$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft File: c_jFHpB2aR787kYX7QQw9Xy8gB0.mft (raw, json) Hash identifier: lpsQvBdyk8NFbaOYiW+PJ24XVxpUcImOlbu9YT0l4kw= Subject key identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 Authority key identifier: 73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D Certificate issuer: /CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Certificate serial: 03CD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft Manifest number: 03CD Signing time: Fri 22 Nov 2024 10:20:43 +0000 Manifest this update: Fri 22 Nov 2024 10:20:43 +0000 Manifest next update: Fri 22 Nov 2024 16:20:43 +0000 Files and hashes: 1: c_jFHpB2aR787kYX7QQw9Xy8gB0.crl (hash: xM0Qw3yG9302+nwU18UxsHFDRfCjTO430iZGcc5Hl2o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Validity Not Before: Nov 22 10:20:43 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1A96673E80786404FE296B91E5825FA196604F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:78:3d:60:00:57:d1:46:10:20:61:9e:95: b0:49:1e:0d:5c:52:0b:c8:7a:1c:81:d0:ed:72:56: ee:19:51:41:e0:24:b0:4d:06:1a:5d:3b:2c:8c:fb: 3d:11:d0:0c:29:ef:27:77:69:b8:2b:11:aa:83:4a: a1:2b:ad:60:3b:f0:c1:4b:77:9c:38:cb:c6:39:9d: 80:df:69:73:ae:95:5e:ba:25:2d:b2:5d:27:67:74: 3a:d9:ec:52:fe:af:0b:9c:5f:9b:dd:00:ca:95:5d: dc:5f:ad:55:3a:07:58:79:a2:39:2e:61:35:3b:80: 69:6c:60:58:d7:6a:11:2a:5e:86:a3:c5:1d:e6:08: 09:f7:5e:cb:6c:37:a0:c7:db:43:07:8e:40:b0:f5: af:5d:89:94:f4:99:d8:ad:a3:4f:e6:94:9a:6d:36: 71:00:29:8e:2e:a4:3b:3e:04:a7:9f:57:16:e8:0b: 4a:6d:56:61:3f:85:74:d0:1a:4d:75:87:34:24:81: 3d:82:dc:41:54:70:cb:fa:58:69:2d:c9:fd:b4:94: 06:71:fe:be:99:8e:74:40:10:ab:98:00:cb:83:d9: 23:24:b9:23:b9:51:d8:51:6c:fd:14:59:7b:a4:37: 2a:54:8d:96:54:08:95:f7:8b:75:9e:40:9f:eb:5a: 8b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 X509v3 Authority Key Identifier: keyid:73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:94:68:cb:74:c6:e1:6b:04:53:40:4d:65:c1:fe:96:96:6a: 4c:09:63:b1:5c:ce:2d:d1:6c:ce:05:c3:f5:cb:a4:99:d0:3c: 99:d8:0f:6d:38:98:e6:b6:53:98:bf:fd:70:af:71:3b:35:48: 16:7d:5c:e2:66:ae:d6:d9:03:f2:fd:a9:f5:dc:1c:e8:53:63: 48:53:55:90:43:f1:a6:15:72:d9:c8:28:40:6a:b3:04:ce:7d: cf:ca:88:0f:2d:59:23:89:be:eb:c4:2b:f4:97:53:a5:33:22: 56:b6:31:7a:7d:5a:77:90:48:37:1d:d2:e1:e7:fb:b7:76:b6: ff:e3:e6:e4:61:5b:71:2a:5f:77:63:5e:b6:66:4e:90:bf:98: 25:a3:56:44:a0:8f:9e:d7:b8:ae:db:aa:39:36:1c:f2:1a:7f: 10:48:c5:f0:56:a2:11:4e:a0:06:2d:05:e8:a3:0f:03:9b:f9: e3:11:17:5d:d8:3a:b9:f7:36:77:91:03:3b:6c:f1:e6:62:01: 85:11:0a:c7:3c:9d:b8:8f:73:86:08:59:b4:2f:0e:12:2b:2d: 13:8f:8e:10:2c:93:ab:aa:5f:1e:f6:47:6f:83:41:36:b3:31: 5d:2e:fb:60:d7:7c:95:34:5c:13:b8:7f:7f:2d:6a:f9:5d:2e: d2:b1:37:ff -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNG OEM1MUU5MDc2NjkxRUZDRUU0NjE3RUQwNDMwRjU3Q0JDODAxRDAeFw0yNDExMjIx MDIwNDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFBOTY2NzNFODA3ODY0 MDRGRTI5NkI5MUU1ODI1RkExOTY2MDRGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIGng9YABX0UYQIGGelbBJHg1cUgvIehyB0O1yVu4ZUUHgJLBN BhpdOyyM+z0R0Awp7yd3abgrEaqDSqErrWA78MFLd5w4y8Y5nYDfaXOulV66JS2y XSdndDrZ7FL+rwucX5vdAMqVXdxfrVU6B1h5ojkuYTU7gGlsYFjXahEqXoajxR3m CAn3XstsN6DH20MHjkCw9a9diZT0mdito0/mlJptNnEAKY4upDs+BKefVxboC0pt VmE/hXTQGk11hzQkgT2C3EFUcMv6WGktyf20lAZx/r6ZjnRAEKuYAMuD2SMkuSO5 UdhRbP0UWXukNypUjZZUCJX3i3WeQJ/rWourAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGpZnPoB4ZAT+KWuR5YJfoZZgTxcwHwYDVR0jBBgwFoAUc/jFHpB2aR787kYX 7QQw9Xy8gB0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 MS9jX2pGSHBCMmFSNzg3a1lYN1FRdzlYeThnQjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NfakZIcEIyYVI3ODdrWVg3UVF3OVh5OGdCMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODEvY19qRkhwQjJhUjc4 N2tZWDdRUXc5WHk4Z0IwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEaUaMt0xuFrBFNATWXB/paWakwJY7Fczi3RbM4Fw/XLpJnQPJnYD204mOa2 U5i//XCvcTs1SBZ9XOJmrtbZA/L9qfXcHOhTY0hTVZBD8aYVctnIKEBqswTOfc/K iA8tWSOJvuvEK/SXU6UzIla2MXp9WneQSDcd0uHn+7d2tv/j5uRhW3EqX3djXrZm TpC/mCWjVkSgj57XuK7bqjk2HPIafxBIxfBWohFOoAYtBeijDwOb+eMRF13YOrn3 NneRAzts8eZiAYURCsc8nbiPc4YIWbQvDhIrLROPjhAsk6uqXx72R2+DQTazMV0u +2DXfJU0XBO4f38tavldLtKxN/8= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org