$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.mft File: lhDb2veO-a6MqrQpti0mfGB8eN0.mft (raw, json) Hash identifier: d6NnQBOHouW06sQWAbg31jfn3cxQpoJ1UmXS5c/M728= Subject key identifier: D5:46:84:57:8F:D3:93:82:27:36:B3:9A:46:B1:10:60:80:20:15:B7 Authority key identifier: 96:10:DB:DA:F7:8E:F9:AE:8C:AA:B4:29:B6:2D:26:7C:60:7C:78:DD Certificate issuer: /CN=9610DBDAF78EF9AE8CAAB429B62D267C607C78DD Certificate serial: DE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lhDb2veO-a6MqrQpti0mfGB8eN0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.mft Manifest number: DE Signing time: Fri 22 Nov 2024 18:20:56 +0000 Manifest this update: Fri 22 Nov 2024 18:20:56 +0000 Manifest next update: Sat 23 Nov 2024 00:20:56 +0000 Files and hashes: 1: lhDb2veO-a6MqrQpti0mfGB8eN0.crl (hash: bS8rIQYL8B01g6buG2AMdKBQDWCbf0LQH6oB28NOHXk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lhDb2veO-a6MqrQpti0mfGB8eN0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9610DBDAF78EF9AE8CAAB429B62D267C607C78DD Validity Not Before: Nov 22 18:20:56 2024 GMT Not After : Oct 9 05:57:36 2025 GMT Subject: CN=D54684578FD393822736B39A46B11060802015B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:3e:b5:66:c4:1a:dd:cf:33:cf:72:ca:35: ef:3e:75:ba:69:89:18:99:4c:78:5d:fc:6c:ff:bb: bb:7f:78:c5:53:2b:37:a4:57:d1:be:52:85:ee:60: c1:32:a9:6a:6c:69:d6:e8:15:45:8e:4e:43:0d:ca: c3:41:ae:0a:cd:c1:a0:0a:88:51:95:2e:3c:e2:e8: 95:fe:1b:7a:84:d1:ce:14:96:63:8c:9c:b3:ec:de: 08:19:1b:15:c2:50:3a:c6:88:51:d6:13:fc:ea:e8: e1:db:ba:f3:65:a6:90:e9:ca:65:4b:b0:93:32:e9: 59:c4:91:7a:cd:73:0d:c7:d4:4c:13:c1:4f:33:dd: 59:d9:57:c0:e4:37:45:95:dd:6d:ff:ae:ac:93:83: d0:7d:d2:74:4d:d7:a6:0b:0b:45:6f:5b:97:69:da: bc:cb:78:68:1a:f3:5f:12:46:1b:24:5b:f0:77:21: 57:73:36:f4:12:78:82:df:23:42:f4:8f:da:91:15: 2e:f9:b0:81:30:bb:c8:e4:f4:18:34:45:77:3c:c6: 91:4c:5f:e4:8b:69:84:c8:9c:f3:8b:a2:60:f3:e3: 1e:6d:f4:7a:a6:cf:5b:9a:d9:4f:1d:a4:30:50:8e: 74:6c:6c:52:3f:01:5a:c7:b5:53:ba:8f:b0:60:c2: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:46:84:57:8F:D3:93:82:27:36:B3:9A:46:B1:10:60:80:20:15:B7 X509v3 Authority Key Identifier: keyid:96:10:DB:DA:F7:8E:F9:AE:8C:AA:B4:29:B6:2D:26:7C:60:7C:78:DD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lhDb2veO-a6MqrQpti0mfGB8eN0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/lhDb2veO-a6MqrQpti0mfGB8eN0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c1:83:56:e3:13:44:b7:53:f5:1d:3c:e6:01:c6:06:ac:7a: