$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft File: f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft (raw, json) Hash identifier: 4I2/3cRjzvNX6PSV3F3X5ezaYybVn6LwI10H3Yqn5OQ= Subject key identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C Authority key identifier: 7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 Certificate issuer: /CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Certificate serial: 060F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft Manifest number: 060F Signing time: Fri 22 Nov 2024 15:20:58 +0000 Manifest this update: Fri 22 Nov 2024 15:20:58 +0000 Manifest next update: Fri 22 Nov 2024 21:20:58 +0000 Files and hashes: 1: f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl (hash: ZhzUvam3BuRBKjQ8Kfb9zOHgXpuXIfb3GjFbxSjQlMI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Validity Not Before: Nov 22 15:20:58 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=229A4488A06AE99167E29F0F5A53BEC21DE1AF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:be:bb:ac:d1:89:8b:e9:9a:bd:0b:83:83: 9c:a1:61:ea:25:ae:7c:c1:ca:6d:8b:87:e0:26:fd: c1:96:8f:48:ce:ef:af:d8:a8:d4:7f:d1:60:3d:53: 7e:5c:f8:19:fb:bc:08:e2:9b:aa:84:76:cc:8f:d1: ff:37:07:44:cd:5f:44:d8:94:2b:8e:47:8e:ee:b6: 26:a5:83:8d:22:a9:b6:b3:2e:83:84:0c:a4:1a:b3: e7:43:ab:32:25:a3:7a:d1:7e:52:6c:6c:63:d5:e3: c7:34:37:4b:81:10:bd:cf:c5:4f:be:90:ea:27:fa: 9b:52:ae:60:00:63:e1:4e:d0:3c:99:d3:e2:59:b4: b6:b3:1b:c1:0a:e2:46:e7:5a:73:f3:b7:86:c7:fc: 5c:fe:0c:29:61:b8:4d:fa:b1:fa:d5:a5:ca:2f:4e: 25:06:03:4c:89:c1:53:ff:18:2c:19:3b:74:b3:76: 1b:75:22:7e:04:00:7d:8d:60:d1:f2:33:df:ec:54: bc:2b:30:4f:8f:d7:11:21:7e:d5:32:5a:74:81:dc: 6c:68:72:4b:32:68:55:4f:6a:1c:1b:0e:7a:86:32: 8e:32:ce:2f:96:03:00:e8:f2:49:45:83:78:8a:51: e5:27:23:8d:c2:1f:b5:7f:8c:e3:eb:7b:e4:24:b1: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C X509v3 Authority Key Identifier: keyid:7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:25:e8:e8:f8:de:ae:de:9a:b3:b1:ea:7e:f7:de:17:93:df: 0a:29:12:3f:58:a5:53:1e:8b:05:c1:85:74:6a:d2:64:76:af: 50:64:9c:87:a0:ea:c6:cc:07:3d:ae:79:d3:3f:d6:7d:ca:89: 00:d1:5e:f6:8b:be:1c:f7:dc:b6:ca:65:dd:fa:29:17:0a:00: 9d:dd:5e:a3:d1:53:f2:00:4f:77:c2:19:3d:40:49:88:c8:e4: 6f:2e:93:3c:ff:8f:a8:81:bd:5c:c8:bb:8e:4f:f0:25:3c:96: d2:b5:f2:26:65:ae:79:ce:c9:d6:9b:ca:73:cb:25:b7:d3:e8: df:43:d9:4a:fc:81:a8:e0:02:50:60:54:21:05:fc:29:4f:6d: 97:d5:d8:17:7c:0e:c5:38:1b:a7:84:17:42:b4:94:ef:2d:56: d8:59:cf:4b:9b:5e:a6:53:9e:ed:18:44:0f:5a:44:c3:88:1b: 90:c2:7e:90:c4:2e:ff:4f:56:d3:45:9a:94:b1:1e:81:c6:54: ee:7c:42:ad:4a:b2:40:2f:35:ab:7b:02:9d:7f:69:bf:dd:6d: 6c:0c:26:5f:27:37:7d:43:dd:62:5c:8b:0f:67:1c:e9:d3:ed: 73:e2:65:0f:df:c1:69:48:ef:c3:1c:f7:29:2a:2b:60:32:0b: ad:51:0b:8f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Y5 MThDRjI2NTAzRDFGOUJDRkE3N0RDMEFBNTkyQTU3RERGODI0NTAeFw0yNDExMjIx NTIwNThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIyOUE0NDg4QTA2QUU5 OTE2N0UyOUYwRjVBNTNCRUMyMURFMUFGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHhb67rNGJi+mavQuDg5yhYeolrnzBym2Lh+Am/cGWj0jO76/Y qNR/0WA9U35c+Bn7vAjim6qEdsyP0f83B0TNX0TYlCuOR47utialg40iqbazLoOE DKQas+dDqzIlo3rRflJsbGPV48c0N0uBEL3PxU++kOon+ptSrmAAY+FO0DyZ0+JZ tLazG8EK4kbnWnPzt4bH/Fz+DClhuE36sfrVpcovTiUGA0yJwVP/GCwZO3Szdht1 In4EAH2NYNHyM9/sVLwrME+P1xEhftUyWnSB3GxocksyaFVPahwbDnqGMo4yzi+W AwDo8klFg3iKUeUnI43CH7V/jOPre+QksWjNAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIppEiKBq6ZFn4p8PWlO+wh3hrywwHwYDVR0jBBgwFoAUf5GM8mUD0fm8+nfc CqWSpX3fgkUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 NS9mNUdNOG1VRDBmbTgtbmZjQ3FXU3BYM2Zna1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2Y1R004bVVEMGZtOC1uZmNDcVdTcFgzZmdrVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTUvZjVHTThtVUQwZm04 LW5mY0NxV1NwWDNmZ2tVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALol6Oj43q7emrOx6n733heT3wopEj9YpVMeiwXBhXRq0mR2r1BknIeg6sbM Bz2uedM/1n3KiQDRXvaLvhz33LbKZd36KRcKAJ3dXqPRU/IAT3fCGT1ASYjI5G8u kzz/j6iBvVzIu45P8CU8ltK18iZlrnnOydabynPLJbfT6N9D2Ur8gajgAlBgVCEF /ClPbZfV2Bd8DsU4G6eEF0K0lO8tVthZz0ubXqZTnu0YRA9aRMOIG5DCfpDELv9P VtNFmpSxHoHGVO58Qq1KskAvNat7Ap1/ab/dbWwMJl8nN31D3WJciw9nHOnT7XPi ZQ/fwWlI78Mc9ykqK2AyC61RC48= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org