$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.mft File: iycD7R0_m0UahwI8nl3YqBeSK9Y.mft (raw, json) Hash identifier: 031eBWaUBmJJs03la2pClvVZkrBnlnerG8MsZq6o9Ws= Subject key identifier: 6E:79:18:34:F0:37:EE:5E:D4:F6:3B:80:E4:52:40:E1:B4:7C:3D:57 Authority key identifier: 8B:27:03:ED:1D:3F:9B:45:1A:87:02:3C:9E:5D:D8:A8:17:92:2B:D6 Certificate issuer: /CN=8B2703ED1D3F9B451A87023C9E5DD8A817922BD6 Certificate serial: 03DA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iycD7R0_m0UahwI8nl3YqBeSK9Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.mft Manifest number: 03DA Signing time: Fri 22 Nov 2024 10:21:11 +0000 Manifest this update: Fri 22 Nov 2024 10:21:11 +0000 Manifest next update: Fri 22 Nov 2024 16:21:11 +0000 Files and hashes: 1: iycD7R0_m0UahwI8nl3YqBeSK9Y.crl (hash: 6wXL09XHuceDIBaEJR/gDIT8vfE/LJ8zTvSLjuUf4fQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iycD7R0_m0UahwI8nl3YqBeSK9Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B2703ED1D3F9B451A87023C9E5DD8A817922BD6 Validity Not Before: Nov 22 10:21:11 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6E791834F037EE5ED4F63B80E45240E1B47C3D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:d7:7f:ac:5e:6c:08:67:dc:e6:0b:c3:2d: c1:4f:9e:30:a1:c1:59:4c:bc:ef:f3:9c:4b:09:46: be:23:57:f0:e7:4e:0a:ce:fd:4c:2c:38:2c:bb:03: 72:26:35:c3:52:23:5e:fa:bb:10:bf:dc:a9:27:a2: 95:e9:c6:f0:3b:ea:1a:ed:75:68:9e:b4:5a:22:5a: ae:32:2a:8f:94:79:81:13:24:3a:d1:9d:4f:cd:1d: 02:20:9d:74:25:96:1b:f7:59:24:66:78:32:2d:b6: f2:84:f3:b0:5c:f4:35:60:1a:f9:eb:d5:53:29:9b: b4:3a:78:57:65:53:0d:1e:47:a7:92:41:f1:ad:af: db:a6:0c:56:49:79:8a:7d:05:ac:d6:7d:b1:22:a4: 1c:a1:69:e5:5c:d8:0d:29:f4:5f:ff:88:d1:8d:de: 09:6d:4b:cf:97:fd:62:ae:4c:9d:b3:8e:37:9d:c8: 54:9c:8b:64:a8:77:c0:75:d5:14:1e:01:a8:4a:55: 34:b7:88:b1:de:bf:77:90:66:e5:16:dc:43:22:e5: 5a:ed:33:e6:d1:f2:cf:4c:1f:41:98:1b:0a:aa:ab: ad:e0:7b:83:f6:54:8a:93:98:d4:41:8c:7e:fb:87: 23:16:03:8b:e9:36:a2:d2:8d:f5:2f:27:23:35:df: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:79:18:34:F0:37:EE:5E:D4:F6:3B:80:E4:52:40:E1:B4:7C:3D:57 X509v3 Authority Key Identifier: keyid:8B:27:03:ED:1D:3F:9B:45:1A:87:02:3C:9E:5D:D8:A8:17:92:2B:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iycD7R0_m0UahwI8nl3YqBeSK9Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/iycD7R0_m0UahwI8nl3YqBeSK9Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:f7:45:13:d0:f6:93:d5:1a:a8:10:c6:59:db:6b:b8:07:3a: 03:af:6a:28:26:cb:92:b4:66:54:c9:27:b1:1b:19:d4:87:db: 04:88:ad:3d:19:ef:71:9d:39:e8:63:cc:61:66:e2:dc:26:35: 32:de:08:03:7e:fd:9e:e9:58:81:18:6b:ad:07:ec:7e:73:64: 30:d2:8f:1a:0a:f6:77:cc:af:08:75:d3:1b:0f:9e:bf:77:68: 81:a2:e4:0b:74:75:a0:61:86:f1:de:d4:7f:3f:7e:51:bf:ab: 4b:2c:23:e9:32:bd:62:3a:f9:a4:d9:d6:f3:7d:8c:cd:53:68: b0:2b:c8:e7:23:5b:93:92:97:52:ba:ad:b9:d3:6c:19:46:da: 85:dc:b4:b3:83:23:af:0a:ce:fa:ce:3b:61:d9:4b:72:fd:75: 18:2b:2b:11:05:1c:5c:80:26:36:0d:fb:76:2c:d8:46:90:2b: e8:05:c7:74:11:65:46:5a:01:ee:b3:72:fb:a1:69:d6:fc:5b: a6:19:e2:0a:55:54:9b:c7:39:65:a8:9f:1c:85:bd:dd:20:76: 9c:7e:55:05:75:1d:36:cb:4b:75:03:a6:65:61:a5:b2:f2:12: f3:dc:a4:0b:b6:f9:7c:04:a7:5a:0a:ae:d3:5f:07:a9:01:20: 99:59:ce:ab -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEIy NzAzRUQxRDNGOUI0NTFBODcwMjNDOUU1REQ4QTgxNzkyMkJENjAeFw0yNDExMjIx MDIxMTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZFNzkxODM0RjAzN0VF NUVENEY2M0I4MEU0NTI0MEUxQjQ3QzNENTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXANd/rF5sCGfc5gvDLcFPnjChwVlMvO/znEsJRr4jV/DnTgrO /UwsOCy7A3ImNcNSI176uxC/3KknopXpxvA76hrtdWietFoiWq4yKo+UeYETJDrR nU/NHQIgnXQllhv3WSRmeDIttvKE87Bc9DVgGvnr1VMpm7Q6eFdlUw0eR6eSQfGt r9umDFZJeYp9BazWfbEipByhaeVc2A0p9F//iNGN3gltS8+X/WKuTJ2zjjedyFSc i2Sod8B11RQeAahKVTS3iLHev3eQZuUW3EMi5VrtM+bR8s9MH0GYGwqqq63ge4P2 VIqTmNRBjH77hyMWA4vpNqLSjfUvJyM13/05AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUbnkYNPA37l7U9juA5FJA4bR8PVcwHwYDVR0jBBgwFoAUiycD7R0/m0UahwI8 nl3YqBeSK9YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 NS9peWNEN1IwX20wVWFod0k4bmwzWXFCZVNLOVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l5Y0Q3UjBfbTBVYWh3SThubDNZcUJlU0s5WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjUvaXljRDdSMF9tMFVh aHdJOG5sM1lxQmVTSzlZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEL3RRPQ9pPVGqgQxlnba7gHOgOvaigmy5K0ZlTJJ7EbGdSH2wSIrT0Z73Gd OehjzGFm4twmNTLeCAN+/Z7pWIEYa60H7H5zZDDSjxoK9nfMrwh10xsPnr93aIGi 5At0daBhhvHe1H8/flG/q0ssI+kyvWI6+aTZ1vN9jM1TaLAryOcjW5OSl1K6rbnT bBlG2oXctLODI68KzvrOO2HZS3L9dRgrKxEFHFyAJjYN+3Ys2EaQK+gFx3QRZUZa Ae6zcvuhadb8W6YZ4gpVVJvHOWWonxyFvd0gdpx+VQV1HTbLS3UDpmVhpbLyEvPc pAu2+XwEp1oKrtNfB6kBIJlZzqs= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org