$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft File: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft (raw, json) Hash identifier: 54LE1bsNf6SU0jrCaa9XwADUJsKG4GKWM8uRLs0OoCA= Subject key identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 Authority key identifier: 6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB Certificate issuer: /CN=6FE13AA555489412B2892267A49DAEC44693A6AB Certificate serial: 05B0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft Manifest number: 05B0 Signing time: Fri 22 Nov 2024 20:23:12 +0000 Manifest this update: Fri 22 Nov 2024 20:23:12 +0000 Manifest next update: Sat 23 Nov 2024 02:23:12 +0000 Files and hashes: 1: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl (hash: rEerIOWqMt3KohS7IXeo+1Xas5pbyNGI2c5yaa9V+L8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1456 (0x5b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FE13AA555489412B2892267A49DAEC44693A6AB Validity Not Before: Nov 22 20:23:12 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=62AED79DED1AD2E1327501BE06B5E7C5A4F1CFD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:e8:18:68:cb:77:75:de:fd:11:52:33:a7: 9f:bb:ca:56:d9:e1:7e:e1:c3:f3:97:1d:8b:73:fc: 24:6b:ef:6e:8a:6a:05:0a:ca:70:b2:2c:3f:11:a7: e0:ac:8f:4d:5c:35:6e:43:ad:b1:96:82:1d:ba:d2: f5:bf:03:36:d4:13:60:6a:a0:87:09:71:95:f6:77: bc:6c:18:00:80:72:7c:31:ef:9c:03:50:2e:32:d5: 95:b0:a7:67:9e:b1:a5:01:b7:7d:c7:e9:bd:1c:0b: f9:0c:b5:7f:e1:e7:b7:a7:a6:75:04:5c:1b:ea:eb: 14:9d:f6:88:22:d1:a8:d9:5e:56:82:a5:a3:29:12: 80:7d:8a:ea:26:7f:e4:76:dc:52:06:84:d8:87:6e: f6:70:92:e9:cb:23:95:a1:4c:36:1c:b7:70:96:85: 1f:78:08:87:dc:d4:cf:87:09:a1:a7:5e:b7:ba:c6: 6c:93:77:3f:50:76:fe:f0:5c:b5:27:75:1a:bb:52: 77:63:9c:70:ed:47:b5:a5:d3:cb:f2:6c:69:9a:2d: 5f:b2:62:4c:5e:e7:5b:4a:a3:44:7b:f8:e3:b4:3a: 23:f3:46:6e:c5:92:91:43:1a:0f:f0:39:00:d5:72: 40:e0:9c:0a:3f:9b:1b:a7:ee:28:f8:34:45:f7:31: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 X509v3 Authority Key Identifier: keyid:6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:6f:2a:31:32:36:1b:56:9c:ef:01:d0:80:85:64:76:be:ca: 05:dc:4f:7a:7d:9f:3d:36:5c:46:7d:4f:16:3b:b2:54:62:1c: d9:93:f2:fe:00:d4:24:2d:92:03:d7:6e:7a:fa:3d:b4:ac:72: 7c:73:48:b4:0e:d6:e0:1c:45:d8:2b:8d:00:57:a2:e2:9d:c4: 45:f4:fb:be:ea:69:da:81:b7:65:9e:f7:60:26:86:ec:00:35: 76:cf:b9:6d:7a:af:66:9b:64:e7:01:b8:89:0c:c2:dd:c6:1e: 2f:1a:7d:9a:6e:9a:0a:7a:60:38:e3:37:bd:b5:42:2d:18:7d: fb:1c:47:1a:63:59:6c:fc:f5:9b:45:62:9f:92:51:18:a7:64: ed:69:2a:3a:1a:ce:33:66:44:3d:17:ff:b9:29:75:6f:79:b8: a2:3c:d3:4b:7a:aa:6f:4b:b3:67:48:5e:ec:a9:8e:2e:c6:51: 85:e6:00:49:f5:d7:4d:f0:6d:42:80:76:d6:47:d2:0c:42:7f: 8e:22:63:18:90:1b:9a:2f:1a:0b:e7:a0:d1:b2:9b:4c:5f:49: cb:f4:1a:fb:d6:24:ea:98:46:8b:2c:03:07:bd:45:a1:38:0b: a3:90:61:6e:71:dd:53:24:a3:81:ba:c2:27:4a:b3:2f:3d:d1: 23:3f:fe:04 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZF MTNBQTU1NTQ4OTQxMkIyODkyMjY3QTQ5REFFQzQ0NjkzQTZBQjAeFw0yNDExMjIy MDIzMTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYyQUVENzlERUQxQUQy RTEzMjc1MDFCRTA2QjVFN0M1QTRGMUNGRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS7+gYaMt3dd79EVIzp5+7ylbZ4X7hw/OXHYtz/CRr726KagUK ynCyLD8Rp+Csj01cNW5DrbGWgh260vW/AzbUE2BqoIcJcZX2d7xsGACAcnwx75wD UC4y1ZWwp2eesaUBt33H6b0cC/kMtX/h57enpnUEXBvq6xSd9ogi0ajZXlaCpaMp EoB9iuomf+R23FIGhNiHbvZwkunLI5WhTDYct3CWhR94CIfc1M+HCaGnXre6xmyT dz9Qdv7wXLUndRq7UndjnHDtR7Wl08vybGmaLV+yYkxe51tKo0R7+OO0OiPzRm7F kpFDGg/wOQDVckDgnAo/mxun7ij4NEX3MRT/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUYq7Xne0a0uEydQG+BrXnxaTxz9kwHwYDVR0jBBgwFoAUb+E6pVVIlBKyiSJn pJ2uxEaTpqswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni9iLUU2cFZWSWxCS3lpU0pucEoydXhFYVRwcXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ItRTZwVlZJbEJLeWlTSm5wSjJ1eEVhVHBxcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvYi1FNnBWVklsQkt5 aVNKbnBKMnV4RWFUcHFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADRvKjEyNhtWnO8B0ICFZHa+ygXcT3p9nz02XEZ9TxY7slRiHNmT8v4A1CQt kgPXbnr6PbSscnxzSLQO1uAcRdgrjQBXouKdxEX0+77qadqBt2We92AmhuwANXbP uW16r2abZOcBuIkMwt3GHi8afZpumgp6YDjjN721Qi0YffscRxpjWWz89ZtFYp+S URinZO1pKjoazjNmRD0X/7kpdW95uKI800t6qm9Ls2dIXuypji7GUYXmAEn1103w bUKAdtZH0gxCf44iYxiQG5ovGgvnoNGym0xfScv0GvvWJOqYRossAwe9RaE4C6OQ YW5x3VMko4G6widKsy890SM//gQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:45 2024 by rpki-client on console-ams.rpki-client.org