$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft File: -DfclmpQcbs64qfxU-0kRUEyris.mft (raw, json) Hash identifier: lBv/KHdpwkitzGaa6+rKVIbmL125eq6LTYu5W/qeSTU= Subject key identifier: A0:2C:0D:F6:B5:BA:61:A7:F2:BD:BF:A5:33:52:E4:21:11:71:56:5C Authority key identifier: F8:37:DC:96:6A:50:71:BB:3A:E2:A7:F1:53:ED:24:45:41:32:AE:2B Certificate issuer: /CN=F837DC966A5071BB3AE2A7F153ED24454132AE2B Certificate serial: 27FB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DfclmpQcbs64qfxU-0kRUEyris.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft Manifest number: 27FB Signing time: Fri 22 Nov 2024 15:23:29 +0000 Manifest this update: Fri 22 Nov 2024 15:23:29 +0000 Manifest next update: Fri 22 Nov 2024 21:23:29 +0000 Files and hashes: 1: -DfclmpQcbs64qfxU-0kRUEyris.crl (hash: fYpHLnT5JhNPhUKj+p3MdsSYik6/3bbd739mVvOwJok=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DfclmpQcbs64qfxU-0kRUEyris.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10235 (0x27fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F837DC966A5071BB3AE2A7F153ED24454132AE2B Validity Not Before: Nov 22 15:23:29 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A02C0DF6B5BA61A7F2BDBFA53352E4211171565C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:2c:d4:3b:19:01:a8:73:ac:45:a6:c1:13: ba:13:56:58:a9:05:b2:47:4a:35:1e:60:af:61:b6: 7a:f4:58:ff:51:d4:ca:1c:70:56:29:59:f0:e3:8c: 4a:5a:af:b6:84:8e:53:8d:d4:47:41:77:6c:d2:17: 73:c0:6e:5e:48:3c:21:6a:24:06:72:1c:06:49:80: 15:24:30:03:8e:70:d0:86:57:81:ef:2e:9b:0d:6c: d0:ef:05:42:52:ea:3a:61:ce:63:d3:b3:df:42:09: 51:6c:c3:89:37:d0:f7:da:6d:cc:cf:2b:ca:42:8c: 0a:d4:ce:76:f1:b2:04:36:30:eb:ce:73:84:fd:f8: 69:9f:a5:1b:42:a9:fa:dd:50:3a:6b:09:21:17:08: 8d:9d:8f:80:8e:06:43:da:20:79:29:2b:d7:5c:ab: 2f:0c:3b:3f:18:21:07:50:b1:1d:7c:70:09:dd:97: bf:4e:ae:24:e2:b6:e7:9a:f3:4f:1c:16:c7:9c:af: e3:18:cd:d3:21:1b:15:29:f9:64:30:c9:f1:bc:94: 5d:5b:f5:64:00:a1:ec:ec:d5:d3:d5:05:34:ae:aa: 17:94:c6:8a:79:c3:d5:91:d2:ed:1f:af:90:2f:77: e3:d8:b1:4b:4c:17:98:9a:3b:22:46:ee:8b:0a:70: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:0D:F6:B5:BA:61:A7:F2:BD:BF:A5:33:52:E4:21:11:71:56:5C X509v3 Authority Key Identifier: keyid:F8:37:DC:96:6A:50:71:BB:3A:E2:A7:F1:53:ED:24:45:41:32:AE:2B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DfclmpQcbs64qfxU-0kRUEyris.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:04:d8:2c:6d:2e:70:46:81:95:32:cd:94:a4:22:cd:4a:87: 47:98:ff:53:c6:31:68:81:83:8c:24:8f:50:79:98:8a:87:2a: 0c:90:8a:a5:85:b1:7d:5e:97:bc:ad:83:a4:8e:ad:d6:b9:3f: d7:fb:da:ab:34:ad:07:4f:e6:f8:bd:e2:79:8c:9b:7b:59:b7: 70:a5:b7:41:57:25:07:4f:c9:77:94:86:b6:af:15:f1:6a:49: 8f:e4:25:33:a5:5c:55:20:c8:3c:68:15:73:66:77:00:57:bd: e5:c0:f4:17:97:62:89:37:1e:55:8d:07:de:46:fa:39:fa:72: 85:78:19:7e:4e:6e:e5:3c:28:5d:75:5e:78:68:e9:5b:0c:20: c4:c9:be:52:16:42:43:63:c4:45:80:4e:d8:1f:a7:75:fe:cf: cd:46:90:a6:b5:ed:f3:5c:91:af:3c:f2:ad:52:2c:48:9a:f9: 8b:4f:c7:19:51:ea:f0:23:6f:ca:8e:b2:e0:10:78:b4:d8:7c: 73:4f:73:a0:bf:1f:a5:68:29:40:b5:8e:b8:f9:4e:cd:80:81: c2:53:68:eb:cd:ac:86:eb:fd:93:4d:9c:2f:77:87:bb:4e:45: 49:03:e6:e4:cb:6c:ec:c8:25:11:33:29:e5:5e:82:bc:78:07: 54:1d:22:cd -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICJ/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjgz N0RDOTY2QTUwNzFCQjNBRTJBN0YxNTNFRDI0NDU0MTMyQUUyQjAeFw0yNDExMjIx NTIzMjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEEwMkMwREY2QjVCQTYx QTdGMkJEQkZBNTMzNTJFNDIxMTE3MTU2NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZfCzUOxkBqHOsRabBE7oTVlipBbJHSjUeYK9htnr0WP9R1Moc cFYpWfDjjEpar7aEjlON1EdBd2zSF3PAbl5IPCFqJAZyHAZJgBUkMAOOcNCGV4Hv LpsNbNDvBUJS6jphzmPTs99CCVFsw4k30PfabczPK8pCjArUznbxsgQ2MOvOc4T9 +GmfpRtCqfrdUDprCSEXCI2dj4COBkPaIHkpK9dcqy8MOz8YIQdQsR18cAndl79O riTituea808cFsecr+MYzdMhGxUp+WQwyfG8lF1b9WQAoezs1dPVBTSuqheUxop5 w9WR0u0fr5Avd+PYsUtMF5iaOyJG7osKcOAjAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUoCwN9rW6Yafyvb+lM1LkIRFxVlwwHwYDVR0jBBgwFoAU+DfclmpQcbs64qfx U+0kRUEyriswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQz Ly1EZmNsbXBRY2JzNjRxZnhVLTBrUlVFeXJpcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvLURmY2xtcFFjYnM2NHFmeFUtMGtSVUV5cmlzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQzLy1EZmNsbXBRY2JzNjRx ZnhVLTBrUlVFeXJpcy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCnBNgsbS5wRoGVMs2UpCLNSodHmP9TxjFogYOMJI9QeZiKhyoMkIqlhbF9Xpe8 rYOkjq3WuT/X+9qrNK0HT+b4veJ5jJt7WbdwpbdBVyUHT8l3lIa2rxXxakmP5CUz pVxVIMg8aBVzZncAV73lwPQXl2KJNx5VjQfeRvo5+nKFeBl+Tm7lPChddV54aOlb DCDEyb5SFkJDY8RFgE7YH6d1/s/NRpCmte3zXJGvPPKtUixImvmLT8cZUerwI2/K jrLgEHi02HxzT3Ogvx+laClAtY64+U7NgIHCU2jrzayG6/2TTZwvd4e7TkVJA+bk y2zsyCURMynlXoK8eAdUHSLN -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:43 2024 by rpki-client on console-fra.rpki-client.org