$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft (raw, json) Hash identifier: cuSUzCmesCEA/4fMT0wQKc6MNT6SsGCcj93gczjGqpI= Subject key identifier: 0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 1AA8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft Manifest number: 1A9C Signing time: Fri 22 Nov 2024 10:21:10 +0000 Manifest this update: Fri 22 Nov 2024 10:21:10 +0000 Manifest next update: Fri 22 Nov 2024 16:21:10 +0000 Files and hashes: 1: OQyZYlA3L_6zGPKU7cJhUmPloT0.roa (hash: 4PvLtmaVaaehflB1xT2IuFC7PzrNob69dXRFvSWFcHk=) 2: WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl (hash: SjeCq78SglM7NaLKfjDUbmwI1R7ybuj1FMLNrRdCnLI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6824 (0x1aa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Nov 22 10:21:10 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0FF7B43820ECB68AF7937C9B9CD66589B3C42D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:d9:20:80:19:0d:73:50:8a:80:17:07:69: 25:5f:68:c3:1e:41:10:06:b2:bc:55:45:18:93:0d: 9d:99:01:5f:9f:ae:c8:c1:a8:74:ac:02:b9:86:30: a0:44:86:b1:ef:ff:7f:71:f6:5f:67:c5:57:1b:b7: e7:58:33:6a:38:64:a3:6a:c1:39:40:79:14:f2:8b: f3:23:76:79:60:2a:1e:11:a8:04:f4:72:a0:c3:40: 8b:42:52:f2:17:ce:6d:b8:1f:f6:50:14:ab:57:a2: c6:e8:c7:f1:e5:ea:fc:15:20:09:6d:d5:6d:19:98: 98:71:d8:fe:e2:06:d1:db:a8:50:bc:d9:d1:29:e7: 64:08:47:45:8b:39:da:49:ea:66:e6:3b:a7:35:fd: f9:0b:0e:26:9c:31:fe:c6:a4:cf:5f:dc:1b:bf:45: aa:0a:d7:0c:1f:42:db:e9:1c:58:41:5b:ec:b6:36: 86:99:55:04:49:34:10:72:5d:b0:93:87:0e:2e:75: 5b:5c:72:e8:c9:dc:e3:43:76:8d:a7:2d:ec:9b:24: 0a:58:d2:1d:d7:4c:0f:0a:62:1f:2b:60:b4:7f:84: 6b:16:16:dd:f4:6c:5c:ce:d9:0d:dc:41:0e:04:a4: 56:71:ed:32:45:c0:88:ce:ba:30:65:a4:73:2a:d7: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a2:2f:03:87:a9:54:24:c6:4d:d7:eb:49:b9:3c:56:c8:6f: d6:4e:4d:3f:86:2b:3f:a8:9a:44:ed:90:36:a4:b4:fe:2a:69: bb:bc:d5:eb:c6:fc:69:4c:02:4e:04:1b:20:2c:12:bf:b7:fa: 4d:44:a0:57:a6:32:93:c0:10:92:cf:a5:19:63:de:7d:84:10: b1:1e:f3:99:6a:92:15:06:00:9f:f1:f5:ba:d5:6d:d6:13:f7: f4:a5:c8:6c:a4:45:06:f7:6d:7a:58:93:67:f3:a1:bd:eb:87: 46:0d:e6:bf:2d:ce:f7:b1:17:68:8e:65:a2:07:46:38:ef:c7: f7:1c:e9:b8:38:10:5f:c1:00:b0:f5:22:d4:94:b8:76:e5:34: 64:ef:81:94:71:33:02:7c:57:4a:50:d0:7c:d1:b4:be:fb:d9: d3:7c:fe:08:44:9d:e3:11:d7:48:fc:62:06:90:47:3c:6e:2c: 35:05:29:1d:b8:63:8d:99:78:ec:15:33:9d:63:18:91:da:62: 29:64:a2:02:4b:4d:77:67:22:0d:a3:c7:59:db:85:99:bf:43: 43:60:3d:53:df:cf:a0:58:cf:4a:9f:37:58:53:fd:c6:52:68: 4b:77:60:d8:64:4f:da:72:81:64:10:08:20:8f:92:a2:33:2d: d9:de:3d:98 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNDExMjIx MDIxMTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBGRjdCNDM4MjBFQ0I2 OEFGNzkzN0M5QjlDRDY2NTg5QjNDNDJEOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTYtkggBkNc1CKgBcHaSVfaMMeQRAGsrxVRRiTDZ2ZAV+frsjB qHSsArmGMKBEhrHv/39x9l9nxVcbt+dYM2o4ZKNqwTlAeRTyi/MjdnlgKh4RqAT0 cqDDQItCUvIXzm24H/ZQFKtXosbox/Hl6vwVIAlt1W0ZmJhx2P7iBtHbqFC82dEp 52QIR0WLOdpJ6mbmO6c1/fkLDiacMf7GpM9f3Bu/RaoK1wwfQtvpHFhBW+y2NoaZ VQRJNBByXbCThw4udVtccujJ3ONDdo2nLeybJApY0h3XTA8KYh8rYLR/hGsWFt30 bFzO2Q3cQQ4EpFZx7TJFwIjOujBlpHMq19VLAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUD/e0OCDstor3k3ybnNZlibPELY4wHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL1dGSUd5SFFndmtMSHVR UXQ0LVg5VVZsZjhVcy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXoi8Dh6lUJMZN1+tJuTxWyG/WTk0/his/qJpE7ZA2pLT+Kmm7vNXrxvxpTAJO BBsgLBK/t/pNRKBXpjKTwBCSz6UZY959hBCxHvOZapIVBgCf8fW61W3WE/f0pchs pEUG9216WJNn86G964dGDea/Lc73sRdojmWiB0Y478f3HOm4OBBfwQCw9SLUlLh2 5TRk74GUcTMCfFdKUNB80bS++9nTfP4IRJ3jEddI/GIGkEc8biw1BSkduGONmXjs FTOdYxiR2mIpZKICS013ZyINo8dZ24WZv0NDYD1T38+gWM9KnzdYU/3GUmhLd2DY ZE/acoFkEAggj5KiMy3Z3j2Y -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org