$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3276/nUCwJlx1pe43z4UX7eBBxCTAeCQ.mft File: nUCwJlx1pe43z4UX7eBBxCTAeCQ.mft (raw, json) Hash identifier: +Dq/d5pavgoMNG6UBVjOOcxWQ0EOxnPCXbXy7VGFwvk= Subject key identifier: FE:04:6D:92:2F:4C:85:3C:2F:C2:E3:D2:91:6E:EF:61:8D:1B:1A:8D Authority key identifier: 9D:40:B0:26:5C:75:A5:EE:37:CF:85:17:ED:E0:41:C4:24:C0:78:24 Certificate issuer: /CN=9D40B0265C75A5EE37CF8517EDE041C424C07824 Certificate serial: 0460 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nUCwJlx1pe43z4UX7eBBxCTAeCQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nUCwJlx1pe43z4UX7eBBxCTAeCQ.mft Manifest number: 0460 Signing time: Fri 22 Nov 2024 10:23:20 +0000 Manifest this update: Fri 22 Nov 2024 10:23:20 +0000 Manifest next update: Fri 22 Nov 2024 16:23:20 +0000 Files and hashes: 1: nUCwJlx1pe43z4UX7eBBxCTAeCQ.crl (hash: DnGvakRw+F8tctwOzIfeqoJZqfnYqZ/Re2VDM8SOv3Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nUCwJlx1pe43z4UX7eBBxCTAeCQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nUCwJlx1pe43z4UX7eBBxCTAeCQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nUCwJlx1pe43z4UX7eBBxCTAeCQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D40B0265C75A5EE37CF8517EDE041C424C07824 Validity Not Before: Nov 22 10:23:20 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FE046D922F4C853C2FC2E3D2916EEF618D1B1A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:23:5f:23:df:69:ed:02:29:e0:1e:18:e0: 02:78:10:90:d3:59:e9:a1:a8:17:58:2a:a2:a7:84: 3a:82:ff:ae:3d:fe:5e:69:83:4d:d1:3b:27:03:33: 66:7a:55:65:b7:0e:b6:08:e7:86:c8:87:5c:d0:e3: 01:6e:d8:e2:5e:8e:be:5a:05:f2:92:47:00:af:62: 16:66:4b:3e:8c:3e:6e:23:63:72:2a:f2:e0:46:a0: d7:74:15:99:bf:ce:46:47:f1:54:d2:36:da:24:ab: 10:1c:ae:11:37:a5:0b:43:40:ec:05:01:e3:e5:f7: fe:95:48:39:7c:3b:08:c1:da:76:5d:e0:65:c4:ca: ac:55:66:43:8e:62:38:7b:24:f9:1b:8a:d6:64:da: 7c:0d:cf:54:fd:c5:d6:92:fc:de:41:bc:35:5c:51: 7a:df:6b:1b:3e:10:9a:d3:dc:f4:2d:3d:e9:da:5e: 5c:94:55:f2:a0:34:6f:ce:74:aa:0f:18:36:86:a7: 2b:b1:61:6b:98:84:86:9a:a6:30:1f:3e:27:02:f3: 78:13:68:e7:44:57:a0:cb:98:d4:7c:69:3f:42:31: 6f:ac:a3:0e:d6:78:b6:e6:9f:2c:02:92:c9:76:85: 3f:6c:43:f5:c4:19:37:98:c0:c1:d6:5b:18:3d:f7: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:04:6D:92:2F:4C:85:3C:2F:C2:E3:D2:91:6E:EF:61:8D:1B:1A:8D X509v3 Authority Key Identifier: