$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.mft File: FguBQGl3AHVmkJf_Tx49cObNDAY.mft (raw, json) Hash identifier: H2S9PybcXiaam5afQNIcVPRLx1Qm7nq8ofeHXFfSiio= Subject key identifier: 92:AA:0D:11:05:DB:80:04:07:AE:F4:0D:2F:C2:25:87:C7:60:FC:1A Authority key identifier: 16:0B:81:40:69:77:00:75:66:90:97:FF:4F:1E:3D:70:E6:CD:0C:06 Certificate issuer: /CN=160B814069770075669097FF4F1E3D70E6CD0C06 Certificate serial: 03A0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FguBQGl3AHVmkJf_Tx49cObNDAY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.mft Manifest number: 03A0 Signing time: Fri 22 Nov 2024 10:20:36 +0000 Manifest this update: Fri 22 Nov 2024 10:20:36 +0000 Manifest next update: Fri 22 Nov 2024 16:20:36 +0000 Files and hashes: 1: FguBQGl3AHVmkJf_Tx49cObNDAY.crl (hash: hPWMvGwNGP2a0LcHqqYm/D75sR48e3nU/QbU5LrF8bE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FguBQGl3AHVmkJf_Tx49cObNDAY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=160B814069770075669097FF4F1E3D70E6CD0C06 Validity Not Before: Nov 22 10:20:36 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=92AA0D1105DB800407AEF40D2FC22587C760FC1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:a5:eb:a2:77:6d:e0:ff:e8:13:25:d0:26: 7d:2d:0a:76:b1:84:3e:2f:49:81:ca:2d:fc:23:37: 3a:70:97:6d:63:83:ef:b3:a3:a4:d2:c3:87:e1:95: d6:a7:a9:00:e5:63:07:cc:5a:07:b4:e1:2b:66:03: 81:9a:96:1d:21:2e:9c:bc:94:8d:7a:56:c7:73:4a: 0f:b4:d7:2e:ff:d7:b3:15:83:69:f6:46:0d:86:02: cb:a9:90:99:37:17:40:fc:8d:f0:55:2f:b5:1c:2c: b4:e2:eb:b9:a0:92:27:2e:76:b0:fd:45:9c:17:56: 98:70:8e:66:1b:7d:3a:d8:67:fe:45:08:70:be:8f: 79:9b:c7:1d:3d:14:52:f0:13:24:5c:4f:3f:21:7e: 7d:00:be:e2:75:f3:05:d8:e7:19:fd:8d:31:c3:27: 05:7b:22:5c:f3:a9:56:3f:3a:53:4c:25:82:db:ab: ee:44:ef:d7:f6:07:c8:c7:ac:86:73:ac:16:74:79: b4:35:d4:37:e0:90:c5:e2:fd:fa:77:df:e0:c6:96: a0:7c:7e:5e:e0:78:8d:0d:84:01:3f:bc:29:22:a1: 84:9c:55:a9:b6:09:71:47:d2:e9:34:c6:e8:6f:42: 82:90:0d:a8:dd:56:27:53:2c:4d:90:ad:ba:e9:6e: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AA:0D:11:05:DB:80:04:07:AE:F4:0D:2F:C2:25:87:C7:60:FC:1A X509v3 Authority Key Identifier: keyid:16:0B:81:40:69:77:00:75:66:90:97:FF:4F:1E:3D:70:E6:CD:0C:06 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FguBQGl3AHVmkJf_Tx49cObNDAY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:8f:a1:28:40:24:14:9a:69:9e:98:55:96:8a:f3:6a:10:c4: 17:23:ab:7c:ef:89:85:e3:1a:ac:05:d8:b3:eb:3b:69:1f:41: 74:db:1d:b1:7d:5a:bd:a8:90:d6:6a:b6:cc:7b:86:ee:6e:3c: 57:5e:11:0d:d5:c6:7f:7d:5e:a9:69:49:0e:d2:ab:d0:74:49: d1:a8:77:0f:2a:91:c2:b1:7f:38:af:df:4d:b6:21:bd:f1:43: bc:d9:c9:fb:0a:2e:85:76:6f:70:4a:20:ac:e2:9d:ca:6c:29: 6e:cb:9b:ee:cc:c2:92:17:b8:d6:19:83:6c:43:8d:b2:c5:b5: 87:d3:42:dc:84:d4:cd:56:87:ef:25:7a:e3:84:ee:01:ef:d7: 2d:7f:ad:9a:42:63:ef:8f:9c:a5:9a:8d:2a:cd:ca:2c:67:32: a2:25:60:a3:25:b4:69:3e:3c:3b:2c:01:5c:6d:04:23:16:aa: 92:6b:79:25:48:ee:29:b4:8d:64:e0:5e:34:8b:37:a6:a8:c1: c7:7d:80:53:0d:66:45:33:30:49:80:35:f9:72:4c:6d:22:ff: c1:7a:45:3b:3e:3e:b4:ee:f9:c3:70:19:4d:54:db:ba:c5:16: 77:29:43:84:bd:c3:53:72:0d:cc:48:71:3f:16:72:3b:59:7b: ba:2a:88:d9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw QjgxNDA2OTc3MDA3NTY2OTA5N0ZGNEYxRTNENzBFNkNEMEMwNjAeFw0yNDExMjIx MDIwMzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkyQUEwRDExMDVEQjgw MDQwN0FFRjQwRDJGQzIyNTg3Qzc2MEZDMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKkqXrondt4P/oEyXQJn0tCnaxhD4vSYHKLfwjNzpwl21jg++z o6TSw4fhldanqQDlYwfMWge04StmA4Galh0hLpy8lI16VsdzSg+01y7/17MVg2n2 Rg2GAsupkJk3F0D8jfBVL7UcLLTi67mgkicudrD9RZwXVphwjmYbfTrYZ/5FCHC+ j3mbxx09FFLwEyRcTz8hfn0AvuJ18wXY5xn9jTHDJwV7IlzzqVY/OlNMJYLbq+5E 79f2B8jHrIZzrBZ0ebQ11DfgkMXi/fp33+DGlqB8fl7geI0NhAE/vCkioYScVam2 CXFH0uk0xuhvQoKQDajdVidTLE2QrbrpblGJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUkqoNEQXbgAQHrvQNL8Ilh8dg/BowHwYDVR0jBBgwFoAUFguBQGl3AHVmkJf/ Tx49cObNDAYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 OC9GZ3VCUUdsM0FIVm1rSmZfVHg0OWNPYk5EQVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZndUJRR2wzQUhWbWtKZl9UeDQ5Y09iTkRBWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjgvRmd1QlFHbDNBSFZt a0pmX1R4NDljT2JOREFZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALuPoShAJBSaaZ6YVZaK82oQxBcjq3zviYXjGqwF2LPrO2kfQXTbHbF9Wr2o kNZqtsx7hu5uPFdeEQ3Vxn99XqlpSQ7Sq9B0SdGodw8qkcKxfziv3022Ib3xQ7zZ yfsKLoV2b3BKIKzincpsKW7Lm+7MwpIXuNYZg2xDjbLFtYfTQtyE1M1Wh+8leuOE 7gHv1y1/rZpCY++PnKWajSrNyixnMqIlYKMltGk+PDssAVxtBCMWqpJreSVI7im0 jWTgXjSLN6aowcd9gFMNZkUzMEmANflyTG0i/8F6RTs+PrTu+cNwGU1U27rFFncp Q4S9w1NyDcxIcT8WcjtZe7oqiNk= -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:54 2024 by rpki-client on console-ams.rpki-client.org