$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3279/5h1TOY8HiA3d4pTW7WfyR-iSm94.mft File: 5h1TOY8HiA3d4pTW7WfyR-iSm94.mft (raw, json) Hash identifier: 0JicMF1hL//bp6oJR5IUGasPMosgMUduOQdfWGWGUBQ= Subject key identifier: 69:36:EE:29:11:0C:25:94:10:2A:79:8D:94:3C:60:59:25:C3:59:9B Authority key identifier: E6:1D:53:39:8F:07:88:0D:DD:E2:94:D6:ED:67:F2:47:E8:92:9B:DE Certificate issuer: /CN=E61D53398F07880DDDE294D6ED67F247E8929BDE Certificate serial: 03D5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5h1TOY8HiA3d4pTW7WfyR-iSm94.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/5h1TOY8HiA3d4pTW7WfyR-iSm94.mft Manifest number: 03D5 Signing time: Fri 22 Nov 2024 20:22:41 +0000 Manifest this update: Fri 22 Nov 2024 20:22:41 +0000 Manifest next update: Sat 23 Nov 2024 02:22:41 +0000 Files and hashes: 1: 5h1TOY8HiA3d4pTW7WfyR-iSm94.crl (hash: H00ETZ2uglcUBqF3PKKedlx10qOg7HMLO9YiGnDuWPE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/5h1TOY8HiA3d4pTW7WfyR-iSm94.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/5h1TOY8HiA3d4pTW7WfyR-iSm94.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5h1TOY8HiA3d4pTW7WfyR-iSm94.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 981 (0x3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E61D53398F07880DDDE294D6ED67F247E8929BDE Validity Not Before: Nov 22 20:22:41 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6936EE29110C2594102A798D943C605925C3599B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:ab:0e:bc:9a:73:7e:09:3e:5f:3e:8b:09: e6:19:ba:6e:92:28:28:3a:12:e4:5f:33:92:8b:19: 2b:66:c9:8c:db:af:2e:9d:56:8e:b9:31:f1:cb:72: 2e:6d:ca:7b:d4:f7:49:b8:90:f8:e5:0b:97:bc:37: df:14:74:f7:82:69:cc:58:75:84:1f:b7:8d:84:8f: b4:98:72:f7:87:2f:0f:87:12:c4:af:48:7f:7c:3c: 11:8b:08:4b:85:5d:97:cd:93:f5:fb:8c:09:f2:49: 80:1b:0d:5a:64:f1:be:20:3c:c5:a3:da:64:be:50: be:b4:94:91:3b:47:99:3c:50:bc:51:90:a1:b9:b3: 01:b1:38:c4:84:eb:d2:1d:59:67:de:20:56:96:ea: 7a:c1:3a:35:71:d7:ad:e2:f6:b8:7f:0d:b4:d4:12: b6:d1:e7:02:8c:ad:54:06:a2:2e:1e:a5:a0:6e:2f: 4f:38:90:a8:46:9d:d5:d3:b4:e5:9c:bf:25:d8:0e: 6c:6b:0b:07:42:37:bb:e4:a8:24:c3:b8:ba:86:fe: 5e:b0:55:e4:2a:22:d2:36:4a:08:22:c1:f9:88:46: 06:32:57:b9:0c:e1:61:3c:e8:7e:3c:f1:a0:64:3f: 38:29:49:39:83:8a:30:0d:39:09:59:fc:71:39:26: 65:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:36:EE:29:11:0C:25:94:10:2A:79:8D:94:3C:60:59:25:C3:59:9B X509v3 Authority Key Identifier: keyid:E6:1D:53:39:8F:07:88:0D:DD:E2:94:D6:ED:67:F2:47:E8:92:9B:DE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/5h1TOY8HiA3d4pTW7WfyR-iSm94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5h1TOY8HiA3d4pTW7WfyR-iSm94.