$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft File: ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json) Hash identifier: /o/AxKjQdyXvGDkSaomg0JfQVQ+qsPxVy8OrCU4xs4A= Subject key identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE Certificate serial: 01D9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft Manifest number: 01D9 Signing time: Fri 22 Nov 2024 15:24:10 +0000 Manifest this update: Fri 22 Nov 2024 15:24:10 +0000 Manifest next update: Fri 22 Nov 2024 21:24:10 +0000 Files and hashes: 1: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: xJJY6tq8yGfT7DyNz4qzBUQvaa8BueZ0WNEyukQlMqk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE Validity Not Before: Nov 22 15:24:10 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04: 90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1: 27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3: a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32: 04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9: 2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e: af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f: 45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5: 8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53: 48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca: 0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8: 5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b: 19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03: 2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93: 68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55: a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61: ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 X509v3 Authority Key Identifier: keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:08:f1:38:b4:e0:1d:8b:a7:d1:8b:87:00:96:f5:51:c8:51: 3e:0a:1b:4e:0e:c6:b9:02:08:a7:e6:df:45:14:d8:98:f7:01: 68:31:55:67:c3:d1:28:78:a8:9f:d4:57:d5:d9:09:2c:f0:43: ce:02:f6:f2:2a:33:bf:54:96:ba:5d:02:df:78:66:0f:22:0c: 31:df:e1:f7:d3:df:9e:9d:be:85:e9:01:ee:0e:cb:a0:f8:64: 07:88:37:fb:a2:13:60:1a:24:65:5e:bb:e5:d8:d5:73:49:97: 69:f4:ff:6e:ab:bf:ef:da:66:76:88:7d:b1:41:03:34:6d:fb: db:5a:ac:80:0d:b2:ac:8b:47:e5:7c:3f:25:ad:1b:6b:c3:53: a8:d3:77:75:65:53:ca:19:3a:c1:35:75:b9:6d:bf:ba:ae:c4: b6:62:90:14:9b:b1:68:10:6e:7d:ee:5d:7d:b8:7d:4f:0a:6f: 4c:67:cd:42:47:83:a4:d8:53:76:e2:51:05:d2:a7:ba:4f:3f: 57:6b:50:73:76:3f:d1:b5:8d:44:c5:eb:0c:04:c6:68:1d:7d: e5:f5:aa:ad:86:a9:81:25:08:47:80:0c:d6:79:20:22:ea:fc: be:bc:6f:ab:5d:2a:f0:b2:17:0c:18:6f:c6:43:51:65:cf:08: 2e:d8:70:db -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY5 OTk3MjcxNjIyMjEzOEE0NUEzOUVCMEJGQUE4MTQ5NjgzNDBBRTAeFw0yNDExMjIx NTI0MTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY3MTE0RUU5NjNCNjgz RjhDQzk0RkU5N0JCRUFDRTU5MkU0MDIwQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfQ02hvSPxXx9HtpV7BJA8Pq+epask2MuMAYbzwSeuKJcXFpLS 6jjdESgZ06TCQ7OCKK2unw7eHYGbMgSHqSZvXBmo+hXHpno+6S3HVl/iZvqio+5o 4vepfq8687OBVJCkMGRb5SNhT0XLFbPjhVbo7ocanhFfpYxfDqufLaihVz2fmf7v U0idWL0RT37x0Pg6m+TGyg3X1dNGEN4NGy4/PsJX+F3MVrnfCEPg8xYDFs+LKxk+ 7+8kWdy8eS1WDf6dAy5HL+o3XNI535V/nhNjk2j/ZHjCZ1cnhomIwuvHVaJyeKQ1 nKSvRDX94Z6yYepBdAgom2JiLEn6FCDd91BzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZxFO6WO2g/jMlP6Xu+rOWS5AIMEwHwYDVR0jBBgwFoAUZpmXJxYiITikWjnr C/qoFJaDQK4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw OS9acG1YSnhZaUlUaWtXam5yQ19xb0ZKYURRSzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1pwbVhKeFlpSVRpa1dqbnJDX3FvRkphRFFLNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDkvWnBtWEp4WWlJVGlr V2puckNfcW9GSmFEUUs0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF0I8Ti04B2Lp9GLhwCW9VHIUT4KG04OxrkCCKfm30UU2Jj3AWgxVWfD0Sh4 qJ/UV9XZCSzwQ84C9vIqM79UlrpdAt94Zg8iDDHf4ffT356dvoXpAe4Oy6D4ZAeI N/uiE2AaJGVeu+XY1XNJl2n0/26rv+/aZnaIfbFBAzRt+9tarIANsqyLR+V8PyWt G2vDU6jTd3VlU8oZOsE1dbltv7quxLZikBSbsWgQbn3uXX24fU8Kb0xnzUJHg6TY U3biUQXSp7pPP1drUHN2P9G1jUTF6wwExmgdfeX1qq2GqYElCEeADNZ5ICLq/L68 b6tdKvCyFwwYb8ZDUWXPCC7YcNs= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org