$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft File: _oQChpLxLQXu2qBVm09ecNjMNDA.mft (raw, json) Hash identifier: m+BoHG/IKZZZpbAB5zUgOpKS36eyLyaff+mFxk4CGRs= Subject key identifier: 0E:E5:E8:A1:D3:AC:93:C4:20:D9:9B:5E:CE:10:99:DB:CF:D2:E5:CC Authority key identifier: FE:84:02:86:92:F1:2D:05:EE:DA:A0:55:9B:4F:5E:70:D8:CC:34:30 Certificate issuer: /CN=FE84028692F12D05EEDAA0559B4F5E70D8CC3430 Certificate serial: 26 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_oQChpLxLQXu2qBVm09ecNjMNDA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft Manifest number: 26 Signing time: Fri 22 Nov 2024 17:52:03 +0000 Manifest this update: Fri 22 Nov 2024 17:52:03 +0000 Manifest next update: Fri 22 Nov 2024 23:52:03 +0000 Files and hashes: 1: _oQChpLxLQXu2qBVm09ecNjMNDA.crl (hash: kJi+5QOxsQzHVpHhdCtvglXKv8Uh7fPY7Nr14Amj2LM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_oQChpLxLQXu2qBVm09ecNjMNDA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE84028692F12D05EEDAA0559B4F5E70D8CC3430 Validity Not Before: Nov 22 17:52:03 2024 GMT Not After : Oct 18 02:16:55 2025 GMT Subject: CN=0EE5E8A1D3AC93C420D99B5ECE1099DBCFD2E5CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:0e:60:8f:fd:6f:17:6f:59:0f:25:37:ae: 05:4a:da:1b:89:c7:e0:06:66:85:c9:4a:2d:37:a0: 8b:96:b9:38:70:8e:68:b9:2a:95:e4:28:9f:77:f9: 52:b2:66:e9:3d:24:31:21:bd:3a:1f:9a:38:27:7a: ad:67:10:5f:76:50:b2:91:9f:9f:d9:8d:1a:17:fd: 8b:b3:91:b4:c2:80:b3:41:63:83:1a:3a:86:a5:b5: d1:d8:c7:69:6c:8a:ab:08:85:a6:e1:21:55:ae:18: d2:9f:91:a0:65:f1:5c:55:7e:92:8c:2a:79:98:f9: f2:b5:43:ec:3f:04:24:24:f9:c3:45:24:bf:c6:4e: 25:0a:0b:db:28:49:61:34:47:b8:00:86:23:db:96: 87:5b:43:69:e5:ee:ce:4b:8a:27:45:99:38:76:19: b7:cf:e9:6f:ad:38:3f:52:7d:ef:9c:dd:35:ae:1e: fa:97:2c:e8:f0:2d:d6:1c:67:93:d1:0e:05:48:45: 6a:2f:16:26:58:f9:aa:d8:2a:e0:7e:d2:6f:fd:b3: 87:ae:45:b7:79:cf:2c:84:ad:f7:b7:88:ae:de:7c: af:8e:3b:f0:6a:ba:ed:b5:a2:01:01:e3:a3:22:6e: dc:39:31:d5:1c:2d:b5:65:a8:8e:26:67:dc:e5:e5: eb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E5:E8:A1:D3:AC:93:C4:20:D9:9B:5E:CE:10:99:DB:CF:D2:E5:CC X509v3 Authority Key Identifier: keyid:FE:84:02:86:92:F1:2D:05:EE:DA:A0:55:9B:4F:5E:70:D8:CC:34:30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_oQChpLxLQXu2qBVm09ecNjMNDA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:81:a7:ed:ac:7a:77:3d:8f:24:61:90:06:36:fd:f5:4a:fa: 