$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft File: JKE7dSyiLWMkgdhuY953eAuDMfw.mft (raw, json) Hash identifier: ulA30APTEEt+j7qVPWGs0CibqOezOlTrE7YuCunT7d4= Subject key identifier: 90:25:59:F5:6A:0D:B1:A4:33:74:A8:E6:69:BC:ED:C3:8D:C0:BB:B0 Authority key identifier: 24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC Certificate issuer: /CN=24A13B752CA22D632481D86E63DE77780B8331FC Certificate serial: 01BC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JKE7dSyiLWMkgdhuY953eAuDMfw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft Manifest number: 01BC Signing time: Mon 25 Nov 2024 02:24:32 +0000 Manifest this update: Mon 25 Nov 2024 02:24:32 +0000 Manifest next update: Mon 25 Nov 2024 08:24:32 +0000 Files and hashes: 1: JKE7dSyiLWMkgdhuY953eAuDMfw.crl (hash: hlPeAqqnkg2tgypak0UXOHhXuxoAuDXVFV4BZ4XD9UQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JKE7dSyiLWMkgdhuY953eAuDMfw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24A13B752CA22D632481D86E63DE77780B8331FC Validity Not Before: Nov 25 02:24:32 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=902559F56A0DB1A43374A8E669BCEDC38DC0BBB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:1f:12:43:ec:03:dc:78:af:4d:0d:b4:97: 49:68:e6:45:43:e3:a8:03:b8:3f:60:cd:67:f4:b1: a1:b5:d5:0a:c3:3f:1d:05:2e:24:fe:66:e7:db:b4: 31:d2:66:97:85:e8:2c:4b:fb:ba:2d:d9:f5:d9:33: 7c:59:b6:9d:26:4c:70:4c:2e:1e:0a:87:90:05:c5: d3:bf:dc:f8:35:3f:5e:5c:bc:af:5a:46:0b:a8:e6: 51:37:c5:44:ce:2f:2c:d1:00:8a:96:4a:7a:2a:0e: 3a:fb:20:01:2b:b1:98:a9:99:7f:75:85:f3:2f:85: 7a:05:48:9c:0d:b1:bd:f4:37:eb:b5:89:b7:e8:52: 42:df:60:23:79:c2:c0:84:9f:0b:5d:70:3b:28:66: 6d:73:4f:19:41:18:d9:44:bf:ff:50:52:84:7b:3d: 5b:e1:ec:d8:1c:83:0a:43:2e:87:78:91:3e:d3:e3: b5:05:08:e3:11:f9:7d:52:e6:af:53:3a:a1:96:31: e5:5e:a5:0b:1f:9b:26:c0:9d:b3:6e:1e:b8:01:45: c9:5c:56:10:e1:76:38:1d:8c:b4:c3:bd:61:ca:69: 30:0e:df:ab:43:60:ba:f3:d0:60:0f:83:c1:75:9f: 0a:5b:91:60:39:90:85:86:4c:3f:97:9a:7a:c5:45: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:25:59:F5:6A:0D:B1:A4:33:74:A8:E6:69:BC:ED:C3:8D:C0:BB:B0 X509v3 Authority Key Identifier: keyid:24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JKE7dSyiLWMkgdhuY953eAuDMfw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:80:4b:f7:f8:b4:77:67:f2:e4:b9:28:8f:88:85:d1:1b:c9: 9d:08:7b:1f:97:11:f7:7f:30:7c:50:07:66:5c:6a:45:5d:8e: e1:a9:55:f3:90:23:90:12:22:1e:19:a6:66:35:c4:f2:2a:ef: 74:12:b4:61:80:55:3d:1f:a8:86:3b:fb:45:25:2b:69:a7:ad: 71:f1:05:40:43:f3:29:a4:aa:f9:47:b8:b9:92:b7:81:d6:a0: 59:06:50:5a:7f:86:df:4c:94:5f:0b:ad:28:e3:47:a3:c9:c9: d2:43:4c:e2:2c:00:26:94:9b:e3:7f:89:88:ea:ca:f9:1a:82: 5d:57:19:81:9b:71:3e:ed:6d:42:8a:03:70:2a:d1:21:a7:ef: fa:bf:3b:62:b8:ea:a0:c5:bf:8b:07:28:d1:73:25:15:15:fe: e6:be:d4:e0:85:02:d2:10:b1:61:f2:fa:e6:94:44:b2:ce:22: f3:b4:59:28:b7:5f:f2:4b:58:68:7a:7b:33:4b:72:90:d9:d9: e9:f2:d6:a0:77:39:d6:08:18:4f:54:98:dd:3a:f9:f7:84:bd: b3:00:4d:46:be:0c:85:2b:b8:ce:a2:a1:a8:3d:8a:35:54:a4: 35:b9:d9:97:f4:79:bb:c8:34:ed:06:5d:15:1e:aa:a9:84:92: 88:24:37:f5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjRB MTNCNzUyQ0EyMkQ2MzI0ODFEODZFNjNERTc3NzgwQjgzMzFGQzAeFw0yNDExMjUw MjI0MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkwMjU1OUY1NkEwREIx QTQzMzc0QThFNjY5QkNFREMzOERDMEJCQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDENR8SQ+wD3HivTQ20l0lo5kVD46gDuD9gzWf0saG11QrDPx0F LiT+ZufbtDHSZpeF6CxL+7ot2fXZM3xZtp0mTHBMLh4Kh5AFxdO/3Pg1P15cvK9a Rguo5lE3xUTOLyzRAIqWSnoqDjr7IAErsZipmX91hfMvhXoFSJwNsb30N+u1ibfo UkLfYCN5wsCEnwtdcDsoZm1zTxlBGNlEv/9QUoR7PVvh7NgcgwpDLod4kT7T47UF COMR+X1S5q9TOqGWMeVepQsfmybAnbNuHrgBRclcVhDhdjgdjLTDvWHKaTAO36tD YLrz0GAPg8F1nwpbkWA5kIWGTD+XmnrFRW75AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUkCVZ9WoNsaQzdKjmabztw43Au7AwHwYDVR0jBBgwFoAUJKE7dSyiLWMkgdhu Y953eAuDMfwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx NC9KS0U3ZFN5aUxXTWtnZGh1WTk1M2VBdURNZncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pLRTdkU3lpTFdNa2dkaHVZOTUzZUF1RE1mdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTQvSktFN2RTeWlMV01r Z2RodVk5NTNlQXVETWZ3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGWAS/f4tHdn8uS5KI+IhdEbyZ0Iex+XEfd/MHxQB2ZcakVdjuGpVfOQI5AS Ih4ZpmY1xPIq73QStGGAVT0fqIY7+0UlK2mnrXHxBUBD8ymkqvlHuLmSt4HWoFkG UFp/ht9MlF8LrSjjR6PJydJDTOIsACaUm+N/iYjqyvkagl1XGYGbcT7tbUKKA3Aq 0SGn7/q/O2K46qDFv4sHKNFzJRUV/ua+1OCFAtIQsWHy+uaURLLOIvO0WSi3X/JL WGh6ezNLcpDZ2eny1qB3OdYIGE9UmN06+feEvbMATUa+DIUruM6ioag9ijVUpDW5 2Zf0ebvINO0GXRUeqqmEkogkN/U= -----END CERTIFICATE-----Generated at Mon Nov 25 06:06:54 2024 by rpki-client on console-ams.rpki-client.org