$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft File: Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft (raw, json) Hash identifier: Tx/wmyL5rACxNvQFqSd8r79gSKInF5RURRt+ULp4Xkk= Subject key identifier: E3:7C:0C:4C:0D:A4:D2:DF:D7:7A:FB:8F:F7:63:C6:2C:FD:42:53:5F Authority key identifier: 43:75:91:26:63:48:FF:6E:3F:A0:21:C6:DC:E6:C5:D0:09:46:EA:76 Certificate issuer: /CN=437591266348FF6E3FA021C6DCE6C5D00946EA76 Certificate serial: 90 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3WRJmNI_24_oCHG3ObF0AlG6nY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft Manifest number: 90 Signing time: Fri 22 Nov 2024 20:21:38 +0000 Manifest this update: Fri 22 Nov 2024 20:21:38 +0000 Manifest next update: Sat 23 Nov 2024 02:21:38 +0000 Files and hashes: 1: Q3WRJmNI_24_oCHG3ObF0AlG6nY.crl (hash: UCx3Z51LPJ0WRsH44acnd5YbDBVxoNRPK1OLQA/goRs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3WRJmNI_24_oCHG3ObF0AlG6nY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437591266348FF6E3FA021C6DCE6C5D00946EA76 Validity Not Before: Nov 22 20:21:38 2024 GMT Not After : Oct 25 01:36:21 2025 GMT Subject: CN=E37C0C4C0DA4D2DFD77AFB8FF763C62CFD42535F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:23:a3:b0:5b:9e:d4:20:b6:f4:f6:06:ac: cd:d7:db:b5:1b:39:25:a8:79:90:57:a9:41:99:52: 71:73:3e:05:8e:ad:ea:9c:94:93:d4:ce:3a:78:46: 90:4b:14:37:0f:45:7d:18:4c:41:b6:73:72:88:05: 99:a2:7b:68:ee:f0:0d:a2:c9:ff:2c:7b:4b:b4:e4: f2:58:64:e7:73:19:df:ea:d5:f6:3b:24:30:2d:42: 47:de:9b:08:26:9f:1a:b7:a1:43:87:5d:d2:ba:79: 4e:3f:0b:04:e0:e7:16:09:83:16:f8:03:54:41:32: c0:7e:90:fd:a7:8f:09:96:77:77:59:47:56:5a:19: 2a:c0:ea:65:b9:70:02:89:96:22:e3:67:aa:94:ef: 61:db:af:35:90:ad:25:65:8c:5a:b0:8c:71:41:6b: 7b:04:20:18:48:22:23:5a:0f:24:dd:8f:c6:bf:b5: 78:6a:47:d0:e7:a0:fd:49:87:05:2c:1f:bb:42:4c: fd:4d:a6:71:d6:0b:b4:18:12:ec:72:29:c9:a3:d0: 8b:1b:2a:d6:e1:1a:5e:10:24:e0:96:0e:34:83:7b: 09:92:6d:4e:2d:0e:ed:f2:2c:48:0f:48:05:c8:e3: ce:5c:fe:81:63:4d:10:ad:bf:d6:27:cb:27:c5:2f: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7C:0C:4C:0D:A4:D2:DF:D7:7A:FB:8F:F7:63:C6:2C:FD:42:53:5F X509v3 Authority Key Identifier: keyid:43:75:91:26:63:48:FF:6E:3F:A0:21:C6:DC:E6:C5:D0:09:46:EA:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3WRJmNI_24_oCHG3ObF0AlG6nY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d4:14:67:70:47:8a:14:bd:51:f9:d6:96:f4:c6:03:c3:70: 