$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft File: RP1LOAf8IJACd92fE6z8qnpaOCg.mft (raw, json) Hash identifier: Qo77WI7CaRF1uLNY4andvRD/ZGCAAtAssNVw5SFDA5I= Subject key identifier: 70:6B:01:9E:6D:A7:CA:14:73:DE:36:E6:B2:FE:28:1B:DB:4C:E1:4F Authority key identifier: 44:FD:4B:38:07:FC:20:90:02:77:DD:9F:13:AC:FC:AA:7A:5A:38:28 Certificate issuer: /CN=44FD4B3807FC20900277DD9F13ACFCAA7A5A3828 Certificate serial: 93 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RP1LOAf8IJACd92fE6z8qnpaOCg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft Manifest number: 93 Signing time: Fri 22 Nov 2024 10:24:02 +0000 Manifest this update: Fri 22 Nov 2024 10:24:02 +0000 Manifest next update: Fri 22 Nov 2024 16:24:02 +0000 Files and hashes: 1: RP1LOAf8IJACd92fE6z8qnpaOCg.crl (hash: xefilk45V3mirYLH9Jsfypoj0P1zc8iblMbYi2xmLzQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RP1LOAf8IJACd92fE6z8qnpaOCg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44FD4B3807FC20900277DD9F13ACFCAA7A5A3828 Validity Not Before: Nov 22 10:24:02 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=706B019E6DA7CA1473DE36E6B2FE281BDB4CE14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:8c:15:6f:b7:0c:20:33:cc:9d:26:47:19: 3c:31:48:e0:3a:88:f3:c0:32:10:3c:90:9b:f4:cd: b8:00:54:fe:02:24:0e:74:98:09:52:5b:25:b2:43: d3:30:eb:68:06:79:45:b1:d1:20:48:dd:de:18:d9: 4d:2f:ce:ae:1b:d9:d9:b9:34:66:1b:42:b9:f1:58: 24:08:1c:36:39:5a:11:99:10:dc:f4:2a:c2:d0:3b: 78:85:f1:94:fe:0b:d4:bb:24:2d:f9:ff:f4:95:d0: f7:68:25:39:79:12:80:2b:39:5c:5a:7c:ef:64:03: 7c:b9:26:bc:67:72:85:0a:3c:d0:6e:70:a3:c5:19: 0f:bf:fa:3a:92:a4:2a:28:38:a1:5b:76:0d:68:f0: ed:ca:84:d8:56:8f:fb:ae:7f:70:3d:d3:a9:53:6a: 6e:91:52:e4:0a:a5:f5:30:9b:43:4e:21:71:8a:ab: 15:e1:8c:f8:e7:84:74:29:d2:57:51:46:6c:2d:73: 2f:2b:23:f2:b8:d3:dd:03:31:a3:7f:01:71:3a:b6: d3:86:23:b2:5b:34:60:d3:52:67:fc:53:5e:30:d0: 9a:89:59:f4:00:eb:5b:26:b8:64:4d:83:93:76:5d: 64:7d:4a:b5:37:7c:23:28:91:18:a3:16:80:9b:d0: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6B:01:9E:6D:A7:CA:14:73:DE:36:E6:B2:FE:28:1B:DB:4C:E1:4F X509v3 Authority Key Identifier: keyid:44:FD:4B:38:07:FC:20:90:02:77:DD:9F:13:AC:FC:AA:7A:5A:38:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RP1LOAf8IJACd92fE6z8qnpaOCg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:65:1b:e7:fc:0f:2d:b1:be:ce:37:8c:af:16:be:4d:e1:3c: 61:9d:19:da:99:2c:9e:f2:9a:6c:49:c3:fb:92:5c:46:6f:69: 3a:69:9f:d8:b6:49:78:9f:73:a5:d3:0e:ee:eb:40:39:b3:5e: 26:ed:bb:c9:36:2f:50:e0:37:83:e8:b8:47:f8:82:10:8e:eb: 47:aa:1c:ad:57:d0:fe:e2:9c:c1:a2:eb:a8:12:fe:99:82:a1: a5:1e:83:e3:23:81:b9:24:28:d2:7c:0c:a2:c4:70:b8:be:71: 57:b3:5e:ba:26:35:13:f2:be:53:0a:5e:75:41:fc:e1:7b:a1: 03:ea:70:a8:9c:ea:09:2d:9d:1e:a2:a7:52:ed:44:c8:2f:13: fc:47:e7:81:8f:fe:d8:af:42:ce:fe:07:26:f7:62:27:d2:b2: e6:20:91:f7:24:04:86:a6:f5:66:4d:f6:2d:b3:ac:97:07:f7: 4b:f7:b3:2f:41:21:88:7d:e4:8b:02:70:2a:ab:96:d7:15:32: 55:0e:1e:66:80:2b:2c:1b:b8:2d:23:c3:f4:a8:fa:9f:bc:1e: 0b:a2:42:ed:57:79:cd:43:34:c7:d2:6f:65:32:20:96:6f:b7: a8:32:3f:60:72:8b:ac:9c:fb:2a:26:b9:2b:07:f6:56:73:e5: 79:2f:35:52 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDRG RDRCMzgwN0ZDMjA5MDAyNzdERDlGMTNBQ0ZDQUE3QTVBMzgyODAeFw0yNDExMjIx MDI0MDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDcwNkIwMTlFNkRBN0NB MTQ3M0RFMzZFNkIyRkUyODFCREI0Q0UxNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1JYwVb7cMIDPMnSZHGTwxSOA6iPPAMhA8kJv0zbgAVP4CJA50 mAlSWyWyQ9Mw62gGeUWx0SBI3d4Y2U0vzq4b2dm5NGYbQrnxWCQIHDY5WhGZENz0 KsLQO3iF8ZT+C9S7JC35//SV0PdoJTl5EoArOVxafO9kA3y5JrxncoUKPNBucKPF GQ+/+jqSpCooOKFbdg1o8O3KhNhWj/uuf3A906lTam6RUuQKpfUwm0NOIXGKqxXh jPjnhHQp0ldRRmwtcy8rI/K4090DMaN/AXE6ttOGI7JbNGDTUmf8U14w0JqJWfQA 61smuGRNg5N2XWR9SrU3fCMokRijFoCb0J5lAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcGsBnm2nyhRz3jbmsv4oG9tM4U8wHwYDVR0jBBgwFoAURP1LOAf8IJACd92f E6z8qnpaOCgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9SUDFMT0FmOElKQUNkOTJmRTZ6OHFucGFPQ2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JQMUxPQWY4SUpBQ2Q5MmZFNno4cW5wYU9DZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvUlAxTE9BZjhJSkFD ZDkyZkU2ejhxbnBhT0NnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKllG+f8Dy2xvs43jK8Wvk3hPGGdGdqZLJ7ymmxJw/uSXEZvaTppn9i2SXif c6XTDu7rQDmzXibtu8k2L1DgN4PouEf4ghCO60eqHK1X0P7inMGi66gS/pmCoaUe g+MjgbkkKNJ8DKLEcLi+cVezXromNRPyvlMKXnVB/OF7oQPqcKic6gktnR6ip1Lt RMgvE/xH54GP/tivQs7+Byb3YifSsuYgkfckBIam9WZN9i2zrJcH90v3sy9BIYh9 5IsCcCqrltcVMlUOHmaAKywbuC0jw/So+p+8HguiQu1Xec1DNMfSb2UyIJZvt6gy P2Byi6yc+yomuSsH9lZz5XkvNVI= -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:54 2024 by rpki-client on console-ams.rpki-client.org