$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft File: KJHRbBFPOs_eoosPXIzhRucxndI.mft (raw, json) Hash identifier: HnNH9kfOYCLaZCAOOI8zZ7HQlt/52e+Mrwh69LWf5lk= Subject key identifier: 12:8B:DB:25:00:09:62:16:0E:FF:52:5F:45:07:AD:10:7D:B3:F9:1B Authority key identifier: 28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2 Certificate issuer: /CN=2891D16C114F3ACFDEA28B0F5C8CE146E7319DD2 Certificate serial: E0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KJHRbBFPOs_eoosPXIzhRucxndI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft Manifest number: E0 Signing time: Tue 26 Nov 2024 07:22:43 +0000 Manifest this update: Tue 26 Nov 2024 07:22:43 +0000 Manifest next update: Tue 26 Nov 2024 13:22:43 +0000 Files and hashes: 1: KJHRbBFPOs_eoosPXIzhRucxndI.crl (hash: b5Lo5yQJVN2DjmQRzztTeO5kKOAc7TLY7IactQRL6UI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KJHRbBFPOs_eoosPXIzhRucxndI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 13:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2891D16C114F3ACFDEA28B0F5C8CE146E7319DD2 Validity Not Before: Nov 26 07:22:43 2024 GMT Not After : Oct 12 07:27:43 2025 GMT Subject: CN=128BDB25000962160EFF525F4507AD107DB3F91B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:32:54:75:d4:88:03:09:4a:b8:38:b3:ac: 8a:72:6a:ae:84:fa:a4:62:00:c6:29:9e:8d:7d:78: ea:51:85:44:72:ac:10:c0:b3:16:be:fc:71:b7:76: 20:63:98:f5:48:d7:1f:57:8d:98:ea:88:a5:75:39: c8:2e:df:7d:ba:6f:4e:c7:5c:fc:cf:09:e2:70:f1: eb:07:9b:38:ac:1c:84:ca:36:f7:31:c5:de:b3:31: d3:ff:30:3b:86:d1:4a:0d:ed:88:5d:d0:d8:8e:05: 60:0b:d6:d3:68:e0:47:90:15:67:68:4e:6e:97:cb: aa:3a:96:8c:c4:26:af:59:cf:3c:8d:67:aa:18:be: 49:eb:7a:98:e6:21:95:03:b3:ae:6d:93:b1:90:19: 7a:4d:19:1d:2c:61:a6:93:ec:4c:15:f5:cd:b2:c2: 29:26:6c:24:61:90:49:01:90:5b:f7:70:94:58:42: 73:4f:0d:b2:3e:fe:cf:6c:0b:f5:d7:fe:1d:9f:31: 51:ff:22:f9:cb:da:ab:18:e2:bb:e8:5a:a0:64:cb: 09:99:b9:29:58:a0:7b:5c:fd:9c:c9:44:83:14:9b: 80:78:6c:16:90:08:d8:95:7d:15:63:d4:b9:13:c9: 11:7a:1a:b7:5e:53:8c:12:98:e2:61:e2:3a:c0:80: b5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8B:DB:25:00:09:62:16:0E:FF:52:5F:45:07:AD:10:7D:B3:F9:1B X509v3 Authority Key Identifier: keyid:28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KJHRbBFPOs_eoosPXIzhRucxndI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f2:ac:45:83:80:fe:bd:1d:14:ae:5a:cc:88:8a:3b:58:e4: 4d:88:c1:32:c5:d6:9d:05:ce:92:ba:c6:5b:dc:1a:45:7a:0c: 82:27:05:38:7a:f7:96:33:32:87:df:fa:e4:23:47:98:74:8b: fd:24:ab:2c:21:c7:7d:a7:b3:3d:d4:fe:1f:c6:30:f6:bc:c1: da:94:ef:99:a5:44:89:7c:fb:e8:6e:5b:ee:04:86:a3:f0:0f: 15:c0:14:70:ac:01:80:05:ad:1b:00:90:87:39:87:48:a2:8f: f9:c2:c5:78:89:44:11:83:42:65:fe:bb:71:a6:fe:cb:f6:da: 11:76:1c:32:15:a6:25:8f:48:a4:6f:ea:ff:26:00:26:9b:73: 4f:8e:66:38:ce:7e:4e:66:85:b0:c2:55:c8:35:57:04:05:d9: ac:17:e1:f8:80:50:c7:d7:90:da:c9:7a:07:65:26:98:60:c1: 2f:ba:44:4b:c2:7a:51:cc:23:b7:b1:77:7b:0b:58:27:08:e9: bf:c9:d5:0e:3f:fe:9a:d1:08:3d:bc:28:68:78:ce:2e:30:32: b6:63:e5:7d:4a:2f:c1:c1:82:6b:19:91:84:e3:28:67:51:72: 78:b9:10:aa:e8:23:f0:a0:5d:4e:96:ae:9e:16:a6:18:1f:f3: 65:00:1f:98 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg5 MUQxNkMxMTRGM0FDRkRFQTI4QjBGNUM4Q0UxNDZFNzMxOUREMjAeFw0yNDExMjYw NzIyNDNaFw0yNTEwMTIwNzI3NDNaMDMxMTAvBgNVBAMTKDEyOEJEQjI1MDAwOTYy MTYwRUZGNTI1RjQ1MDdBRDEwN0RCM0Y5MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAuTJUddSIAwlKuDizrIpyaq6E+qRiAMYpno19eOpRhURyrBDA sxa+/HG3diBjmPVI1x9XjZjqiKV1Ocgu3326b07HXPzPCeJw8esHmzisHITKNvcx xd6zMdP/MDuG0UoN7Yhd0NiOBWAL1tNo4EeQFWdoTm6Xy6o6lozEJq9ZzzyNZ6oY vknrepjmIZUDs65tk7GQGXpNGR0sYaaT7EwV9c2ywikmbCRhkEkBkFv3cJRYQnNP DbI+/s9sC/XX/h2fMVH/IvnL2qsY4rvoWqBkywmZuSlYoHtc/ZzJRIMUm4B4bBaQ CNiVfRVj1LkTyRF6GrdeU4wSmOJh4jrAgLUfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUEovbJQAJYhYO/1JfRQetEH2z+RswHwYDVR0jBBgwFoAUKJHRbBFPOs/eoosP XIzhRucxndIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Mi9LSkhSYkJGUE9zX2Vvb3NQWEl6aFJ1Y3huZEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0tKSFJiQkZQT3NfZW9vc1BYSXpoUnVjeG5kSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjIvS0pIUmJCRlBPc19l b29zUFhJemhSdWN4bmRJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAryrEWDgP69HRSuWsyIijtY5E2IwTLF1p0FzpK6xlvcGkV6DIInBTh695Yz Moff+uQjR5h0i/0kqywhx32nsz3U/h/GMPa8wdqU75mlRIl8++huW+4EhqPwDxXA FHCsAYAFrRsAkIc5h0iij/nCxXiJRBGDQmX+u3Gm/sv22hF2HDIVpiWPSKRv6v8m ACabc0+OZjjOfk5mhbDCVcg1VwQF2awX4fiAUMfXkNrJegdlJphgwS+6REvCelHM I7exd3sLWCcI6b/J1Q4//prRCD28KGh4zi4wMrZj5X1KL8HBgmsZkYTjKGdRcni5 EKroI/CgXU6Wrp4Wphgf82UAH5g= -----END CERTIFICATE-----Generated at Tue Nov 26 11:14:39 2024 by rpki-client on console-fra.rpki-client.org