$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft File: jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft (raw, json) Hash identifier: vkJOMtiHJxO8Xk4tTpeNd/kBOsWvPPCgcvyh4sSsRkM= Subject key identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 Authority key identifier: 8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 Certificate issuer: /CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Certificate serial: 05F6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft Manifest number: 05F6 Signing time: Fri 22 Nov 2024 15:23:07 +0000 Manifest this update: Fri 22 Nov 2024 15:23:07 +0000 Manifest next update: Fri 22 Nov 2024 21:23:07 +0000 Files and hashes: 1: jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl (hash: neqLQ4fCm3m4/+B8Rx0n4n6G8uCgdlH/+XIgM0582Dg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Validity Not Before: Nov 22 15:23:07 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=022DFCC8B8C58BCB6CA52C397D4F721AEEFB22F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:36:0a:02:16:fd:27:bb:ee:28:4b:34:c2: c3:be:b8:6d:d8:bc:e4:71:40:84:97:df:29:b5:23: 42:29:fe:6e:ec:3d:a9:f6:98:bb:c9:4c:3f:4f:12: ba:d6:89:77:92:25:5b:fa:af:16:ff:c5:5c:4e:67: 06:5b:a0:64:ac:a8:9b:f7:ea:ef:7a:44:a8:fd:32: 16:b5:d7:28:1f:a2:aa:84:91:15:64:a8:3b:fa:b1: 4f:73:c3:0b:c0:43:8c:a4:16:59:d7:e6:4e:de:7f: c4:e7:b4:db:f5:7f:c5:e9:38:74:d9:cb:92:d3:1a: e0:3e:a2:9f:66:5d:91:1c:a4:91:bf:07:08:a6:42: ab:41:44:05:eb:5a:14:c2:dd:80:78:38:50:d5:d6: 90:ec:e5:87:2c:8b:b3:c7:44:eb:e4:45:e5:6d:b7: d2:c2:aa:f9:08:0a:2c:43:32:27:f2:93:77:dd:61: 17:ec:3e:df:bd:50:ae:a5:19:4a:5a:a5:0b:f9:fa: e4:6b:88:2e:92:02:be:8d:22:6c:98:9b:ff:1e:9f: 53:07:b7:32:91:14:d1:8e:13:fb:e8:06:16:8e:d7: 45:58:d6:39:57:3e:ba:17:e1:ad:73:ac:85:08:9b: c1:00:68:ff:9c:2b:2b:09:89:11:cc:c3:fe:b7:78: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 X509v3 Authority Key Identifier: keyid:8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:85:df:9f:e2:60:c6:f8:ad:94:78:81:38:9a:4f:ea:13:18: f6:f5:ba:72:ec:9a:3f:f3:15:49:e5:e5:62:da:8e:fe:40:d7: aa:3d:e7:0b:a2:c6:ae:cb:28:76:f0:a0:34:85:47:81:76:a4: 0c:79:96:15:98:a3:13:28:f0:0c:eb:a1:27:31:b2:40:87:bf: a9:42:d2:b9:d5:87:00:ea:3c:2e:cc:38:a9:0d:e2:ac:61:9f: 21:34:06:1d:ab:07:28:61:8d:37:ed:e5:8e:4d:37:87:0a:47: 79:7d:29:52:26:be:d7:dd:70:81:7a:a5:95:f4:0c:e1:57:c0: cd:81:00:28:1e:f2:fa:0c:b7:a8:64:ad:83:00:4a:1d:a7:de: 9c:77:59:82:01:99:71:cd:64:eb:ba:a9:1f:72:37:10:88:69: 3c:43:76:b5:db:04:2b:f9:9d:6f:91:ae:93:34:95:c9:44:36: fc:82:0f:77:7e:2b:73:e1:b0:61:7e:fe:85:11:80:70:99:70: 2f:46:ca:63:3a:9d:14:33:01:76:a3:e2:b2:ea:13:f7:f4:27: a0:f9:a8:64:6c:e7:45:7f:ca:de:cb:09:6f:2b:e0:43:b9:78: dd:07:2c:89:36:48:05:a5:38:36:e8:7f:fc:04:37:40:ab:5f: b9:9f:c2:a8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQw QUFEQzM1MTg1MDY1RDg3QkM0RjIwRDhDNEE2Qjg4OTMxQThCOTAeFw0yNDExMjIx NTIzMDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyMkRGQ0M4QjhDNThC Q0I2Q0E1MkMzOTdENEY3MjFBRUVGQjIyRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEMjYKAhb9J7vuKEs0wsO+uG3YvORxQISX3ym1I0Ip/m7sPan2 mLvJTD9PErrWiXeSJVv6rxb/xVxOZwZboGSsqJv36u96RKj9Mha11ygfoqqEkRVk qDv6sU9zwwvAQ4ykFlnX5k7ef8TntNv1f8XpOHTZy5LTGuA+op9mXZEcpJG/Bwim QqtBRAXrWhTC3YB4OFDV1pDs5Ycsi7PHROvkReVtt9LCqvkICixDMifyk3fdYRfs Pt+9UK6lGUpapQv5+uRriC6SAr6NImyYm/8en1MHtzKRFNGOE/voBhaO10VY1jlX ProX4a1zrIUIm8EAaP+cKysJiRHMw/63eIfjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAi38yLjFi8tspSw5fU9yGu77IvMwHwYDVR0jBBgwFoAUjQqtw1GFBl2HvE8g 2MSmuIkxqLkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OC9qUXF0dzFHRkJsMkh2RThnMk1TbXVJa3hxTGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pRcXR3MUdGQmwySHZFOGcyTVNtdUlreHFMay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTgvalFxdHcxR0ZCbDJI dkU4ZzJNU211SWt4cUxrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAECF35/iYMb4rZR4gTiaT+oTGPb1unLsmj/zFUnl5WLajv5A16o95wuixq7L KHbwoDSFR4F2pAx5lhWYoxMo8AzroScxskCHv6lC0rnVhwDqPC7MOKkN4qxhnyE0 Bh2rByhhjTft5Y5NN4cKR3l9KVImvtfdcIF6pZX0DOFXwM2BACge8voMt6hkrYMA Sh2n3px3WYIBmXHNZOu6qR9yNxCIaTxDdrXbBCv5nW+RrpM0lclENvyCD3d+K3Ph sGF+/oURgHCZcC9GymM6nRQzAXaj4rLqE/f0J6D5qGRs50V/yt7LCW8r4EO5eN0H LIk2SAWlODbof/wEN0CrX7mfwqg= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org