$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft File: R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft (raw, json) Hash identifier: OTvWAl/Ax5yaubx0POdD1HGP91r6dAz4AMMeD5a2jUY= Subject key identifier: 0E:56:4F:28:ED:01:76:81:E6:4A:0D:DC:DA:66:E1:14:5B:B7:B9:81 Authority key identifier: 47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF Certificate issuer: /CN=47D9FC561ADE7D56BC75CD87F195DCA0E4A0D0CF Certificate serial: 03B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft Manifest number: 03B9 Signing time: Mon 25 Nov 2024 02:23:42 +0000 Manifest this update: Mon 25 Nov 2024 02:23:42 +0000 Manifest next update: Mon 25 Nov 2024 08:23:42 +0000 Files and hashes: 1: R9n8VhrefVa8dc2H8ZXcoOSg0M8.crl (hash: f5qlnRVsKmEHpUj2+pOwZrKcmmPBYOUCIUhT8XqP+t4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47D9FC561ADE7D56BC75CD87F195DCA0E4A0D0CF Validity Not Before: Nov 25 02:23:42 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0E564F28ED017681E64A0DDCDA66E1145BB7B981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d3:22:71:1f:e4:ef:11:08:8b:68:36:ce:86: e7:46:7f:34:cc:5e:dc:0c:28:90:f0:12:8d:89:e5: 62:48:04:7c:9c:ac:14:c3:27:17:f5:17:3b:3a:ee: 23:d9:fe:0e:99:61:ca:34:cd:1e:74:db:7a:51:94: 29:4e:6f:d2:66:2f:6a:48:ca:32:d9:ce:fe:db:17: 20:05:53:94:50:1c:06:41:70:78:7d:4f:53:e9:5d: 21:6b:f5:ff:77:76:05:60:60:69:0c:c6:07:b2:8b: f8:3a:6c:fb:da:47:73:81:38:a2:85:ce:de:31:c3: 62:a2:42:69:f2:d3:99:e0:d9:26:78:cb:12:1f:f3: 56:48:b3:1c:9f:5d:8d:d2:e2:43:eb:b0:77:b5:a3: 33:b9:71:74:d6:ba:a8:bb:11:be:90:5c:c8:68:ed: f5:1e:4e:8f:7e:ae:da:59:e3:ee:97:bd:c3:76:79: 79:25:ce:dc:2f:93:8f:6a:4f:66:fb:32:e7:81:c1: c3:09:27:73:0a:19:50:fd:ef:93:a5:2b:ef:9b:a0: c0:2d:d0:2f:05:a9:ec:b2:e5:06:d1:90:b7:7a:2f: 5f:58:ae:bd:78:1c:c7:af:58:7b:f7:e0:9d:8b:fe: 7a:41:8f:91:14:6d:05:3e:f7:2e:3d:ca:dc:57:10: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:4F:28:ED:01:76:81:E6:4A:0D:DC:DA:66:E1:14:5B:B7:B9:81 X509v3 Authority Key Identifier: keyid:47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7a:79:d7:a4:cc:15:a0:a6:d2:2e:e6:ec:83:25:f9:36:91: 19:a0:1e:1d:12:4c:7d:5b:97:af:7c:66:5e:1f:a2:c0:7a:44: 6b:d4:da:de:fd:f4:14:ad:e9:2e:96:a9:77:d7:33:3c:25:ed: 90:0a:4c:4a:ad:00:1b:43:dc:6e:24:16:33:85:29:52:61:0c: d8:71:51:87:e8:e7:8f:2d:42:95:24:a8:25:fc:92:f1:3d:f5: 58:21:3f:92:d0:27:1d:f6:2a:71:cf:4e:3d:77:1c:03:57:fb: 82:6d:dd:be:e0:8f:a2:27:9f:6a:df:e6:70:f0:d5:a5:22:5a: 84:9d:9f:77:06:7f:8d:84:55:22:63:03:9f:f0:73:0f:27:f2: 4a:2a:de:2d:7c:6d:4f:f5:ae:4b:b1:ff:19:10:ab:3a:e5:94: 30:b0:25:25:ac:a5:ad:5f:66:28:4b:39:f4:f3:c1:5d:fb:aa: 26:e3:c8:f6:2f:2c:96:b1:8a:31:59:2c:11:d8:7c:fc:57:52: 3c:ad:cc:eb:0e:01:5b:f5:62:84:01:79:fb:47:92:82:0d:cd: 0b:ac:28:a8:3d:13:df:ff:3b:a2:e4:0c:ec:3a:82:98:3b:7f: 8b:7f:f9:30:21:db:f8:8a:0e:33:59:bf:8f:10:c2:9a:bd:0f: a0:6f:c1:3c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDdE OUZDNTYxQURFN0Q1NkJDNzVDRDg3RjE5NURDQTBFNEEwRDBDRjAeFw0yNDExMjUw MjIzNDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBFNTY0RjI4RUQwMTc2 ODFFNjRBMEREQ0RBNjZFMTE0NUJCN0I5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDg0yJxH+TvEQiLaDbOhudGfzTMXtwMKJDwEo2J5WJIBHycrBTD Jxf1Fzs67iPZ/g6ZYco0zR5023pRlClOb9JmL2pIyjLZzv7bFyAFU5RQHAZBcHh9 T1PpXSFr9f93dgVgYGkMxgeyi/g6bPvaR3OBOKKFzt4xw2KiQmny05ng2SZ4yxIf 81ZIsxyfXY3S4kPrsHe1ozO5cXTWuqi7Eb6QXMho7fUeTo9+rtpZ4+6XvcN2eXkl ztwvk49qT2b7MueBwcMJJ3MKGVD975OlK++boMAt0C8Fqeyy5QbRkLd6L19Yrr14 HMevWHv34J2L/npBj5EUbQU+9y49ytxXEAt7AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUDlZPKO0BdoHmSg3c2mbhFFu3uYEwHwYDVR0jBBgwFoAUR9n8VhrefVa8dc2H 8ZXcoOSg0M8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 My9SOW44VmhyZWZWYThkYzJIOFpYY29PU2cwTTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1I5bjhWaHJlZlZhOGRjMkg4Wlhjb09TZzBNOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODMvUjluOFZocmVmVmE4 ZGMySDhaWGNvT1NnME04Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC56edekzBWgptIu5uyDJfk2kRmgHh0STH1bl698Zl4fosB6RGvU2t799BSt 6S6WqXfXMzwl7ZAKTEqtABtD3G4kFjOFKVJhDNhxUYfo548tQpUkqCX8kvE99Vgh P5LQJx32KnHPTj13HANX+4Jt3b7gj6Inn2rf5nDw1aUiWoSdn3cGf42EVSJjA5/w cw8n8koq3i18bU/1rkux/xkQqzrllDCwJSWspa1fZihLOfTzwV37qibjyPYvLJax ijFZLBHYfPxXUjytzOsOAVv1YoQBeftHkoINzQusKKg9E9//O6LkDOw6gpg7f4t/ +TAh2/iKDjNZv48Qwpq9D6BvwTw= -----END CERTIFICATE-----Generated at Mon Nov 25 06:06:53 2024 by rpki-client on console-ams.rpki-client.org