$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft File: O3WyLEecFpumBZHB3tRCDFNoHbo.mft (raw, json) Hash identifier: F5wzJ3ItgYJqLLJiBitzZ57pM7Z7QCkMKkXlK6YjJ8k= Subject key identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A Authority key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA Certificate issuer: /CN=3B75B22C479C169BA60591C1DED4420C53681DBA Certificate serial: 3331 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft Manifest number: 3331 Signing time: Fri 22 Nov 2024 15:21:46 +0000 Manifest this update: Fri 22 Nov 2024 15:21:46 +0000 Manifest next update: Fri 22 Nov 2024 21:21:46 +0000 Files and hashes: 1: O3WyLEecFpumBZHB3tRCDFNoHbo.crl (hash: hhbiPWaXQ0ypUaSP5nsvidoec4QR/9lvY8aMgDOqxaQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13105 (0x3331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B75B22C479C169BA60591C1DED4420C53681DBA Validity Not Before: Nov 22 15:21:46 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=61990273765A1569FB9124ECD41D1E65A3BCE24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:70:c3:51:fc:45:f6:3c:42:41:cc:6c:c6: f6:3b:10:a6:ea:4b:8e:1f:ba:3c:c1:40:0d:be:20: 29:e6:25:c3:ca:cb:c3:76:ac:d2:25:66:29:21:46: eb:59:9c:04:f5:69:a0:fa:f2:b1:89:20:64:58:c2: 5e:33:bd:dd:5f:69:6b:f3:f7:a0:79:01:9f:40:cc: 9f:b1:20:ea:97:1e:de:52:46:dc:2e:5b:be:59:77: e1:1f:85:64:97:c8:5c:de:26:9e:79:50:a4:42:c7: b0:05:b2:6a:7b:80:97:0a:00:0d:8a:64:a3:cd:8d: 5e:18:f5:6c:3b:7f:6f:27:5f:27:5d:42:99:f6:d9: 96:9e:11:90:35:96:31:9f:a2:5f:4a:3b:20:19:c6: 33:3a:1a:0e:4a:73:79:e5:75:75:9e:4c:9b:c7:c5: d2:ae:88:5a:d9:98:aa:2b:6d:50:19:c7:bd:86:11: fa:c6:05:27:aa:e9:15:56:e6:61:7c:63:07:53:6f: 5b:9c:99:0c:db:35:a5:78:b7:e9:1e:2f:6b:1d:6d: e7:7a:ae:54:ba:24:fe:8a:ed:ad:90:21:a2:f7:15: 11:11:cb:4a:53:ba:79:08:99:27:53:ae:af:d2:aa: e7:cb:25:89:ec:b1:50:fe:77:31:69:09:85:6a:6f: 07:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A X509v3 Authority Key Identifier: keyid:3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:91:0a:8c:dc:dc:a1:df:c2:07:2c:e9:ae:fb:14:85:14:08: 14:30:cd:ba:81:41:2c:c5:85:ed:58:2c:ce:fb:a0:85:0d:d9: 05:15:b4:74:8d:2b:c4:f9:79:6a:b6:68:f1:7e:0a:19:5e:0c: fb:62:a6:dc:fd:27:b5:d0:2e:71:5a:75:54:47:80:20:c1:00: 40:5c:dc:08:ff:bc:89:a6:ec:65:7c:69:32:0a:84:ce:1e:e1: 07:e2:a1:44:15:96:3b:c9:4b:87:24:f6:36:6e:6c:46:18:49: 3c:63:ed:ed:af:65:1f:6b:e8:75:af:cd:c6:46:07:f3:34:cf: 28:ee:8a:fd:99:21:f4:3c:58:75:74:b5:11:93:fe:bc:31:ed: 2c:bd:05:4c:c7:c0:6e:4b:e9:15:4b:f9:2d:9c:0c:d1:74:c9: 8e:25:5b:ff:f6:66:58:b3:e9:67:47:80:25:28:a1:76:a2:03: 38:96:92:24:71:e4:4b:53:66:c5:a2:69:78:2c:e4:fa:6f:a7: f2:81:81:8b:f1:3b:1e:26:7c:32:03:87:f3:9a:57:6a:bd:23: 6a:45:0c:30:ab:88:a0:74:aa:e7:3e:75:c4:c8:31:b1:c5:3e: d8:12:56:b2:10:f8:7b:4b:58:e3:85:b9:de:33:92:30:ac:36: 67:ce:e2:6e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICMzEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I3 NUIyMkM0NzlDMTY5QkE2MDU5MUMxREVENDQyMEM1MzY4MURCQTAeFw0yNDExMjIx NTIxNDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYxOTkwMjczNzY1QTE1 NjlGQjkxMjRFQ0Q0MUQxRTY1QTNCQ0UyNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2f3DDUfxF9jxCQcxsxvY7EKbqS44fujzBQA2+ICnmJcPKy8N2 rNIlZikhRutZnAT1aaD68rGJIGRYwl4zvd1faWvz96B5AZ9AzJ+xIOqXHt5SRtwu W75Zd+EfhWSXyFzeJp55UKRCx7AFsmp7gJcKAA2KZKPNjV4Y9Ww7f28nXyddQpn2 2ZaeEZA1ljGfol9KOyAZxjM6Gg5Kc3nldXWeTJvHxdKuiFrZmKorbVAZx72GEfrG BSeq6RVW5mF8YwdTb1ucmQzbNaV4t+keL2sdbed6rlS6JP6K7a2QIaL3FRERy0pT unkImSdTrq/SqufLJYnssVD+dzFpCYVqbwebAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUYZkCc3ZaFWn7kSTs1B0eZaO84kowHwYDVR0jBBgwFoAUO3WyLEecFpumBZHB 3tRCDFNoHbowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5 L08zV3lMRWVjRnB1bUJaSEIzdFJDREZOb0hiby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTzNXeUxFZWNGcHVtQlpIQjN0UkNERk5vSGJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5L08zV3lMRWVjRnB1bUJa SEIzdFJDREZOb0hiby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAEkQqM3Nyh38IHLOmu+xSFFAgUMM26gUEsxYXtWCzO+6CFDdkFFbR0jSvE+Xlq tmjxfgoZXgz7Yqbc/Se10C5xWnVUR4AgwQBAXNwI/7yJpuxlfGkyCoTOHuEH4qFE FZY7yUuHJPY2bmxGGEk8Y+3tr2Ufa+h1r83GRgfzNM8o7or9mSH0PFh1dLURk/68 Me0svQVMx8BuS+kVS/ktnAzRdMmOJVv/9mZYs+lnR4AlKKF2ogM4lpIkceRLU2bF oml4LOT6b6fygYGL8TseJnwyA4fzmldqvSNqRQwwq4igdKrnPnXEyDGxxT7YElay EPh7S1jjhbneM5IwrDZnzuJu -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org