92:dc:33:a1:1d:d6:43:3f:a9:5f:86:5e:6d:ca:1a:c7:38:e1: 39:2c:2f:23:41:d5:22:48:93:3d:a2:2b:53:b6:98:7c:1c:58: 38:e6:66:0e:da:bb:ab:46:e9:7f:0b:32:42:a5:70:27:cb:55: b6:2e:c5:20:51:e2:bd:9a:ee:80:17:e2:2a:a7:ed:5a:04:7c: b1:ea:a0:bd:11:92:fe:0a:1d:9c:51:fe:9a:29:2a:8a:04:cc: e7:38:88:28:ae:da:d9:22:21:1d:c8:b2:ca:de:5a:a8:1e:86: 2f:96:40:af:a8:74:a9:f6:ba:77:e0:40:17:97:34:80:9f:c1: 21:09:dd:60:1d:2d:4b:69:46:34:97:18:dd:5c:fb:d8:ad:42: 4d:8b:dc:ee:9e:e3:23:ac:84:2b:6c:df:f8:88:c3:32:09:3f: 69:cd:5e:15:0c:0d:2d:68:c0:63:48:44:46:be:70:05:ae:2f: 3c:be:d9:23:7f:f1:9e:9d:3b:35:05:52:1f:b7:ed:c3:99:7f: 20:96:59:8f:56:b0:55:88:a9:74:3a:58:50:87:f2:d4:de:19: 6c:8d:dd:1f:f1:62:5f:00:73:1e:76:38:8f:1f:7a:48:cd:38: d2:8b:09:b5 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRTg0 MDI4NjkyRjEyRDA1RUVEQUEwNTU5QjRGNUU3MEQ4Q0MzNDMwMB4XDTI0MTEyMjE3 NTIwM1oXDTI1MTAxODAyMTY1NVowMzExMC8GA1UEAxMoMEVFNUU4QTFEM0FDOTND NDIwRDk5QjVFQ0UxMDk5REJDRkQyRTVDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMqADmCP/W8Xb1kPJTeuBUraG4nH4AZmhclKLTegi5a5OHCOaLkq leQon3f5UrJm6T0kMSG9Oh+aOCd6rWcQX3ZQspGfn9mNGhf9i7ORtMKAs0Fjgxo6 hqW10djHaWyKqwiFpuEhVa4Y0p+RoGXxXFV+kowqeZj58rVD7D8EJCT5w0Ukv8ZO JQoL2yhJYTRHuACGI9uWh1tDaeXuzkuKJ0WZOHYZt8/pb604P1J975zdNa4e+pcs 6PAt1hxnk9EOBUhFai8WJlj5qtgq4H7Sb/2zh65Ft3nPLISt97eIrt58r4478Gq6 7bWiAQHjoyJu3Dkx1RwttWWojiZn3OXl6zMCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQO5eih06yTxCDZm17OEJnbz9LlzDAfBgNVHSMEGDAWgBT+hAKGkvEtBe7aoFWb T15w2Mw0MDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzI0 L19vUUNocEx4TFFYdTJxQlZtMDllY05qTU5EQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvX29RQ2hwTHhMUVh1MnFCVm0wOWVjTmpNTkRBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMyNC9fb1FDaHBMeExRWHUy cUJWbTA5ZWNOak1OREEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzIGn7ax6dz2PJGGQBjb99Ur6ktwzoR3WQz+pX4ZebcoaxzjhOSwvI0HVIkiT PaIrU7aYfBxYOOZmDtq7q0bpfwsyQqVwJ8tVti7FIFHivZrugBfiKqftWgR8seqg vRGS/godnFH+mikqigTM5ziIKK7a2SIhHciyyt5aqB6GL5ZAr6h0qfa6d+BAF5c0 gJ/BIQndYB0tS2lGNJcY3Vz72K1CTYvc7p7jI6yEK2zf+IjDMgk/ac1eFQwNLWjA Y0hERr5wBa4vPL7ZI3/xnp07NQVSH7ftw5l/IJZZj1awVYipdDpYUIfy1N4ZbI3d H/FiXwBzHnY4jx96SM040osJtQ== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:45 2024 by rpki-client on console-ams.rpki-client.org