$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft File: NFr5ZypcY4yBe6_vTb251zV1P08.mft (raw, json) Hash identifier: 9fjcFYBIWXg/fPOYR9auJhACBMeJDFPCx1luyPe1BqI= Subject key identifier: 55:3A:0F:78:47:27:75:D8:D1:98:A4:B1:E2:F4:D2:84:9F:34:9B:4E Authority key identifier: 34:5A:F9:67:2A:5C:63:8C:81:7B:AF:EF:4D:BD:B9:D7:35:75:3F:4F Certificate issuer: /CN=345AF9672A5C638C817BAFEF4DBDB9D735753F4F Certificate serial: 0271 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NFr5ZypcY4yBe6_vTb251zV1P08.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft Manifest number: 0271 Signing time: Fri 22 Nov 2024 15:24:12 +0000 Manifest this update: Fri 22 Nov 2024 15:24:12 +0000 Manifest next update: Fri 22 Nov 2024 21:24:12 +0000 Files and hashes: 1: NFr5ZypcY4yBe6_vTb251zV1P08.crl (hash: ImA8+qrZkPnZ+IqpmJMMmEizY7FJ0vyjKymjDK9rWCA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NFr5ZypcY4yBe6_vTb251zV1P08.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345AF9672A5C638C817BAFEF4DBDB9D735753F4F Validity Not Before: Nov 22 15:24:12 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=553A0F78472775D8D198A4B1E2F4D2849F349B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:76:c3:5a:82:84:e4:a3:05:d7:fa:db:53: 89:f1:9d:0f:10:f1:34:db:4b:92:0d:a8:2f:45:8d: c7:4c:a8:1d:9a:72:66:aa:d1:61:2d:48:e9:3b:87: 12:70:9e:79:31:e4:0e:54:12:43:99:a9:b8:4a:69: 47:71:4f:51:21:dd:15:47:4a:10:f7:69:2a:27:bd: 9b:dc:9f:26:a8:a6:8f:40:50:3f:34:5e:df:15:c8: 42:ac:f6:63:79:39:b0:6f:de:92:d8:6b:f4:03:b4: 30:f3:ad:3f:29:15:b4:8c:0b:bf:15:f6:41:21:08: 13:0b:90:73:86:69:2f:23:d0:b4:af:3c:18:b5:b6: 33:56:d7:26:44:fe:9d:63:7a:4e:af:1d:f5:14:58: 8a:8e:d6:9f:79:40:ea:77:be:32:2a:35:de:ce:ed: 05:8d:9d:ca:4a:47:e7:c5:ba:80:b6:68:17:fd:78: 8b:d3:67:07:62:0c:c4:e7:a6:6d:06:40:da:46:d7: 8d:18:c9:67:74:1b:1a:f4:4c:d1:52:4b:d3:f9:9f: d9:30:d5:bb:e6:ff:43:1a:2c:23:0a:33:20:26:b2: b1:43:70:b0:76:4f:f0:11:f7:ee:a8:3a:b1:81:8c: ad:bc:99:6e:a1:a3:32:1c:ad:2c:62:53:54:91:3f: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3A:0F:78:47:27:75:D8:D1:98:A4:B1:E2:F4:D2:84:9F:34:9B:4E X509v3 Authority Key Identifier: keyid:34:5A:F9:67:2A:5C:63:8C:81:7B:AF:EF:4D:BD:B9:D7:35:75:3F:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NFr5ZypcY4yBe6_vTb251zV1P08.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9b:7b:15:ee:23:f6:cd:c1:81:9a:14:d9:42:af:c8:06:12: cf:49:a5:7b:bd:52:a8:7c:aa:39:5a:1f:e2:71:e1:d0:71:b9: 5a:3f:45:4a:d4:43:8a:54:7c:a0:74:ee:5b:a9:1d:66:99:f0: 31:84:2c:94:d2:76:26:2a:9c:57:7c:10:04:8a:56:75:4e:9d: 81:9f:0a:5c:5e:a7:8a:11:d3:1a:69:00:77:21:e0:9d:cb:ec: e7:3c:4d:60:01:02:0e:cf:f3:8f:44:23:a8:4f:4d:10:97:4d: 10:59:25:45:b4:bd:00:0f:9a:21:ba:d0:f2:7c:99:cb:97:64: e5:bb:c8:c2:65:b3:8c:d0:47:3e:fc:65:9c:f9:bf:3a:ac:34: 69:32:54:99:95:f4:c5:db:12:00:9b:e1:3f:7b:3f:79:c6:4b: 5a:71:d5:bb:99:54:3f:d4:18:ce:ea:c0:62:12:a3:2e:15:1c: a6:03:55:14:a9:b8:3c:29:fe:ba:54:f1:0a:97:72:79:16:b4: 47:47:a8:2c:4a:83:14:61:b6:25:f1:8e:2b:6c:d5:67:e7:d5: 92:9d:cb:e8:e5:70:cb:b0:5c:02:7f:b3:80:06:2e:90:6a:6c: 22:37:08:ec:6c:16:1c:40:f2:89:78:8e:71:74:a4:fc:3e:f8: e8:2a:62:9d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ1 QUY5NjcyQTVDNjM4QzgxN0JBRkVGNERCREI5RDczNTc1M0Y0RjAeFw0yNDExMjIx NTI0MTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU1M0EwRjc4NDcyNzc1 RDhEMTk4QTRCMUUyRjREMjg0OUYzNDlCNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhsHbDWoKE5KMF1/rbU4nxnQ8Q8TTbS5INqC9FjcdMqB2acmaq 0WEtSOk7hxJwnnkx5A5UEkOZqbhKaUdxT1Eh3RVHShD3aSonvZvcnyaopo9AUD80 Xt8VyEKs9mN5ObBv3pLYa/QDtDDzrT8pFbSMC78V9kEhCBMLkHOGaS8j0LSvPBi1 tjNW1yZE/p1jek6vHfUUWIqO1p95QOp3vjIqNd7O7QWNncpKR+fFuoC2aBf9eIvT ZwdiDMTnpm0GQNpG140YyWd0Gxr0TNFSS9P5n9kw1bvm/0MaLCMKMyAmsrFDcLB2 T/AR9+6oOrGBjK28mW6hozIcrSxiU1SRP4iVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUVToPeEcnddjRmKSx4vTShJ80m04wHwYDVR0jBBgwFoAUNFr5ZypcY4yBe6/v Tb251zV1P08wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw Ni9ORnI1WnlwY1k0eUJlNl92VGIyNTF6VjFQMDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05GcjVaeXBjWTR5QmU2X3ZUYjI1MXpWMVAwOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDYvTkZyNVp5cGNZNHlC ZTZfdlRiMjUxelYxUDA4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADObexXuI/bNwYGaFNlCr8gGEs9JpXu9Uqh8qjlaH+Jx4dBxuVo/RUrUQ4pU fKB07lupHWaZ8DGELJTSdiYqnFd8EASKVnVOnYGfClxep4oR0xppAHch4J3L7Oc8 TWABAg7P849EI6hPTRCXTRBZJUW0vQAPmiG60PJ8mcuXZOW7yMJls4zQRz78ZZz5 vzqsNGkyVJmV9MXbEgCb4T97P3nGS1px1buZVD/UGM7qwGISoy4VHKYDVRSpuDwp /rpU8QqXcnkWtEdHqCxKgxRhtiXxjits1Wfn1ZKdy+jlcMuwXAJ/s4AGLpBqbCI3 COxsFhxA8ol4jnF0pPw++OgqYp0= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org