$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.mft File: xBzQhaMq5MKw6Gj_J_63FwzM9fs.mft (raw, json) Hash identifier: wRRWRH6/z/qUI7FJ3nlSlGwiWquhYfK7vCx0mv6sXT4= Subject key identifier: AF:80:EB:9B:BD:42:83:E1:4C:EA:CB:DF:01:FA:D3:05:63:9E:A5:12 Authority key identifier: C4:1C:D0:85:A3:2A:E4:C2:B0:E8:68:FF:27:FE:B7:17:0C:CC:F5:FB Certificate issuer: /CN=C41CD085A32AE4C2B0E868FF27FEB7170CCCF5FB Certificate serial: 02DF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xBzQhaMq5MKw6Gj_J_63FwzM9fs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.mft Manifest number: 02DF Signing time: Fri 22 Nov 2024 20:24:07 +0000 Manifest this update: Fri 22 Nov 2024 20:24:07 +0000 Manifest next update: Sat 23 Nov 2024 02:24:07 +0000 Files and hashes: 1: xBzQhaMq5MKw6Gj_J_63FwzM9fs.crl (hash: AMr5rPVYiAqz+rbVRrVvw2bUw9+Uv9kI0pKUX8OHXiw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xBzQhaMq5MKw6Gj_J_63FwzM9fs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C41CD085A32AE4C2B0E868FF27FEB7170CCCF5FB Validity Not Before: Nov 22 20:24:07 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=AF80EB9BBD4283E14CEACBDF01FAD305639EA512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9f:2b:89:fc:19:80:68:80:1f:4e:30:e7:ff: eb:49:76:9a:1e:ff:51:06:fb:ca:85:a3:99:1c:13: 8c:b3:d9:40:0f:96:31:28:b2:ec:04:19:65:0a:93: c5:6c:64:1a:4e:8b:39:03:6c:90:fb:3b:49:2c:68: cb:9e:bf:32:e5:f0:5f:5a:42:0d:4c:59:c9:fe:0c: 2b:4a:6a:3d:9c:5f:7b:91:62:4d:65:a4:26:6f:23: c0:fc:8b:92:04:41:67:f2:f8:42:97:d3:93:6c:07: 86:28:c3:be:73:37:0e:08:b7:fa:cd:5d:2c:fd:08: 05:85:09:93:94:3a:62:fa:12:06:da:80:a2:f6:72: 3d:c4:99:dd:c6:4c:8a:98:80:85:ef:45:2e:6f:5b: 53:04:a7:f3:3c:8a:72:d3:0a:d6:e5:ea:ab:13:55: 1e:86:ca:d9:a5:53:c2:33:97:03:64:8d:16:f4:1f: 35:49:94:0b:65:23:cd:0d:75:68:06:dc:57:ff:3c: 4a:a9:b0:59:c7:66:31:f4:14:26:6e:ab:40:8c:b1: 41:7d:51:51:21:8e:42:7c:65:7b:81:90:cf:5f:57: f7:0f:b4:c0:9e:77:28:16:23:31:cc:c8:09:cd:57: 13:c2:85:40:a7:04:06:14:60:7f:08:1f:3c:48:25: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:80:EB:9B:BD:42:83:E1:4C:EA:CB:DF:01:FA:D3:05:63:9E:A5:12 X509v3 Authority Key Identifier: keyid:C4:1C:D0:85:A3:2A:E4:C2:B0:E8:68:FF:27:FE:B7:17:0C:CC:F5:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xBzQhaMq5MKw6Gj_J_63FwzM9fs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/xBzQhaMq5MKw6Gj_J_63FwzM9fs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:9f:35:3a:e7:84:fc:b8:78:5b:0b:1d:ca:da:46:60:e3:59: 