$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft File: FHL6rKoK1qRgcZi5A594VETZ_WE.mft (raw, json) Hash identifier: qC3HqW1hdnxmQmFzxkEM1ZUqmZ/f9sANYvBYUz5KcPk= Subject key identifier: C9:4D:4D:8C:A9:58:E4:B9:90:E9:7A:0B:CF:0C:E4:7B:3B:BF:A0:67 Authority key identifier: 14:72:FA:AC:AA:0A:D6:A4:60:71:98:B9:03:9F:78:54:44:D9:FD:61 Certificate issuer: /CN=1472FAACAA0AD6A4607198B9039F785444D9FD61 Certificate serial: B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FHL6rKoK1qRgcZi5A594VETZ_WE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft Manifest number: B9 Signing time: Fri 22 Nov 2024 15:23:12 +0000 Manifest this update: Fri 22 Nov 2024 15:23:12 +0000 Manifest next update: Fri 22 Nov 2024 21:23:12 +0000 Files and hashes: 1: FHL6rKoK1qRgcZi5A594VETZ_WE.crl (hash: SVEO5YrvrlB+ozznX6zA74yrc0v3EPleJyKNGg5oIHg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FHL6rKoK1qRgcZi5A594VETZ_WE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472FAACAA0AD6A4607198B9039F785444D9FD61 Validity Not Before: Nov 22 15:23:12 2024 GMT Not After : Oct 16 11:48:52 2025 GMT Subject: CN=C94D4D8CA958E4B990E97A0BCF0CE47B3BBFA067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:a1:c8:83:f6:a3:0b:72:71:9c:63:5c:08: c3:f1:eb:d9:be:56:84:cc:ac:90:be:c9:30:bf:e0: 3a:e4:73:d7:ab:7f:8b:e2:aa:05:d0:ad:4f:6d:34: 0f:9a:6b:81:38:df:04:b8:a8:15:fa:cf:13:2a:09: d6:56:fe:e5:81:7b:4f:81:41:48:77:05:c9:82:51: e2:d7:89:ec:67:1d:f1:05:e5:3a:f7:0b:13:87:bc: 9a:1c:a8:08:91:1d:4a:63:7c:6d:23:21:73:68:3d: 72:ea:54:b7:5a:2f:d3:b5:14:6f:db:67:d8:e1:43: 9f:3e:51:be:be:fe:08:a9:4f:49:2f:ff:c4:f5:91: 3f:b4:fa:ac:69:db:0c:7b:bb:ce:48:a8:bc:b3:58: 13:32:11:4b:61:91:be:75:8c:cc:77:0e:59:f1:e8: d6:9e:ac:45:a5:c5:7a:02:1e:3c:bd:b6:45:79:ca: f7:b5:f2:11:94:6c:2e:fb:5e:b9:94:8d:42:c2:65: c1:a6:6b:63:12:07:4c:b5:0c:67:b5:01:3c:5b:2f: 7b:1a:cd:e4:3a:80:76:ce:29:37:8b:60:6a:11:4f: 76:23:22:44:fb:2e:65:ee:57:f6:bb:9d:23:f2:83: eb:91:45:fd:0e:0b:1c:c6:e0:f3:e8:34:f5:98:b4: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4D:4D:8C:A9:58:E4:B9:90:E9:7A:0B:CF:0C:E4:7B:3B:BF:A0:67 X509v3 Authority Key Identifier: keyid:14:72:FA:AC:AA:0A:D6:A4:60:71:98:B9:03:9F:78:54:44:D9:FD:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FHL6rKoK1qRgcZi5A594VETZ_WE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/FHL6rKoK1qRgcZi5A594VETZ_WE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:21:c4:4c:ca:a9:15:dc:e2:ae:1c:17:64:34:00:8e:ba:b5: