$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft File: zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft (raw, json) Hash identifier: YvhmzszgE6/0NCCcKHYP+ID4VjdmwFLa6UdQt05CLkY= Subject key identifier: D9:0F:49:1C:61:59:31:CF:27:C8:24:A9:36:F3:B6:68:54:9D:CB:5A Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34 Certificate issuer: /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434 Certificate serial: 13A3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft Manifest number: 1395 Signing time: Fri 22 Nov 2024 20:23:00 +0000 Manifest this update: Fri 22 Nov 2024 20:23:00 +0000 Manifest next update: Sat 23 Nov 2024 02:23:00 +0000 Files and hashes: 1: 3JSE5_wgz7n_jPDbzvvWkxekFRk.roa (hash: ZmhGG8mSY0ZUTvIHB05KK0DVmYntzhSwMCl0MPH0k5A=) 2: Tqy3TIR0j-SfR6A0Mo6xNbnTFe4.roa (hash: aM1BfIGp06BLCUwCMpvCcFnHa0XrhQZ/6QJzVdj5tTM=) 3: qXwp6LTyWXTZ5AizMMP75u6xgcA.roa (hash: tXH+NvY2eV2k4O3x3PM/Kvp1f1OYxLBBqy/Zl2fu+O8=) 4: zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl (hash: 1M+OrunVFDnNFdwILeyoUsKebADnyUCgaftoUxrK4AM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5027 (0x13a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434 Validity Not Before: Nov 22 20:23:00 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D90F491C615931CF27C824A936F3B668549DCB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:3e:5a:ef:50:5a:1d:e9:df:e4:0a:b7:2a: 45:ed:fd:04:a8:d5:a9:7d:29:4c:81:11:c0:d7:7d: 41:02:eb:96:ff:7e:da:03:56:0c:33:37:34:88:32: a0:11:1a:fe:a2:b0:00:b8:64:0e:e6:69:2d:b5:fe: 39:19:18:9f:72:e1:f3:94:29:a8:8c:38:3d:32:af: 42:5b:b8:a2:9b:1b:5a:59:4b:d5:b7:58:3f:b8:55: 5b:1a:47:8b:16:29:24:22:ae:d0:08:9c:d3:fd:be: 77:4e:c5:e8:bd:60:8b:2c:76:93:92:b0:c7:e7:d0: 30:fc:6b:fe:24:2f:00:59:7b:b8:fc:34:ef:ec:b0: 12:f9:0b:5c:e3:ab:a5:d2:04:c1:f8:02:e7:c7:45: 42:17:c4:26:bb:03:1d:e3:a7:6f:1d:b0:52:b4:61: c3:45:17:5a:4e:40:de:02:17:cc:37:e7:fe:fb:2d: d8:97:70:9e:8c:2c:67:ac:ee:01:df:d4:4d:35:cf: de:19:5f:05:b4:c2:67:7c:e8:3f:2d:54:51:fe:8f: 90:c2:9b:2d:e2:8a:d8:b5:f7:f8:68:6f:ef:6e:f8: a7:50:1d:92:0c:f7:8b:2a:04:6d:0b:43:0e:e5:ad: 86:c9:ea:2f:4a:15:f8:ff:e8:6d:f2:de:67:ed:76: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0F:49:1C:61:59:31:CF:27:C8:24:A9:36:F3:B6:68:54:9D:CB:5A X509v3 Authority Key Identifier: keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:22:f6:73:9c:d1:25:5e:16:15:10:c3:ba:67:04:e8:b4:6f: 88:bc:d9:e4:58:b9:9a:4a:49:64:19:63:36:37:f9:cf:07:cb: 08:ba:e1:dd:02:e5:c5:aa:e0:db:67:03:37:6b:6a:30:aa:d2: 3e:2b:88:0b:75:6d:98:e7:b2:3d:8e:07:67:84:bb:9d:c6:ca: 77:62:94:e6:56:3b:39:89:05:0a:4b:44:dd:4a:7b:b8:17:4f: af:49:6c:18:32:bc:42:18:eb:67:c7:48:6d:d7:ab:14:27:b5: d7:58:e2:fa:4a:63:ea:06:1e:9e:7a:92:eb:a5:89:dc:9e:0f: 07:ee:1e:e4:2a:cd:ff:ab:2b:82:b6:20:6e:9e:01:6d:ef:76: 76:c2:3e:90:8d:5e:7f:b2:76:48:85:e7:75:eb:a5:44:99:90: bf:36:ce:a5:18:4a:a9:f2:d9:83:74:7e:e4:5d:48:09:56:2a: ab:9e:ba:44:23:95:dc:6c:5d:a6:90:a3:6d:b5:d5:b1:b9:b4: cb:b3:7e:59:95:8d:bd:02:2d:27:63:1e:18:51:a5:96:49:01: f7:16:77:5c:3e:b7:4f:e1:e2:db:6b:e9:6d:f8:64:59:21:f9: 6d:1e:7c:92:5c:11:45:3f:d5:6b:1f:71:2c:0d:74:33:34:5f: 27:d5:8d:00 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICE6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Uw QTlDQjAyOTM3QjU3RENFNjZBMTdGQjg0MjE2RDdBQkU3NjQzNDAeFw0yNDExMjIy MDIzMDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ5MEY0OTFDNjE1OTMx Q0YyN0M4MjRBOTM2RjNCNjY4NTQ5RENCNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC10T5a71BaHenf5Aq3KkXt/QSo1al9KUyBEcDXfUEC65b/ftoD VgwzNzSIMqARGv6isAC4ZA7maS21/jkZGJ9y4fOUKaiMOD0yr0JbuKKbG1pZS9W3 WD+4VVsaR4sWKSQirtAInNP9vndOxei9YIssdpOSsMfn0DD8a/4kLwBZe7j8NO/s sBL5C1zjq6XSBMH4AufHRUIXxCa7Ax3jp28dsFK0YcNFF1pOQN4CF8w35/77LdiX cJ6MLGes7gHf1E01z94ZXwW0wmd86D8tVFH+j5DCmy3iiti19/hob+9u+KdQHZIM 94sqBG0LQw7lrYbJ6i9KFfj/6G3y3mftdhUJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU2Q9JHGFZMc8nyCSpNvO2aFSdy1owHwYDVR0jBBgwFoAUzgqcsCk3tX3OZqF/ uEIW16vnZDQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3pncWNzQ2szdFgzT1pxRl91RUlXMTZ2blpEUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvemdxY3NDazN0WDNPWnFGX3VFSVcxNnZuWkRRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L3pncWNzQ2szdFgzT1px Rl91RUlXMTZ2blpEUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBTIvZznNElXhYVEMO6ZwTotG+IvNnkWLmaSklkGWM2N/nPB8sIuuHdAuXFquDb ZwM3a2owqtI+K4gLdW2Y57I9jgdnhLudxsp3YpTmVjs5iQUKS0TdSnu4F0+vSWwY MrxCGOtnx0ht16sUJ7XXWOL6SmPqBh6eepLrpYncng8H7h7kKs3/qyuCtiBungFt 73Z2wj6QjV5/snZIhed166VEmZC/Ns6lGEqp8tmDdH7kXUgJViqrnrpEI5XcbF2m kKNttdWxubTLs35ZlY29Ai0nYx4YUaWWSQH3FndcPrdP4eLba+lt+GRZIfltHnyS XBFFP9VrH3EsDXQzNF8n1Y0A -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org