$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft File: iKjPlfPBdEQkezVk72xrva8tcMA.mft (raw, json) Hash identifier: S0U+gf8lSHYZRJmX+vIGmA27sflwxeSFk/3pHwvIvug= Subject key identifier: 27:62:90:1D:BF:6C:FE:9E:16:6C:8E:CA:2F:B5:EA:BF:A7:67:69:4D Authority key identifier: 88:A8:CF:95:F3:C1:74:44:24:7B:35:64:EF:6C:6B:BD:AF:2D:70:C0 Certificate issuer: /CN=88A8CF95F3C17444247B3564EF6C6BBDAF2D70C0 Certificate serial: 01B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKjPlfPBdEQkezVk72xrva8tcMA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft Manifest number: 01B1 Signing time: Fri 22 Nov 2024 20:24:40 +0000 Manifest this update: Fri 22 Nov 2024 20:24:40 +0000 Manifest next update: Sat 23 Nov 2024 02:24:40 +0000 Files and hashes: 1: iKjPlfPBdEQkezVk72xrva8tcMA.crl (hash: JiIXPBlLUd8ZUcRzfPjAmoAhlFOqRsZMM7vCvoCwXKc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKjPlfPBdEQkezVk72xrva8tcMA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88A8CF95F3C17444247B3564EF6C6BBDAF2D70C0 Validity Not Before: Nov 22 20:24:40 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2762901DBF6CFE9E166C8ECA2FB5EABFA767694D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:c8:3e:39:cb:ca:1a:be:d5:b4:ec:e1:1b: 7d:f0:0d:1e:4b:1e:62:06:9b:49:9a:91:dd:56:61: df:d6:09:3e:8c:eb:90:dd:99:4a:95:af:9a:ac:e6: 2e:49:47:d7:f3:4a:79:0a:db:1e:83:05:ac:8f:43: 5a:c3:1e:14:fa:e9:25:21:b7:66:d7:5d:d9:ed:96: 0c:bd:7e:f4:b7:fe:db:8a:4f:f2:13:d5:9f:b8:a8: f9:a5:c0:fa:94:1a:85:d8:2d:24:90:f0:de:9f:e4: 25:3c:00:5c:39:bc:4d:28:6f:f0:3a:c0:14:62:7f: c4:03:99:63:88:e6:98:a8:69:14:28:44:65:da:f7: 10:54:b5:5a:43:1b:f1:e8:4e:61:b9:0e:ea:67:c3: 62:77:46:cc:af:c7:c7:9a:bd:8a:bd:01:8a:25:c8: b3:08:b0:a9:46:b6:c8:ec:9e:22:fe:69:b3:33:a3: a5:17:f7:1b:8e:d5:52:75:44:df:ac:30:4f:c7:0b: 50:da:a3:12:12:e9:eb:d1:bf:ff:7a:77:49:49:ff: 7a:4a:59:66:f2:3f:92:88:1f:90:d4:3f:71:59:fc: 72:84:a7:29:7a:6a:ab:7b:4a:a2:1c:9b:29:b5:19: 64:1d:2d:18:08:1d:0e:8c:87:09:d3:46:4e:ff:04: 9d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:62:90:1D:BF:6C:FE:9E:16:6C:8E:CA:2F:B5:EA:BF:A7:67:69:4D X509v3 Authority Key Identifier: keyid:88:A8:CF:95:F3:C1:74:44:24:7B:35:64:EF:6C:6B:BD:AF:2D:70:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKjPlfPBdEQkezVk72xrva8tcMA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/iKjPlfPBdEQkezVk72xrva8tcMA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:25:47:79:1a:ff:d6:73:c8:cb:35:c5:fd:cb:1e:09:7a:b0: 