$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft File: WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft (raw, json) Hash identifier: 5clj/CVWNml2pB8YixhsyfS2mnhcoyjSwtXWu03/liE= Subject key identifier: 58:89:77:2F:20:9A:16:EE:13:8C:78:F5:75:71:7F:7A:4B:6B:47:43 Authority key identifier: 58:24:0E:F9:3A:BE:99:5F:97:61:B4:21:53:36:FF:AA:97:05:9E:A7 Certificate issuer: /CN=58240EF93ABE995F9761B4215336FFAA97059EA7 Certificate serial: 050C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft Manifest number: 050C Signing time: Fri 22 Nov 2024 15:21:01 +0000 Manifest this update: Fri 22 Nov 2024 15:21:01 +0000 Manifest next update: Fri 22 Nov 2024 21:21:01 +0000 Files and hashes: 1: WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl (hash: 00WYxxbMJhC0ApWFNPXGVxBeKeeacfkAO47vzkIOQ7g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58240EF93ABE995F9761B4215336FFAA97059EA7 Validity Not Before: Nov 22 15:21:01 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5889772F209A16EE138C78F575717F7A4B6B4743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:3c:7c:92:20:65:7d:db:8c:fb:8c:18:57: 8c:77:cc:cf:0e:9a:66:9c:1c:59:1e:cd:ce:cf:63: 89:d6:04:93:e7:68:a7:88:4a:6e:51:df:c9:18:c3: 3b:4e:34:b8:88:47:0c:55:39:f4:f7:48:db:29:5b: 03:15:0a:d5:86:3f:d9:3c:70:db:85:4d:29:25:3a: 43:a1:ea:fb:63:cb:3b:86:8b:d4:2c:75:d7:93:e2: f6:69:90:dd:0a:b2:85:47:35:80:95:1c:b2:6b:71: 4d:7d:03:fc:54:7e:6f:ba:ff:04:6d:c3:20:f1:05: 8c:f3:c6:6b:19:3c:30:37:2e:e0:b9:b4:f1:a8:df: 47:29:0f:4a:e7:06:d5:62:d7:9b:64:b0:17:8f:f6: 6a:e1:f8:79:96:7b:bc:33:1f:8d:04:38:74:93:50: a8:22:f7:14:be:6b:a4:e1:5f:85:b4:6c:34:7d:50: 9c:d7:e1:8d:94:3a:77:02:4a:b8:8d:16:69:2c:79: c0:a1:7c:5f:0c:8e:e4:48:74:a3:42:f4:5e:a3:f5: de:22:be:cd:64:28:be:c8:74:27:49:6c:f6:9a:59: 49:b2:da:f5:d0:a4:1b:61:cc:36:83:fc:89:fa:8c: 61:1f:2d:58:84:e6:f9:2e:84:7c:7c:20:91:0f:33: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:89:77:2F:20:9A:16:EE:13:8C:78:F5:75:71:7F:7A:4B:6B:47:43 X509v3 Authority Key Identifier: keyid:58:24:0E:F9:3A:BE:99:5F:97:61:B4:21:53:36:FF:AA:97:05:9E:A7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/WCQO-Tq-mV-XYbQhUzb_qpcFnqc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:3f:3c:38:b2:dc:d7:76:cf:6b:12:cd:7a:33:11:b1:61:64: 11:b6:db:dd:d8:f4:e1:1e:18:69:f6:76:b9:a2:e2:ea:9e:30: 9e:85:97:4c:8c:5e:62:62:e6:e9:ba:fa:d8:1d:f4:62:d7:f5: e0:f4:45:eb:f3:49:66:71:1d:b2:e3:0d:5a:7a:8c:50:07:54: 4a:84:f4:c3:84:4a:23:2c:cc:6e:cb:b2:15:88:e5:ad:ce:83: 4e:7b:2d:13:9f:ab:24:80:f3:ce:b7:f7:fa:a6:cd:c9:32:d0: c2:ce:0e:57:ff:53:ac:96:59:0b:93:53:20:95:d5:42:95:ad: e0:fc:85:bb:62:8d:fa:eb:ba:0d:19:d8:0a:78:5c:9e:39:b3: 19:8d:74:90:43:aa:d6:84:6f:38:78:8a:41:1b:bb:0d:13:ae: a6:2c:e8:7b:b6:ab:49:99:f7:1c:24:8e:ee:89:b7:01:04:a0: be:4d:a4:77:d4:2b:1b:f5:30:4c:fa:9e:cf:73:73:ec:3d:e3: bd:7f:bc:a2:8d:ac:58:c4:97:30:53:e3:a7:10:ec:eb:5b:e3: 87:a3:85:fd:aa:b7:66:56:dd:62:85:5f:32:b4:75:a6:f0:5c: 10:a3:2f:bd:5b:e6:c8:c7:a8:21:91:f7:4b:1b:e6:d5:85:35: fd:11:df:94 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgy NDBFRjkzQUJFOTk1Rjk3NjFCNDIxNTMzNkZGQUE5NzA1OUVBNzAeFw0yNDExMjIx NTIxMDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU4ODk3NzJGMjA5QTE2 RUUxMzhDNzhGNTc1NzE3RjdBNEI2QjQ3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6aTx8kiBlfduM+4wYV4x3zM8OmmacHFkezc7PY4nWBJPnaKeI Sm5R38kYwztONLiIRwxVOfT3SNspWwMVCtWGP9k8cNuFTSklOkOh6vtjyzuGi9Qs ddeT4vZpkN0KsoVHNYCVHLJrcU19A/xUfm+6/wRtwyDxBYzzxmsZPDA3LuC5tPGo 30cpD0rnBtVi15tksBeP9mrh+HmWe7wzH40EOHSTUKgi9xS+a6ThX4W0bDR9UJzX 4Y2UOncCSriNFmksecChfF8MjuRIdKNC9F6j9d4ivs1kKL7IdCdJbPaaWUmy2vXQ pBthzDaD/In6jGEfLViE5vkuhHx8IJEPM85VAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUWIl3LyCaFu4TjHj1dXF/ektrR0MwHwYDVR0jBBgwFoAUWCQO+Tq+mV+XYbQh Uzb/qpcFnqcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 OS9XQ1FPLVRxLW1WLVhZYlFoVXpiX3FwY0ZucWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dDUU8tVHEtbVYtWFliUWhVemJfcXBjRm5xYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjkvV0NRTy1UcS1tVi1Y WWJRaFV6Yl9xcGNGbnFjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEY/PDiy3Nd2z2sSzXozEbFhZBG2293Y9OEeGGn2drmi4uqeMJ6Fl0yMXmJi 5um6+tgd9GLX9eD0RevzSWZxHbLjDVp6jFAHVEqE9MOESiMszG7LshWI5a3Og057 LROfqySA88639/qmzcky0MLODlf/U6yWWQuTUyCV1UKVreD8hbtijfrrug0Z2Ap4 XJ45sxmNdJBDqtaEbzh4ikEbuw0TrqYs6Hu2q0mZ9xwkju6JtwEEoL5NpHfUKxv1 MEz6ns9zc+w9471/vKKNrFjElzBT46cQ7Otb44ejhf2qt2ZW3WKFXzK0dabwXBCj L71b5sjHqCGR90sb5tWFNf0R35Q= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org