bf:e6:6e:7a:11:9a:2e:5e:0c:28:b5:52:11:36:6d:35:52:2f: 86:bb:e5:ef:df:fc:c7:86:fb:94:52:54:eb:cf:9b:9f:86:84: 5e:39:3b:22:d5:4c:43:e6:c6:ba:6d:dc:20:3d:79:77:04:5c: 49:67:49:93:b1:d6:d0:ea:36:82:1d:35:85:c7:8b:fc:23:34: 5b:b5:01:2e:78:d3:3d:a4:2a:42:99:35:99:7e:2f:0f:b9:6f: ba:03:37:4e:09:3e:b8:68:7b:fa:82:37:a1:42:d5:37:2c:a2: ea:47:71:0d:48:bf:8c:e6:67:99:9c:01:3a:86:12:c7:ad:16: 72:ed:84:34:f2:a1:60:e5:60:9b:6d:8d:5f:69:8e:2b:7b:94: fa:1a:8d:af:93:36:64:fc:4a:7c:ff:d9:fa:13:67:6b:e9:c9: 76:97:17:9b:02:92:61:f6:96:dd:40:90:45:a9:c3:c4:c4:80: cb:f6:42:29:9d:02:dd:0c:f7:94:34:3f:8a:27:f0:58:b7:04: 8a:78:f1:3d:04:a3:be:15:a9:43:46:5e:ed:29:84:a9:92:98: f5:2d:56:9e:c3:9f:a6:83:4b:6a:f3:a2:81:33:2a:18:e4:24: f4:2a:46:ac -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx MERCREFGNzhFRjlBRThDQUFCNDI5QjYyRDI2N0M2MDdDNzhERDAeFw0yNDExMjIx ODIwNTZaFw0yNTEwMDkwNTU3MzZaMDMxMTAvBgNVBAMTKEQ1NDY4NDU3OEZEMzkz ODIyNzM2QjM5QTQ2QjExMDYwODAyMDE1QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFDD61ZsQa3c8zz3LKNe8+dbppiRiZTHhd/Gz/u7t/eMVTKzek V9G+UoXuYMEyqWpsadboFUWOTkMNysNBrgrNwaAKiFGVLjzi6JX+G3qE0c4UlmOM nLPs3ggZGxXCUDrGiFHWE/zq6OHbuvNlppDpymVLsJMy6VnEkXrNcw3H1EwTwU8z 3VnZV8DkN0WV3W3/rqyTg9B90nRN16YLC0VvW5dp2rzLeGga818SRhskW/B3IVdz NvQSeILfI0L0j9qRFS75sIEwu8jk9Bg0RXc8xpFMX+SLaYTInPOLomDz4x5t9Hqm z1ua2U8dpDBQjnRsbFI/AVrHtVO6j7BgwqQ9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU1UaEV4/Tk4InNrOaRrEQYIAgFbcwHwYDVR0jBBgwFoAUlhDb2veO+a6MqrQp ti0mfGB8eN0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OS9saERiMnZlTy1hNk1xclFwdGkwbWZHQjhlTjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xoRGIydmVPLWE2TXFyUXB0aTBtZkdCOGVOMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTkvbGhEYjJ2ZU8tYTZN cXJRcHRpMG1mR0I4ZU4wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADHBg1bjE0S3U/UdPOYBxgaser/mbnoRmi5eDCi1UhE2bTVSL4a75e/f/MeG +5RSVOvPm5+GhF45OyLVTEPmxrpt3CA9eXcEXElnSZOx1tDqNoIdNYXHi/wjNFu1 AS540z2kKkKZNZl+Lw+5b7oDN04JPrhoe/qCN6FC1TcsoupHcQ1Iv4zmZ5mcATqG EsetFnLthDTyoWDlYJttjV9pjit7lPoaja+TNmT8Snz/2foTZ2vpyXaXF5sCkmH2 lt1AkEWpw8TEgMv2QimdAt0M95Q0P4on8Fi3BIp48T0Eo74VqUNGXu0phKmSmPUt Vp7Dn6aDS2rzooEzKhjkJPQqRqw= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:12 2024 by rpki-client on console-fra.rpki-client.org