9f:7a:ce:ca:54:b5:dc:e2:e0:18:65:d4:60:15:9f:e1:89:ef: 61:a7:c9:6d:51:11:46:3f:ba:d3:54:52:95:6e:59:b9:25:8d: 67:83:e3:b8:40:7b:2a:43:c9:c0:37:d9:6f:58:29:64:60:89: 05:8e:d5:fb:6d:bb:90:0d:4e:a0:b7:4a:a3:29:62:d9:fe:a5: fa:c4:f3:2b:27:05:df:ce:23:d2:e0:08:b8:06:6e:2b:5f:aa: 35:24:d1:18:c8:d9:10:fd:51:89:62:aa:80:c6:5e:b6:5f:f1: 6d:d8:d8:7d:c7:be:df:3a:76:f3:26:f0:67:88:60:92:a9:07: c0:da:eb:47:a4:ec:f8:17:23:b6:4c:3f:da:15:c0:41:bb:36: da:6e:67:40:5c:8c:4d:5b:f7:df:c5:b0:32:e1:ab:88:94:94: e1:ad:05:2b:6c:32:dc:a5:8b:b1:58:4e:9b:92:2d:5b:c7:1e: 43:d1:40:09:02:5c:55:22:b4:5f:f0:39:68:ef:70:4f:68:e9: e0:24:6a:2f:f0:a5:6c:31:63:4e:fb:d6:8a:a7:33:ba:6e:e7: 3e:51:a5:de:1a:fe:b7:a3:a8:7b:22:46:d9:fc:93:00:a3:f9: d7:38:8a:e5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQx Q0QwODVBMzJBRTRDMkIwRTg2OEZGMjdGRUI3MTcwQ0NDRjVGQjAeFw0yNDExMjIy MDI0MDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFGODBFQjlCQkQ0Mjgz RTE0Q0VBQ0JERjAxRkFEMzA1NjM5RUE1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDknyuJ/BmAaIAfTjDn/+tJdpoe/1EG+8qFo5kcE4yz2UAPljEo suwEGWUKk8VsZBpOizkDbJD7O0ksaMuevzLl8F9aQg1MWcn+DCtKaj2cX3uRYk1l pCZvI8D8i5IEQWfy+EKX05NsB4Yow75zNw4It/rNXSz9CAWFCZOUOmL6EgbagKL2 cj3Emd3GTIqYgIXvRS5vW1MEp/M8inLTCtbl6qsTVR6GytmlU8IzlwNkjRb0HzVJ lAtlI80NdWgG3Ff/PEqpsFnHZjH0FCZuq0CMsUF9UVEhjkJ8ZXuBkM9fV/cPtMCe dygWIzHMyAnNVxPChUCnBAYUYH8IHzxIJR4ZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUr4Drm71Cg+FM6svfAfrTBWOepRIwHwYDVR0jBBgwFoAUxBzQhaMq5MKw6Gj/ J/63FwzM9fswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 OC94QnpRaGFNcTVNS3c2R2pfSl82M0Z3ek05ZnMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3hCelFoYU1xNU1LdzZHal9KXzYzRnd6TTlmcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTgveEJ6UWhhTXE1TUt3 NkdqX0pfNjNGd3pNOWZzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALOfNTrnhPy4eFsLHcraRmDjWZ96zspUtdzi4Bhl1GAVn+GJ72GnyW1REUY/ utNUUpVuWbkljWeD47hAeypDycA32W9YKWRgiQWO1fttu5ANTqC3SqMpYtn+pfrE 8ysnBd/OI9LgCLgGbitfqjUk0RjI2RD9UYliqoDGXrZf8W3Y2H3Hvt86dvMm8GeI YJKpB8Da60ek7PgXI7ZMP9oVwEG7NtpuZ0BcjE1b99/FsDLhq4iUlOGtBStsMtyl i7FYTpuSLVvHHkPRQAkCXFUitF/wOWjvcE9o6eAkai/wpWwxY0771oqnM7pu5z5R pd4a/rejqHsiRtn8kwCj+dc4iuU= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:12 2024 by rpki-client on console-fra.rpki-client.org