c8:aa:80:eb:43:f7:ee:39:bc:c3:d6:2d:a7:cd:1c:4a:d5:e1: 39:a4:56:2d:52:25:c0:7f:36:32:7b:9d:43:c5:65:53:41:aa: 09:33:47:21:5d:fc:3e:b3:b8:d1:6e:e1:e5:4a:1c:71:aa:25: 16:97:68:78:02:b4:68:c5:70:81:e5:48:f7:f0:82:4a:de:cb: 6d:76:76:ec:2f:9f:ba:f1:f9:dd:f3:8e:a9:f2:38:70:52:50: 34:80:bf:9e:49:c5:9d:6d:b7:80:3d:48:1c:53:95:57:43:57: 72:79:7e:6e:ab:66:1f:73:31:ac:92:e7:85:72:4b:39:5e:6e: 54:bc:b1:f0:5a:10:a2:c7:34:14:0d:f1:1b:57:02:17:ef:2c: 4b:2e:60:47:4f:ff:45:0c:3d:fc:e5:76:cd:35:ed:8a:56:89: ae:b6:4e:c7:ca:c7:8b:64:87:66:13:9a:32:b0:08:21:dd:86: 13:80:19:5d:ef:2e:5e:58:cd:db:e0:5b:32:d5:f1:b8:66:8f: 9d:63:d6:6f:cf:a1:58:c1:b0:b8:8f:a4:dd:d7:ad:2b:cc:67: 3f:5d:df:f4:35:a8:4b:93:2a:96:c1:f9:7b:6b:70:fc:ed:48: cd:a4:b9:ec -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICALkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTQ3 MkZBQUNBQTBBRDZBNDYwNzE5OEI5MDM5Rjc4NTQ0NEQ5RkQ2MTAeFw0yNDExMjIx NTIzMTJaFw0yNTEwMTYxMTQ4NTJaMDMxMTAvBgNVBAMTKEM5NEQ0RDhDQTk1OEU0 Qjk5MEU5N0EwQkNGMENFNDdCM0JCRkEwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNNqHIg/ajC3JxnGNcCMPx69m+VoTMrJC+yTC/4Drkc9erf4vi qgXQrU9tNA+aa4E43wS4qBX6zxMqCdZW/uWBe0+BQUh3BcmCUeLXiexnHfEF5Tr3 CxOHvJocqAiRHUpjfG0jIXNoPXLqVLdaL9O1FG/bZ9jhQ58+Ub6+/gipT0kv/8T1 kT+0+qxp2wx7u85IqLyzWBMyEUthkb51jMx3Dlnx6NaerEWlxXoCHjy9tkV5yve1 8hGUbC77XrmUjULCZcGma2MSB0y1DGe1ATxbL3sazeQ6gHbOKTeLYGoRT3YjIkT7 LmXuV/a7nSPyg+uRRf0OCxzG4PPoNPWYtN+TAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyU1NjKlY5LmQ6XoLzwzkezu/oGcwHwYDVR0jBBgwFoAUFHL6rKoK1qRgcZi5 A594VETZ/WEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy My9GSEw2cktvSzFxUmdjWmk1QTU5NFZFVFpfV0UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZITDZyS29LMXFSZ2NaaTVBNTk0VkVUWl9XRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjMvRkhMNnJLb0sxcVJn Y1ppNUE1OTRWRVRaX1dFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABMhxEzKqRXc4q4cF2Q0AI66tciqgOtD9+45vMPWLafNHErV4TmkVi1SJcB/ NjJ7nUPFZVNBqgkzRyFd/D6zuNFu4eVKHHGqJRaXaHgCtGjFcIHlSPfwgkrey212 duwvn7rx+d3zjqnyOHBSUDSAv55JxZ1tt4A9SBxTlVdDV3J5fm6rZh9zMayS54Vy SzleblS8sfBaEKLHNBQN8RtXAhfvLEsuYEdP/0UMPfzlds017YpWia62TsfKx4tk h2YTmjKwCCHdhhOAGV3vLl5YzdvgWzLV8bhmj51j1m/PoVjBsLiPpN3XrSvMZz9d 3/Q1qEuTKpbB+XtrcPztSM2kuew= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org