$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft File: E6kuJA2Xy0iAEKz821jUUodWaMA.mft (raw, json) Hash identifier: BZ3oPcCQyvZmygfihD0QmuOz32ct1tgRfMq2jw7++I4= Subject key identifier: 17:6A:6D:6C:1C:1C:95:4F:A2:7A:00:F1:FB:78:4B:85:62:AE:09:A9 Authority key identifier: 13:A9:2E:24:0D:97:CB:48:80:10:AC:FC:DB:58:D4:52:87:56:68:C0 Certificate issuer: /CN=13A92E240D97CB488010ACFCDB58D452875668C0 Certificate serial: 045F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E6kuJA2Xy0iAEKz821jUUodWaMA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft Manifest number: 045F Signing time: Fri 22 Nov 2024 10:23:10 +0000 Manifest this update: Fri 22 Nov 2024 10:23:10 +0000 Manifest next update: Fri 22 Nov 2024 16:23:10 +0000 Files and hashes: 1: E6kuJA2Xy0iAEKz821jUUodWaMA.crl (hash: 0LUUdXVGvJpKF0XguEHRqkFPpPYyCCvrfLDduMhHAJA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E6kuJA2Xy0iAEKz821jUUodWaMA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13A92E240D97CB488010ACFCDB58D452875668C0 Validity Not Before: Nov 22 10:23:10 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=176A6D6C1C1C954FA27A00F1FB784B8562AE09A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:d1:75:fe:84:74:20:12:77:74:1f:cd:94: a6:4b:01:07:ec:5d:0d:c3:d6:b0:c4:dc:0e:8e:66: 94:b3:61:68:0e:ab:0e:c3:20:fb:de:f9:87:85:80: bf:3e:0d:f3:3e:cd:fe:79:9f:24:1c:55:ba:a2:d7: 07:05:9c:13:20:c5:0f:4b:77:8b:25:9d:b7:a1:8d: 01:06:b5:70:f3:a1:11:5f:41:16:df:8c:79:b0:32: 32:0a:af:b6:5e:85:10:93:d2:77:24:08:b8:b6:0a: f2:95:72:29:e9:d0:78:2d:9d:68:63:1f:a9:1f:0f: d7:29:a4:2d:2f:ce:a8:a4:d0:d0:ab:64:d9:44:0f: e8:d0:7a:78:48:f8:87:a0:9d:ee:8f:d1:7f:2a:d6: 0b:c6:36:db:5b:43:c7:b6:1e:ec:a2:eb:87:70:15: a8:08:d0:40:2b:3d:29:5a:5f:21:ac:cb:5e:f8:76: be:fa:f9:2e:ec:f0:66:c1:b9:f9:7d:01:2d:df:a4: 60:1c:f1:63:d7:64:e6:ff:ae:01:12:cd:9f:a6:ec: 2a:eb:b6:a9:99:ad:a4:d9:c8:12:a1:be:32:ef:4b: 37:1e:2f:4d:78:3b:7a:92:f6:92:c6:0e:ed:db:e3: 45:b4:37:66:74:ca:bd:d5:93:1e:cc:c3:cc:d2:8b: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6A:6D:6C:1C:1C:95:4F:A2:7A:00:F1:FB:78:4B:85:62:AE:09:A9 X509v3 Authority Key Identifier: keyid:13:A9:2E:24:0D:97:CB:48:80:10:AC:FC:DB:58:D4:52:87:56:68:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E6kuJA2Xy0iAEKz821jUUodWaMA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c8:9a:fd:69:7c:0c:2b:c8:8b:c4:31:ee:34:a2:4e:6e:3f: a9:62:9a:13:91:89:92:de:f0:be:9d:a5:4c:7d:3d:5a:c1:9b: 4c:89:81:7f:df:35:ec:17:1e:60:d7:82:2f:2e:f8:2f:03:31: d9:1b:df:b5:d8:bc:d5:29:cd:9d:ae:a4:14:4a:23:59:e9:cc: b4:64:7a:fa:bd:cb:44:14:6f:78:f3:55:7b:1c:79:46:d5:54: 19:10:c0:cf:f3:9c:25:80:f0:f3:c0:d7:47:e2:8e:0a:28:b0: 2c:01:35:af:cc:6e:13:d2:cd:34:a9:7a:58:8e:42:95:2e:3b: 94:dd:1d:14:79:b6:65:c4:8e:7d:a4:d8:4f:75:c1:87:e2:fb: 86:ed:c7:90:d5:79:6b:5f:36:f9:1d:64:b2:4d:33:c4:3f:66: 87:7e:fb:43:80:3b:24:9a:fe:30:c2:bf:d2:33:96:f3:16:fa: 6d:82:24:72:76:d9:05:63:ea:e1:9a:22:a7:97:3e:10:69:4f: 23:b7:c2:e6:e7:ed:c1:f6:b6:68:77:39:af:2b:74:69:51:c6: 5f:f4:57:71:49:70:aa:b2:3f:97:52:1e:68:45:71:63:06:11: 7d:9a:4b:ef:77:7f:1d:85:3f:f5:75:d5:06:66:94:10:51:92: c1:5c:b5:5a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTNB OTJFMjQwRDk3Q0I0ODgwMTBBQ0ZDREI1OEQ0NTI4NzU2NjhDMDAeFw0yNDExMjIx MDIzMTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE3NkE2RDZDMUMxQzk1 NEZBMjdBMDBGMUZCNzg0Qjg1NjJBRTA5QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9E9F1/oR0IBJ3dB/NlKZLAQfsXQ3D1rDE3A6OZpSzYWgOqw7D IPve+YeFgL8+DfM+zf55nyQcVbqi1wcFnBMgxQ9Ld4slnbehjQEGtXDzoRFfQRbf jHmwMjIKr7ZehRCT0nckCLi2CvKVcinp0HgtnWhjH6kfD9cppC0vzqik0NCrZNlE D+jQenhI+Iegne6P0X8q1gvGNttbQ8e2Huyi64dwFagI0EArPSlaXyGsy174dr76 +S7s8GbBufl9AS3fpGAc8WPXZOb/rgESzZ+m7CrrtqmZraTZyBKhvjLvSzceL014 O3qS9pLGDu3b40W0N2Z0yr3Vkx7Mw8zSi+PxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUF2ptbBwclU+iegDx+3hLhWKuCakwHwYDVR0jBBgwFoAUE6kuJA2Xy0iAEKz8 21jUUodWaMAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 NC9FNmt1SkEyWHkwaUFFS3o4MjFqVVVvZFdhTUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0U2a3VKQTJYeTBpQUVLejgyMWpVVW9kV2FNQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzQvRTZrdUpBMlh5MGlB RUt6ODIxalVVb2RXYU1BLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH/Imv1pfAwryIvEMe40ok5uP6limhORiZLe8L6dpUx9PVrBm0yJgX/fNewX HmDXgi8u+C8DMdkb37XYvNUpzZ2upBRKI1npzLRkevq9y0QUb3jzVXsceUbVVBkQ wM/znCWA8PPA10fijgoosCwBNa/MbhPSzTSpeliOQpUuO5TdHRR5tmXEjn2k2E91 wYfi+4btx5DVeWtfNvkdZLJNM8Q/Zod++0OAOySa/jDCv9IzlvMW+m2CJHJ22QVj 6uGaIqeXPhBpTyO3wubn7cH2tmh3Oa8rdGlRxl/0V3FJcKqyP5dSHmhFcWMGEX2a S+93fx2FP/V11QZmlBBRksFctVo= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org