$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft File: jKUFZzApbEGdb3sKeKTpEenwOXY.mft (raw, json) Hash identifier: q+AoedJm0n/CEFrVx68v6sQhAX0wZL98dlDCACMXEYg= Subject key identifier: 53:88:12:A4:94:9E:01:F7:D5:AA:7F:6B:68:BC:C7:FF:E2:06:8F:97 Authority key identifier: 8C:A5:05:67:30:29:6C:41:9D:6F:7B:0A:78:A4:E9:11:E9:F0:39:76 Certificate issuer: /CN=8CA5056730296C419D6F7B0A78A4E911E9F03976 Certificate serial: 05B6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jKUFZzApbEGdb3sKeKTpEenwOXY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft Manifest number: 05B6 Signing time: Fri 22 Nov 2024 20:23:36 +0000 Manifest this update: Fri 22 Nov 2024 20:23:36 +0000 Manifest next update: Sat 23 Nov 2024 02:23:36 +0000 Files and hashes: 1: jKUFZzApbEGdb3sKeKTpEenwOXY.crl (hash: /WfXOS5Qje42kfmrbyC4f+kqBPV+6Ilm80UZ5nb8wXg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jKUFZzApbEGdb3sKeKTpEenwOXY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CA5056730296C419D6F7B0A78A4E911E9F03976 Validity Not Before: Nov 22 20:23:36 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=538812A4949E01F7D5AA7F6B68BCC7FFE2068F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:b9:e2:92:e1:2f:2a:32:f0:dd:c6:89:d8: 91:11:c7:e2:d3:50:b0:c3:30:ce:8b:48:ce:1f:36: 6c:19:5d:85:a8:8a:c7:e6:1e:ee:26:04:a0:e4:1e: 62:d8:07:02:1c:53:e0:9a:ad:01:93:06:94:88:c9: 58:e6:b7:1b:5d:b8:aa:3a:1e:e4:03:7d:c7:cf:fd: 3b:30:bc:d6:ef:95:68:d6:e4:13:cb:8e:c7:1b:08: dd:88:b5:13:11:5a:f0:6e:3d:b8:70:43:cf:ec:1c: 94:f3:25:ba:f6:92:f9:dc:dd:09:17:78:e2:f3:67: 12:94:e3:80:cf:63:57:5c:c1:87:4f:cf:ef:67:ea: 75:15:85:17:79:05:40:f8:24:f1:f5:f3:a0:5d:25: 0d:88:99:0c:24:41:01:15:9f:8f:ca:ef:f5:5a:b8: b9:ef:d9:70:d5:27:67:b4:aa:a7:f8:29:59:49:fb: c2:9e:31:b7:10:cc:c3:8c:8b:80:b5:62:09:2d:32: e7:7a:ec:b4:b9:32:7e:7a:2d:85:6d:e3:7f:8a:54: cd:b4:ea:72:28:3a:3f:ec:b1:11:04:73:36:b3:83: 53:5e:fe:e9:f6:53:eb:83:06:7b:01:d0:2b:cc:8f: 8d:03:23:8d:f4:33:19:52:f4:61:a1:fb:48:83:93: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:88:12:A4:94:9E:01:F7:D5:AA:7F:6B:68:BC:C7:FF:E2:06:8F:97 X509v3 Authority Key Identifier: keyid:8C:A5:05:67:30:29:6C:41:9D:6F:7B:0A:78:A4:E9:11:E9:F0:39:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jKUFZzApbEGdb3sKeKTpEenwOXY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/jKUFZzApbEGdb3sKeKTpEenwOXY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:60:af:53:f7:37:b1:96:67:40:95:53:08:39:8d:cc:1e:bc: 0e:0b:3e:b6:74:b5:c1:23:47:01:d2:4c:bd:97:cf:49:2f:d6: f8:7e:9e:7a:28:00:e4:4d:4e:15:88:dd:27:05:d1:b8:20:95: ed:26:15:3f:9b:0b:f7:8b:6f:3d:60:ca:32:ae:23:8c:44:2b: d8:88:c6:70:b0:60:bb:3b:5e:1f:83:2d:12:22:fa:18:db:b8: 05:16:59:39:fa:11:59:44:19:3c:f1:46:2d:88:95:8a:90:94: 81:08:9d:68:47:90:0d:bc:ae:f3:93:2b:b9:e9:23:a5:bc:1e: b3:cc:2b:7f:c2:7e:37:f8:9d:e1:6d:07:01:91:14:ca:43:74: 4b:c9:a1:96:4c:9a:db:7e:08:d7:cf:a5:06:36:e7:0f:9b:e0: a0:1c:2f:6c:bf:c6:26:3f:d2:a3:f8:7a:f4:ba:02:58:f2:9a: fc:d8:ab:98:15:27:6d:9e:fe:bb:99:a0:f4:a9:86:42:2d:b8: d2:cb:6a:7a:55:2e:dd:ed:5b:57:cf:61:f5:b9:f1:ae:2e:3e: 72:91:ce:b6:9e:70:31:8c:86:b6:4b:e7:47:ef:71:98:61:4a: e1:b4:bb:16:78:08:88:db:54:76:0d:b3:56:a5:d8:1c:b4:71: 34:ee:4c:74 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOENB NTA1NjczMDI5NkM0MTlENkY3QjBBNzhBNEU5MTFFOUYwMzk3NjAeFw0yNDExMjIy MDIzMzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUzODgxMkE0OTQ5RTAx RjdENUFBN0Y2QjY4QkNDN0ZGRTIwNjhGOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr57nikuEvKjLw3caJ2JERx+LTULDDMM6LSM4fNmwZXYWoisfm Hu4mBKDkHmLYBwIcU+CarQGTBpSIyVjmtxtduKo6HuQDfcfP/TswvNbvlWjW5BPL jscbCN2ItRMRWvBuPbhwQ8/sHJTzJbr2kvnc3QkXeOLzZxKU44DPY1dcwYdPz+9n 6nUVhRd5BUD4JPH186BdJQ2ImQwkQQEVn4/K7/VauLnv2XDVJ2e0qqf4KVlJ+8Ke MbcQzMOMi4C1YgktMud67LS5Mn56LYVt43+KVM206nIoOj/ssREEczazg1Ne/un2 U+uDBnsB0CvMj40DI430MxlS9GGh+0iDk10vAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUU4gSpJSeAffVqn9raLzH/+IGj5cwHwYDVR0jBBgwFoAUjKUFZzApbEGdb3sK eKTpEenwOXYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 My9qS1VGWnpBcGJFR2RiM3NLZUtUcEVlbndPWFkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pLVUZaekFwYkVHZGIzc0tlS1RwRWVud09YWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjMvaktVRlp6QXBiRUdk YjNzS2VLVHBFZW53T1hZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIlgr1P3N7GWZ0CVUwg5jcwevA4LPrZ0tcEjRwHSTL2Xz0kv1vh+nnooAORN ThWI3ScF0bggle0mFT+bC/eLbz1gyjKuI4xEK9iIxnCwYLs7Xh+DLRIi+hjbuAUW WTn6EVlEGTzxRi2IlYqQlIEInWhHkA28rvOTK7npI6W8HrPMK3/Cfjf4neFtBwGR FMpDdEvJoZZMmtt+CNfPpQY25w+b4KAcL2y/xiY/0qP4evS6AljymvzYq5gVJ22e /ruZoPSphkItuNLLanpVLt3tW1fPYfW58a4uPnKRzraecDGMhrZL50fvcZhhSuG0 uxZ4CIjbVHYNs1al2By0cTTuTHQ= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:11 2024 by rpki-client on console-fra.rpki-client.org