$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft File: qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft (raw, json) Hash identifier: ZCGiJHbIm+0OpKfA730KvRnkOk7VwKmB3CRxGGo5Rcg= Subject key identifier: FE:DB:A2:61:8B:07:11:BE:BA:19:8E:77:E5:CB:4B:8D:7D:50:54:CB Authority key identifier: AA:65:E9:15:AF:8D:AE:DE:AB:AA:7C:36:6C:4C:CE:E4:A1:C1:B2:50 Certificate issuer: /CN=AA65E915AF8DAEDEABAA7C366C4CCEE4A1C1B250 Certificate serial: 0395 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qmXpFa-Nrt6rqnw2bEzO5KHBslA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft Manifest number: 0395 Signing time: Mon 25 Nov 2024 02:23:52 +0000 Manifest this update: Mon 25 Nov 2024 02:23:52 +0000 Manifest next update: Mon 25 Nov 2024 08:23:52 +0000 Files and hashes: 1: qmXpFa-Nrt6rqnw2bEzO5KHBslA.crl (hash: e2nkZ7L89X5G09UL1XKZDiqFXGFHiJiwcYIx9NVAcvo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qmXpFa-Nrt6rqnw2bEzO5KHBslA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA65E915AF8DAEDEABAA7C366C4CCEE4A1C1B250 Validity Not Before: Nov 25 02:23:52 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FEDBA2618B0711BEBA198E77E5CB4B8D7D5054CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:4b:48:5e:48:2a:c8:f8:21:ab:d5:43:b2: 23:06:38:ca:a1:5f:19:7d:9f:4e:7b:43:85:be:b5: 16:0d:ed:a3:39:ec:94:66:15:4e:bc:7f:49:9c:28: d0:a4:51:00:64:da:a9:f7:9d:c9:5e:a8:f4:58:61: ca:d4:19:9b:6e:20:04:c6:87:d6:64:98:a1:b7:77: 78:a8:78:26:11:3a:e0:08:d1:83:a5:0e:92:7a:32: a5:6e:2b:d5:9d:42:63:d4:12:a2:b1:dd:43:1a:a6: f6:3f:63:6a:90:c2:a2:72:e5:16:da:7d:b3:94:45: 11:7f:81:f2:fd:ea:b6:d2:07:16:f1:c6:53:b9:a6: a8:a2:08:1f:77:2b:d8:bc:51:42:fa:3e:50:78:ae: d5:a0:75:9a:e6:5d:ae:cf:cf:d7:9e:bb:84:11:55: 86:b5:9d:f8:7f:61:00:af:11:69:78:85:8a:e8:a4: 1e:77:db:fa:3b:70:80:58:b9:48:c5:6b:67:be:6c: db:04:b2:22:f5:fe:c4:f1:e2:ce:ff:0f:03:df:fb: a8:8c:7b:8a:90:02:9f:b4:cb:59:30:59:07:36:b4: 30:68:0d:4e:84:9f:18:c5:f0:0d:96:61:cb:7a:ac: e4:7f:b5:f2:7a:4f:a4:06:6f:9f:65:99:78:b8:e7: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DB:A2:61:8B:07:11:BE:BA:19:8E:77:E5:CB:4B:8D:7D:50:54:CB X509v3 Authority Key Identifier: keyid:AA:65:E9:15:AF:8D:AE:DE:AB:AA:7C:36:6C:4C:CE:E4:A1:C1:B2:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qmXpFa-Nrt6rqnw2bEzO5KHBslA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3c:5e:7b:fb:59:01:11:3b:9c:42:14:9c:21:8d:84:28:dd: 