$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft File: 2P0wEmBd2oDHj4k1lkjXtICZzc4.mft (raw, json) Hash identifier: cxjytDJUkXCcsuodvqIzYSY24+HlYUzwY4zw8i8AxYc= Subject key identifier: 51:3F:E2:43:95:62:FC:44:2E:73:87:27:B4:AC:8F:7A:27:88:F0:99 Authority key identifier: D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE Certificate issuer: /CN=D8FD3012605DDA80C78F89359648D7B48099CDCE Certificate serial: 03AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft Manifest number: 03AE Signing time: Fri 22 Nov 2024 20:23:41 +0000 Manifest this update: Fri 22 Nov 2024 20:23:41 +0000 Manifest next update: Sat 23 Nov 2024 02:23:41 +0000 Files and hashes: 1: 2P0wEmBd2oDHj4k1lkjXtICZzc4.crl (hash: Jga33c6rBR9mMl+y1Pmo0E3c0LxfnEGQXIOc+8imn2Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 02:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8FD3012605DDA80C78F89359648D7B48099CDCE Validity Not Before: Nov 22 20:23:41 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=513FE2439562FC442E738727B4AC8F7A2788F099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:83:c5:bc:c7:46:28:3c:7b:b5:44:b0:30: ae:6f:b7:e1:af:2c:41:c0:34:11:57:ce:18:87:f5: 80:f4:5b:63:12:00:df:a3:9c:d9:8f:ac:9c:3f:4d: 05:0e:76:dc:9b:6f:c2:31:38:58:04:32:cd:85:f8: 5b:5b:4d:f9:8f:8e:6c:49:e4:77:b9:21:cd:93:dc: 5f:76:88:2d:ad:9b:bf:80:05:0d:86:b8:2a:b4:54: 45:b2:75:0a:70:de:3b:3f:f6:21:ae:e1:10:6c:62: aa:44:51:8e:4d:07:0f:90:08:b6:36:49:f9:c3:9e: 38:8f:10:32:cf:e2:8d:a8:ea:69:af:f0:b6:f7:89: be:f7:5f:50:65:44:0a:17:62:c8:29:d2:b2:30:fa: 98:a8:3e:da:62:71:74:c8:fa:76:73:26:07:43:29: b9:e6:74:fb:bd:28:27:df:0f:d5:bc:b7:70:f7:8f: 27:93:ec:a9:1f:ad:5d:c8:2f:58:df:b2:37:6b:8c: 88:3c:ff:69:36:0d:48:8b:f5:a0:cb:23:11:e4:1e: 38:cf:df:f8:2e:40:85:5c:7e:ec:d5:e3:95:bd:64: 95:6c:7d:f6:31:e9:03:d0:1f:a0:d2:00:aa:16:a2: 74:bd:75:28:37:1a:af:5b:bf:81:a0:83:19:df:8d: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3F:E2:43:95:62:FC:44:2E:73:87:27:B4:AC:8F:7A:27:88:F0:99 X509v3 Authority Key Identifier: keyid:D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2e:df:7e:50:3f:df:88:f0:e9:aa:68:5e:a5:06:04:e7:7c: 3e:ad:df:ae:dd:33:78:25:72:ca:b0:d6:6c:d1:9c:3c:54:14: 61:c0:7e:46:c1:08:b0:27:e7:5a:fc:ff:7a:51:c2:18:7c:b0: 2b:30:ba:ef:97:e1:cf:e3:8d:d6:e0:02:a2:df:70:e2:f9:93: bb:10:cb:12:10:58:25:22:5e:ea:67:74:b4:e2:9b:fa:d4:78: ad:dc:7f:2d:24:22:af:c9:d8:9c:4d:5e:10:c3:26:6d:c1:87: 64:c3:97:3f:84:21:83:2d:bd:d8:e6:6f:e0:28:c1:15:05:73: aa:d2:7b:ee:3d:a1:ba:f9:b2:cb:ac:59:ba:e9:f7:81:47:8a: f1:a6:1f:d0:fc:e7:cc:d7:2c:db:ec:e5:3f:85:76:6a:c6:89: a6:6e:a7:1c:90:91:b8:d6:d4:f9:7d:c6:1a:9b:10:26:3c:af: ac:4e:13:63:25:b2:c0:c0:18:d8:30:a7:eb:6f:38:be:65:25: b6:ad:3c:d1:a4:a9:dc:5e:57:58:75:25:7f:6c:b4:1b:08:c2: ad:81:b6:1b:3d:95:3c:4e:11:4c:b1:b2:56:ba:91:78:40:a2: d1:4c:22:3e:75:03:8a:ac:4c:68:96:0c:9d:40:81:57:a2:0f: e3:b8:38:30 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDhG RDMwMTI2MDVEREE4MEM3OEY4OTM1OTY0OEQ3QjQ4MDk5Q0RDRTAeFw0yNDExMjIy MDIzNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUxM0ZFMjQzOTU2MkZD NDQyRTczODcyN0I0QUM4RjdBMjc4OEYwOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhQIPFvMdGKDx7tUSwMK5vt+GvLEHANBFXzhiH9YD0W2MSAN+j nNmPrJw/TQUOdtybb8IxOFgEMs2F+FtbTfmPjmxJ5He5Ic2T3F92iC2tm7+ABQ2G uCq0VEWydQpw3js/9iGu4RBsYqpEUY5NBw+QCLY2SfnDnjiPEDLP4o2o6mmv8Lb3 ib73X1BlRAoXYsgp0rIw+pioPtpicXTI+nZzJgdDKbnmdPu9KCffD9W8t3D3jyeT 7KkfrV3IL1jfsjdrjIg8/2k2DUiL9aDLIxHkHjjP3/guQIVcfuzV45W9ZJVsffYx 6QPQH6DSAKoWonS9dSg3Gq9bv4GggxnfjXOHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUT/iQ5Vi/EQuc4cntKyPeieI8JkwHwYDVR0jBBgwFoAU2P0wEmBd2oDHj4k1 lkjXtICZzc4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 NC8yUDB3RW1CZDJvREhqNGsxbGtqWHRJQ1p6YzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzJQMHdFbUJkMm9ESGo0azFsa2pYdElDWnpjNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODQvMlAwd0VtQmQyb0RI ajRrMWxralh0SUNaemM0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACcu335QP9+I8OmqaF6lBgTnfD6t367dM3glcsqw1mzRnDxUFGHAfkbBCLAn 51r8/3pRwhh8sCswuu+X4c/jjdbgAqLfcOL5k7sQyxIQWCUiXupndLTim/rUeK3c fy0kIq/J2JxNXhDDJm3Bh2TDlz+EIYMtvdjmb+AowRUFc6rSe+49obr5ssusWbrp 94FHivGmH9D858zXLNvs5T+FdmrGiaZupxyQkbjW1Pl9xhqbECY8r6xOE2MlssDA GNgwp+tvOL5lJbatPNGkqdxeV1h1JX9stBsIwq2Bths9lTxOEUyxsla6kXhAotFM Ij51A4qsTGiWDJ1AgVeiD+O4ODA= -----END CERTIFICATE-----Generated at Fri Nov 22 23:40:48 2024 by rpki-client on console-fra.rpki-client.org