:21:c5:88: 64:be:29:63:4c:3c:62:65:b1:75:84:43:13:df:2f: 79:d0:90:82:73:91:55:09:55:02:06:42:de:0f:9a: db:9b:a2:92:95:27:61:03:b9:16:92:0e:b3:43:4b: 6b:dd:1a:e3:27:90:9e:52:67:9c:7c:f8:4f:1a:9e: 57:eb:c5:82:3a:b7:8e:d4:fc:01:cc:8c:18:89:07: f4:ce:8a:ae:48:fc:fa:b3:3e:aa:be:2c:14:17:61: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:45:AE:51:8A:99:E0:5D:CF:F5:FF:68:77:5A:DE:38:D2:A3:D3:D4 X509v3 Authority Key Identifier: keyid:34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NJtamVn9EvndSwGEz41q1msimH4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:13:5e:15:39:2a:49:7a:98:8c:80:86:0a:bb:92:72:82:1f: 9d:d2:3b:54:3a:72:74:1d:37:8f:78:02:73:f8:52:ff:8c:35: 8c:3b:33:12:4e:d0:91:3d:e2:6f:af:1e:31:a8:0a:f6:38:a8: 56:59:df:83:f3:eb:3b:a4:b1:de:e3:20:3a:ee:ef:ac:55:05: a2:95:a4:d6:20:55:87:ed:66:4c:b2:b4:1f:59:94:d0:e9:61: 29:ae:c1:16:1a:17:27:c6:b9:ee:2f:ad:36:92:85:26:5c:d2: 04:d8:a5:9c:42:07:cc:14:f3:f1:e7:1e:c9:58:74:84:c1:0d: f2:b0:e4:dd:e8:ca:7a:48:d5:cf:6c:a8:9b:61:7a:07:d7:61: 07:aa:ab:89:4f:c9:9e:68:82:55:8e:1c:cd:be:91:a7:00:dc: c7:bc:94:ad:91:15:4f:e9:f8:af:94:84:03:c1:58:d1:2d:3e: fa:c4:35:bc:67:fc:0e:e8:da:b7:42:e9:94:09:76:c3:8f:b4: a7:6f:6c:6a:f6:68:75:83:7e:1a:52:fd:8a:cc:11:03:44:29: 02:6e:be:fe:2a:93:68:3e:25:23:30:b5:bc:26:0e:81:0b:d9: 00:98:ee:1d:c8:fa:e4:25:4a:25:86:f4:00:d4:e6:8c:0d:ce: 31:a5:a8:6a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjVBOTk1OUZEMTJGOURENEIwMTg0Q0Y4RDZBRDY2QjIyOTg3RTAeFw0yNDExMjUw MjIxNDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFCNDVBRTUxOEE5OUUw NURDRkY1RkY2ODc3NUFERTM4RDJBM0QzRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNSrOvNHhIhr7zPUk+fW4lV1cchoqRef4WEhKKBBJQZSPixpQ0 0bElCeSmyHHfAo2pnrmwCYZ0I0GqGOsUVG5tRi30mM7+AkP1K0yk56tK+hfLSC6U n8ylMAyE09P7Tjl/8vH/Z8L6trvk4/NtwSdPRv5NXJOTUPgtbVMdwVYIUt9WocOi V2PIicgRV1nLzQAkDb3ui5vBUqk9AmQBoXFE5yHFiGS+KWNMPGJlsXWEQxPfL3nQ kIJzkVUJVQIGQt4PmtubopKVJ2EDuRaSDrNDS2vdGuMnkJ5SZ5x8+E8anlfrxYI6 t47U/AHMjBiJB/TOiq5I/PqzPqq+LBQXYcS7AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUq0WuUYqZ4F3P9f9od1reONKj09QwHwYDVR0jBBgwFoAUNJtamVn9EvndSwGE z41q1msimH4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 My9OSnRhbVZuOUV2bmRTd0dFejQxcTFtc2ltSDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05KdGFtVm45RXZuZFN3R0V6NDFxMW1zaW1INC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTMvTkp0YW1WbjlFdm5k U3dHRXo0MXExbXNpbUg0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHUTXhU5Kkl6mIyAhgq7knKCH53SO1Q6cnQdN494AnP4Uv+MNYw7MxJO0JE9 4m+vHjGoCvY4qFZZ34Pz6zuksd7jIDru76xVBaKVpNYgVYftZkyytB9ZlNDpYSmu wRYaFyfGue4vrTaShSZc0gTYpZxCB8wU8/HnHslYdITBDfKw5N3oynpI1c9sqJth egfXYQeqq4lPyZ5oglWOHM2+kacA3Me8lK2RFU/p+K+UhAPBWNEtPvrENbxn/A7o 2rdC6ZQJdsOPtKdvbGr2aHWDfhpS/YrMEQNEKQJuvv4qk2g+JSMwtbwmDoEL2QCY 7h3I+uQlSiWG9ADU5owNzjGlqGo= -----END CERTIFICATE-----Generated at Mon Nov 25 06:07:52 2024 by rpki-client on console-fra.rpki-client.org