2d:40:06:35:88:56:d3:56:0e:f6:9a:10:8d:c2:a1:35:9f:48: 4c:40:28:bd:ee:a4:6a:7e:3f:68:da:c9:6a:a6:1e:e7:e7:ed: 5d:a6:da:7b:f3:4b:6c:e3:3d:27:4a:11:d7:c5:8b:96:59:fb: 91:58:cb:18:13:fb:72:f0:58:2a:c9:16:40:30:76:2d:c6:e7: 57:8b:54:13:93:fb:7c:5c:bd:3f:3c:97:9f:6d:7d:a2:0d:de: 7a:c5:c3:8c:c1:7b:96:7d:4d:a7:40:96:c1:d0:73:c7:80:fc: ef:0e:f5:a3:4a:78:ac:22:93:85:03:09:c3:d0:32:0a:4d:7d: 8d:24:93:30:d1:3d:ac:7d:1a:de:eb:53:b6:6b:59:43:7e:fa: 8e:74:29:bc:ca:ea:67:45:fa:0e:33:0b:76:2b:b4:97:42:dd: 87:5a:f0:06:37:68:6a:7d:46:d3:2d:b3:bf:97:d8:40:33:7e: 7e:39:48:02:42:ea:c9:a8:33:bb:68:d9:7e:cb:8b:2b:15:ef: 97:3d:51:58:83:03:bf:db:16:5e:26:fb:e8:e5:99:fc:08:31: 9e:07:4c:6f:f3:04:cb:ea:4e:cf:42:ad:5b:a0:9a:cc:0a:83: 8b:fc:ca:d1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM3 NTkxMjY2MzQ4RkY2RTNGQTAyMUM2RENFNkM1RDAwOTQ2RUE3NjAeFw0yNDExMjIy MDIxMzhaFw0yNTEwMjUwMTM2MjFaMDMxMTAvBgNVBAMTKEUzN0MwQzRDMERBNEQy REZENzdBRkI4RkY3NjNDNjJDRkQ0MjUzNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5iSOjsFue1CC29PYGrM3X27UbOSWoeZBXqUGZUnFzPgWOreqc lJPUzjp4RpBLFDcPRX0YTEG2c3KIBZmie2ju8A2iyf8se0u05PJYZOdzGd/q1fY7 JDAtQkfemwgmnxq3oUOHXdK6eU4/CwTg5xYJgxb4A1RBMsB+kP2njwmWd3dZR1Za GSrA6mW5cAKJliLjZ6qU72HbrzWQrSVljFqwjHFBa3sEIBhIIiNaDyTdj8a/tXhq R9DnoP1JhwUsH7tCTP1NpnHWC7QYEuxyKcmj0IsbKtbhGl4QJOCWDjSDewmSbU4t Du3yLEgPSAXI485c/oFjTRCtv9YnyyfFL1KPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU43wMTA2k0t/XevuP92PGLP1CU18wHwYDVR0jBBgwFoAUQ3WRJmNI/24/oCHG 3ObF0AlG6nYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy NS9RM1dSSm1OSV8yNF9vQ0hHM09iRjBBbEc2blkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1EzV1JKbU5JXzI0X29DSEczT2JGMEFsRzZuWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjUvUTNXUkptTklfMjRf b0NIRzNPYkYwQWxHNm5ZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHrUFGdwR4oUvVH51pb0xgPDcC1ABjWIVtNWDvaaEI3CoTWfSExAKL3upGp+ P2jayWqmHufn7V2m2nvzS2zjPSdKEdfFi5ZZ+5FYyxgT+3LwWCrJFkAwdi3G51eL VBOT+3xcvT88l59tfaIN3nrFw4zBe5Z9TadAlsHQc8eA/O8O9aNKeKwik4UDCcPQ MgpNfY0kkzDRPax9Gt7rU7ZrWUN++o50KbzK6mdF+g4zC3YrtJdC3Yda8AY3aGp9 RtMts7+X2EAzfn45SAJC6smoM7to2X7LiysV75c9UViDA7/bFl4m++jlmfwIMZ4H TG/zBMvqTs9CrVugmswKg4v8ytE= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:12 2024 by rpki-client on console-fra.rpki-client.org