$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft File: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft (raw, json) Hash identifier: OPl1Z8V3wzGxcebIrOKN/fnXA+gug8W5wSWt80ftxG8= Subject key identifier: 07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 0EEB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft Manifest number: 0EE7 Signing time: Fri 22 Nov 2024 10:24:30 +0000 Manifest this update: Fri 22 Nov 2024 10:24:30 +0000 Manifest next update: Fri 22 Nov 2024 16:24:30 +0000 Files and hashes: 1: 29ub-lKLtsbqs62l_yVrlPwipLM.roa (hash: 9bSep+SZQmcZFQp9cG1lHj2vCQhovlsaLPVG+yNqaY4=) 2: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl (hash: iPzjPvkg8qUwdkvNVckZnEaWjqb65aMJRMeP8LaPL9o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3819 (0xeeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Nov 22 10:24:30 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=07E61D6C5758A96D685164DDA7175C941FDFCCBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f6:09:a7:61:3c:ed:69:9d:df:a6:dd:97:48: 0e:e6:cd:45:7a:e8:76:03:a2:14:0f:ba:3e:5e:fa: e9:2f:a1:90:de:5b:79:ee:c5:1b:1b:fa:45:4b:5f: 6c:ba:98:35:17:89:f7:04:2f:b5:0c:8e:ec:cc:d0: 38:bd:de:2c:25:ff:1b:88:e8:70:d8:ba:7d:82:1d: e9:64:cd:f1:c7:5a:bf:29:a4:8d:a7:ae:07:65:a8: c3:39:16:09:f9:d5:ed:be:ad:7a:2c:c8:8a:2a:05: b4:0c:ab:ca:64:42:73:72:29:45:b0:25:c7:4f:28: a6:03:d5:c2:a5:ee:8b:80:19:87:dd:74:00:ee:17: e1:55:74:51:3b:1d:3c:e8:55:1e:a8:da:ff:51:98: be:0c:04:9f:50:81:91:65:97:cc:76:f2:e3:08:09: 4d:de:67:5d:ed:7b:86:ad:e7:68:29:41:88:58:01: 35:af:6e:2d:7e:8b:c5:33:ce:0d:2f:53:fe:61:66: 89:ce:eb:17:8f:54:67:0c:ad:9d:5d:f8:91:04:a8: 04:a4:2b:09:85:d6:21:ef:16:16:fe:4c:af:94:d0: 1e:98:8a:fe:bf:14:be:e2:0d:b8:f3:32:bb:3f:6e: 03:a2:c8:7a:32:e5:9e:85:fc:4e:8a:b9:41:6b:aa: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E6:1D:6C:57:58:A9:6D:68:51:64:DD:A7:17:5C:94:1F:DF:CC:BC X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:33:d2:04:aa:be:ae:fb:34:09:57:35:d6:7f:e1:eb:27:7e: 36:d3:29:ca:99:55:01:a9:db:64:8f:60:88:55:20:ff:4a:09: 9d:8a:9e:3c:19:ca:01:8c:d2:9c:4c:44:52:57:f5:62:2c:fe: c4:63:17:8b:5d:ed:b3:16:18:6d:df:ba:e2:e2:b8:ce:ef:d8: a3:49:b1:61:cc:03:ea:4a:e2:ca:83:b9:33:51:bc:c1:f2:78: a5:18:1c:86:a6:1a:7d:5e:da:83:52:97:21:4c:8d:22:fd:76: ab:16:e5:7b:22:ac:5a:88:64:7a:35:fb:18:3d:73:46:7b:0d: 27:1a:50:9b:f5:d5:d6:92:b8:f1:8a:09:12:ba:46:d2:82:0f: 21:ab:48:56:67:ea:82:1f:3c:32:a7:78:5c:91:e1:54:69:a0: a4:1b:ca:80:c3:53:46:31:ba:8e:02:54:39:05:11:48:3f:06: d3:fd:4f:9b:b0:3e:54:7c:9b:21:90:05:fc:37:9a:17:04:2c: cf:89:88:bf:0b:03:dd:74:8d:ad:75:41:fc:b0:1e:38:f9:6e: 67:78:0c:20:8d:4b:b4:25:ad:87:3f:80:f8:6f:db:a0:b9:11: f7:64:ab:5c:a3:81:83:03:b6:3a:e4:02:24:ef:b0:b9:26:32: b3:92:7f:c8 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICDuswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNDExMjIx MDI0MzBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA3RTYxRDZDNTc1OEE5 NkQ2ODUxNjREREE3MTc1Qzk0MUZERkNDQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDu9gmnYTztaZ3fpt2XSA7mzUV66HYDohQPuj5e+ukvoZDeW3nu xRsb+kVLX2y6mDUXifcEL7UMjuzM0Di93iwl/xuI6HDYun2CHelkzfHHWr8ppI2n rgdlqMM5Fgn51e2+rXosyIoqBbQMq8pkQnNyKUWwJcdPKKYD1cKl7ouAGYfddADu F+FVdFE7HTzoVR6o2v9RmL4MBJ9QgZFll8x28uMICU3eZ13te4at52gpQYhYATWv bi1+i8Uzzg0vU/5hZonO6xePVGcMrZ1d+JEEqASkKwmF1iHvFhb+TK+U0B6Yiv6/ FL7iDbjzMrs/bgOiyHoy5Z6F/E6KuUFrqijfAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUB+YdbFdYqW1oUWTdpxdclB/fzLwwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9tQ1RGVlNLTEtMYVkzZWQ3 d2EzUTRvQjdocmsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA wDPSBKq+rvs0CVc11n/h6yd+NtMpyplVAanbZI9giFUg/0oJnYqePBnKAYzSnExE Ulf1Yiz+xGMXi13tsxYYbd+64uK4zu/Yo0mxYcwD6kriyoO5M1G8wfJ4pRgchqYa fV7ag1KXIUyNIv12qxbleyKsWohkejX7GD1zRnsNJxpQm/XV1pK48YoJErpG0oIP IatIVmfqgh88Mqd4XJHhVGmgpBvKgMNTRjG6jgJUOQURSD8G0/1Pm7A+VHybIZAF /DeaFwQsz4mIvwsD3XSNrXVB/LAeOPluZ3gMII1LtCWthz+A+G/boLkR92SrXKOB gwO2OuQCJO+wuSYys5J/yA== -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:41 2024 by rpki-client on console-fra.rpki-client.org