$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft File: cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft (raw, json) Hash identifier: ZQrd/wQO3s5X1AF/ioG+w9/u/M67m0lCXdJMxnoYIJU= Subject key identifier: 95:C5:7C:B5:26:46:FB:36:82:F4:8E:D2:74:DB:8B:52:53:46:BA:8A Authority key identifier: 71:68:6E:0B:C6:33:67:F1:96:78:84:AB:B3:F1:B7:14:35:1D:ED:24 Certificate issuer: /CN=71686E0BC63367F1967884ABB3F1B714351DED24 Certificate serial: 031F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft Manifest number: 031F Signing time: Fri 22 Nov 2024 20:24:05 +0000 Manifest this update: Fri 22 Nov 2024 20:24:05 +0000 Manifest next update: Sat 23 Nov 2024 02:24:05 +0000 Files and hashes: 1: cWhuC8YzZ_GWeISrs_G3FDUd7SQ.crl (hash: xw3rdPwUpZYTtdqVfkYHe6M4bnrsKeWULDXXG9TSREY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 799 (0x31f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71686E0BC63367F1967884ABB3F1B714351DED24 Validity Not Before: Nov 22 20:24:05 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=95C57CB52646FB3682F48ED274DB8B525346BA8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:8e:b0:ec:d1:a8:f3:3b:fa:5a:f1:e3:f1: fc:ab:6b:75:8f:ed:fd:5d:6f:5a:be:d1:44:cc:12: a3:e2:74:fc:d6:55:49:86:cb:89:9b:7b:89:d3:1f: ef:dd:c5:8d:a1:61:6c:9f:6a:65:e7:c0:3c:13:66: f4:aa:81:00:5b:ef:e9:4a:7e:d6:81:46:a0:64:63: 10:61:18:7a:56:87:4a:60:42:84:c4:72:50:ad:dd: 3b:fd:c2:83:c4:03:d9:95:10:e1:e0:95:a1:d5:c3: b6:ec:75:c9:40:b3:68:1c:74:52:db:ca:77:ad:f4: c3:0b:d5:e4:fe:ce:97:b2:b7:c3:57:2e:bf:b7:a6: 07:56:5e:c5:b9:54:ae:45:b7:b8:ba:10:41:f9:06: ef:2c:b4:7d:bc:80:b3:7d:37:97:35:08:1a:74:2a: 3d:a3:2a:0d:23:2e:cc:c6:b6:45:de:ad:c3:85:87: 6c:38:43:8f:67:4b:17:ef:f9:99:60:25:cb:7d:f1: 35:84:b8:c3:86:9d:24:fe:06:b7:b1:33:87:6b:70: 98:e5:11:55:07:dd:96:eb:17:de:af:21:16:5d:a1: 06:36:70:97:da:87:c9:d6:2e:56:2e:da:c9:f3:96: d9:6d:10:62:ab:ae:15:d3:32:3a:35:c5:83:23:d3: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C5:7C:B5:26:46:FB:36:82:F4:8E:D2:74:DB:8B:52:53:46:BA:8A X509v3 Authority Key Identifier: keyid:71:68:6E:0B:C6:33:67:F1:96:78:84:AB:B3:F1:B7:14:35:1D:ED:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:dd:84:47:f5:bd:cb:a3:69:94:10:3f:26:2f:45:86:5a:b3: f4:b2:4e:39:5f:4b:1f:9d:59:32:b8:1c:06:e8:72:f2:ab:d7: 72:28:84:34:5e:9c:e7:3d:b4:a6:1b:d2:c8:d3:f2:a7:94:8e: 6c:31:11:27:a8:63:fe:6c:a7:3e:0f:83:d6:07:be:99:90:32: c8:97:b6:17:d0:c1:83:2b:5e:2b:6b:e0:ba:5f:8f:e4:15:46: 38:5f:e7:b7:42:23:1c:cc:2f:8b:85:41:3e:ff:bc:99:d4:0b: 74:01:de:a8:8b:ee:54:1f:dd:31:b8:cf:13:71:44:d2:fa:92: 56:49:f0:39:d7:ab:03:ba:64:da:92:3d:99:6f:72:6a:60:30: e1:5d:9c:dc:17:3e:91:6f:4f:6f:c3:73:f8:5a:41:89:21:42: c2:b1:2e:d1:b9:52:bd:36:cf:e6:43:b5:9a:b7:e7:29:89:3a: c1:a1:41:9b:f7:94:66:f8:5a:7a:d5:b0:68:35:67:9d:1a:66: ea:8c:a0:0b:d5:d5:39:d7:6d:8c:36:cc:e9:a5:dd:0a:bc:0f: d8:a5:5f:bb:bd:e2:93:59:48:b5:2a:54:ef:3d:5d:d1:06:a8: 4f:eb:bf:bd:6e:58:4f:4b:83:1a:32:9d:fe:6b:2d:fe:0f:9d: 5c:01:ea:ff -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzE2 ODZFMEJDNjMzNjdGMTk2Nzg4NEFCQjNGMUI3MTQzNTFERUQyNDAeFw0yNDExMjIy MDI0MDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk1QzU3Q0I1MjY0NkZC MzY4MkY0OEVEMjc0REI4QjUyNTM0NkJBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI346w7NGo8zv6WvHj8fyra3WP7f1db1q+0UTMEqPidPzWVUmG y4mbe4nTH+/dxY2hYWyfamXnwDwTZvSqgQBb7+lKftaBRqBkYxBhGHpWh0pgQoTE clCt3Tv9woPEA9mVEOHglaHVw7bsdclAs2gcdFLbynet9MML1eT+zpeyt8NXLr+3 pgdWXsW5VK5Ft7i6EEH5Bu8stH28gLN9N5c1CBp0Kj2jKg0jLszGtkXercOFh2w4 Q49nSxfv+ZlgJct98TWEuMOGnST+BrexM4drcJjlEVUH3ZbrF96vIRZdoQY2cJfa h8nWLlYu2snzltltEGKrrhXTMjo1xYMj04bxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUlcV8tSZG+zaC9I7SdNuLUlNGuoowHwYDVR0jBBgwFoAUcWhuC8YzZ/GWeISr s/G3FDUd7SQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Mi9jV2h1QzhZelpfR1dlSVNyc19HM0ZEVWQ3U1EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NXaHVDOFl6Wl9HV2VJU3JzX0czRkRVZDdTUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTIvY1dodUM4WXpaX0dX ZUlTcnNfRzNGRFVkN1NRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEHdhEf1vcujaZQQPyYvRYZas/SyTjlfSx+dWTK4HAbocvKr13IohDRenOc9 tKYb0sjT8qeUjmwxESeoY/5spz4Pg9YHvpmQMsiXthfQwYMrXitr4Lpfj+QVRjhf 57dCIxzML4uFQT7/vJnUC3QB3qiL7lQf3TG4zxNxRNL6klZJ8DnXqwO6ZNqSPZlv cmpgMOFdnNwXPpFvT2/Dc/haQYkhQsKxLtG5Ur02z+ZDtZq35ymJOsGhQZv3lGb4 WnrVsGg1Z50aZuqMoAvV1TnXbYw2zOml3Qq8D9ilX7u94pNZSLUqVO89XdEGqE/r v71uWE9Lgxoynf5rLf4PnVwB6v8= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:45 2024 by rpki-client on console-ams.rpki-client.org