$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft File: zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft (raw, json) Hash identifier: e+21+79lZ5+gB+uA/3K5QJ4uSl0RzIwi7RbKNrV2JS4= Subject key identifier: 52:5E:66:19:12:15:EC:C0:61:97:4A:DA:55:D6:26:AC:F4:E5:D5:A7 Authority key identifier: CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 Certificate issuer: /CN=CE0478FABE9196B54D0BD1AA84CB39073D6CF9F9 Certificate serial: 32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft Manifest number: 32 Signing time: Mon 25 Nov 2024 04:53:12 +0000 Manifest this update: Mon 25 Nov 2024 04:53:12 +0000 Manifest next update: Mon 25 Nov 2024 10:53:12 +0000 Files and hashes: 1: zgR4-r6RlrVNC9GqhMs5Bz1s-fk.crl (hash: WPlCMkL0+bknSV872Q/IjABKBbvm1ckweWM/6QETBUo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0478FABE9196B54D0BD1AA84CB39073D6CF9F9 Validity Not Before: Nov 25 04:53:12 2024 GMT Not After : Nov 15 07:49:33 2025 GMT Subject: CN=525E66191215ECC061974ADA55D626ACF4E5D5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:c6:7c:39:63:96:f1:d6:55:de:3a:6e:e7: d5:a7:5b:44:06:e6:54:93:82:46:5a:f7:cb:3d:fb: ba:4e:6c:47:e8:a4:84:dc:83:a3:3d:e1:bd:3d:8a: 38:9e:0c:98:eb:f0:da:e6:dd:b4:92:45:bc:c6:02: af:25:cb:91:01:db:b9:58:b8:0b:5d:bb:d4:e4:db: f0:02:b9:81:1c:bf:5f:d5:e4:7a:f3:fc:25:6b:76: 4d:e9:0e:72:0b:dc:f9:2b:7c:ad:d6:47:ac:ef:eb: b4:23:5d:bb:f9:cf:ef:ce:bf:53:24:20:7a:fb:15: 02:fc:d5:bb:c6:27:8b:e2:3b:ec:2f:43:94:8e:77: 56:f5:37:17:11:33:8f:e8:6d:af:92:0d:47:5d:e5: 75:08:ac:7b:05:30:51:d1:cc:dd:6e:ca:6c:cc:e7: 7e:15:16:d8:72:24:e1:f6:aa:77:21:69:46:75:10: 3f:ca:2f:06:51:60:63:96:3b:ac:38:78:a2:a3:93: 75:72:74:9f:2b:9f:b5:cd:de:0f:62:3e:7a:ad:bb: ac:c8:88:0d:73:ce:8b:f2:8a:96:14:28:07:91:fb: 0c:53:ee:e5:66:11:eb:40:96:72:23:8f:f5:e0:a8: a9:ae:2e:11:e8:7f:a9:bb:af:29:7f:a3:55:9b:2a: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:66:19:12:15:EC:C0:61:97:4A:DA:55:D6:26:AC:F4:E5:D5:A7 X509v3 Authority Key Identifier: keyid:CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:19:98:57:a9:9a:1e:4e:7c:6a:9b:56:df:11:f7:ff:20:1e: bd:71:67:3f:5c:d2:53:fc:e0:2d:25:59:a5:c5:53:0e:46:64: 2a:ff:be:04:5b:51:ac:cf:91:ca:75:a2:9f:80:7f:7f:30:0d: 23:32:c1:b6:66:93:a0:f2:fc:6f:87:ac:7a:9f:b2:87:ac:6d: 54:ba:a6:48:d1:51:d3:8d:97:2d:c3:61:d6:67:ca:48:91:a5: 88:49:51:79:df:3e:5e:26:16:d6:fc:74:31:3f:b8:d1:15:35: b3:b0:8e:88:00:59:ae:94:96:eb:92:e6:9b:56:41:83:59:6f: 73:e3:60:f2:cf:43:b0:6d:d6:d6:a9:9f:d6:0e:34:fe:b7:c8: b4:48:20:66:6e:3c:f2:25:33:32:e5:26:dc:05:59:a5:51:81: a8:09:8e:c7:ca:9a:5e:17:bb:29:43:24:7b:fb:2a:7c:ca:c6: 2e:41:f4:ce:95:9b:67:64:55:85:bc:22:d4:04:d0:4f:f3:27: 96:9e:29:15:e0:e0:7d:c3:cb:dd:b1:3c:8c:09:ab:9a:f0:a2: 3d:50:65:ab:4d:0a:2a:59:55:36:7e:4f:1c:5f:0d:24:9f:21: b8:63:8f:38:0b:eb:0d:91:e1:f7:eb:12:bf:a4:43:36:12:19: 8e:90:84:f5 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA0 NzhGQUJFOTE5NkI1NEQwQkQxQUE4NENCMzkwNzNENkNGOUY5MB4XDTI0MTEyNTA0 NTMxMloXDTI1MTExNTA3NDkzM1owMzExMC8GA1UEAxMoNTI1RTY2MTkxMjE1RUND MDYxOTc0QURBNTVENjI2QUNGNEU1RDVBNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALtgxnw5Y5bx1lXeOm7n1adbRAbmVJOCRlr3yz37uk5sR+ikhNyD oz3hvT2KOJ4MmOvw2ubdtJJFvMYCryXLkQHbuVi4C1271OTb8AK5gRy/X9XkevP8 JWt2TekOcgvc+St8rdZHrO/rtCNdu/nP786/UyQgevsVAvzVu8Yni+I77C9DlI53 VvU3FxEzj+htr5INR13ldQisewUwUdHM3W7KbMznfhUW2HIk4faqdyFpRnUQP8ov BlFgY5Y7rDh4oqOTdXJ0nyuftc3eD2I+eq27rMiIDXPOi/KKlhQoB5H7DFPu5WYR 60CWciOP9eCoqa4uEeh/qbuvKX+jVZsq09MCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRSXmYZEhXswGGXStpV1ias9OXVpzAfBgNVHSMEGDAWgBTOBHj6vpGWtU0L0aqE yzkHPWz5+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzI5 L3pnUjQtcjZSbHJWTkM5R3FoTXM1Qnoxcy1may5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvemdSNC1yNlJsclZOQzlHcWhNczVCejFzLWZrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMyOS96Z1I0LXI2UmxyVk5D OUdxaE1zNUJ6MXMtZmsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3BmYV6maHk58aptW3xH3/yAevXFnP1zSU/zgLSVZpcVTDkZkKv++BFtRrM+R ynWin4B/fzANIzLBtmaToPL8b4esep+yh6xtVLqmSNFR042XLcNh1mfKSJGliElR ed8+XiYW1vx0MT+40RU1s7COiABZrpSW65Lmm1ZBg1lvc+Ng8s9DsG3W1qmf1g40 /rfItEggZm488iUzMuUm3AVZpVGBqAmOx8qaXhe7KUMke/sqfMrGLkH0zpWbZ2RV hbwi1ATQT/Mnlp4pFeDgfcPL3bE8jAmrmvCiPVBlq00KKllVNn5PHF8NJJ8huGOP OAvrDZHh9+sSv6RDNhIZjpCE9Q== -----END CERTIFICATE-----Generated at Mon Nov 25 06:06:54 2024 by rpki-client on console-ams.rpki-client.org