$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft File: siBZMMmnzLPKhy8QeQqwa2_acHI.mft (raw, json) Hash identifier: R72lJtQ2KVdU6Oqb4De7lnTQ58JN5QLu/+iC6kBU9VQ= Subject key identifier: 35:B1:A6:FD:B2:A5:7B:24:92:AF:9E:83:B4:24:7A:63:10:82:7B:B1 Authority key identifier: B2:20:59:30:C9:A7:CC:B3:CA:87:2F:10:79:0A:B0:6B:6F:DA:70:72 Certificate issuer: /CN=B2205930C9A7CCB3CA872F10790AB06B6FDA7072 Certificate serial: 04A4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft Manifest number: 04A4 Signing time: Fri 22 Nov 2024 10:22:33 +0000 Manifest this update: Fri 22 Nov 2024 10:22:33 +0000 Manifest next update: Fri 22 Nov 2024 16:22:33 +0000 Files and hashes: 1: siBZMMmnzLPKhy8QeQqwa2_acHI.crl (hash: E+6lGI+PANIPaWrZekSH/JBSrjwsQd/zVwNo1OoLYVc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2205930C9A7CCB3CA872F10790AB06B6FDA7072 Validity Not Before: Nov 22 10:22:33 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=35B1A6FDB2A57B2492AF9E83B4247A6310827BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:55:cb:58:88:9a:53:9a:3e:03:72:a9:1d:03: b9:05:0d:34:3e:fa:84:e2:5f:cd:d8:92:bc:06:95: e0:27:7a:48:23:00:2a:c0:84:6f:f3:5e:fc:d1:6b: 16:5a:56:86:3d:a6:b7:e6:68:a6:f1:39:47:6b:ae: bc:1b:b9:5c:88:c7:3e:69:a4:77:0d:4b:68:09:fe: e4:f4:24:32:74:05:6e:04:76:55:5b:76:9b:24:00: 53:a8:94:cc:dc:62:ef:28:ad:b5:bd:77:c2:28:68: c8:e4:34:aa:dc:ab:17:85:e1:1c:67:cf:0c:b4:e0: 48:95:fc:b3:0f:b9:0c:d1:d1:f4:bd:ea:a4:49:d4: b4:0d:d4:30:8b:80:9b:eb:25:98:ca:ae:30:27:6b: 58:1d:65:af:80:e2:dd:82:99:bf:9c:7a:20:ec:d6: 52:52:85:00:f6:0f:20:99:3c:d0:40:f5:86:4e:b7: d8:59:72:d3:72:47:0a:3c:fd:32:23:f1:47:e3:e1: 00:a1:bc:98:ce:b8:63:c7:90:0c:b5:8b:f0:c3:c8: 96:66:f7:7e:cc:0c:4f:4c:25:77:13:c5:ab:96:df: e0:14:42:24:6e:d3:14:de:98:76:91:6d:2e:a9:6b: d2:c9:47:86:33:95:58:f2:2c:2b:a1:b2:d3:08:9c: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B1:A6:FD:B2:A5:7B:24:92:AF:9E:83:B4:24:7A:63:10:82:7B:B1 X509v3 Authority Key Identifier: keyid:B2:20:59:30:C9:A7:CC:B3:CA:87:2F:10:79:0A:B0:6B:6F:DA:70:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:49:4f:fe:c8:d6:ae:c9:14:c7:0a:d6:c2:3b:c4:27:3e:e9: e5:b6:eb:0d:54:b2:c9:3d:35:03:6e:84:57:46:6a:d5:bc:bc: 08:d8:c0:43:05:5c:cc:01:4e:cd:01:d2:ea:d7:00:97:30:90: ef:65:6b:35:21:13:e0:94:ae:f7:ab:6b:74:b1:2a:13:8c:02: 9c:74:a7:38:dd:8f:46:67:5a:38:c3:70:10:bc:d2:e6:b8:82: 6f:4d:9f:36:99:bf:98:1f:22:6e:b6:d6:22:f3:33:1a:00:dc: 82:3d:20:67:a8:69:2b:6a:01:d5:4d:e8:34:6c:20:92:94:df: 13:a9:5b:5c:ac:e8:ae:01:53:79:45:4a:6f:08:80:d8:b8:33: 7f:59:a9:5c:8f:62:ef:49:41:fb:60:eb:bb:cb:1f:8f:d8:39: ed:06:ff:3c:e2:86:ab:43:56:05:46:de:3f:02:f0:06:34:f4: f7:28:61:0a:a9:03:4e:2c:dc:4c:eb:8c:5a:99:0d:f5:b9:89: 28:b3:88:14:e7:4d:6e:21:ae:66:ed:c8:de:ea:4a:b1:40:42: 4d:78:a7:3e:70:93:76:54:31:fd:cd:01:ea:aa:7b:11:ef:6b: 31:00:73:4d:7c:e9:49:cb:6c:8e:2b:c8:ef:0c:1d:b0:f6:e1: 56:03:04:51 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjIy MDU5MzBDOUE3Q0NCM0NBODcyRjEwNzkwQUIwNkI2RkRBNzA3MjAeFw0yNDExMjIx MDIyMzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM1QjFBNkZEQjJBNTdC MjQ5MkFGOUU4M0I0MjQ3QTYzMTA4MjdCQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2VctYiJpTmj4DcqkdA7kFDTQ++oTiX83YkrwGleAnekgjACrA hG/zXvzRaxZaVoY9prfmaKbxOUdrrrwbuVyIxz5ppHcNS2gJ/uT0JDJ0BW4EdlVb dpskAFOolMzcYu8orbW9d8IoaMjkNKrcqxeF4Rxnzwy04EiV/LMPuQzR0fS96qRJ 1LQN1DCLgJvrJZjKrjAna1gdZa+A4t2Cmb+ceiDs1lJShQD2DyCZPNBA9YZOt9hZ ctNyRwo8/TIj8Ufj4QChvJjOuGPHkAy1i/DDyJZm937MDE9MJXcTxauW3+AUQiRu 0xTemHaRbS6pa9LJR4YzlVjyLCuhstMInI2FAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNbGm/bKleySSr56DtCR6YxCCe7EwHwYDVR0jBBgwFoAUsiBZMMmnzLPKhy8Q eQqwa2/acHIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 NC9zaUJaTU1tbnpMUEtoeThRZVFxd2EyX2FjSEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NpQlpNTW1uekxQS2h5OFFlUXF3YTJfYWNISS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjQvc2lCWk1NbW56TFBL aHk4UWVRcXdhMl9hY0hJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADlJT/7I1q7JFMcK1sI7xCc+6eW26w1Ussk9NQNuhFdGatW8vAjYwEMFXMwB Ts0B0urXAJcwkO9lazUhE+CUrvera3SxKhOMApx0pzjdj0ZnWjjDcBC80ua4gm9N nzaZv5gfIm621iLzMxoA3II9IGeoaStqAdVN6DRsIJKU3xOpW1ys6K4BU3lFSm8I gNi4M39ZqVyPYu9JQftg67vLH4/YOe0G/zzihqtDVgVG3j8C8AY09PcoYQqpA04s 3EzrjFqZDfW5iSiziBTnTW4hrmbtyN7qSrFAQk14pz5wk3ZUMf3NAeqqexHvazEA c0186UnLbI4ryO8MHbD24VYDBFE= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org