$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft File: fnoIxQq5v7LbFff2L1wXNDC-NQo.mft (raw, json) Hash identifier: 4MvxL5f6tvUAXirwvygZ0V5Fg/rM4CjjTaT+K1PxEos= Subject key identifier: A6:06:0D:B1:9D:84:7B:5F:74:E8:92:5D:07:07:D5:82:2E:5B:5B:80 Authority key identifier: 7E:7A:08:C5:0A:B9:BF:B2:DB:15:F7:F6:2F:5C:17:34:30:BE:35:0A Certificate issuer: /CN=7E7A08C50AB9BFB2DB15F7F62F5C173430BE350A Certificate serial: 0372 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fnoIxQq5v7LbFff2L1wXNDC-NQo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft Manifest number: 0372 Signing time: Fri 22 Nov 2024 15:20:59 +0000 Manifest this update: Fri 22 Nov 2024 15:20:59 +0000 Manifest next update: Fri 22 Nov 2024 21:20:59 +0000 Files and hashes: 1: fnoIxQq5v7LbFff2L1wXNDC-NQo.crl (hash: oY3hdln3PjCcvIy8/GaDJWDHRNrSH5CfpsfDXzQHj1A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fnoIxQq5v7LbFff2L1wXNDC-NQo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E7A08C50AB9BFB2DB15F7F62F5C173430BE350A Validity Not Before: Nov 22 15:20:59 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A6060DB19D847B5F74E8925D0707D5822E5B5B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:fd:11:14:f7:29:98:4e:f8:83:6f:0d:c7: 07:53:0c:40:c4:ed:67:af:6e:de:eb:50:94:65:9b: d3:c4:82:46:1f:74:6e:d3:5e:bf:43:31:66:e8:ec: 20:50:2f:86:82:d1:e4:6f:a7:c6:7f:7b:c0:c2:d1: 32:7f:e1:43:19:cb:73:1b:6d:fc:ba:70:35:98:30: e8:d9:da:5a:28:1c:d5:83:55:f9:f1:c3:de:21:9a: 1e:a3:e7:ca:9f:c1:37:e3:6d:e4:b4:ce:f2:1f:0c: 0e:43:24:5c:66:a3:32:3c:ea:bb:a9:b3:7a:08:37: 05:f8:99:15:66:1f:ff:0f:db:09:64:11:9f:73:50: 3a:6d:00:fc:c7:89:0b:a6:ce:b8:8e:54:f7:42:08: 47:93:70:1d:fa:8c:d0:0f:c0:e4:eb:d0:e7:bd:6c: 58:cf:51:a1:67:6d:a6:db:9e:ad:43:da:75:95:bc: f9:25:7b:c3:50:1b:a1:41:cc:4d:b6:5a:63:db:1d: 3e:02:8e:8d:03:03:15:60:d1:4d:49:1d:4f:2e:50: b7:64:36:50:b1:bb:7a:23:63:4b:9f:c8:54:f8:ed: fc:dd:9d:cf:87:ee:f1:08:c5:0d:13:ff:fd:4a:d5: 10:68:8c:4f:f7:2c:0a:09:d0:2b:eb:a2:65:51:07: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:06:0D:B1:9D:84:7B:5F:74:E8:92:5D:07:07:D5:82:2E:5B:5B:80 X509v3 Authority Key Identifier: keyid:7E:7A:08:C5:0A:B9:BF:B2:DB:15:F7:F6:2F:5C:17:34:30:BE:35:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fnoIxQq5v7LbFff2L1wXNDC-NQo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/fnoIxQq5v7LbFff2L1wXNDC-NQo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b4:ff:ed:12:fa:b0:17:a3:67:a0:42:f4:4d:b5:27:79:88: