$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft File: tS8PP_c3H_HOnYI-lUn8EVixaio.mft (raw, json) Hash identifier: XUMjJRS+H25M8Ms1GTE+JfS2WmvGDV8857PgejcpWMw= Subject key identifier: FD:5B:6B:6C:75:14:3C:3E:98:68:7B:61:5C:0B:97:FC:54:E4:E1:75 Authority key identifier: B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A Certificate issuer: /CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A Certificate serial: 049F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft Manifest number: 0498 Signing time: Fri 22 Nov 2024 10:22:27 +0000 Manifest this update: Fri 22 Nov 2024 10:22:27 +0000 Manifest next update: Fri 22 Nov 2024 16:22:27 +0000 Files and hashes: 1: 0g7JiXxyUn6A1eA1f0w0PbitEHk.roa (hash: 1+e9fVT1hXgUDWBczKykzipKNM5h/EvzlrzxqK/S8G8=) 2: KegyS8Kjy5t8VmPx0hzh8-hUTIk.roa (hash: uSKpQZ0vddvnlGUET0qERZS76Jh1NDPu/a48Wss+Scs=) 3: YPtiTpC3_2ladsp2RnmsGeRmYok.roa (hash: BcNVoszKWuXYJShkJ3+9H/gyVtqB/H0DWX2zmfaWA5w=) 4: sApvTIC1D4-gCzcTsa4xyYGqqqc.roa (hash: 8twDWj/nr5fbqF+R4YjEfR5uch6GmqA5H45iJf/4jCM=) 5: tS8PP_c3H_HOnYI-lUn8EVixaio.crl (hash: eW8bFEAOtDAcAdgZFdkiW9f4pwrLSQZ4knYNr1kUNlg=) 6: utBxSla5Y9Lm4eJRpxCBsS2c1JQ.roa (hash: 0GKjm4b6pMwIffdCFC1KrIdfY7BZxhXnDJ/P+r++YIQ=) 7: z8ROOvpLClOvSR6IhvcLephY-tM.roa (hash: bddYJe68JYyYkZKZ/uix57o8m/EJDTIZ2ch0s9sYnAA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 13:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A Validity Not Before: Nov 22 10:22:27 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FD5B6B6C75143C3E98687B615C0B97FC54E4E175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:e3:1d:45:6a:fb:53:2d:4b:99:3e:d0:6e: 49:28:a0:9a:82:34:2c:d7:c7:5a:92:58:79:0e:93: 9b:29:34:ed:94:f8:0e:a5:8b:3a:9c:15:b1:c0:3e: f2:18:e7:6b:86:69:20:0b:cd:fa:13:8b:b7:3b:70: 2f:34:3a:5f:df:d1:bb:f5:b3:56:98:81:d2:05:f6: b5:93:2b:65:6c:4f:e2:ad:0e:04:f0:57:f4:f1:aa: 09:93:aa:e2:2e:0a:0b:c3:84:2c:4c:7e:94:8d:65: 68:40:53:b2:b0:b1:97:e0:c4:e1:4d:87:82:d0:85: 90:7e:f9:42:24:fa:6f:52:20:5d:98:69:e1:8b:48: e5:92:9c:ec:18:d3:94:9b:f6:bb:eb:a6:74:b5:b5: f7:f6:1f:12:f3:cd:d4:a8:3e:10:2d:e1:63:5b:8a: 63:89:c7:03:be:58:15:cb:4c:25:e7:fe:55:08:65: b5:af:ff:db:6d:6a:4c:bb:e2:9c:ee:70:25:c9:13: 4d:fe:3b:af:81:47:56:e4:dc:84:b6:19:c4:fb:21: 94:14:f5:ea:3a:c9:29:39:80:7e:39:c4:f1:2e:17: 0e:4f:ec:5f:c0:9d:e7:4f:56:d1:99:dc:db:7b:0b: 92:3d:8e:c1:77:ed:4b:84:77:73:87:d0:41:5a:68: bc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5B:6B:6C:75:14:3C:3E:98:68:7B:61:5C:0B:97:FC:54:E4:E1:75 