$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.mft File: -owMyhaYvyIusPXJ1jDjlZgfj2Q.mft (raw, json) Hash identifier: 3eDvxCoduiO4Hb0s8iXHieOJATQlFlqOrXOPi4YNzgk= Subject key identifier: 94:AA:16:2E:BF:23:6D:2C:23:71:C2:8F:8F:4A:2D:91:B6:85:87:C6 Authority key identifier: FA:8C:0C:CA:16:98:BF:22:2E:B0:F5:C9:D6:30:E3:95:98:1F:8F:64 Certificate issuer: /CN=FA8C0CCA1698BF222EB0F5C9D630E395981F8F64 Certificate serial: 0474 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-owMyhaYvyIusPXJ1jDjlZgfj2Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.mft Manifest number: 0474 Signing time: Fri 22 Nov 2024 23:20:52 +0000 Manifest this update: Fri 22 Nov 2024 23:20:52 +0000 Manifest next update: Sat 23 Nov 2024 05:20:52 +0000 Files and hashes: 1: -owMyhaYvyIusPXJ1jDjlZgfj2Q.crl (hash: 8wiAU/xpOsnG83vJq0/ANJ5IBV5hxq84+z6NtKn1G6g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-owMyhaYvyIusPXJ1jDjlZgfj2Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8C0CCA1698BF222EB0F5C9D630E395981F8F64 Validity Not Before: Nov 22 23:20:52 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=94AA162EBF236D2C2371C28F8F4A2D91B68587C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:0e:52:dd:2d:bc:0d:36:81:3b:f2:54:0c: bf:ba:3d:5c:3f:b0:a1:73:11:38:29:d9:50:ba:8b: 22:fc:48:3d:e0:85:8e:ff:63:89:d7:d5:ae:88:6d: 04:cb:8b:6c:53:01:cf:1e:2e:b6:74:b1:8d:87:9b: b9:bb:13:02:91:5c:49:f5:c3:8d:21:79:d5:51:90: b1:fe:00:95:6f:28:2c:2b:09:ed:27:29:e8:04:f2: 97:9f:0c:3e:7b:7d:13:6b:48:1b:48:79:9f:1b:6c: b2:33:9d:ac:2a:21:27:bc:75:8f:aa:07:2b:e4:3e: 1d:f2:74:52:89:b7:ab:ff:3c:f0:a2:40:e1:25:dc: 1d:e5:6a:97:1f:ed:10:41:82:5e:e5:db:6f:f0:89: 05:c7:da:82:ac:78:42:77:c2:79:79:0d:dd:19:50: b7:cd:6c:e7:4f:11:a0:91:c0:8c:76:a4:dc:37:94: 20:f0:e5:0d:1d:9f:85:af:a9:84:87:c2:89:03:ca: 8e:f9:ef:4c:3b:82:72:cf:42:8b:5b:19:fd:1f:cf: 9d:bb:eb:d3:5c:9f:ab:2b:3f:b8:22:9b:3e:6f:46: dd:b3:ab:d5:ac:32:8e:51:ea:1b:87:ae:a1:1d:74: e5:7e:48:bf:4d:a1:c6:b2:a6:47:98:f0:4d:3f:69: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AA:16:2E:BF:23:6D:2C:23:71:C2:8F:8F:4A:2D:91:B6:85:87:C6 X509v3 Authority Key Identifier: keyid:FA:8C:0C:CA:16:98:BF:22:2E:B0:F5:C9:D6:30:E3:95:98:1F:8F:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-owMyhaYvyIusPXJ1jDjlZgfj2Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2b:d3:ae:55:58:44:b1:fe:7a:7a:cb:0e:c4:95:b9:86:63: 