$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft File: C5DqYM7V_TVorFTKqMxHleSGroY.mft (raw, json) Hash identifier: HUj5EuEOB25J9nvhPzSac32hT4hdz0uFAlTb1n+lIQ0= Subject key identifier: 79:15:97:E3:0D:A8:91:55:E9:44:81:DA:7E:2E:44:06:6F:20:50:C2 Authority key identifier: 0B:90:EA:60:CE:D5:FD:35:68:AC:54:CA:A8:CC:47:95:E4:86:AE:86 Certificate issuer: /CN=0B90EA60CED5FD3568AC54CAA8CC4795E486AE86 Certificate serial: 1793 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5DqYM7V_TVorFTKqMxHleSGroY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft Manifest number: 1793 Signing time: Fri 22 Nov 2024 15:21:38 +0000 Manifest this update: Fri 22 Nov 2024 15:21:38 +0000 Manifest next update: Fri 22 Nov 2024 21:21:38 +0000 Files and hashes: 1: C5DqYM7V_TVorFTKqMxHleSGroY.crl (hash: c+a9kpbpA2QQPhXm7sUNhW2MiRv6pmu3JsWzBYhgVjs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5DqYM7V_TVorFTKqMxHleSGroY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6035 (0x1793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B90EA60CED5FD3568AC54CAA8CC4795E486AE86 Validity Not Before: Nov 22 15:21:38 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=791597E30DA89155E94481DA7E2E44066F2050C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:e7:55:e4:a7:ee:40:b6:48:0a:36:31:99: 45:7f:67:63:ab:61:34:b1:d1:5d:a4:da:d2:c5:0d: a7:e9:3a:c1:7e:18:23:70:3e:d8:55:a5:4d:06:56: 08:ae:d6:e7:2f:c9:a0:9c:67:ca:00:14:00:e8:87: c0:a6:32:a5:16:66:77:4f:96:93:2b:f2:65:17:93: da:f6:a8:ed:5b:d0:b1:9e:ab:53:c3:61:c3:76:a0: 9b:9b:71:2d:7a:51:20:63:f6:54:02:2e:03:e0:93: ba:f1:71:97:50:30:76:c7:0d:3a:23:40:82:0a:1d: 2f:a2:1a:d9:83:d2:5b:3c:49:04:f7:62:e9:a1:be: 33:05:9d:7d:c4:70:3a:e9:9b:e8:ca:f9:17:39:87: 20:a4:b2:56:d3:eb:4c:f7:db:f5:44:b7:3f:88:1c: 44:9c:69:9e:d8:4c:51:2a:1b:99:af:61:cf:98:2e: 39:cd:c8:eb:65:3d:8c:2f:ba:2c:38:8d:d3:94:f5: 45:c0:96:a8:da:1a:05:7d:a6:07:2a:2f:37:34:80: c6:01:88:b7:56:e7:31:81:a2:80:8a:99:d4:81:74: 1c:5a:43:96:cd:91:9b:b6:31:a2:c1:4a:74:77:ec: b8:dd:3b:c8:f7:02:48:32:3c:6b:95:19:59:60:92: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:15:97:E3:0D:A8:91:55:E9:44:81:DA:7E:2E:44:06:6F:20:50:C2 X509v3 Authority Key Identifier: keyid:0B:90:EA:60:CE:D5:FD:35:68:AC:54:CA:A8:CC:47:95:E4:86:AE:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C5DqYM7V_TVorFTKqMxHleSGroY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/C5DqYM7V_TVorFTKqMxHleSGroY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:87:7b:c2:e1:89:a0:84:b1:2b:30:18:15:01:9e:b6:20:87: 6a:88:a2:18:a0:c2:8d:cf:ee:5f:b6:39:ff:8b:66:2e:89:c2: b8:4e:b2:56:29:31:67:b8:e0:5b:9a:f3:09:be:fe:78:ed:c2: eb:7e:fe:08:35:bc:5d:20:68:d0:fa:75:6c:44:dd:02:70:0f: b8:d5:2a:eb:6e:ae:c5:5a:59:69:d7:9d:31:0f:98:8e:7d:44: 96:c9:c3:49:73:a9:2a:40:da:77:b2:aa:28:a6:03:e5:d0:68: 12:53:d8:1c:55:4e:ee:54:d0:27:d4:35:38:71:1e:76:88:7c: 83:60:7d:23:76:80:ea:95:75:85:80:c0:38:f1:e3:ca:53:ab: 06:4f:86:53:86:8f:99:25:e0:e3:cb:b1:1d:46:9c:c0:a1:22: 80:3e:02:e9:f0:19:84:32:c9:80:88:18:7b:94:94:2b:36:bf: 09:7b:02:5f:d2:49:2d:80:6b:80:29:32:87:92:9d:a3:04:e9: 0e:0a:31:8e:bf:64:18:80:1d:e8:f0:a0:49:20:c1:de:c4:06: 45:2a:8c:8b:26:42:42:49:d5:22:87:7e:9a:16:61:0c:e2:bb: 6d:d2:1b:3a:f0:f9:47:68:ad:57:84:18:f5:20:87:bb:0c:d3: ad:21:26:f4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICF5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEI5 MEVBNjBDRUQ1RkQzNTY4QUM1NENBQThDQzQ3OTVFNDg2QUU4NjAeFw0yNDExMjIx NTIxMzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc5MTU5N0UzMERBODkx NTVFOTQ0ODFEQTdFMkU0NDA2NkYyMDUwQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7G+dV5KfuQLZICjYxmUV/Z2OrYTSx0V2k2tLFDafpOsF+GCNw PthVpU0GVgiu1ucvyaCcZ8oAFADoh8CmMqUWZndPlpMr8mUXk9r2qO1b0LGeq1PD YcN2oJubcS16USBj9lQCLgPgk7rxcZdQMHbHDTojQIIKHS+iGtmD0ls8SQT3Yumh vjMFnX3EcDrpm+jK+Rc5hyCkslbT60z32/VEtz+IHEScaZ7YTFEqG5mvYc+YLjnN yOtlPYwvuiw4jdOU9UXAlqjaGgV9pgcqLzc0gMYBiLdW5zGBooCKmdSBdBxaQ5bN kZu2MaLBSnR37LjdO8j3AkgyPGuVGVlgkq5jAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUeRWX4w2okVXpRIHafi5EBm8gUMIwHwYDVR0jBBgwFoAUC5DqYM7V/TVorFTK qMxHleSGroYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDM0 L0M1RHFZTTdWX1RWb3JGVEtxTXhIbGVTR3JvWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQzVEcVlNN1ZfVFZvckZUS3FNeEhsZVNHcm9ZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDM0L0M1RHFZTTdWX1RWb3JG VEtxTXhIbGVTR3JvWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkh3vC4YmghLErMBgVAZ62IIdqiKIYoMKNz+5ftjn/i2YuicK4TrJWKTFnuOBb mvMJvv547cLrfv4INbxdIGjQ+nVsRN0CcA+41Srrbq7FWllp150xD5iOfUSWycNJ c6kqQNp3sqoopgPl0GgSU9gcVU7uVNAn1DU4cR52iHyDYH0jdoDqlXWFgMA48ePK U6sGT4ZTho+ZJeDjy7EdRpzAoSKAPgLp8BmEMsmAiBh7lJQrNr8JewJf0kktgGuA KTKHkp2jBOkOCjGOv2QYgB3o8KBJIMHexAZFKoyLJkJCSdUih36aFmEM4rtt0hs6 8PlHaK1XhBj1IIe7DNOtISb0 -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org