$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft File: tWGZILjL08qnMy3Uu5GM4uZcmlI.mft (raw, json) Hash identifier: ex/EfM6pfdg1/pPaAjPNupCqqhTDoR87dWOOM5BVaSw= Subject key identifier: 84:E2:E5:99:8E:9D:9B:86:DF:96:33:76:93:CD:0B:BE:7F:8A:5F:54 Authority key identifier: B5:61:99:20:B8:CB:D3:CA:A7:33:2D:D4:BB:91:8C:E2:E6:5C:9A:52 Certificate issuer: /CN=B5619920B8CBD3CAA7332DD4BB918CE2E65C9A52 Certificate serial: 05B3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tWGZILjL08qnMy3Uu5GM4uZcmlI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft Manifest number: 05B3 Signing time: Fri 22 Nov 2024 20:21:13 +0000 Manifest this update: Fri 22 Nov 2024 20:21:13 +0000 Manifest next update: Sat 23 Nov 2024 02:21:13 +0000 Files and hashes: 1: tWGZILjL08qnMy3Uu5GM4uZcmlI.crl (hash: 26WnN8Xzu5KphsrVh8wat/0BfA6d6aHpwz6249STzxo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tWGZILjL08qnMy3Uu5GM4uZcmlI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5619920B8CBD3CAA7332DD4BB918CE2E65C9A52 Validity Not Before: Nov 22 20:21:13 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=84E2E5998E9D9B86DF96337693CD0BBE7F8A5F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:2b:f3:96:58:10:7e:78:29:d4:13:8f:3c: 52:d7:5f:79:f2:df:f2:3d:23:ee:1e:b0:ee:a2:85: 29:7a:e7:03:0b:09:48:d5:02:50:f6:01:14:47:c4: 29:47:5a:0b:41:5c:49:a6:a8:4c:c4:24:91:36:3f: f8:cf:0d:3f:11:1e:0b:2c:ee:04:36:4f:22:84:b1: 8e:0a:c3:4a:82:86:3d:54:da:0d:22:3b:27:bd:3f: d4:44:79:04:eb:db:4a:50:01:0c:6b:7e:48:8b:fe: a2:83:96:bd:d1:b3:1c:6d:fc:8f:0f:23:92:f0:ae: 2f:99:1f:68:14:25:c9:97:f1:88:1c:a9:d4:cd:d7: a8:3d:a5:5b:fd:56:4b:ab:07:53:ec:37:f8:37:1b: 09:6c:04:6e:b0:e4:fa:c4:81:a5:ff:d8:e0:7c:99: ad:9f:ae:ce:d1:0e:34:22:fa:b6:bf:f2:d0:13:89: cb:5c:88:89:31:ef:f1:05:3c:95:df:13:7d:9a:a4: 63:4d:b5:2b:2a:b7:db:bc:af:6a:c0:b7:ad:ed:4b: 6a:e9:f0:65:76:d6:b1:06:e3:f7:a8:5b:d1:0a:68: a7:58:90:83:27:b7:52:b6:67:02:fb:3d:4e:8a:2e: 56:45:f6:de:5e:7a:54:ca:bf:96:af:9e:50:00:25: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E2:E5:99:8E:9D:9B:86:DF:96:33:76:93:CD:0B:BE:7F:8A:5F:54 X509v3 Authority Key Identifier: keyid:B5:61:99:20:B8:CB:D3:CA:A7:33:2D:D4:BB:91:8C:E2:E6:5C:9A:52 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tWGZILjL08qnMy3Uu5GM4uZcmlI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:53:0d:25:b7:d3:77:72:9b:12:9a:03:b0:65:70:2c:d9:b8: 0c:36:e0:5b:4c:c6:54:86:95:b9:82:40:3a:28:b4:44:cd:26: d5:64:3b:80:05:5b:cd:98:43:9c:4e:df:46:c8:27:88:cd:12: 1f:94:8e:cc:92:c0:ce:ee:cc:e2:f6:42:9c:ea:b3:24:7b:65: 2f:1a:58:9a:1e:13:45:16:ea:e7:fd:1d:52:10:91:3b:13:3d: 47:ef:d2:dd:83:f5:ec:5f:0b:23:b4:0a:2a:40:4f:f7:7c:6f: 60:88:5f:91:db:9e:18:de:6b:20:ea:28:df:21:ce:a3:94:ee: ab:36:0d:db:20:f3:f6:6c:0a:56:1f:9b:22:78:e8:94:41:c6: 43:53:f1:48:b2:c3:37:d4:22:2e:74:3c:ba:e5:7f:f4:34:a5: 2d:94:b3:d0:de:5f:57:17:23:7b:e0:81:3d:d6:63:b3:ce:bc: 0a:6e:c4:5c:78:95:64:9d:ea:d6:6f:76:ca:5a:5e:1f:64:ba: 23:e6:b7:2e:6d:a6:12:b7:c2:16:78:93:6c:98:f6:70:08:3b: 9a:3b:b0:c8:c1:fd:13:9c:f8:4d:d0:82:c7:c3:10:28:4b:8c: 5d:44:ef:27:e6:63:e7:a1:ae:c8:c5:62:db:fd:78:6a:09:17: 71:cc:83:d9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjU2 MTk5MjBCOENCRDNDQUE3MzMyREQ0QkI5MThDRTJFNjVDOUE1MjAeFw0yNDExMjIy MDIxMTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg0RTJFNTk5OEU5RDlC ODZERjk2MzM3NjkzQ0QwQkJFN0Y4QTVGNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKqyvzllgQfngp1BOPPFLXX3ny3/I9I+4esO6ihSl65wMLCUjV AlD2ARRHxClHWgtBXEmmqEzEJJE2P/jPDT8RHgss7gQ2TyKEsY4Kw0qChj1U2g0i Oye9P9REeQTr20pQAQxrfkiL/qKDlr3Rsxxt/I8PI5Lwri+ZH2gUJcmX8YgcqdTN 16g9pVv9VkurB1PsN/g3GwlsBG6w5PrEgaX/2OB8ma2frs7RDjQi+ra/8tATictc iIkx7/EFPJXfE32apGNNtSsqt9u8r2rAt63tS2rp8GV21rEG4/eoW9EKaKdYkIMn t1K2ZwL7PU6KLlZF9t5eelTKv5avnlAAJS/ZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUhOLlmY6dm4bfljN2k80Lvn+KX1QwHwYDVR0jBBgwFoAUtWGZILjL08qnMy3U u5GM4uZcmlIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 NS90V0daSUxqTDA4cW5NeTNVdTVHTTR1WmNtbEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RXR1pJTGpMMDhxbk15M1V1NUdNNHVaY21sSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjUvdFdHWklMakwwOHFu TXkzVXU1R000dVpjbWxJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACZTDSW303dymxKaA7BlcCzZuAw24FtMxlSGlbmCQDootETNJtVkO4AFW82Y Q5xO30bIJ4jNEh+UjsySwM7uzOL2QpzqsyR7ZS8aWJoeE0UW6uf9HVIQkTsTPUfv 0t2D9exfCyO0CipAT/d8b2CIX5HbnhjeayDqKN8hzqOU7qs2Ddsg8/ZsClYfmyJ4 6JRBxkNT8UiywzfUIi50PLrlf/Q0pS2Us9DeX1cXI3vggT3WY7POvApuxFx4lWSd 6tZvdspaXh9kuiPmty5tphK3whZ4k2yY9nAIO5o7sMjB/ROc+E3QgsfDEChLjF1E 7yfmY+ehrsjFYtv9eGoJF3HMg9k= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:45 2024 by rpki-client on console-ams.rpki-client.org