$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft File: UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft (raw, json) Hash identifier: 8NBCxqf6Tazx2EffE9SgzQLzVrHwOjoCjnNuQVJ+WLM= Subject key identifier: CA:73:60:9C:B6:C5:E9:35:EB:2B:0F:D7:C6:5D:7F:E5:4E:D2:23:0F Authority key identifier: 51:49:F8:1D:58:18:A8:A2:2C:42:A9:F7:09:FA:9C:D1:54:BD:D5:70 Certificate issuer: /CN=5149F81D5818A8A22C42A9F709FA9CD154BDD570 Certificate serial: 02DF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UUn4HVgYqKIsQqn3Cfqc0VS91XA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft Manifest number: 02DF Signing time: Fri 22 Nov 2024 20:24:22 +0000 Manifest this update: Fri 22 Nov 2024 20:24:22 +0000 Manifest next update: Sat 23 Nov 2024 02:24:22 +0000 Files and hashes: 1: UUn4HVgYqKIsQqn3Cfqc0VS91XA.crl (hash: A+/XBk65JQqSOJTixi/vPi3zAqjxpmH9JIzr7aAlYYI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UUn4HVgYqKIsQqn3Cfqc0VS91XA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5149F81D5818A8A22C42A9F709FA9CD154BDD570 Validity Not Before: Nov 22 20:24:22 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=CA73609CB6C5E935EB2B0FD7C65D7FE54ED2230F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:94:61:3a:8c:48:d9:7a:84:79:ed:3d:ae: a2:3f:d1:d9:ba:6f:99:98:b0:60:7e:45:4f:d6:81: ff:49:9e:01:d2:14:f6:31:a1:f8:f7:ab:93:2c:69: 0b:48:26:40:85:32:58:ca:1d:33:83:54:fd:22:6e: 9c:0d:ef:f9:4a:e3:86:a9:f5:6d:f1:13:9a:7e:b2: 73:fe:7d:1e:e4:db:84:c8:d3:de:7d:24:0a:5e:6b: 05:77:23:05:20:37:49:b8:85:4f:96:31:e7:0a:25: 6a:c8:8e:f0:c2:a9:38:49:bd:cb:f8:fa:eb:92:e1: a6:88:67:2b:f2:0e:0d:eb:80:2f:4b:eb:44:40:d4: 11:ec:3d:e4:1f:93:67:69:bf:87:54:56:25:b0:4a: ed:49:f8:e9:33:89:fa:07:ef:ab:a2:63:1d:f8:b8: e2:9d:5c:1f:ea:1c:4f:f8:50:27:8f:71:3a:31:cd: 86:68:f7:ab:a8:ec:15:85:a0:5d:92:43:da:ac:0a: cf:3b:5a:49:08:69:ba:57:44:b2:89:26:2a:eb:27: 8d:3d:50:38:8b:c5:20:76:1c:c9:59:26:f7:98:e5: 70:02:d2:1b:0b:49:8e:0b:28:93:cd:2e:d2:d8:dc: 00:35:8c:cd:3b:cf:2e:2e:bb:53:5e:fc:ff:0e:ff: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:60:9C:B6:C5:E9:35:EB:2B:0F:D7:C6:5D:7F:E5:4E:D2:23:0F X509v3 Authority Key Identifier: keyid:51:49:F8:1D:58:18:A8:A2:2C:42:A9:F7:09:FA:9C:D1:54:BD:D5:70 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UUn4HVgYqKIsQqn3Cfqc0VS91XA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/UUn4HVgYqKIsQqn3Cfqc0VS91XA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e4:7d:63:31:c9:7c:0f:44:cc:af:0e:5c:60:76:11:62:10: 0b:57:28:93:2f:2f:97:2d:24:ad:78:4b:d9:47:dc:9a:38:67: 26:02:6c:89:c8:ea:24:84:a1:d1:6c:e9:2c:4f:f0:d1:21:55: df:78:8f:4c:ba:cc:31:f6:39:c0:c8:4e:f0:63:7a:ae:5c:b4: 42:85:2b:88:2e:aa:33:77:a4:02:bc:7e:af:39:b5:d4:6a:a2: 84:9d:14:3a:dc:d5:00:70:5e:ca:58:bd:43:df:38:5d:ae:6e: e6:73:41:67:ce:bc:9e:08:88:66:aa:02:ca:7f:cc:fe:1e:05: b3:d3:e4:47:ca:b2:50:49:9e:42:35:f6:c3:0c:70:17:1c:92: ba:e3:07:6a:85:fc:67:d0:6e:55:da:b1:aa:a0:1e:fe:96:d5: 91:9f:a5:6f:4a:30:5c:46:18:ea:c3:2a:76:67:08:72:62:1c: 6c:ed:16:5f:78:a8:66:95:d2:09:e7:28:12:fe:ee:2e:1b:b1: b9:2c:41:51:d2:bd:3b:4f:63:51:8a:c9:3a:09:aa:73:f3:62: 77:4a:0b:9c:84:e0:65:72:7a:b4:92:80:a7:f7:83:36:0c:e9: ad:b3:61:82:15:48:51:6c:93:5c:dc:90:61:82:f6:3d:c8:4c: f4:41:9b:0b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTE0 OUY4MUQ1ODE4QThBMjJDNDJBOUY3MDlGQTlDRDE1NEJERDU3MDAeFw0yNDExMjIy MDI0MjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKENBNzM2MDlDQjZDNUU5 MzVFQjJCMEZEN0M2NUQ3RkU1NEVEMjIzMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo35RhOoxI2XqEee09rqI/0dm6b5mYsGB+RU/Wgf9JngHSFPYx ofj3q5MsaQtIJkCFMljKHTODVP0ibpwN7/lK44ap9W3xE5p+snP+fR7k24TI0959 JApeawV3IwUgN0m4hU+WMecKJWrIjvDCqThJvcv4+uuS4aaIZyvyDg3rgC9L60RA 1BHsPeQfk2dpv4dUViWwSu1J+OkzifoH76uiYx34uOKdXB/qHE/4UCePcToxzYZo 96uo7BWFoF2SQ9qsCs87WkkIabpXRLKJJirrJ409UDiLxSB2HMlZJveY5XAC0hsL SY4LKJPNLtLY3AA1jM07zy4uu1Ne/P8O/2FnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUynNgnLbF6TXrKw/Xxl1/5U7SIw8wHwYDVR0jBBgwFoAUUUn4HVgYqKIsQqn3 Cfqc0VS91XAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MC9VVW40SFZnWXFLSXNRcW4zQ2ZxYzBWUzkxWEEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1VVbjRIVmdZcUtJc1FxbjNDZnFjMFZTOTFYQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDAvVVVuNEhWZ1lxS0lz UXFuM0NmcWMwVlM5MVhBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACTkfWMxyXwPRMyvDlxgdhFiEAtXKJMvL5ctJK14S9lH3Jo4ZyYCbInI6iSE odFs6SxP8NEhVd94j0y6zDH2OcDITvBjeq5ctEKFK4guqjN3pAK8fq85tdRqooSd FDrc1QBwXspYvUPfOF2ubuZzQWfOvJ4IiGaqAsp/zP4eBbPT5EfKslBJnkI19sMM cBcckrrjB2qF/GfQblXasaqgHv6W1ZGfpW9KMFxGGOrDKnZnCHJiHGztFl94qGaV 0gnnKBL+7i4bsbksQVHSvTtPY1GKyToJqnPzYndKC5yE4GVyerSSgKf3gzYM6a2z YYIVSFFsk1zckGGC9j3ITPRBmws= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:45 2024 by rpki-client on console-ams.rpki-client.org