0c:0b:ac:f7:15:cb:93:e2:ae:3f:2d:69:1a:6d:e5:bc:cd:c0: 51:c3:85:d2:2b:93:c8:27:62:d1:f1:bb:7f:73:bb:da:e6:61: a1:31:b0:80:11:8b:db:51:14:7d:84:aa:65:78:75:62:ab:69: 93:fd:65:15:05:37:43:f8:cb:99:6d:42:94:ae:1d:02:fa:14: 0a:28:63:d4:7a:f4:df:59:a0:a5:a6:5f:04:a6:86:b8:aa:f6: 11:9a:f1:69:97:a3:c3:30:e7:5a:84:03:c9:50:41:49:5e:5a: c7:4f:bb:70:2d:94:e3:36:e0:2a:25:0d:e4:da:d5:83:7b:73: ba:a6:44:32:87:b3:77:05:0e:91:f7:ef:89:97:e8:69:56:f8: cb:95:fa:25:df:8f:9e:eb:fb:5d:19:46:6e:2a:2f:37:87:ab: 66:e3:14:f5:f3:7c:01:a2:7e:65:59:21:aa:e2:95:30:f6:b2: 61:b0:dd:a0:97:96:4e:92:90:50:fd:de:e6:24:cd:01:ed:5a: 2a:d7:ba:04:74:72:e7:ea:56:35:7a:a5:50:87:8b:08:a4:1b: 39:4e:54:da:e9:e3:46:e5:f3:5e:47:fe:51:92:66:f3:14:14: ac:f0:9a:59 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODhB OENGOTVGM0MxNzQ0NDI0N0IzNTY0RUY2QzZCQkRBRjJENzBDMDAeFw0yNDExMjIy MDI0NDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI3NjI5MDFEQkY2Q0ZF OUUxNjZDOEVDQTJGQjVFQUJGQTc2NzY5NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC58g+OcvKGr7VtOzhG33wDR5LHmIGm0makd1WYd/WCT6M65Dd mUqVr5qs5i5JR9fzSnkK2x6DBayPQ1rDHhT66SUht2bXXdntlgy9fvS3/tuKT/IT 1Z+4qPmlwPqUGoXYLSSQ8N6f5CU8AFw5vE0ob/A6wBRif8QDmWOI5pioaRQoRGXa 9xBUtVpDG/HoTmG5Dupnw2J3Rsyvx8eavYq9AYolyLMIsKlGtsjsniL+abMzo6UX 9xuO1VJ1RN+sME/HC1DaoxIS6evRv/96d0lJ/3pKWWbyP5KIH5DUP3FZ/HKEpyl6 aqt7SqIcmym1GWQdLRgIHQ6MhwnTRk7/BJ09AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUJ2KQHb9s/p4WbI7KL7Xqv6dnaU0wHwYDVR0jBBgwFoAUiKjPlfPBdEQkezVk 72xrva8tcMAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Mi9pS2pQbGZQQmRFUWtlelZrNzJ4cnZhOHRjTUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lLalBsZlBCZEVRa2V6Vms3MnhydmE4dGNNQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTIvaUtqUGxmUEJkRVFr ZXpWazcyeHJ2YTh0Y01BLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALglR3ka/9ZzyMs1xf3LHgl6sAwLrPcVy5Pirj8taRpt5bzNwFHDhdIrk8gn YtHxu39zu9rmYaExsIARi9tRFH2EqmV4dWKraZP9ZRUFN0P4y5ltQpSuHQL6FAoo Y9R69N9ZoKWmXwSmhriq9hGa8WmXo8Mw51qEA8lQQUleWsdPu3AtlOM24ColDeTa 1YN7c7qmRDKHs3cFDpH374mX6GlW+MuV+iXfj57r+10ZRm4qLzeHq2bjFPXzfAGi fmVZIarilTD2smGw3aCXlk6SkFD93uYkzQHtWirXugR0cufqVjV6pVCHiwikGzlO VNrp40bl815H/lGSZvMUFKzwmlk= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:45 2024 by rpki-client on console-ams.rpki-client.org