$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft File: OCdChXYoqbKyIFmuiEdvIwYL6tA.mft (raw, json) Hash identifier: uGDB0rLfuFOjNXgxruxd1ERT3FmwVZ7R3WyfiMGXfPc= Subject key identifier: 28:21:5B:26:84:B2:51:CB:C1:6E:81:F4:5A:46:65:8D:87:98:73:05 Authority key identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0 Certificate issuer: /CN=382742857628A9B2B22059AE88476F23060BEAD0 Certificate serial: 27 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft Manifest number: 27 Signing time: Fri 22 Nov 2024 22:52:27 +0000 Manifest this update: Fri 22 Nov 2024 22:52:27 +0000 Manifest next update: Sat 23 Nov 2024 04:52:27 +0000 Files and hashes: 1: OCdChXYoqbKyIFmuiEdvIwYL6tA.crl (hash: JVKA3O2mk6nwbrxD+l/G1NGT92olepZYWdeV0SpPxoE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382742857628A9B2B22059AE88476F23060BEAD0 Validity Not Before: Nov 22 22:52:27 2024 GMT Not After : Nov 15 07:00:21 2025 GMT Subject: CN=28215B2684B251CBC16E81F45A46658D87987305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:72:d5:94:16:40:a9:56:11:27:83:ad:c9: ac:73:2e:26:c8:68:e4:37:1c:e2:b9:5d:8a:dc:5d: 52:91:42:3b:2e:de:b3:6e:fb:38:6c:62:43:f2:65: fe:2d:44:45:7d:02:5c:fb:a1:47:11:13:de:41:4b: e9:61:23:81:c1:3c:01:8c:a8:0c:1b:2b:47:6e:19: 76:95:78:de:65:db:39:ce:e0:22:0e:f5:e1:af:50: 40:ed:f6:61:24:bf:62:9f:a0:eb:d9:b4:02:f1:ea: 85:d3:3d:5e:85:3b:d0:19:a7:a5:e5:cc:a8:12:69: a0:7b:a1:8b:61:e3:bc:89:4a:5e:8a:2b:eb:9c:90: c5:6c:a9:6b:a7:08:2b:86:ba:2e:62:d7:77:ef:ab: 37:a1:fa:a1:c6:27:4e:8f:b0:83:bb:7a:98:51:bd: d9:c4:aa:06:f2:99:ec:0a:ac:d2:44:d7:21:1d:80: f3:d8:6a:3f:70:e1:2f:01:12:2e:8c:85:b2:f7:0e: f7:d9:ae:c6:09:03:cd:cd:05:0b:24:bb:11:96:78: 38:bb:bd:68:67:78:5d:33:a8:1e:f6:97:cc:61:ec: a5:11:dc:9e:e2:70:3c:31:72:f5:59:be:13:fe:f5: 5c:38:80:94:e7:6d:06:32:ca:d6:37:3a:eb:b5:19: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:21:5B:26:84:B2:51:CB:C1:6E:81:F4:5A:46:65:8D:87:98:73:05 X509v3 Authority Key Identifier: keyid:38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:0e:50:d8:d5:94:df:18:17:bc:0a:5b:b7:75:85:f6:c0:8f: dd:7a:11:c6:5b:1c:ef:31:ca:04:6c:2d:f2:c4:bf:49:fd:62: 6b:63:1f:0f:3b:e1:7c:88:c9:71:11:61:c9:94:51:0b:9b:a9: 98:53:77:ed:1f:88:99:43:c8:54:01:3b:9a:cb:b1:db:4f:15: 07:d5:bf:4d:9b:d8:ea:3a:4a:6e:a5:90:94:ef:c8:cd:cd:6d: 1f:c5:a5:3d:e1:42:58:70:b2:f8:8c:b2:9c:ba:7d:cb:15:40: 51:74:57:b8:6d:fc:79:94:10:32:11:ad:ec:e4:76:67:37:5a: 81:05:67:f3:e8:94:ab:d3:a6:b2:d0:73:4a:17:df:80:65:6e: 07:89:ae:16:bc:07:a0:fd:dd:f6:42:0e:5b:9f:67:1c:ae:bd: 81:5c:04:05:63:53:f6:88:a1:c2:6b:24:48:81:2b:6c:9b:5c: 2b:4f:f0:4a:24:66:89:a4:6b:39:42:5b:c1:2a:28:58:b9:30: f7:10:c4:68:a6:97:cb:ad:23:6e:33:3a:49:87:d3:a7:0d:b7: 2b:cb:ce:5a:e2:97:eb:39:0c:fb:c0:b5:e6:f6:a0:84:d4:17: fa:d0:5f:fe:11:89:07:71:1a:0b:39:75:b9:41:17:b2:74:2d: a2:ee:9f:8e -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzODI3 NDI4NTc2MjhBOUIyQjIyMDU5QUU4ODQ3NkYyMzA2MEJFQUQwMB4XDTI0MTEyMjIy NTIyN1oXDTI1MTExNTA3MDAyMVowMzExMC8GA1UEAxMoMjgyMTVCMjY4NEIyNTFD QkMxNkU4MUY0NUE0NjY1OEQ4Nzk4NzMwNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ0mctWUFkCpVhEng63JrHMuJsho5Dcc4rlditxdUpFCOy7es277 OGxiQ/Jl/i1ERX0CXPuhRxET3kFL6WEjgcE8AYyoDBsrR24ZdpV43mXbOc7gIg71 4a9QQO32YSS/Yp+g69m0AvHqhdM9XoU70BmnpeXMqBJpoHuhi2HjvIlKXoor65yQ xWypa6cIK4a6LmLXd++rN6H6ocYnTo+wg7t6mFG92cSqBvKZ7Aqs0kTXIR2A89hq P3DhLwESLoyFsvcO99muxgkDzc0FCyS7EZZ4OLu9aGd4XTOoHvaXzGHspRHcnuJw PDFy9Vm+E/71XDiAlOdtBjLK1jc667UZuf0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQoIVsmhLJRy8FugfRaRmWNh5hzBTAfBgNVHSMEGDAWgBQ4J0KFdiipsrIgWa6I R28jBgvq0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzI4 L09DZENoWFlvcWJLeUlGbXVpRWR2SXdZTDZ0QS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT0NkQ2hYWW9xYkt5SUZtdWlFZHZJd1lMNnRBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMyOC9PQ2RDaFhZb3FiS3lJ Rm11aUVkdkl3WUw2dEEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdg5Q2NWU3xgXvApbt3WF9sCP3XoRxlsc7zHKBGwt8sS/Sf1ia2MfDzvhfIjJ cRFhyZRRC5upmFN37R+ImUPIVAE7msux208VB9W/TZvY6jpKbqWQlO/Izc1tH8Wl PeFCWHCy+IyynLp9yxVAUXRXuG38eZQQMhGt7OR2ZzdagQVn8+iUq9OmstBzShff gGVuB4muFrwHoP3d9kIOW59nHK69gVwEBWNT9oihwmskSIErbJtcK0/wSiRmiaRr OUJbwSooWLkw9xDEaKaXy60jbjM6SYfTpw23K8vOWuKX6zkM+8C15vaghNQX+tBf /hGJB3EaCzl1uUEXsnQtou6fjg== -----END CERTIFICATE-----Generated at Fri Nov 22 23:40:48 2024 by rpki-client on console-fra.rpki-client.org