X509v3 Authority Key Identifier: keyid:B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:05:a9:75:38:14:e5:62:0c:21:18:d8:d3:9a:0c:c8:72:ae: 6d:30:c7:5e:21:d3:2f:68:2b:d5:c1:e2:5a:29:c9:ef:cc:07: af:81:2a:78:14:8d:de:37:14:f7:41:cc:37:2e:56:ff:ef:71: 90:32:3b:46:ad:13:35:99:86:22:10:9f:d4:6f:c1:41:d8:95: f2:d1:79:96:c3:2b:64:8e:41:4d:e7:fa:95:2f:d8:d0:78:60: ec:87:cb:65:2e:39:0c:34:41:62:fe:d8:1a:46:4f:d4:38:63: 5c:02:7a:ce:43:d5:f9:cf:cf:36:77:85:8b:60:db:16:53:93: c2:48:26:ee:7a:0f:5c:12:4d:2a:9b:a4:59:37:92:d5:fa:f0: e6:49:4f:32:72:c9:83:b1:f9:c7:49:a4:15:50:c9:85:f6:a5: 1a:67:ba:9b:27:13:af:4a:59:6f:8f:cf:89:50:03:63:f0:78: d4:53:65:75:e0:39:f4:37:e5:ec:ae:88:f1:e2:5f:b1:72:e2: 92:c3:f0:95:82:f7:a2:68:5c:5d:92:d7:77:4c:fb:9a:0a:d0: 58:82:35:47:f5:0f:4b:9f:58:8c:ea:f6:70:68:4a:eb:94:25: 2a:9c:7c:6c:5a:fb:3c:87:78:cf:55:11:eb:82:7c:d4:97:bd: 0e:46:96:98 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjUy RjBGM0ZGNzM3MUZGMUNFOUQ4MjNFOTU0OUZDMTE1OEIxNkEyQTAeFw0yNDExMjIx MDIyMjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZENUI2QjZDNzUxNDND M0U5ODY4N0I2MTVDMEI5N0ZDNTRFNEUxNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgWuMdRWr7Uy1LmT7QbkkooJqCNCzXx1qSWHkOk5spNO2U+A6l izqcFbHAPvIY52uGaSALzfoTi7c7cC80Ol/f0bv1s1aYgdIF9rWTK2VsT+KtDgTw V/TxqgmTquIuCgvDhCxMfpSNZWhAU7KwsZfgxOFNh4LQhZB++UIk+m9SIF2YaeGL SOWSnOwY05Sb9rvrpnS1tff2HxLzzdSoPhAt4WNbimOJxwO+WBXLTCXn/lUIZbWv /9ttaky74pzucCXJE03+O6+BR1bk3IS2GcT7IZQU9eo6ySk5gH45xPEuFw5P7F/A nedPVtGZ3Nt7C5I9jsF37UuEd3OH0EFaaLx3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU/VtrbHUUPD6YaHthXAuX/FTk4XUwHwYDVR0jBBgwFoAUtS8PP/c3H/HOnYI+ lUn8EVixaiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Mi90UzhQUF9jM0hfSE9uWUktbFVuOEVWaXhhaW8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RTOFBQX2MzSF9IT25ZSS1sVW44RVZpeGFpby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzIvdFM4UFBfYzNIX0hP bllJLWxVbjhFVml4YWlvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAD0FqXU4FOViDCEY2NOaDMhyrm0wx14h0y9oK9XB4lopye/MB6+BKngUjd43 FPdBzDcuVv/vcZAyO0atEzWZhiIQn9RvwUHYlfLReZbDK2SOQU3n+pUv2NB4YOyH y2UuOQw0QWL+2BpGT9Q4Y1wCes5D1fnPzzZ3hYtg2xZTk8JIJu56D1wSTSqbpFk3 ktX68OZJTzJyyYOx+cdJpBVQyYX2pRpnupsnE69KWW+Pz4lQA2PweNRTZXXgOfQ3 5eyuiPHiX7Fy4pLD8JWC96JoXF2S13dM+5oK0FiCNUf1D0ufWIzq9nBoSuuUJSqc fGxa+zyHeM9VEeuCfNSXvQ5Glpg= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:18 2024 by rpki-client on console-fra.rpki-client.org