$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.mft File: VcshVVaSGcfkAyzP1XcyETxW-rA.mft (raw, json) Hash identifier: 68zpWVMOg+CGZ/iZKKiew3OeP9/a1rDZtruzgwdJuEM= Subject key identifier: B8:0E:48:B3:A2:CA:D3:76:77:7E:B2:AA:70:1A:BF:6E:57:3B:63:6D Authority key identifier: 55:CB:21:55:56:92:19:C7:E4:03:2C:CF:D5:77:32:11:3C:56:FA:B0 Certificate issuer: /CN=55CB2155569219C7E4032CCFD57732113C56FAB0 Certificate serial: 0328 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VcshVVaSGcfkAyzP1XcyETxW-rA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.mft Manifest number: 0328 Signing time: Fri 22 Nov 2024 15:24:45 +0000 Manifest this update: Fri 22 Nov 2024 15:24:45 +0000 Manifest next update: Fri 22 Nov 2024 21:24:45 +0000 Files and hashes: 1: VcshVVaSGcfkAyzP1XcyETxW-rA.crl (hash: iK9crCj9zklOi1rgiZooaO5yKAYYBUCVDsShbxqBJiE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VcshVVaSGcfkAyzP1XcyETxW-rA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55CB2155569219C7E4032CCFD57732113C56FAB0 Validity Not Before: Nov 22 15:24:45 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B80E48B3A2CAD376777EB2AA701ABF6E573B636D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:6b:c7:ab:44:88:e3:21:ac:55:cf:3b:0f: 72:fd:99:eb:d1:92:00:0f:5d:83:0c:54:cc:6a:93: ae:b6:3a:01:04:5a:11:92:e2:f9:dc:d5:35:94:38: 93:23:b0:ff:26:58:6d:1b:99:bb:4c:5e:df:e0:f5: 98:74:20:31:fa:ca:d3:c2:3e:5a:b7:26:fc:56:63: 03:65:bd:f0:5a:42:b0:fe:dd:52:c6:3e:da:bc:ba: 2c:8a:9d:cb:10:41:33:83:d0:0f:aa:e7:06:21:81: 3b:61:a7:59:06:1d:ad:f4:e5:f5:c0:7e:c1:2f:cb: 4f:0d:82:70:43:11:47:9b:e8:a2:00:78:90:20:a8: 82:fe:a3:c3:a5:45:b2:0e:cd:38:a1:b1:68:fd:d6: 74:65:b3:7b:4c:d4:ea:b0:f6:d8:1e:a1:24:26:ef: 42:c5:71:8d:c8:dd:6d:c5:b7:73:ae:a4:4e:89:81: 74:ec:23:6d:ee:13:86:7b:3f:b2:a6:90:a3:6d:d9: d6:2f:2d:58:dc:b8:38:e8:66:3d:e8:15:ec:8a:d3: de:32:50:81:c5:59:0d:be:9a:ed:ac:52:2c:b2:7b: 1f:0d:5b:4e:71:70:44:5b:48:7e:d3:08:08:5f:25: da:a1:12:cd:a9:aa:ee:f8:17:00:d9:d4:b1:5e:44: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0E:48:B3:A2:CA:D3:76:77:7E:B2:AA:70:1A:BF:6E:57:3B:63:6D X509v3 Authority Key Identifier: keyid:55:CB:21:55:56:92:19:C7:E4:03:2C:CF:D5:77:32:11:3C:56:FA:B0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VcshVVaSGcfkAyzP1XcyETxW-rA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/VcshVVaSGcfkAyzP1XcyETxW-rA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9f:32:27:84:0e:66:98:6d:a5:13:12:c7:b5:24:3e:af:e0: 9d:0f:2a:6e:f8:4a:6b:31:a0:af:67:ec:b7:3c:fa:96:34:a6: 98:b6:e4:17:cc:37:95:09:f4:66:4b:e8:62:ed:eb:ff:28:48: 0e:70:7a:5a:18:b0:3e:ee:8c:8f:8b:20:04:15:21:47:1f:10: cb:1a:9f:02:38:64:38:78:12:23:67:ff:3a:2c:ff:38:22:a6: 19:53:c4:65:b4:24:21:51:33:4c:3d:97:f7:3c:ab:13:17:a9: e2:55:86:e2:2c:b9:0e:4d:da:b0:e4:a9:d4:2a:92:36:4a:34: 4f:de:a6:9e:04:f8:d3:d4:51:0c:ae:34:59:45:c2:56:a3:d7: dd:55:60:b0:9c:01:37:e6:8b:75:a4:24:e9:c0:15:07:5a:f4: 07:e6:6a:c5:fe:23:c8:d8:71:91:31:c1:40:32:6f:a4:81:86: 30:89:42:12:5c:51:4c:5b:d5:f5:4c:4d:2c:6c:5d:75:dc:f2: a1:9c:7c:e1:29:1c:e3:99:c1:bf:ce:4e:c8:7d:9d:92:b2:90: f2:c4:d0:47:f4:51:3e:24:a6:7c:75:89:67:ff:84:0c:e8:a3: f8:b4:f6:d7:20:6a:8c:a6:68:30:5d:83:3d:c5:67:65:26:2d: 8e:3d:14:e4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTVD QjIxNTU1NjkyMTlDN0U0MDMyQ0NGRDU3NzMyMTEzQzU2RkFCMDAeFw0yNDExMjIx NTI0NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI4MEU0OEIzQTJDQUQz NzY3NzdFQjJBQTcwMUFCRjZFNTczQjYzNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVxGvHq0SI4yGsVc87D3L9mevRkgAPXYMMVMxqk662OgEEWhGS 4vnc1TWUOJMjsP8mWG0bmbtMXt/g9Zh0IDH6ytPCPlq3JvxWYwNlvfBaQrD+3VLG Ptq8uiyKncsQQTOD0A+q5wYhgTthp1kGHa305fXAfsEvy08NgnBDEUeb6KIAeJAg qIL+o8OlRbIOzTihsWj91nRls3tM1Oqw9tgeoSQm70LFcY3I3W3Ft3OupE6JgXTs I23uE4Z7P7KmkKNt2dYvLVjcuDjoZj3oFeyK094yUIHFWQ2+mu2sUiyyex8NW05x cERbSH7TCAhfJdqhEs2pqu74FwDZ1LFeRCCpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUuA5Is6LK03Z3frKqcBq/blc7Y20wHwYDVR0jBBgwFoAUVcshVVaSGcfkAyzP 1XcyETxW+rAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 MS9WY3NoVlZhU0djZmtBeXpQMVhjeUVUeFctckEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1Zjc2hWVmFTR2Nma0F5elAxWGN5RVR4Vy1yQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTEvVmNzaFZWYVNHY2Zr QXl6UDFYY3lFVHhXLXJBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAafMieEDmaYbaUTEse1JD6v4J0PKm74SmsxoK9n7Lc8+pY0ppi25BfMN5UJ 9GZL6GLt6/8oSA5weloYsD7ujI+LIAQVIUcfEMsanwI4ZDh4EiNn/zos/zgiphlT xGW0JCFRM0w9l/c8qxMXqeJVhuIsuQ5N2rDkqdQqkjZKNE/epp4E+NPUUQyuNFlF wlaj191VYLCcATfmi3WkJOnAFQda9AfmasX+I8jYcZExwUAyb6SBhjCJQhJcUUxb 1fVMTSxsXXXc8qGcfOEpHOOZwb/OTsh9nZKykPLE0Ef0UT4kpnx1iWf/hAzoo/i0 9tcgaoymaDBdgz3FZ2UmLY49FOQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org