$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft File: 4D4PjKiQjhc6NwrDMIv3bA6iep0.mft (raw, json) Hash identifier: oSuyWKH2v53KM5gvynldaXKaznvj6lARzzOpkjURL5w= Subject key identifier: 74:A7:94:06:07:38:05:A9:F4:45:68:1B:96:96:9F:04:F5:E1:F5:92 Authority key identifier: E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D Certificate issuer: /CN=E03E0F8CA8908E173A370AC3308BF76C0EA27A9D Certificate serial: 023F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft Manifest number: 023F Signing time: Fri 22 Nov 2024 13:20:34 +0000 Manifest this update: Fri 22 Nov 2024 13:20:34 +0000 Manifest next update: Fri 22 Nov 2024 19:20:34 +0000 Files and hashes: 1: 4D4PjKiQjhc6NwrDMIv3bA6iep0.crl (hash: XcZiy9cTsubiax1M8v8dRI/BYZicwaYBuzZ/df6Xgmg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E03E0F8CA8908E173A370AC3308BF76C0EA27A9D Validity Not Before: Nov 22 13:20:34 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=74A79406073805A9F445681B96969F04F5E1F592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:3a:9d:5e:bc:cb:a1:ee:ef:5f:8f:2a:0d: 5d:b2:d6:88:1a:ae:d6:12:50:ac:8b:44:0c:e8:ba: 42:2d:b8:55:49:0a:75:e9:f5:96:43:7c:08:01:cc: 23:41:32:00:d5:ca:81:29:88:0c:32:80:55:4b:f4: 54:b6:b7:1d:cf:cb:91:05:3f:ae:80:e8:9c:5b:e9: 55:81:f9:2c:73:99:d9:ba:20:43:ec:d0:b0:9d:f4: 16:f9:27:f3:1a:c4:03:0c:c2:3e:8e:fe:ff:22:d1: 8e:50:30:36:5e:3c:38:0c:48:3b:99:6c:35:3a:39: bc:78:68:3f:c8:3d:a9:c4:77:01:79:21:0c:1f:ba: e6:70:33:21:91:bb:a4:2a:30:10:82:a6:90:93:85: 84:9b:30:76:60:ec:31:e9:67:5d:51:7e:5a:f3:15: e2:64:f8:ac:d8:02:86:b7:fc:40:be:3f:c3:bd:10: 3b:20:ea:76:27:4f:65:41:bd:a7:70:5a:ba:77:52: bc:b6:cf:4f:f6:50:d6:cf:d6:2b:ce:0b:80:03:d8: f8:aa:8c:02:0a:40:7a:03:89:e9:ba:be:a9:f6:85: ff:45:d7:1a:b2:bf:89:54:5d:f0:7d:a3:a4:bc:8d: 4b:1a:6a:aa:62:5e:e6:90:11:0e:2a:9a:43:b6:a6: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A7:94:06:07:38:05:A9:F4:45:68:1B:96:96:9F:04:F5:E1:F5:92 X509v3 Authority Key Identifier: keyid:E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:df:bd:4d:44:88:b0:80:4a:6e:ae:c4:53:44:c1:2b:f7:17: 0f:a1:e1:6f:b0:fe:50:35:2e:93:25:bf:82:7c:40:b5:6f:df: a4:63:b1:1d:24:02:8f:93:16:73:63:dc:ff:cd:c6:bb:bf:77: 42:a1:d7:36:a7:c7:7b:ab:17:08:d8:ed:72:6a:08:42:60:c5: 29:4d:45:fd:44:21:e7:82:fb:94:d2:1f:a6:3b:c2:b2:d4:92: 17:6b:26:54:e0:c2:8c:70:5b:f5:a5:12:e4:63:1d:e8:02:64: 72:61:4e:2f:4e:96:e8:36:34:06:74:a7:35:14:a4:3b:85:d4: 66:5b:f3:f4:62:26:cd:da:35:46:ac:51:0f:c3:c3:8c:42:61: fb:88:21:d8:a3:56:96:ed:5b:82:c5:80:7e:dc:23:8e:ec:45: c5:a2:8a:c1:b5:b9:8f:48:55:ba:ba:08:02:12:b4:f6:cb:46: b9:39:67:c1:d5:25:93:12:38:0a:df:64:8a:ca:f7:0c:86:fd: 35:c0:cb:4c:1d:23:2d:4d:03:ca:dd:d2:e0:c9:92:90:53:f7: a1:d9:0a:c3:f1:0c:d2:e6:9e:4f:7c:78:4e:2d:4f:b1:10:6f: 3c:2c:f1:44:99:25:3d:66:67:ab:cc:29:14:ee:f2:0f:3e:2b: 12:0f:77:c9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAz RTBGOENBODkwOEUxNzNBMzcwQUMzMzA4QkY3NkMwRUEyN0E5RDAeFw0yNDExMjIx MzIwMzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc0QTc5NDA2MDczODA1 QTlGNDQ1NjgxQjk2OTY5RjA0RjVFMUY1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj8jqdXrzLoe7vX48qDV2y1ogartYSUKyLRAzoukItuFVJCnXp 9ZZDfAgBzCNBMgDVyoEpiAwygFVL9FS2tx3Py5EFP66A6Jxb6VWB+Sxzmdm6IEPs 0LCd9Bb5J/MaxAMMwj6O/v8i0Y5QMDZePDgMSDuZbDU6Obx4aD/IPanEdwF5IQwf uuZwMyGRu6QqMBCCppCThYSbMHZg7DHpZ11RflrzFeJk+KzYAoa3/EC+P8O9EDsg 6nYnT2VBvadwWrp3Ury2z0/2UNbP1ivOC4AD2PiqjAIKQHoDiem6vqn2hf9F1xqy v4lUXfB9o6S8jUsaaqpiXuaQEQ4qmkO2pkRPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdKeUBgc4Ban0RWgblpafBPXh9ZIwHwYDVR0jBBgwFoAU4D4PjKiQjhc6NwrD MIv3bA6iep0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw Ny80RDRQaktpUWpoYzZOd3JETUl2M2JBNmllcDAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRENFBqS2lRamhjNk53ckRNSXYzYkE2aWVwMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDcvNEQ0UGpLaVFqaGM2 TndyRE1JdjNiQTZpZXAwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJTfvU1EiLCASm6uxFNEwSv3Fw+h4W+w/lA1LpMlv4J8QLVv36RjsR0kAo+T FnNj3P/Nxru/d0Kh1zanx3urFwjY7XJqCEJgxSlNRf1EIeeC+5TSH6Y7wrLUkhdr JlTgwoxwW/WlEuRjHegCZHJhTi9Olug2NAZ0pzUUpDuF1GZb8/RiJs3aNUasUQ/D w4xCYfuIIdijVpbtW4LFgH7cI47sRcWiisG1uY9IVbq6CAIStPbLRrk5Z8HVJZMS OArfZIrK9wyG/TXAy0wdIy1NA8rd0uDJkpBT96HZCsPxDNLmnk98eE4tT7EQbzws 8USZJT1mZ6vMKRTu8g8+KxIPd8k= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org