$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft File: 1jfzzebYbvkaDKnPorWwML7sCUA.mft (raw, json) Hash identifier: yD8OCQ7MazD9bQDYK3EMN3dmcu4VQ9iF2Xia/UTWO5c= Subject key identifier: DC:FD:43:DA:80:B6:53:C7:05:87:FF:30:64:10:9E:DD:2C:50:86:64 Authority key identifier: D6:37:F3:CD:E6:D8:6E:F9:1A:0C:A9:CF:A2:B5:B0:30:BE:EC:09:40 Certificate issuer: /CN=D637F3CDE6D86EF91A0CA9CFA2B5B030BEEC0940 Certificate serial: 01BC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1jfzzebYbvkaDKnPorWwML7sCUA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft Manifest number: 01BC Signing time: Mon 25 Nov 2024 02:24:28 +0000 Manifest this update: Mon 25 Nov 2024 02:24:28 +0000 Manifest next update: Mon 25 Nov 2024 08:24:28 +0000 Files and hashes: 1: 1jfzzebYbvkaDKnPorWwML7sCUA.crl (hash: la7tCfmAKLxKAXMNbiPssbk2FhLKc9eModHBeKp5ynE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1jfzzebYbvkaDKnPorWwML7sCUA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D637F3CDE6D86EF91A0CA9CFA2B5B030BEEC0940 Validity Not Before: Nov 25 02:24:28 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DCFD43DA80B653C70587FF3064109EDD2C508664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:4d:63:7e:6d:17:70:9d:81:b7:94:36:2b: 09:01:6e:dc:5f:1b:7d:24:9a:bb:db:ac:a8:fd:a1: c2:da:3d:9e:39:4e:b5:ac:cb:20:46:e9:44:1e:f2: 51:30:f8:c8:86:3a:66:58:1e:b9:e6:5d:52:99:8e: 74:6c:37:44:eb:84:97:8d:3d:e5:e3:f1:dc:54:7f: b8:db:b5:14:46:96:4c:a1:aa:2f:36:e1:aa:ca:12: 55:30:64:66:56:15:1c:6f:bd:ba:60:e7:d3:ea:07: 76:4d:16:dc:d5:73:10:f2:12:e6:f7:25:c7:11:23: 37:10:01:af:69:82:bf:7c:e0:eb:ae:1b:c5:bb:24: 41:fe:7b:46:f7:d3:d8:64:65:a2:03:69:3f:e0:7a: 44:23:71:8f:be:81:48:4a:c6:d3:db:63:65:d0:70: e1:e2:78:f9:08:66:a0:22:7c:e7:55:5c:b4:f0:d9: 07:95:58:2b:ad:a2:52:2f:bd:f4:a2:66:07:fa:36: 0d:54:6c:bf:96:46:b5:ec:d8:b9:d7:0d:6c:0d:8a: b4:29:c5:ed:be:ad:51:66:43:fc:70:a0:c0:59:18: 68:9b:75:f9:15:f9:db:69:96:48:7e:33:93:06:d4: 06:71:6a:50:d2:aa:b1:ba:36:32:63:8c:c9:d5:f5: 97:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FD:43:DA:80:B6:53:C7:05:87:FF:30:64:10:9E:DD:2C:50:86:64 X509v3 Authority Key Identifier: keyid:D6:37:F3:CD:E6:D8:6E:F9:1A:0C:A9:CF:A2:B5:B0:30:BE:EC:09:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1jfzzebYbvkaDKnPorWwML7sCUA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:cd:28:c0:f4:52:13:4d:72:fd:8a:85:a8:fa:12:6e:31:a7: 