$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft File: miDBZtl2yaZsainUqrTfjHbUgiU.mft (raw, json) Hash identifier: Mpqe7y+IIZnOe6y/MN7ijnXw3tNQeXpAJSH6O/huQTI= Subject key identifier: 6C:14:23:F4:93:3B:6F:CC:73:82:90:60:CA:9A:B9:43:D0:55:65:1C Authority key identifier: 9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25 Certificate issuer: /CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225 Certificate serial: 0EC6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft Manifest number: 0EC6 Signing time: Fri 22 Nov 2024 15:22:44 +0000 Manifest this update: Fri 22 Nov 2024 15:22:44 +0000 Manifest next update: Fri 22 Nov 2024 21:22:44 +0000 Files and hashes: 1: miDBZtl2yaZsainUqrTfjHbUgiU.crl (hash: VVU3vITV/Y+gu+AZ+/8okkutgABBtJEBPT+ERCoMvuc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3782 (0xec6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225 Validity Not Before: Nov 22 15:22:44 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6C1423F4933B6FCC73829060CA9AB943D055651C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:60:4a:ac:c6:a4:4c:e4:05:11:bc:dd:a3: d2:8a:6c:97:5f:dd:78:2a:11:11:98:dc:cb:39:3d: dd:b1:a6:b1:6c:05:17:ce:2f:c9:69:2f:85:18:1b: f9:46:2c:95:76:4e:34:07:27:67:81:5b:a8:1d:01: cc:53:e8:8e:19:58:c2:01:3d:da:cc:fd:2f:94:07: 51:5b:38:76:7c:ab:2a:34:39:06:be:0c:ba:b3:82: c3:3d:1a:58:17:c6:36:b7:b2:9e:f3:d2:4d:d5:6e: 24:22:72:c4:79:76:a7:dd:8f:48:2b:26:d2:91:f8: df:39:ae:ff:aa:fc:2b:51:73:b9:5e:57:55:84:26: b1:df:2c:fa:08:2d:13:f6:64:01:7a:d9:5c:4a:36: 06:05:e2:d1:92:1b:0e:dd:91:63:38:ed:19:2b:d5: 4b:65:43:35:4f:3a:f3:7f:a2:e4:cd:09:c5:9d:16: e5:90:94:ab:91:f0:de:12:78:8f:b9:8f:bf:db:f3: 76:03:4f:36:6f:8d:e6:33:76:40:43:a9:49:11:73: 8b:77:f7:9e:a1:a8:25:91:db:e4:71:16:86:07:d5: 84:5b:90:cf:7e:45:a8:99:54:85:92:2b:8a:46:aa: 5a:92:a6:80:44:f6:24:e1:19:31:0e:1b:70:78:e8: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:14:23:F4:93:3B:6F:CC:73:82:90:60:CA:9A:B9:43:D0:55:65:1C X509v3 Authority Key Identifier: keyid:9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:58:b3:1a:b7:07:b0:14:f1:78:7a:60:19:bf:2a:13:3e:8e: 5b:eb:96:db:bc:c9:d8:e0:9c:02:03:76:23:57:4b:22:03:c3: cb:5f:cc:f0:ff:ba:d8:03:a7:29:b6:fa:f3:05:7e:31:61:22: 80:86:37:df:0a:b6:aa:8f:37:77:bb:02:bb:39:e8:88:2a:1d: 42:41:d0:ed:68:10:40:24:72:28:dc:6d:5a:03:21:94:4a:ec: 9a:88:91:3c:b8:48:1c:15:eb:3b:9f:11:03:3e:0d:27:00:02: e6:6c:fd:ad:03:b5:d3:e9:92:aa:2c:fa:aa:eb:77:2b:1c:a1: b8:e5:35:60:c0:1e:c5:e5:b6:30:b3:70:61:97:eb:f0:9e:db: 38:b1:37:0b:43:af:d7:c4:e3:81:70:1f:f1:88:17:4c:a4:c2: e3:74:d4:44:f3:50:dd:a9:0b:9e:25:80:b2:82:0e:8e:e5:e9: c0:46:4e:1e:22:c7:0d:d8:b7:61:98:f4:1b:b9:26:76:ed:e0: 60:67:f7:4e:b1:45:68:7f:fc:78:2b:c1:32:a2:0b:3a:91:69: 0c:92:7e:f2:70:27:d6:8c:19:96:d8:74:59:db:db:34:06:cb: c7:9e:c4:12:d9:6a:f1:ae:22:1d:75:9f:fb:f8:11:58:6c:78: 99:a2:c8:e8 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICDsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MEMxNjZEOTc2QzlBNjZDNkEyOUQ0QUFCNERGOEM3NkQ0ODIyNTAeFw0yNDExMjIx NTIyNDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZDMTQyM0Y0OTMzQjZG Q0M3MzgyOTA2MENBOUFCOTQzRDA1NTY1MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC512BKrMakTOQFEbzdo9KKbJdf3XgqERGY3Ms5Pd2xprFsBRfO L8lpL4UYG/lGLJV2TjQHJ2eBW6gdAcxT6I4ZWMIBPdrM/S+UB1FbOHZ8qyo0OQa+ DLqzgsM9GlgXxja3sp7z0k3VbiQicsR5dqfdj0grJtKR+N85rv+q/CtRc7leV1WE JrHfLPoILRP2ZAF62VxKNgYF4tGSGw7dkWM47Rkr1UtlQzVPOvN/ouTNCcWdFuWQ lKuR8N4SeI+5j7/b83YDTzZvjeYzdkBDqUkRc4t3956hqCWR2+RxFoYH1YRbkM9+ RaiZVIWSK4pGqlqSpoBE9iThGTEOG3B46PHrAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUbBQj9JM7b8xzgpBgypq5Q9BVZRwwHwYDVR0jBBgwFoAUmiDBZtl2yaZsainU qrTfjHbUgiUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDQ2 L21pREJadGwyeWFac2FpblVxclRmakhiVWdpVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbWlEQlp0bDJ5YVpzYWluVXFyVGZqSGJVZ2lVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDQ2L21pREJadGwyeWFac2Fp blVxclRmakhiVWdpVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBtWLMatwewFPF4emAZvyoTPo5b65bbvMnY4JwCA3YjV0siA8PLX8zw/7rYA6cp tvrzBX4xYSKAhjffCraqjzd3uwK7OeiIKh1CQdDtaBBAJHIo3G1aAyGUSuyaiJE8 uEgcFes7nxEDPg0nAALmbP2tA7XT6ZKqLPqq63crHKG45TVgwB7F5bYws3Bhl+vw nts4sTcLQ6/XxOOBcB/xiBdMpMLjdNRE81DdqQueJYCygg6O5enARk4eIscN2Ldh mPQbuSZ27eBgZ/dOsUVof/x4K8Eyogs6kWkMkn7ycCfWjBmW2HRZ29s0BsvHnsQS 2WrxriIddZ/7+BFYbHiZosjo -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org