$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft File: V9fgeB2zyP-T6Dnqsn4DX09EurI.mft (raw, json) Hash identifier: iXsGkrnl5N5faf0L1sYta/EI+qjVNCf0m6qRoKO41Vc= Subject key identifier: 13:39:57:F9:74:E1:0B:EC:24:65:6C:FE:1F:9C:21:33:1D:81:13:62 Authority key identifier: 57:D7:E0:78:1D:B3:C8:FF:93:E8:39:EA:B2:7E:03:5F:4F:44:BA:B2 Certificate issuer: /CN=57D7E0781DB3C8FF93E839EAB27E035F4F44BAB2 Certificate serial: 0319 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/V9fgeB2zyP-T6Dnqsn4DX09EurI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft Manifest number: 0319 Signing time: Mon 25 Nov 2024 04:20:44 +0000 Manifest this update: Mon 25 Nov 2024 04:20:44 +0000 Manifest next update: Mon 25 Nov 2024 10:20:44 +0000 Files and hashes: 1: V9fgeB2zyP-T6Dnqsn4DX09EurI.crl (hash: 97QGkVFdKWBKsPzr9dgvDU++cvOuBxvu9alu3Y20ccs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/V9fgeB2zyP-T6Dnqsn4DX09EurI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D7E0781DB3C8FF93E839EAB27E035F4F44BAB2 Validity Not Before: Nov 25 04:20:44 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=133957F974E10BEC24656CFE1F9C21331D811362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:02:b1:02:a9:f2:44:90:32:6c:97:73:a6: d0:02:8c:12:19:88:81:8b:72:c2:e0:25:c4:d1:d9: c0:a6:6e:ab:5f:aa:c0:7c:8a:ce:52:5f:be:4c:09: f1:64:c5:49:75:87:fb:b3:32:4f:d5:6b:e7:58:7f: 68:83:dd:63:97:77:51:b4:f8:2a:b6:b3:84:b8:ee: d1:67:06:da:e2:aa:2b:88:ff:ce:f3:ba:dc:34:b1: a6:f5:04:44:ae:f7:8c:93:00:50:23:67:69:d4:c7: ee:51:ac:ff:e9:9f:c5:4e:f3:c8:e0:ec:c0:3e:8c: a8:64:79:fa:a8:9f:e5:11:65:44:1d:75:c3:6c:58: ae:12:35:94:5b:58:d7:cd:26:b4:e1:e6:93:fa:41: a0:2c:31:f7:7f:bb:24:f5:a6:e4:b0:70:a1:3e:9e: a6:a0:19:6d:b1:06:86:4a:fa:de:83:91:ee:6c:a6: 73:92:3d:ca:18:fe:73:49:fc:f2:4c:bd:92:4b:a2: 90:45:d1:85:84:c0:16:57:dc:3b:82:71:69:db:66: c1:63:0e:65:05:21:5d:fd:80:fe:23:f6:c1:b0:d5: 99:56:16:a3:b4:e5:ae:07:9b:d6:15:7e:2f:99:d5: 51:ad:a9:56:17:f6:ae:fc:15:81:a2:25:1f:29:71: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:39:57:F9:74:E1:0B:EC:24:65:6C:FE:1F:9C:21:33:1D:81:13:62 X509v3 Authority Key Identifier: keyid:57:D7:E0:78:1D:B3:C8:FF:93:E8:39:EA:B2:7E:03:5F:4F:44:BA:B2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/V9fgeB2zyP-T6Dnqsn4DX09EurI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/V9fgeB2zyP-T6Dnqsn4DX09EurI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:59:d4:f7:e4:45:92:35:71:d6:be:22:0d:ef:54:f8:12:f2: 