keyid:9D:40:B0:26:5C:75:A5:EE:37:CF:85:17:ED:E0:41:C4:24:C0:78:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nUCwJlx1pe43z4UX7eBBxCTAeCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nUCwJlx1pe43z4UX7eBBxCTAeCQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/nUCwJlx1pe43z4UX7eBBxCTAeCQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:97:48:f7:9e:34:e7:b9:13:f0:fb:9f:9e:d8:e4:56:b6:43: 37:97:f9:b7:cc:fd:56:14:cd:27:6d:ee:41:41:27:e7:6c:16: 7a:b0:d8:b9:4b:c3:c6:22:37:0b:31:a1:8e:9f:c5:dc:01:c9: 0d:e8:78:1d:ca:d3:95:da:49:06:48:e3:80:37:83:e9:aa:1a: 44:fa:8c:8c:a4:57:9d:75:b1:82:63:d1:e9:38:40:a1:d3:1d: ae:c5:3b:67:20:97:16:ad:5c:58:93:5a:25:3a:78:e9:c2:b6: 42:72:04:73:32:1e:ef:cb:a5:71:c9:61:05:7d:a1:9a:8e:44: a6:5b:a1:c6:de:bf:84:97:49:6e:9a:7b:50:cf:48:2b:57:74: a7:72:8d:08:35:d5:57:6e:b2:6f:6d:2f:8e:c6:43:fc:a7:33: 49:46:88:92:50:f1:ad:5b:32:ac:60:01:42:2f:90:c7:48:e2: f8:50:9e:db:e4:3a:a6:d6:07:1b:d2:5c:15:df:ce:27:53:3a: 40:df:83:f9:15:ff:7f:57:c7:b0:55:cc:ce:da:f3:ad:e6:83: 46:56:fb:c0:02:a2:81:30:d6:4c:41:16:c5:cc:9e:9c:12:c6: d2:15:5d:ca:e3:d6:2f:68:8f:3d:08:d1:8c:4f:6d:25:06:83: b1:68:d0:b8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUQ0 MEIwMjY1Qzc1QTVFRTM3Q0Y4NTE3RURFMDQxQzQyNEMwNzgyNDAeFw0yNDExMjIx MDIzMjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZFMDQ2RDkyMkY0Qzg1 M0MyRkMyRTNEMjkxNkVFRjYxOEQxQjFBOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCybyNfI99p7QIp4B4Y4AJ4EJDTWemhqBdYKqKnhDqC/649/l5p g03ROycDM2Z6VWW3DrYI54bIh1zQ4wFu2OJejr5aBfKSRwCvYhZmSz6MPm4jY3Iq 8uBGoNd0FZm/zkZH8VTSNtokqxAcrhE3pQtDQOwFAePl9/6VSDl8OwjB2nZd4GXE yqxVZkOOYjh7JPkbitZk2nwNz1T9xdaS/N5BvDVcUXrfaxs+EJrT3PQtPenaXlyU VfKgNG/OdKoPGDaGpyuxYWuYhIaapjAfPicC83gTaOdEV6DLmNR8aT9CMW+sow7W eLbmnywCksl2hT9sQ/XEGTeYwMHWWxg993sbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU/gRtki9MhTwvwuPSkW7vYY0bGo0wHwYDVR0jBBgwFoAUnUCwJlx1pe43z4UX 7eBBxCTAeCQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Ni9uVUN3Smx4MXBlNDN6NFVYN2VCQnhDVEFlQ1EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25VQ3dKbHgxcGU0M3o0VVg3ZUJCeENUQWVDUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzYvblVDd0pseDFwZTQz ejRVWDdlQkJ4Q1RBZUNRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAESXSPeeNOe5E/D7n57Y5Fa2QzeX+bfM/VYUzSdt7kFBJ+dsFnqw2LlLw8Yi NwsxoY6fxdwByQ3oeB3K05XaSQZI44A3g+mqGkT6jIykV511sYJj0ek4QKHTHa7F O2cglxatXFiTWiU6eOnCtkJyBHMyHu/LpXHJYQV9oZqORKZbocbev4SXSW6ae1DP SCtXdKdyjQg11Vdusm9tL47GQ/ynM0lGiJJQ8a1bMqxgAUIvkMdI4vhQntvkOqbW BxvSXBXfzidTOkDfg/kV/39Xx7BVzM7a863mg0ZW+8ACooEw1kxBFsXMnpwSxtIV Xcrj1i9ojz0I0YxPbSUGg7Fo0Lg= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org