$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft File: DPxgVxKdypoWDypZIndlqeZ0lLs.mft (raw, json) Hash identifier: hOqkAS51amcLEBG0/H8dHfNvO6h3BLIElCRI3eW4eCY= Subject key identifier: 0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96 Authority key identifier: 0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB Certificate issuer: /CN=0CFC6057129DCA9A160F2A59227765A9E67494BB Certificate serial: 0287 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft Manifest number: 0287 Signing time: Fri 22 Nov 2024 15:24:25 +0000 Manifest this update: Fri 22 Nov 2024 15:24:25 +0000 Manifest next update: Fri 22 Nov 2024 21:24:25 +0000 Files and hashes: 1: DPxgVxKdypoWDypZIndlqeZ0lLs.crl (hash: y60hAc0MHNK6tOywfBTLPLRov0rYzGjHAPziOMmaWRU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CFC6057129DCA9A160F2A59227765A9E67494BB Validity Not Before: Nov 22 15:24:25 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0A119F57ACC03770F86C2A86F0217E60FDC14A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:1e:6b:8d:42:0c:34:04:f0:b7:a9:65:fc: 8d:7b:cf:4a:42:07:b3:5e:79:c5:a2:e5:77:99:f0: 18:22:f5:e0:40:8e:0e:d0:4b:21:f5:5d:d4:be:8d: 35:69:f2:59:18:69:fb:16:2f:11:47:30:4b:12:8f: 6c:15:4c:8a:dd:9c:38:96:d2:f0:b9:5c:73:2f:63: e0:90:89:d0:72:bf:15:60:ea:9d:59:7e:b9:04:d8: c2:99:f1:ba:c1:1c:c4:b9:64:b6:d1:c5:8c:df:ad: 88:2c:3e:e2:b6:07:94:5d:f6:fa:30:21:82:60:4c: f0:5d:4e:8b:7f:99:77:77:d7:2a:fb:1b:5f:7d:a9: 27:ab:9b:67:b8:c5:ce:cc:f2:84:5f:9d:cc:63:7a: b4:20:b0:d2:03:2c:de:1b:b9:2e:1e:08:4e:ec:2e: 77:dd:2e:74:33:21:78:39:ef:54:1b:89:9b:e0:2e: 1a:eb:63:0d:b0:e2:c1:8b:4e:10:a8:70:a3:d6:cd: 02:5a:8b:f0:af:4d:ef:e9:1f:4f:f2:a0:34:23:6d: 60:d5:1d:fd:8e:a5:c0:e2:45:9f:df:58:dc:68:96: c4:b7:ed:cb:b4:7f:61:b7:ad:e4:3b:ee:9e:f5:08: fb:44:26:8f:28:8d:9d:d4:4b:0b:14:d1:24:cf:fc: b4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:9F:57:AC:C0:37:70:F8:6C:2A:86:F0:21:7E:60:FD:C1:4A:96 X509v3 Authority Key Identifier: keyid:0C:FC:60:57:12:9D:CA:9A:16:0F:2A:59:22:77:65:A9:E6:74:94:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DPxgVxKdypoWDypZIndlqeZ0lLs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3305/DPxgVxKdypoWDypZIndlqeZ0lLs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d6:64:2c:99:46:37:0d:c7:27:17:bf:eb:63:bc:60:58:0d: 60:3b:d9:3a:57:dc:b2:d8:e4:f1:65:18:20:b1:9d:f5:eb:1a: f8:00:bb:b0:6a:28:4e:71:ff:3d:a4:ab:50:09:77:92:0f:be: c1:89:67:25:56:72:e2:30:eb:cf:89:71:e0:83:d4:99:45:84: 82:ec:7e:4c:dc:c4:e1:05:5d:cb:88:8d:66:90:2d:44:aa:06: c9:9e:4d:7a:d7:67:47:dc:33:75:68:12:b1:57:7b:15:5f:12: 63:7e:8b:2d:bf:b6:8f:aa:ad:be:c2:fb:b7:ff:b7:f6:29:3d: 10:6e:f5:6a:6a:37:cf:74:43:98:da:07:54:f5:4f:7b:cf:e0: a8:32:a3:da:5b:1d:b9:47:31:fa:37:c0:ce:04:4b:1b:50:06: 06:fa:d2:6f:44:37:3f:84:a2:4f:4c:87:c7:66:f1:1c:af:20: 14:d7:aa:96:41:7b:31:b1:20:26:9b:3c:71:d3:74:43:3a:3d: 4b:a7:7b:46:ce:64:9e:91:57:a2:ee:dc:03:4b:06:75:f8:b3: b8:d9:97:d3:81:47:89:d7:79:21:7d:bc:5f:63:ec:6f:34:a5: cd:f0:23:56:d4:8b:7a:3e:8f:c0:46:40:da:ac:14:0b:d2:90: a9:ee:c9:42 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENG QzYwNTcxMjlEQ0E5QTE2MEYyQTU5MjI3NzY1QTlFNjc0OTRCQjAeFw0yNDExMjIx NTI0MjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBBMTE5RjU3QUNDMDM3 NzBGODZDMkE4NkYwMjE3RTYwRkRDMTRBOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8IB5rjUIMNATwt6ll/I17z0pCB7NeecWi5XeZ8Bgi9eBAjg7Q SyH1XdS+jTVp8lkYafsWLxFHMEsSj2wVTIrdnDiW0vC5XHMvY+CQidByvxVg6p1Z frkE2MKZ8brBHMS5ZLbRxYzfrYgsPuK2B5Rd9vowIYJgTPBdTot/mXd31yr7G199 qSerm2e4xc7M8oRfncxjerQgsNIDLN4buS4eCE7sLnfdLnQzIXg571QbiZvgLhrr Yw2w4sGLThCocKPWzQJai/CvTe/pH0/yoDQjbWDVHf2OpcDiRZ/fWNxolsS37cu0 f2G3reQ77p71CPtEJo8ojZ3USwsU0STP/LTnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUChGfV6zAN3D4bCqG8CF+YP3BSpYwHwYDVR0jBBgwFoAUDPxgVxKdypoWDypZ IndlqeZ0lLswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw NS9EUHhnVnhLZHlwb1dEeXBaSW5kbHFlWjBsTHMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RQeGdWeEtkeXBvV0R5cFpJbmRscWVaMGxMcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDUvRFB4Z1Z4S2R5cG9X RHlwWkluZGxxZVowbExzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKXWZCyZRjcNxycXv+tjvGBYDWA72TpX3LLY5PFlGCCxnfXrGvgAu7BqKE5x /z2kq1AJd5IPvsGJZyVWcuIw68+JceCD1JlFhILsfkzcxOEFXcuIjWaQLUSqBsme TXrXZ0fcM3VoErFXexVfEmN+iy2/to+qrb7C+7f/t/YpPRBu9WpqN890Q5jaB1T1 T3vP4Kgyo9pbHblHMfo3wM4ESxtQBgb60m9ENz+Eok9Mh8dm8RyvIBTXqpZBezGx ICabPHHTdEM6PUune0bOZJ6RV6Lu3ANLBnX4s7jZl9OBR4nXeSF9vF9j7G80pc3w I1bUi3o+j8BGQNqsFAvSkKnuyUI= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org