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/5h1TOY8HiA3d4pTW7WfyR-iSm94.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:57:c3:99:7f:0e:67:ef:f2:43:0e:99:4b:80:d2:62:0f:36: 95:79:a9:29:58:4b:9b:90:ec:71:ba:c7:f2:20:a8:93:fe:2b: b4:f0:6a:f9:35:cd:08:fb:dd:59:31:eb:22:ae:9b:e1:86:26: 2f:a4:8a:4b:52:c6:97:6c:99:dd:e7:1e:3c:13:6e:e9:41:af: be:f2:3a:bf:1c:56:67:e5:49:3d:2d:55:c1:52:81:9d:86:4c: 00:34:a8:22:67:43:fb:9a:eb:5c:67:96:ed:bf:6a:a4:d8:9f: c5:54:f3:cc:70:12:a9:4f:d4:bb:ed:e3:2a:2c:1f:a1:60:33: 4d:f8:40:57:91:7d:5c:8b:51:64:c2:1b:6d:54:ac:f7:9e:59: ad:72:d0:ad:dc:ac:eb:9d:c7:6a:c1:93:a2:d8:c7:de:9d:7a: d8:bf:ec:47:c7:38:c0:b2:0c:b9:0b:14:63:db:71:90:0e:b4: b7:9a:d4:e6:18:07:e9:1b:5e:83:9d:45:57:7e:06:da:74:ff: 50:d0:78:17:5b:35:b1:3c:0d:b8:1b:69:48:e6:3a:8b:d8:06: 21:94:03:0e:dc:66:4a:bc:ec:00:3c:6d:a4:5f:99:f7:fc:26: 27:02:46:ae:39:49:f1:70:4b:d1:0a:f8:2b:96:6c:62:89:de: bb:df:63:46 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTYx RDUzMzk4RjA3ODgwRERERTI5NEQ2RUQ2N0YyNDdFODkyOUJERTAeFw0yNDExMjIy MDIyNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY5MzZFRTI5MTEwQzI1 OTQxMDJBNzk4RDk0M0M2MDU5MjVDMzU5OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ2KsOvJpzfgk+Xz6LCeYZum6SKCg6EuRfM5KLGStmyYzbry6d Vo65MfHLci5tynvU90m4kPjlC5e8N98UdPeCacxYdYQft42Ej7SYcveHLw+HEsSv SH98PBGLCEuFXZfNk/X7jAnySYAbDVpk8b4gPMWj2mS+UL60lJE7R5k8ULxRkKG5 swGxOMSE69IdWWfeIFaW6nrBOjVx163i9rh/DbTUErbR5wKMrVQGoi4epaBuL084 kKhGndXTtOWcvyXYDmxrCwdCN7vkqCTDuLqG/l6wVeQqItI2SggiwfmIRgYyV7kM 4WE86H488aBkPzgpSTmDijANOQlZ/HE5JmW1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUaTbuKREMJZQQKnmNlDxgWSXDWZswHwYDVR0jBBgwFoAU5h1TOY8HiA3d4pTW 7WfyR+iSm94wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OS81aDFUT1k4SGlBM2Q0cFRXN1dmeVItaVNtOTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVoMVRPWThIaUEzZDRwVFc3V2Z5Ui1pU205NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzkvNWgxVE9ZOEhpQTNk NHBUVzdXZnlSLWlTbTk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGRXw5l/Dmfv8kMOmUuA0mIPNpV5qSlYS5uQ7HG6x/IgqJP+K7Twavk1zQj7 3Vkx6yKum+GGJi+kiktSxpdsmd3nHjwTbulBr77yOr8cVmflST0tVcFSgZ2GTAA0 qCJnQ/ua61xnlu2/aqTYn8VU88xwEqlP1Lvt4yosH6FgM034QFeRfVyLUWTCG21U rPeeWa1y0K3crOudx2rBk6LYx96deti/7EfHOMCyDLkLFGPbcZAOtLea1OYYB+kb XoOdRVd+Btp0/1DQeBdbNbE8DbgbaUjmOovYBiGUAw7cZkq87AA8baRfmff8JicC Rq45SfFwS9EK+CuWbGKJ3rvfY0Y= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:45 2024 by rpki-client on console-ams.rpki-client.org