$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft File: N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft (raw, json) Hash identifier: oBk+tWAgYWj2gdnq6m9CaUt0jqnyz/gUGTUnB8DdRxI= Subject key identifier: AE:5B:58:BC:3A:A8:70:50:9F:C8:DE:40:CE:D4:7A:91:98:35:F3:A6 Authority key identifier: 37:76:75:D3:81:89:58:FB:28:3F:19:B1:27:C9:95:83:51:B4:56:1E Certificate issuer: /CN=377675D3818958FB283F19B127C9958351B4561E Certificate serial: 0417 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft Manifest number: 0417 Signing time: Fri 22 Nov 2024 15:23:37 +0000 Manifest this update: Fri 22 Nov 2024 15:23:37 +0000 Manifest next update: Fri 22 Nov 2024 21:23:37 +0000 Files and hashes: 1: N3Z104GJWPsoPxmxJ8mVg1G0Vh4.crl (hash: LfXdIsZGG7O14HmTH22ACmwwXZEQuA4TMBwspCY/N2c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=377675D3818958FB283F19B127C9958351B4561E Validity Not Before: Nov 22 15:23:37 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=AE5B58BC3AA870509FC8DE40CED47A919835F3A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:63:98:98:1c:65:2f:80:de:3e:66:e4:d1: 63:66:ea:a3:9d:da:de:08:5f:68:17:19:9d:8f:b0: a1:75:cd:1f:ef:19:c7:1c:1c:e0:4b:7c:37:77:4a: da:67:10:5f:b7:bb:0f:f9:df:b1:b0:14:2c:84:c9: bb:2f:a0:05:05:63:1c:b5:24:69:33:5c:df:9f:25: a2:19:c5:8b:0c:4a:10:6e:94:a3:92:18:90:73:3d: 5f:cb:6a:dd:73:8a:28:8c:95:a1:dd:a6:db:f3:e9: 9b:ec:19:6b:14:74:a5:a0:8d:5a:e2:f8:3e:e6:b0: 02:37:ce:c7:c8:f0:d2:a9:7a:5b:e0:0b:5b:c7:e3: 00:0f:43:94:ba:39:54:82:87:67:f1:2e:f1:98:8a: ac:0f:5c:f1:5e:d3:ef:7a:03:0f:8f:3b:c4:86:7c: 82:0a:fa:db:f6:7a:77:e9:90:72:1f:a1:2c:41:f7: d3:0f:69:dc:44:18:ad:30:43:7a:7c:dc:66:28:90: 8f:07:40:27:42:29:d6:9e:19:5a:40:5a:e3:72:b7: cb:8a:3a:2a:04:73:27:c8:10:6e:16:73:94:b0:99: 01:23:06:f4:04:ae:87:e6:9f:5c:3c:2b:d1:a7:56: 6d:26:a7:b2:79:f0:3b:23:cb:99:8a:8a:fb:e2:44: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5B:58:BC:3A:A8:70:50:9F:C8:DE:40:CE:D4:7A:91:98:35:F3:A6 X509v3 Authority Key Identifier: keyid:37:76:75:D3:81:89:58:FB:28:3F:19:B1:27:C9:95:83:51:B4:56:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/N3Z104GJWPsoPxmxJ8mVg1G0Vh4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:aa:13:cc:50:76:79:74:86:d0:b8:23:01:aa:4d:a0:b8:0e: fc:82:e0:b4:8a:34:82:e0:bd:f8:88:41:fa:a1:fb:64:c2:88: bc:c6:e4:b1:93:57:de:c1:d7:0b:08:f4:6f:bf:fd:7d:f5:02: 6e:42:e7:62:d2:dc:84:4d:56:3c:90:2a:64:45:f7:87:63:74: 1e:8f:39:52:33:f4:bc:f4:d5:b8:db:bf:0a:37:ad:69:0f:61: f8:e9:48:30:02:bf:dd:73:31:80:d3:72:84:68:a5:55:11:24: c4:8f:12:06:6d:c5:ed:43:77:fc:5c:fb:c6:81:43:91:40:f6: b8:5e:58:0b:b9:86:9c:86:e9:6c:1a:d0:22:05:65:f9:1b:d9: 75:81:18:52:78:38:0c:15:92:26:0c:e3:81:c9:b4:7e:eb:d2: 4a:74:fa:05:e4:4c:3f:33:f0:9e:0a:cf:9d:15:ed:09:cd:62: 68:23:af:23:da:c4:0e:a3:72:aa:77:2d:4a:99:8b:96:c5:02: 76:0c:01:85:81:7e:a2:d8:85:e9:0e:c0:45:02:8e:fc:a5:db: b9:1d:8a:09:96:a6:3e:2b:51:4c:9e:c1:2e:4c:af:60:40:82: 13:19:4c:27:c3:08:d9:78:93:27:63:1c:6c:dd:f1:3c:10:06: 95:72:4f:5a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzc3 Njc1RDM4MTg5NThGQjI4M0YxOUIxMjdDOTk1ODM1MUI0NTYxRTAeFw0yNDExMjIx NTIzMzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFFNUI1OEJDM0FBODcw NTA5RkM4REU0MENFRDQ3QTkxOTgzNUYzQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCan2OYmBxlL4DePmbk0WNm6qOd2t4IX2gXGZ2PsKF1zR/vGccc HOBLfDd3StpnEF+3uw/537GwFCyEybsvoAUFYxy1JGkzXN+fJaIZxYsMShBulKOS GJBzPV/Lat1ziiiMlaHdptvz6ZvsGWsUdKWgjVri+D7msAI3zsfI8NKpelvgC1vH 4wAPQ5S6OVSCh2fxLvGYiqwPXPFe0+96Aw+PO8SGfIIK+tv2enfpkHIfoSxB99MP adxEGK0wQ3p83GYokI8HQCdCKdaeGVpAWuNyt8uKOioEcyfIEG4Wc5SwmQEjBvQE rofmn1w8K9GnVm0mp7J58Dsjy5mKivviRE0fAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUrltYvDqocFCfyN5AztR6kZg186YwHwYDVR0jBBgwFoAUN3Z104GJWPsoPxmx J8mVg1G0Vh4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OC9OM1oxMDRHSldQc29QeG14SjhtVmcxRzBWaDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL04zWjEwNEdKV1Bzb1B4bXhKOG1WZzFHMFZoNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzgvTjNaMTA0R0pXUHNv UHhteEo4bVZnMUcwVmg0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ+qE8xQdnl0htC4IwGqTaC4DvyC4LSKNILgvfiIQfqh+2TCiLzG5LGTV97B 1wsI9G+//X31Am5C52LS3IRNVjyQKmRF94djdB6POVIz9Lz01bjbvwo3rWkPYfjp SDACv91zMYDTcoRopVURJMSPEgZtxe1Dd/xc+8aBQ5FA9rheWAu5hpyG6Wwa0CIF Zfkb2XWBGFJ4OAwVkiYM44HJtH7r0kp0+gXkTD8z8J4Kz50V7QnNYmgjryPaxA6j cqp3LUqZi5bFAnYMAYWBfqLYhekOwEUCjvyl27kdigmWpj4rUUyewS5Mr2BAghMZ TCfDCNl4kydjHGzd8TwQBpVyT1o= -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:43 2024 by rpki-client on console-ams.rpki-client.org