1c:4c:46:50:99:f8:7d:2c:75:58:98:34:c9:11:e8:0e:a4:06: 43:d2:12:b7:b2:23:90:8f:ab:fc:37:50:09:9b:5b:f8:e2:be: 53:c6:3c:94:11:b9:e5:32:7d:db:42:03:64:f8:31:99:77:79: d2:a4:5d:26:68:00:ab:f4:8f:73:c9:9e:dd:19:a3:29:8d:05: 12:a4:f2:d7:84:a2:08:81:a0:e1:e3:34:29:9f:98:04:4d:a1: 8c:3e:91:38:ea:32:65:82:d0:7c:a0:91:02:a4:df:0d:a0:3c: 45:fc:95:f0:4c:1d:5f:0a:08:64:b2:6a:64:f3:be:1c:8b:ed: 56:95:9c:9a:1f:fe:60:40:d7:c8:e1:13:ba:4f:16:c5:4f:d6: 38:5f:1b:f7:ca:18:de:a3:3b:41:e9:f1:94:52:02:c3:83:0d: a8:b4:06:c0:e0:af:22:68:55:3c:f9:aa:70:07:83:34:ca:3f: c4:52:8f:06:40:5f:a8:2b:f3:ee:1b:2e:4a:f2:db:21:93:d2: a9:e3:cc:d9:13:3a:90:1d:f4:f7:9f:15:44:13:13:3a:14:8c: 70:f1:c9:53:12:d7:43:31:b7:cb:d5:32:eb:85:18:d3:3b:af: 8b:71:e4:48 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkE4 QzBDQ0ExNjk4QkYyMjJFQjBGNUM5RDYzMEUzOTU5ODFGOEY2NDAeFw0yNDExMjIy MzIwNTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk0QUExNjJFQkYyMzZE MkMyMzcxQzI4RjhGNEEyRDkxQjY4NTg3QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAvQ5S3S28DTaBO/JUDL+6PVw/sKFzETgp2VC6iyL8SD3ghY7/ Y4nX1a6IbQTLi2xTAc8eLrZ0sY2Hm7m7EwKRXEn1w40hedVRkLH+AJVvKCwrCe0n KegE8pefDD57fRNrSBtIeZ8bbLIznawqISe8dY+qByvkPh3ydFKJt6v/PPCiQOEl 3B3lapcf7RBBgl7l22/wiQXH2oKseEJ3wnl5Dd0ZULfNbOdPEaCRwIx2pNw3lCDw 5Q0dn4WvqYSHwokDyo7570w7gnLPQotbGf0fz52769Ncn6srP7gimz5vRt2zq9Ws Mo5R6huHrqEddOV+SL9NocaypkeY8E0/adwXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUlKoWLr8jbSwjccKPj0otkbaFh8YwHwYDVR0jBBgwFoAU+owMyhaYvyIusPXJ 1jDjlZgfj2QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My8tb3dNeWhhWXZ5SXVzUFhKMWpEamxaZ2ZqMlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy1vd015aGFZdnlJdXNQWEoxakRqbFpnZmoyUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvLW93TXloYVl2eUl1 c1BYSjFqRGpsWmdmajJRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJUr065VWESx/np6yw7ElbmGYxxMRlCZ+H0sdViYNMkR6A6kBkPSEreyI5CP q/w3UAmbW/jivlPGPJQRueUyfdtCA2T4MZl3edKkXSZoAKv0j3PJnt0ZoymNBRKk 8teEogiBoOHjNCmfmARNoYw+kTjqMmWC0HygkQKk3w2gPEX8lfBMHV8KCGSyamTz vhyL7VaVnJof/mBA18jhE7pPFsVP1jhfG/fKGN6jO0Hp8ZRSAsODDai0BsDgryJo VTz5qnAHgzTKP8RSjwZAX6gr8+4bLkry2yGT0qnjzNkTOpAd9PefFUQTEzoUjHDx yVMS10Mxt8vVMuuFGNM7r4tx5Eg= -----END CERTIFICATE-----Generated at Sat Nov 23 00:10:08 2024 by rpki-client on console-ams.rpki-client.org