07:95:87:64:87:f6:19:6b:7e:03:42:b0:4d:67:46:48:2d:e1: 61:02:49:b2:2d:7c:f7:f4:a6:52:36:6e:fd:aa:40:6d:58:69: 01:3c:f1:9a:65:4f:eb:eb:aa:d0:4f:c0:96:97:ef:63:7d:d7: 5e:c9:4d:74:7d:a4:f2:17:8a:47:bb:80:87:e4:e6:2f:66:0b: 1f:a5:7a:6d:d8:d3:9d:1e:e2:68:2a:3c:17:73:15:ff:9f:6a: 02:03:93:74:96:a2:0c:d5:ee:a7:0f:57:e0:54:06:0a:53:3d: 34:54:93:86:1c:78:80:ff:10:29:d8:e6:b7:cc:09:eb:a4:25: 11:52:78:c9:2e:6e:07:00:6d:e3:c9:92:2f:af:30:8e:96:e9: 43:b8:7f:f6:25:bf:26:b1:90:5d:09:33:0c:6c:85:69:8a:a3: 1c:29:8f:99:d4:77:5c:9a:3c:84:66:ea:86:cf:8c:a4:0e:fc: 99:6c:e6:12:48:1d:91:ee:b7:9b:37:be:b0:70:db:07:77:fd: 04:c3:2f:fa:0a:31:05:db:e3:b8:fc:52:a7:96:54:ec:e8:96: 27:be:fd:fd:ea:d6:ca:f3:c1:b4:8a:fd:1a:13:e6:d6:50:47: 3f:8a:e8:ef -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdE N0UwNzgxREIzQzhGRjkzRTgzOUVBQjI3RTAzNUY0RjQ0QkFCMjAeFw0yNDExMjUw NDIwNDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDEzMzk1N0Y5NzRFMTBC RUMyNDY1NkNGRTFGOUMyMTMzMUQ4MTEzNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyhQKxAqnyRJAybJdzptACjBIZiIGLcsLgJcTR2cCmbqtfqsB8 is5SX75MCfFkxUl1h/uzMk/Va+dYf2iD3WOXd1G0+Cq2s4S47tFnBtriqiuI/87z utw0sab1BESu94yTAFAjZ2nUx+5RrP/pn8VO88jg7MA+jKhkefqon+URZUQddcNs WK4SNZRbWNfNJrTh5pP6QaAsMfd/uyT1puSwcKE+nqagGW2xBoZK+t6Dke5spnOS PcoY/nNJ/PJMvZJLopBF0YWEwBZX3DuCcWnbZsFjDmUFIV39gP4j9sGw1ZlWFqO0 5a4Hm9YVfi+Z1VGtqVYX9q78FYGiJR8pcS91AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUEzlX+XThC+wkZWz+H5whMx2BE2IwHwYDVR0jBBgwFoAUV9fgeB2zyP+T6Dnq sn4DX09EurIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NC9WOWZnZUIyenlQLVQ2RG5xc240RFgwOUV1ckkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1Y5ZmdlQjJ6eVAtVDZEbnFzbjREWDA5RXVySS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTQvVjlmZ2VCMnp5UC1U NkRucXNuNERYMDlFdXJJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGJZ1PfkRZI1cda+Ig3vVPgS8geVh2SH9hlrfgNCsE1nRkgt4WECSbItfPf0 plI2bv2qQG1YaQE88ZplT+vrqtBPwJaX72N9117JTXR9pPIXike7gIfk5i9mCx+l em3Y050e4mgqPBdzFf+fagIDk3SWogzV7qcPV+BUBgpTPTRUk4YceID/ECnY5rfM CeukJRFSeMkubgcAbePJki+vMI6W6UO4f/YlvyaxkF0JMwxshWmKoxwpj5nUd1ya PIRm6obPjKQO/Jls5hJIHZHut5s3vrBw2wd3/QTDL/oKMQXb47j8UqeWVOzolie+ /f3q1srzwbSK/RoT5tZQRz+K6O8= -----END CERTIFICATE-----Generated at Mon Nov 25 06:07:53 2024 by rpki-client on console-fra.rpki-client.org