$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft File: LTxBkfus18zT0-oZXlR0KTGatwI.mft (raw, json) Hash identifier: cD8gqqazxorFTP10VrSRDipZbN1ctIKV4x9g2uY1DcE= Subject key identifier: 70:EA:A8:FD:E2:77:50:A0:42:DD:C5:50:D2:1D:A8:E2:7B:82:85:16 Authority key identifier: 2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02 Certificate issuer: /CN=2D3C4191FBACD7CCD3D3EA195E547429319AB702 Certificate serial: 03CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft Manifest number: 03CA Signing time: Fri 22 Nov 2024 15:23:43 +0000 Manifest this update: Fri 22 Nov 2024 15:23:43 +0000 Manifest next update: Fri 22 Nov 2024 21:23:43 +0000 Files and hashes: 1: LTxBkfus18zT0-oZXlR0KTGatwI.crl (hash: f5CN8Oi1TIvUSjz1TwJWhTEkvrQLdLltoMt4Ai7cIms=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D3C4191FBACD7CCD3D3EA195E547429319AB702 Validity Not Before: Nov 22 15:23:43 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=70EAA8FDE27750A042DDC550D21DA8E27B828516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:ee:6c:0f:99:bd:6a:d5:75:3d:2a:f0:dd: f8:51:59:4e:77:8f:47:21:f2:0f:5e:39:cd:f2:37: 9d:fe:49:6d:8a:87:df:0b:10:94:d2:c5:89:67:94: da:1f:93:a3:ba:e8:8f:84:79:07:0f:6d:b3:50:e7: 16:91:3f:6c:9a:45:ac:99:70:15:11:7c:2e:29:e9: 7a:7d:84:70:df:e9:35:8c:2a:6a:24:17:b6:64:12: db:02:3e:93:db:2b:91:76:a2:2e:c1:79:d7:3b:6a: 4e:6c:9c:ce:68:03:ea:9d:b3:cb:f7:5b:07:aa:bb: 4f:e9:f5:44:83:2e:92:ed:8f:94:79:4b:82:0a:a0: 4f:7a:6d:2f:37:8d:2b:39:aa:0a:c8:cd:e3:1d:de: 07:6d:f0:9d:05:be:28:a0:e8:0b:c6:3a:a3:56:b1: f3:58:bc:0b:4e:b4:f4:3d:95:ab:b0:f8:7b:df:9a: 37:84:72:19:1c:bb:da:1f:f9:12:c7:70:44:26:27: c8:2f:b3:70:ba:28:60:a3:32:34:59:12:7c:cb:b4: 4b:a7:9f:60:0c:28:44:fd:9a:18:3a:6b:86:50:ae: 5e:fd:70:01:3b:52:d8:9d:12:4f:03:b6:a3:c9:3f: fb:15:0c:ef:80:c7:d1:41:59:45:3e:36:a9:6d:3c: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EA:A8:FD:E2:77:50:A0:42:DD:C5:50:D2:1D:A8:E2:7B:82:85:16 X509v3 Authority Key Identifier: keyid:2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:de:5a:ed:37:db:2c:7b:eb:ff:a0:86:03:36:f2:43:d6:4a: 0d:b6:dc:b6:16:50:32:e1:4b:b7:53:b1:a5:58:17:3a:90:b1: c0:52:12:0c:b4:5f:84:1d:ac:bd:27:30:96:ce:2f:33:7c:33: 26:9a:a3:84:02:af:b3:a2:5a:b6:c9:71:d8:d4:28:80:15:31: 81:14:b5:6c:bd:0f:23:80:98:11:68:76:fb:85:32:bd:aa:07: 5b:76:33:96:4e:e7:84:ed:44:0a:a8:72:5c:75:bb:ab:f3:a5: a7:0f:e1:81:9a:19:69:45:71:62:fb:65:37:f1:85:a6:d3:f9: 33:77:08:27:82:cb:fa:08:3f:45:6c:96:e3:d1:24:44:a1:63: f1:79:49:aa:6f:e3:12:5e:87:d1:b5:56:d6:7e:85:eb:92:4a: 78:75:40:d6:5d:a3:86:fd:42:f5:f0:d7:21:5e:a5:2e:df:a5: 39:6d:3f:74:39:e4:57:ab:52:e7:50:82:63:2f:02:b5:96:a6: 4e:40:e2:56:ff:15:5d:24:c1:18:a9:1e:11:d1:f8:a9:ac:85: d9:87:68:66:f5:8c:59:66:ac:9b:6f:f7:4c:7c:9c:36:5b:ce: 38:5f:01:1e:55:d6:eb:2c:72:bf:ac:74:7a:dd:13:99:b3:67: 66:9c:c0:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkQz QzQxOTFGQkFDRDdDQ0QzRDNFQTE5NUU1NDc0MjkzMTlBQjcwMjAeFw0yNDExMjIx NTIzNDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDcwRUFBOEZERTI3NzUw QTA0MkREQzU1MEQyMURBOEUyN0I4Mjg1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmFu5sD5m9atV1PSrw3fhRWU53j0ch8g9eOc3yN53+SW2Kh98L EJTSxYlnlNofk6O66I+EeQcPbbNQ5xaRP2yaRayZcBURfC4p6Xp9hHDf6TWMKmok F7ZkEtsCPpPbK5F2oi7Bedc7ak5snM5oA+qds8v3Wwequ0/p9USDLpLtj5R5S4IK oE96bS83jSs5qgrIzeMd3gdt8J0Fviig6AvGOqNWsfNYvAtOtPQ9lauw+HvfmjeE chkcu9of+RLHcEQmJ8gvs3C6KGCjMjRZEnzLtEunn2AMKET9mhg6a4ZQrl79cAE7 UtidEk8DtqPJP/sVDO+Ax9FBWUU+NqltPAXLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcOqo/eJ3UKBC3cVQ0h2o4nuChRYwHwYDVR0jBBgwFoAULTxBkfus18zT0+oZ XlR0KTGatwIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 MC9MVHhCa2Z1czE4elQwLW9aWGxSMEtUR2F0d0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xUeEJrZnVzMTh6VDAtb1pYbFIwS1RHYXR3SS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODAvTFR4QmtmdXMxOHpU MC1vWlhsUjBLVEdhdHdJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJDeWu032yx76/+ghgM28kPWSg223LYWUDLhS7dTsaVYFzqQscBSEgy0X4Qd rL0nMJbOLzN8Myaao4QCr7OiWrbJcdjUKIAVMYEUtWy9DyOAmBFodvuFMr2qB1t2 M5ZO54TtRAqoclx1u6vzpacP4YGaGWlFcWL7ZTfxhabT+TN3CCeCy/oIP0VsluPR JEShY/F5Sapv4xJeh9G1VtZ+heuSSnh1QNZdo4b9QvXw1yFepS7fpTltP3Q55Fer UudQgmMvArWWpk5A4lb/FV0kwRipHhHR+KmshdmHaGb1jFlmrJtv90x8nDZbzjhf AR5V1usscr+sdHrdE5mzZ2acwAA= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org