$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.mft File: UtrlTcDKsEdFGkc8madkNE6mTRc.mft (raw, json) Hash identifier: ja1mudLh8mXZVMnsKfKY98AALsXDK1TMlDWMiqw1uQ8= Subject key identifier: CF:32:6F:5B:D7:6F:41:62:08:E1:D9:25:4A:9B:41:5C:82:1F:8B:BF Authority key identifier: 52:DA:E5:4D:C0:CA:B0:47:45:1A:47:3C:99:A7:64:34:4E:A6:4D:17 Certificate issuer: /CN=52DAE54DC0CAB047451A473C99A764344EA64D17 Certificate serial: 64 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UtrlTcDKsEdFGkc8madkNE6mTRc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.mft Manifest number: 64 Signing time: Mon 25 Nov 2024 02:23:53 +0000 Manifest this update: Mon 25 Nov 2024 02:23:53 +0000 Manifest next update: Mon 25 Nov 2024 08:23:53 +0000 Files and hashes: 1: UtrlTcDKsEdFGkc8madkNE6mTRc.crl (hash: QafiFltCMKO9WTCXCbWj24R5m9dPGeMUTD9A3cBzhJ8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UtrlTcDKsEdFGkc8madkNE6mTRc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DAE54DC0CAB047451A473C99A764344EA64D17 Validity Not Before: Nov 25 02:23:53 2024 GMT Not After : Nov 5 05:25:14 2025 GMT Subject: CN=CF326F5BD76F416208E1D9254A9B415C821F8BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:ac:8a:e4:d9:93:47:af:2c:dd:f8:ef:ad: 8a:a3:94:7a:c5:4b:8b:8a:45:12:67:9f:3c:b9:10: 3a:c2:52:7e:d7:e2:03:44:b1:31:50:b3:3a:a8:b1: 1b:82:df:4a:48:c8:04:99:a4:ce:8e:b6:72:86:07: c4:82:94:ea:f2:0f:88:70:a4:03:a9:6c:b3:d6:25: 9a:87:d7:95:67:7b:a5:8c:88:6e:20:f3:e0:75:f8: d1:6b:ea:61:8f:92:68:31:3e:e5:6c:cd:ba:65:6f: a3:82:0a:47:b2:ed:61:3c:a2:4c:bc:1a:ce:b6:18: 06:0e:c8:1d:30:f7:e6:97:76:5b:b1:50:c9:39:9a: 5e:63:28:d1:6f:2a:7f:90:32:1d:a9:a5:32:0e:88: 85:0a:4d:69:f5:14:bd:60:9d:e7:89:6a:8c:a1:4f: 25:b4:21:28:0c:85:b2:59:bb:45:11:1d:06:ba:8c: cf:48:ca:90:1d:ca:05:2b:3a:b6:ef:d0:62:56:8d: 42:54:d0:af:a4:3d:5f:9e:f7:8a:9d:3d:75:0f:c8: 9c:35:cc:61:e1:de:e8:67:f7:b3:ee:4f:ec:cb:fc: 52:60:9b:c6:bf:4d:d4:e5:2f:ec:7f:83:94:f9:96: eb:73:68:24:92:3c:1d:05:95:3c:65:b1:9f:ba:c3: 7e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:32:6F:5B:D7:6F:41:62:08:E1:D9:25:4A:9B:41:5C:82:1F:8B:BF X509v3 Authority Key Identifier: keyid:52:DA:E5:4D:C0:CA:B0:47:45:1A:47:3C:99:A7:64:34:4E:A6:4D:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UtrlTcDKsEdFGkc8madkNE6mTRc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3327/UtrlTcDKsEdFGkc8madkNE6mTRc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9d:21:2a:7a:0a:f9:a5:73:4d:59:fe:9d:70:3d:29:aa:64: 