$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft File: nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft (raw, json) Hash identifier: EbQhX8vVNme/vo8HRLQTfXMKE8ErW1mZYzt8ye5rk2U= Subject key identifier: DB:8C:29:CD:FC:A2:83:85:EF:7F:BE:E3:D3:F7:B3:69:54:4B:36:8A Authority key identifier: 9C:BB:DC:7D:D6:96:66:87:39:04:CC:31:66:E3:EB:0B:45:B4:28:90 Certificate issuer: /CN=9CBBDC7DD69666873904CC3166E3EB0B45B42890 Certificate serial: 0461 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nLvcfdaWZoc5BMwxZuPrC0W0KJA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft Manifest number: 0461 Signing time: Fri 22 Nov 2024 15:23:20 +0000 Manifest this update: Fri 22 Nov 2024 15:23:20 +0000 Manifest next update: Fri 22 Nov 2024 21:23:20 +0000 Files and hashes: 1: nLvcfdaWZoc5BMwxZuPrC0W0KJA.crl (hash: /MuBOOyKNh8lhHAlhdg5C/2IVVzditG5nSWZnMD+tgw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nLvcfdaWZoc5BMwxZuPrC0W0KJA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CBBDC7DD69666873904CC3166E3EB0B45B42890 Validity Not Before: Nov 22 15:23:20 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DB8C29CDFCA28385EF7FBEE3D3F7B369544B368A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:45:d7:e8:ed:8d:ad:45:8a:b7:61:5e:6a: ee:ed:ac:2c:92:a5:f0:9d:ca:4f:a5:06:a3:78:22: 84:e1:72:5f:38:f5:f0:e5:c2:da:0a:f1:25:82:79: 51:92:93:c1:19:31:ce:8e:69:7c:d7:fc:bd:2e:f8: 9e:4c:5e:1f:28:5f:02:c6:58:b7:49:cd:fe:66:ed: 87:e9:d4:be:fb:38:e3:42:ac:dc:58:ed:92:ca:09: a6:01:85:c0:68:cf:be:4b:28:12:db:77:14:cc:ed: a6:92:90:d7:d8:d2:ea:ca:0d:7f:25:c4:d9:08:ae: 73:44:07:01:e4:a9:cc:ac:94:5a:2a:58:a5:b8:b9: 04:d2:e5:55:f9:32:2b:47:dd:aa:03:86:06:ef:46: 43:ef:c9:4b:e1:af:5e:07:b4:47:6b:15:a7:7f:ee: 04:f6:14:5c:1c:be:f8:08:69:31:f4:53:c8:7c:6b: 66:50:30:48:d4:4c:d2:61:0e:3e:f0:ba:9b:da:9a: 1d:f8:f0:79:ea:de:4c:1c:4c:6b:d4:12:9e:59:00: 2a:f0:14:b7:28:1f:ea:e8:6f:74:ce:4e:4e:f7:fd: f2:5a:bd:8c:51:27:8b:e3:50:2f:71:66:8f:54:13: 3c:cd:14:ff:27:f3:92:68:1a:90:49:c1:f9:53:20: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8C:29:CD:FC:A2:83:85:EF:7F:BE:E3:D3:F7:B3:69:54:4B:36:8A X509v3 Authority Key Identifier: keyid:9C:BB:DC:7D:D6:96:66:87:39:04:CC:31:66:E3:EB:0B:45:B4:28:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nLvcfdaWZoc5BMwxZuPrC0W0KJA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nLvcfdaWZoc5BMwxZuPrC0W0KJA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:06:4f:0c:ae:a5:3a:79:8f:a2:f4:00:9f:f4:7b:8e:60:5b: 9e:f0:90:92:46:86:b8:72:6a:10:55:77:69:b7:7a:30:56:36: 33:11:6f:1b:76:88:8e:c8:b7:bf:92:c6:ba:df:15:5a:e6:55: 80:32:77:06:1f:68:9c:08:dc:d0:f7:b4:48:24:16:b1:32:d7: a1:10:de:96:72:92:91:db:63:1a:82:dc:87:0b:03:0c:8f:cc: 1b:03:87:c8:29:77:10:86:27:66:c9:61:fc:82:44:a7:80:a1: 22:ee:af:b9:82:eb:0b:73:19:19:20:8f:96:a7:60:a5:09:26: ca:f2:63:e9:b3:cd:41:78:eb:36:fa:e2:05:63:45:91:13:bb: 1a:9c:44:fd:28:53:e6:2c:d8:87:ce:f9:5c:35:28:92:7e:68: 7c:65:82:c3:14:92:a7:d3:4a:9c:9c:3f:5e:b7:f3:6e:6c:dc: bf:db:53:45:9f:3e:62:b4:fe:7e:6b:8e:d1:78:eb:a9:6c:d2: 6c:40:38:f4:71:6c:de:99:fe:fa:8f:dd:d4:9a:22:ac:cc:04: c3:f7:23:fb:31:0a:ac:92:48:ae:85:be:9b:0e:32:32:1c:5f: 10:ec:50:a8:9c:92:d0:cc:fd:55:3d:8e:36:77:5c:7f:f8:5f: 27:be:8e:18 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUNC QkRDN0RENjk2NjY4NzM5MDRDQzMxNjZFM0VCMEI0NUI0Mjg5MDAeFw0yNDExMjIx NTIzMjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERCOEMyOUNERkNBMjgz ODVFRjdGQkVFM0QzRjdCMzY5NTQ0QjM2OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCH0XX6O2NrUWKt2Feau7trCySpfCdyk+lBqN4IoThcl849fDl wtoK8SWCeVGSk8EZMc6OaXzX/L0u+J5MXh8oXwLGWLdJzf5m7Yfp1L77OONCrNxY 7ZLKCaYBhcBoz75LKBLbdxTM7aaSkNfY0urKDX8lxNkIrnNEBwHkqcyslFoqWKW4 uQTS5VX5MitH3aoDhgbvRkPvyUvhr14HtEdrFad/7gT2FFwcvvgIaTH0U8h8a2ZQ MEjUTNJhDj7wupvamh348Hnq3kwcTGvUEp5ZACrwFLcoH+rob3TOTk73/fJavYxR J4vjUC9xZo9UEzzNFP8n85JoGpBJwflTIBHBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU24wpzfyig4Xvf77j0/ezaVRLNoowHwYDVR0jBBgwFoAUnLvcfdaWZoc5BMwx ZuPrC0W0KJAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Ni9uTHZjZmRhV1pvYzVCTXd4WnVQckMwVzBLSkEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25MdmNmZGFXWm9jNUJNd3hadVByQzBXMEtKQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzYvbkx2Y2ZkYVdab2M1 Qk13eFp1UHJDMFcwS0pBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKAGTwyupTp5j6L0AJ/0e45gW57wkJJGhrhyahBVd2m3ejBWNjMRbxt2iI7I t7+SxrrfFVrmVYAydwYfaJwI3ND3tEgkFrEy16EQ3pZykpHbYxqC3IcLAwyPzBsD h8gpdxCGJ2bJYfyCRKeAoSLur7mC6wtzGRkgj5anYKUJJsryY+mzzUF46zb64gVj RZETuxqcRP0oU+Ys2IfO+Vw1KJJ+aHxlgsMUkqfTSpycP163825s3L/bU0WfPmK0 /n5rjtF466ls0mxAOPRxbN6Z/vqP3dSaIqzMBMP3I/sxCqySSK6FvpsOMjIcXxDs UKicktDM/VU9jjZ3XH/4Xye+jhg= -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:43 2024 by rpki-client on console-ams.rpki-client.org