69:2a:55:5b:78:ff:13:68:de:6f:2b:e7:fa:7c:cf:32:85:18: 1e:56:3e:b1:33:a6:fc:1c:06:ec:0b:44:a0:b6:01:f5:82:5d: 43:09:c8:96:79:ed:48:16:8e:0d:3c:b0:f7:9e:b1:b4:ca:aa: c5:62:89:50:6a:83:06:33:07:d4:4b:c0:2a:b4:3e:cf:eb:5e: f2:8a:46:0f:b0:81:91:79:67:cc:ea:fa:cb:b8:2d:c0:d2:9a: 3f:08:47:7c:a4:ed:23:f5:ee:f0:af:b0:3e:79:94:33:11:d0: f7:27:81:4a:83:c0:58:44:e3:1a:90:87:f3:ef:98:ec:88:21: cc:32:bc:3e:e2:59:b5:ea:6e:9d:73:16:db:41:84:1d:e5:5d: 6a:41:ac:90:4b:f7:d0:eb:ee:02:06:d3:1e:da:2d:15:3d:4b: 6a:e6:0b:62:41:96:fe:12:80:14:83:89:d4:51:1d:aa:b5:82: 3e:98:be:f8:a5:40:7f:19:40:fa:ef:57:7c:d3:69:cd:34:58: 61:95:c0:e9:32:0b:d1:76:ca:ae:07:20:16:d4:e2:1e:aa:de: 8f:cd:37:45:1b:ea:91:4c:6b:19:77:ca:3e:27:c2:c1:62:f1: 1d:03:58:2d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDYz N0YzQ0RFNkQ4NkVGOTFBMENBOUNGQTJCNUIwMzBCRUVDMDk0MDAeFw0yNDExMjUw MjI0MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERDRkQ0M0RBODBCNjUz QzcwNTg3RkYzMDY0MTA5RUREMkM1MDg2NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/RU1jfm0XcJ2Bt5Q2KwkBbtxfG30kmrvbrKj9ocLaPZ45TrWs yyBG6UQe8lEw+MiGOmZYHrnmXVKZjnRsN0TrhJeNPeXj8dxUf7jbtRRGlkyhqi82 4arKElUwZGZWFRxvvbpg59PqB3ZNFtzVcxDyEub3JccRIzcQAa9pgr984OuuG8W7 JEH+e0b309hkZaIDaT/gekQjcY++gUhKxtPbY2XQcOHiePkIZqAifOdVXLTw2QeV WCutolIvvfSiZgf6Ng1UbL+WRrXs2LnXDWwNirQpxe2+rVFmQ/xwoMBZGGibdfkV +dtplkh+M5MG1AZxalDSqrG6NjJjjMnV9ZdbAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3P1D2oC2U8cFh/8wZBCe3SxQhmQwHwYDVR0jBBgwFoAU1jfzzebYbvkaDKnP orWwML7sCUAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My8xamZ6emViWWJ2a2FES25Qb3JXd01MN3NDVUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzFqZnp6ZWJZYnZrYURLblBvcld3TUw3c0NVQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTMvMWpmenplYllidmth REtuUG9yV3dNTDdzQ1VBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKjNKMD0UhNNcv2Khaj6Em4xp2kqVVt4/xNo3m8r5/p8zzKFGB5WPrEzpvwc BuwLRKC2AfWCXUMJyJZ57UgWjg08sPeesbTKqsViiVBqgwYzB9RLwCq0Ps/rXvKK Rg+wgZF5Z8zq+su4LcDSmj8IR3yk7SP17vCvsD55lDMR0PcngUqDwFhE4xqQh/Pv mOyIIcwyvD7iWbXqbp1zFttBhB3lXWpBrJBL99Dr7gIG0x7aLRU9S2rmC2JBlv4S gBSDidRRHaq1gj6YvvilQH8ZQPrvV3zTac00WGGVwOkyC9F2yq4HIBbU4h6q3o/N N0Ub6pFMaxl3yj4nwsFi8R0DWC0= -----END CERTIFICATE-----Generated at Mon Nov 25 06:06:54 2024 by rpki-client on console-ams.rpki-client.org