$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.mft File: 5NFB-TO2ocZem2mg8wQuJNaNEyg.mft (raw, json) Hash identifier: ysSYSqQ4hwipYQTzRUK7s3b/mgoakx9NQRyNuOA0/8M= Subject key identifier: 20:07:C9:B5:5B:15:A5:70:2F:4C:39:D3:DE:70:96:D7:45:24:AE:F6 Authority key identifier: E4:D1:41:F9:33:B6:A1:C6:5E:9B:69:A0:F3:04:2E:24:D6:8D:13:28 Certificate issuer: /CN=E4D141F933B6A1C65E9B69A0F3042E24D68D1328 Certificate serial: 01B0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5NFB-TO2ocZem2mg8wQuJNaNEyg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.mft Manifest number: 01B0 Signing time: Fri 22 Nov 2024 15:24:36 +0000 Manifest this update: Fri 22 Nov 2024 15:24:36 +0000 Manifest next update: Fri 22 Nov 2024 21:24:36 +0000 Files and hashes: 1: 5NFB-TO2ocZem2mg8wQuJNaNEyg.crl (hash: Nt1AfQbLhHB4gxjDVbV57MAFjMg5qagLoVfCcNVOVj8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5NFB-TO2ocZem2mg8wQuJNaNEyg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4D141F933B6A1C65E9B69A0F3042E24D68D1328 Validity Not Before: Nov 22 15:24:36 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2007C9B55B15A5702F4C39D3DE7096D74524AEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:1e:33:03:86:cc:95:e0:a3:1b:25:5f:1f: b9:21:7a:2c:f0:45:fb:a6:20:05:8c:2a:4f:92:18: 16:b1:12:50:25:22:a8:35:a7:e1:fb:09:9e:02:ed: 12:6e:5d:28:20:a4:56:65:93:c0:ad:ad:35:ef:ef: 05:4b:35:e2:1d:fc:27:13:5c:b6:73:8d:19:c4:a5: af:64:cf:8e:db:52:b6:ad:21:95:55:ff:0a:0a:28: 7a:99:f0:57:14:e4:a3:e8:45:60:a2:5c:64:e1:79: e3:fa:47:f2:cb:9e:42:05:38:be:f6:d1:bb:ef:2b: 14:87:4c:08:89:85:c2:bc:b0:7e:08:47:a5:c9:63: 39:6e:20:3b:1c:bd:ac:c8:d8:6d:f3:8e:a8:17:4e: 57:a6:ed:b3:6e:6c:ed:55:93:03:60:4c:c2:4a:54: 5a:ec:71:cb:94:4d:f9:a2:be:2a:8b:01:e3:30:22: 68:56:13:31:3d:db:e7:f2:d9:5b:a5:99:17:35:f5: 87:b5:5c:2b:ae:0c:f0:6a:4d:6e:5a:34:11:55:78: 65:9a:96:a8:49:71:d8:fc:97:ba:d6:f8:89:52:ea: 54:ca:d7:16:dc:75:86:3b:af:ae:66:42:cb:e6:22: 06:45:0c:79:fc:74:39:82:0c:ee:59:ca:63:6b:ce: 93:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:C9:B5:5B:15:A5:70:2F:4C:39:D3:DE:70:96:D7:45:24:AE:F6 X509v3 Authority Key Identifier: keyid:E4:D1:41:F9:33:B6:A1:C6:5E:9B:69:A0:F3:04:2E:24:D6:8D:13:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5NFB-TO2ocZem2mg8wQuJNaNEyg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c8:70:d7:83:5c:c6:1b:d6:99:1e:f2:16:e8:8c:d8:6b:83: e3:7f:74:98:10:81:3d:88:1b:4e:e4:f6:17:3f:82:90:fb:a7: d6:bb:ee:d7:e2:54:e3:d9:02:29:62:9e:ed:42:8f:f0:14:57: ba:bf:f3:54:52:c1:96:36:b2:ef:aa:65:1b:68:dd:9c:b8:a5: 56:f0:91:38:6c:54:3d:a0:e8:dd:ce:f0:08:fc:74:09:b0:04: a4:e1:31:35:bb:22:04:f5:a7:19:47:ca:76:a1:05:bc:c2:0c: 70:e9:26:75:30:b1:d0:81:b5:c9:86:17:32:ce:b8:c1:63:25: 9c:02:04:02:10:b2:3c:52:3a:e7:58:d6:e3:a3:44:64:9c:a5: fa:96:9c:da:3e:4b:36:1d:bc:be:ff:08:c1:70:aa:b6:31:e6: c2:76:05:8a:19:09:04:59:dc:0c:8e:56:9c:28:cf:a8:96:35: 84:4d:fa:bc:0c:3b:86:4f:c0:f1:67:38:bd:a5:51:89:88:ce: 3f:4c:84:bf:64:77:5f:f4:53:e2:2d:d8:76:d3:1b:13:8d:b0: 7b:a0:be:9b:f6:cb:bd:29:80:d0:a7:a0:3b:3b:da:39:87:3a: db:32:01:ef:cb:c3:5c:14:79:3b:20:26:06:bb:12:bc:ed:24: 5e:ba:e6:04 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTRE MTQxRjkzM0I2QTFDNjVFOUI2OUEwRjMwNDJFMjRENjhEMTMyODAeFw0yNDExMjIx NTI0MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIwMDdDOUI1NUIxNUE1 NzAyRjRDMzlEM0RFNzA5NkQ3NDUyNEFFRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ZR4zA4bMleCjGyVfH7kheizwRfumIAWMKk+SGBaxElAlIqg1 p+H7CZ4C7RJuXSggpFZlk8CtrTXv7wVLNeId/CcTXLZzjRnEpa9kz47bUratIZVV /woKKHqZ8FcU5KPoRWCiXGTheeP6R/LLnkIFOL720bvvKxSHTAiJhcK8sH4IR6XJ YzluIDscvazI2G3zjqgXTlem7bNubO1VkwNgTMJKVFrsccuUTfmiviqLAeMwImhW EzE92+fy2VulmRc19Ye1XCuuDPBqTW5aNBFVeGWalqhJcdj8l7rW+IlS6lTK1xbc dYY7r65mQsvmIgZFDHn8dDmCDO5ZymNrzpOHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIAfJtVsVpXAvTDnT3nCW10UkrvYwHwYDVR0jBBgwFoAU5NFB+TO2ocZem2mg 8wQuJNaNEygwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Mi81TkZCLVRPMm9jWmVtMm1nOHdRdUpOYU5FeWcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVORkItVE8yb2NaZW0ybWc4d1F1Sk5hTkV5Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTIvNU5GQi1UTzJvY1pl bTJtZzh3UXVKTmFORXlnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFjIcNeDXMYb1pke8hbojNhrg+N/dJgQgT2IG07k9hc/gpD7p9a77tfiVOPZ Ailinu1Cj/AUV7q/81RSwZY2su+qZRto3Zy4pVbwkThsVD2g6N3O8Aj8dAmwBKTh MTW7IgT1pxlHynahBbzCDHDpJnUwsdCBtcmGFzLOuMFjJZwCBAIQsjxSOudY1uOj RGScpfqWnNo+SzYdvL7/CMFwqrYx5sJ2BYoZCQRZ3AyOVpwoz6iWNYRN+rwMO4ZP wPFnOL2lUYmIzj9MhL9kd1/0U+It2HbTGxONsHugvpv2y70pgNCnoDs72jmHOtsy Ae/Lw1wUeTsgJga7ErztJF665gQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:46 2024 by rpki-client on console-ams.rpki-client.org