b5:a1:48:40:fb:03:65:cd:ff:3e:d5:9f:22:dc:4c:65:84:ef: 87:4d:e7:58:64:81:30:9e:84:a7:3a:56:20:1c:17:af:67:3c: c6:01:1c:ad:eb:3d:a7:41:46:2a:39:69:d1:4e:7f:b4:84:3d: 8a:38:07:0e:23:ca:9c:73:87:7a:fd:eb:5b:0a:0c:9d:9e:38: 3d:4c:26:59:2f:d7:0e:f3:b2:18:20:76:af:11:e1:11:ea:b7: 89:5f:58:3e:4f:c0:ba:9b:54:47:11:35:1b:af:f9:d2:7c:62: 4c:ec:62:89:85:58:dc:ce:14:a6:2f:f8:e9:ff:fb:83:42:df: 7f:a0:7b:a9:af:80:8f:fe:95:3f:09:d8:53:0a:80:71:00:bd: 6c:de:11:fc:65:48:d2:09:2c:52:62:0f:a2:29:fd:d0:68:dd: 4e:4d:95:35:f5:64:1d:ef:5b:3e:37:5d:04:d9:8f:79:04:a1: 80:c4:7c:47:2e:aa:bc:8d:99:0f:c9:f0:ca:2c:06:3b:cc:43: 43:d5:2a:52:e2:ce:50:29:2f:10:23:b8:02:f2:d6:ce:97:fe: 24:1a:2c:cb:9c:aa:df:3c:9c:d0:e3:ff:91:ec:ed:eb:91:87: 83:c7:b3:45 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U3 QTA4QzUwQUI5QkZCMkRCMTVGN0Y2MkY1QzE3MzQzMEJFMzUwQTAeFw0yNDExMjIx NTIwNTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEE2MDYwREIxOUQ4NDdC NUY3NEU4OTI1RDA3MDdENTgyMkU1QjVCODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcS/0RFPcpmE74g28NxwdTDEDE7Wevbt7rUJRlm9PEgkYfdG7T Xr9DMWbo7CBQL4aC0eRvp8Z/e8DC0TJ/4UMZy3Mbbfy6cDWYMOjZ2looHNWDVfnx w94hmh6j58qfwTfjbeS0zvIfDA5DJFxmozI86rups3oINwX4mRVmH/8P2wlkEZ9z UDptAPzHiQumzriOVPdCCEeTcB36jNAPwOTr0Oe9bFjPUaFnbabbnq1D2nWVvPkl e8NQG6FBzE22WmPbHT4Cjo0DAxVg0U1JHU8uULdkNlCxu3ojY0ufyFT47fzdnc+H 7vEIxQ0T//1K1RBojE/3LAoJ0CvromVRBxDJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUpgYNsZ2Ee1906JJdBwfVgi5bW4AwHwYDVR0jBBgwFoAUfnoIxQq5v7LbFff2 L1wXNDC+NQowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 Ni9mbm9JeFFxNXY3TGJGZmYyTDF3WE5EQy1OUW8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2Zub0l4UXE1djdMYkZmZjJMMXdYTkRDLU5Rby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODYvZm5vSXhRcTV2N0xi RmZmMkwxd1hOREMtTlFvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAW0/+0S+rAXo2egQvRNtSd5iLWhSED7A2XN/z7VnyLcTGWE74dN51hkgTCe hKc6ViAcF69nPMYBHK3rPadBRio5adFOf7SEPYo4Bw4jypxzh3r961sKDJ2eOD1M Jlkv1w7zshggdq8R4RHqt4lfWD5PwLqbVEcRNRuv+dJ8YkzsYomFWNzOFKYv+On/ +4NC33+ge6mvgI/+lT8J2FMKgHEAvWzeEfxlSNIJLFJiD6Ip/dBo3U5NlTX1ZB3v Wz43XQTZj3kEoYDEfEcuqryNmQ/J8MosBjvMQ0PVKlLizlApLxAjuALy1s6X/iQa LMucqt88nNDj/5Hs7euRh4PHs0U= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org