67:3b:1f:36:73:5d:c0:1c:ab:1c:b5:4b:aa:8e:00:e9:88:66: 0f:7d:9a:88:e1:4d:ed:5d:46:06:f5:f4:d2:d8:18:ed:c3:20: 7c:fc:0c:0b:a3:70:ab:2a:96:9d:c0:c5:bc:2d:56:95:41:b7: b1:3e:b6:ab:c3:75:9e:b4:3c:00:10:89:94:9c:ec:fa:a3:71: b5:8f:2a:37:b1:7a:8f:26:1a:ff:95:a1:6d:de:78:81:4c:24: da:86:8c:9f:bb:9f:d2:6e:5c:e2:c3:75:20:a6:cf:6c:41:f9: 74:0e:82:ee:3e:6d:0c:ad:e1:18:20:ce:1b:21:75:de:36:df: 9a:bb:f9:0d:e1:d1:96:3b:e7:3d:a3:02:d0:00:23:4e:b1:d2: 14:ad:05:ae:91:b5:71:0a:7d:2d:d7:8f:30:b5:c8:f6:19:fb: ab:ea:1e:fe:6b:71:ad:c8:2d:12:10:2a:9c:87:38:f2:f9:81: eb:25:65:e9:38:18:af:72:40:6a:e4:66:52:4b:3d:d0:2b:b1: e9:52:f0:06:f7:8c:68:da:39:3d:c7:2e:90:af:a5:d0:2d:e7: 85:42:4d:fa:63:ff:d3:b0:98:20:ec:db:7d:a3:3b:39:00:da: fb:51:a5:a4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUE2 NUU5MTVBRjhEQUVERUFCQUE3QzM2NkM0Q0NFRTRBMUMxQjI1MDAeFw0yNDExMjUw MjIzNTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZFREJBMjYxOEIwNzEx QkVCQTE5OEU3N0U1Q0I0QjhEN0Q1MDU0Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnIUtIXkgqyPghq9VDsiMGOMqhXxl9n057Q4W+tRYN7aM57JRm FU68f0mcKNCkUQBk2qn3ncleqPRYYcrUGZtuIATGh9ZkmKG3d3ioeCYROuAI0YOl DpJ6MqVuK9WdQmPUEqKx3UMapvY/Y2qQwqJy5RbafbOURRF/gfL96rbSBxbxxlO5 pqiiCB93K9i8UUL6PlB4rtWgdZrmXa7Pz9eeu4QRVYa1nfh/YQCvEWl4hYropB53 2/o7cIBYuUjFa2e+bNsEsiL1/sTx4s7/DwPf+6iMe4qQAp+0y1kwWQc2tDBoDU6E nxjF8A2WYct6rOR/tfJ6T6QGb59lmXi455ifAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU/tuiYYsHEb66GY535ctLjX1QVMswHwYDVR0jBBgwFoAUqmXpFa+Nrt6rqnw2 bEzO5KHBslAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 NS9xbVhwRmEtTnJ0NnJxbncyYkV6TzVLSEJzbEEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FtWHBGYS1OcnQ2cnFudzJiRXpPNUtIQnNsQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODUvcW1YcEZhLU5ydDZy cW53MmJFek81S0hCc2xBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGQ8Xnv7WQERO5xCFJwhjYQo3Wc7HzZzXcAcqxy1S6qOAOmIZg99mojhTe1d Rgb19NLYGO3DIHz8DAujcKsqlp3AxbwtVpVBt7E+tqvDdZ60PAAQiZSc7PqjcbWP Kjexeo8mGv+VoW3eeIFMJNqGjJ+7n9JuXOLDdSCmz2xB+XQOgu4+bQyt4Rggzhsh dd4235q7+Q3h0ZY75z2jAtAAI06x0hStBa6RtXEKfS3XjzC1yPYZ+6vqHv5rca3I LRIQKpyHOPL5geslZek4GK9yQGrkZlJLPdArselS8Ab3jGjaOT3HLpCvpdAt54VC Tfpj/9OwmCDs232jOzkA2vtRpaQ= -----END CERTIFICATE-----Generated at Mon Nov 25 06:07:53 2024 by rpki-client on console-fra.rpki-client.org