9e:3c:01:a1:e1:55:81:ce:b4:cd:0e:a1:af:72:93:4c:e3:77: b7:16:a6:6b:26:a9:2d:48:03:5b:67:5d:e0:0f:30:82:84:3d: 9c:a7:b2:e3:8c:0c:f1:e1:6f:8c:3a:f1:0c:06:34:7b:b7:9a: f7:47:81:18:c8:c4:00:78:5c:a0:1b:b2:bd:98:3c:ec:b2:f2: 9c:57:3c:a1:3a:12:31:7e:4b:49:04:a8:fa:a4:9b:8b:a0:cf: 9f:49:dd:1b:1c:3f:e7:34:fb:07:6d:1e:30:f6:f1:34:95:c3: cd:f7:f5:9c:78:b8:89:fa:41:5e:33:f0:e2:2d:9e:73:65:da: e0:c7:6c:3c:b4:7c:75:48:fd:8d:35:d9:ef:fe:75:0d:90:7c: 00:40:83:2c:07:76:5e:5b:b8:75:ee:58:11:8f:8b:74:67:6d: 6f:a7:e7:c3:b9:5f:ed:19:e8:8d:42:1c:15:f6:76:f9:33:48: 9b:f2:e7:d4:52:ec:24:6e:ea:d9:4b:f1:cc:34:ff:d2:99:bb: 98:c6:6d:79:3e:60:87:e8:d9:9c:3a:15:6a:94:39:c5:b6:8d: c4:61:ce:9a:7b:cf:2a:37:39:fd:b1:4e:74:4e:95:78:59:21: d6:50:2e:78 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MkRB RTU0REMwQ0FCMDQ3NDUxQTQ3M0M5OUE3NjQzNDRFQTY0RDE3MB4XDTI0MTEyNTAy MjM1M1oXDTI1MTEwNTA1MjUxNFowMzExMC8GA1UEAxMoQ0YzMjZGNUJENzZGNDE2 MjA4RTFEOTI1NEE5QjQxNUM4MjFGOEJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANKprIrk2ZNHryzd+O+tiqOUesVLi4pFEmefPLkQOsJSftfiA0Sx MVCzOqixG4LfSkjIBJmkzo62coYHxIKU6vIPiHCkA6lss9YlmofXlWd7pYyIbiDz 4HX40WvqYY+SaDE+5WzNumVvo4IKR7LtYTyiTLwazrYYBg7IHTD35pd2W7FQyTma XmMo0W8qf5AyHamlMg6IhQpNafUUvWCd54lqjKFPJbQhKAyFslm7RREdBrqMz0jK kB3KBSs6tu/QYlaNQlTQr6Q9X573ip09dQ/InDXMYeHe6Gf3s+5P7Mv8UmCbxr9N 1OUv7H+DlPmW63NoJJI8HQWVPGWxn7rDfisCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTPMm9b129BYgjh2SVKm0Fcgh+LvzAfBgNVHSMEGDAWgBRS2uVNwMqwR0UaRzyZ p2Q0TqZNFzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzI3 L1V0cmxUY0RLc0VkRkdrYzhtYWRrTkU2bVRSYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVXRybFRjREtzRWRGR2tjOG1hZGtORTZtVFJjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMyNy9VdHJsVGNES3NFZEZH a2M4bWFka05FNm1UUmMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG50hKnoK+aVzTVn+nXA9KapknjwBoeFVgc60zQ6hr3KTTON3txamayapLUgD W2dd4A8wgoQ9nKey44wM8eFvjDrxDAY0e7ea90eBGMjEAHhcoBuyvZg87LLynFc8 oToSMX5LSQSo+qSbi6DPn0ndGxw/5zT7B20eMPbxNJXDzff1nHi4ifpBXjPw4i2e c2Xa4MdsPLR8dUj9jTXZ7/51DZB8AECDLAd2Xlu4de5YEY+LdGdtb6fnw7lf7Rno jUIcFfZ2+TNIm/Ln1FLsJG7q2UvxzDT/0pm7mMZteT5gh+jZnDoVapQ5xbaNxGHO mnvPKjc5/bFOdE6VeFkh1lAueA== -----END CERTIFICATE-----Generated at Mon Nov 25 06:07:53 2024 by rpki-client on console-fra.rpki-client.org