$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft File: WRxbA8l84P4-x44jxoVveSwg1AQ.mft (raw, json) Hash identifier: 8gJd3RnKAgXkKYQN4qxGzyuPFH4dg/bzzJvXrHdC9Mo= Subject key identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Certificate serial: 11B5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft Manifest number: 11AF Signing time: Fri 22 Nov 2024 13:50:39 +0000 Manifest this update: Fri 22 Nov 2024 13:50:39 +0000 Manifest next update: Fri 22 Nov 2024 19:50:39 +0000 Files and hashes: 1: 6-5JDz1xnDr3HyTVDSPghvUanyk.roa (hash: Q/w2V2gxvGv0VWCEuVLmgmMCtJx9XtJr8mscXlzsNUs=) 2: O8Jtqk75sb8cZDNmU4Vj687Z-qU.roa (hash: o89JzW4RJco5dt7AJMSD4iemloqo5DbYs8WmvhiM1Oc=) 3: WRxbA8l84P4-x44jxoVveSwg1AQ.crl (hash: so72gp7Jl3dGSZVG17tgiXBBZpKG44WQTy4zVTFZ42Y=) 4: zXcOC2Rw8Y9Akc0iNL9_ZwC98d0.roa (hash: vBYFBICstkZGzLNH2LbLDtsuTpkSschHUYRlRatNDaU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4533 (0x11b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Validity Not Before: Nov 22 13:50:39 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=060B73E0178A24DA932755B1B93C3A654C8743F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:43:1f:96:d4:be:91:b4:92:bf:46:af:95: 9c:5a:b7:f7:c0:3f:1f:ba:fb:2e:7f:55:20:41:8c: 12:de:18:be:a7:e8:86:a8:6b:ae:dd:e9:09:84:5a: fb:f9:6d:84:cb:0f:26:69:59:b8:6a:4c:ae:43:72: dc:84:60:1f:09:b1:40:e9:64:8a:25:60:fa:f6:db: 6a:aa:13:57:5e:96:39:f3:23:2d:79:ac:81:f7:e5: 76:54:53:e3:64:56:5e:f1:5a:50:d5:6e:1d:19:78: ad:b6:0f:64:de:2c:63:5f:a7:18:20:1b:41:ae:92: f5:42:e1:63:4e:66:83:fb:c2:ad:d6:69:b9:d5:0e: e5:b4:87:b9:27:75:7d:29:51:d3:cc:2b:3a:0d:79: 96:cb:3a:00:67:a0:68:59:56:f9:66:61:34:3b:26: db:45:e0:15:61:2b:03:68:dd:33:6f:4d:a9:02:87: 5d:2c:f7:51:5e:cf:52:3a:27:56:2d:46:af:44:a3: 1d:ac:98:b0:94:50:a9:57:b6:d7:e4:27:a5:a7:4b: df:23:23:6b:b3:d4:08:21:51:e2:47:cb:67:3d:48: 1a:3c:4f:20:2c:f1:75:63:ec:7d:01:94:c0:ac:df: 45:c2:90:44:9f:f9:22:cc:e7:15:55:dc:d7:83:a8: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 X509v3 Authority Key Identifier: keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ae:52:c1:ab:aa:e1:6c:9d:8f:f9:11:01:0e:0d:19:c0:12: 5f:c7:77:fe:ca:44:d3:4c:6f:d7:c2:70:2e:9c:0c:59:4d:6d: 7e:e2:dc:7f:9b:5f:a9:82:ba:a2:4f:74:0c:bb:80:14:e3:13: 87:89:3b:5a:6b:29:0e:17:6c:9b:d5:2e:ef:cd:e3:04:8a:7a: 88:aa:b4:78:b0:f7:0f:c1:84:a6:87:ce:85:6f:eb:99:0f:03: fa:f9:c4:fc:60:76:bf:b1:ec:15:34:ea:e1:a2:70:bf:23:6a: d8:5d:bd:98:98:f7:46:32:44:55:94:4d:21:14:ad:b6:a8:9f: 1d:35:fc:df:54:2e:5e:b7:7c:c2:7d:cb:dd:cc:46:28:08:cf: ba:cb:a7:77:78:cc:5a:2d:ca:b4:29:64:07:b5:f5:f9:71:d2: ab:ca:5f:07:02:b4:b6:44:00:1e:fa:4c:70:32:5f:a0:0b:ae: 16:b5:86:10:f9:0c:1e:ec:e2:91:c6:a6:c2:e0:17:f5:9f:8c: 91:8f:8d:39:1f:73:71:12:43:4a:1d:c5:2f:97:95:a2:1c:0c: f2:28:dd:89:6d:f3:5f:e9:1e:b3:00:a1:31:71:d0:29:5c:dc: f2:4a:a3:0f:08:ff:53:81:c7:98:ac:c4:5b:e8:b4:80:98:9f: bb:d7:65:a4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICEbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkx QzVCMDNDOTdDRTBGRTNFQzc4RTIzQzY4NTZGNzkyQzIwRDQwNDAeFw0yNDExMjIx MzUwMzlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA2MEI3M0UwMTc4QTI0 REE5MzI3NTVCMUI5M0MzQTY1NEM4NzQzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOxEMfltS+kbSSv0avlZxat/fAPx+6+y5/VSBBjBLeGL6n6Iao a67d6QmEWvv5bYTLDyZpWbhqTK5DctyEYB8JsUDpZIolYPr222qqE1deljnzIy15 rIH35XZUU+NkVl7xWlDVbh0ZeK22D2TeLGNfpxggG0GukvVC4WNOZoP7wq3WabnV DuW0h7kndX0pUdPMKzoNeZbLOgBnoGhZVvlmYTQ7JttF4BVhKwNo3TNvTakCh10s 91Fez1I6J1YtRq9Eox2smLCUUKlXttfkJ6WnS98jI2uz1AghUeJHy2c9SBo8TyAs 8XVj7H0BlMCs30XCkESf+SLM5xVV3NeDqH2fAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUBgtz4BeKJNqTJ1WxuTw6ZUyHQ/QwHwYDVR0jBBgwFoAUWRxbA8l84P4+x44j xoVveSwg1AQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2 L1dSeGJBOGw4NFA0LXg0NGp4b1Z2ZVN3ZzFBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2L1dSeGJBOGw4NFA0LXg0 NGp4b1Z2ZVN3ZzFBUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXrlLBq6rhbJ2P+REBDg0ZwBJfx3f+ykTTTG/XwnAunAxZTW1+4tx/m1+pgrqi T3QMu4AU4xOHiTtaaykOF2yb1S7vzeMEinqIqrR4sPcPwYSmh86Fb+uZDwP6+cT8 YHa/sewVNOrhonC/I2rYXb2YmPdGMkRVlE0hFK22qJ8dNfzfVC5et3zCfcvdzEYo CM+6y6d3eMxaLcq0KWQHtfX5cdKryl8HArS2RAAe+kxwMl+gC64WtYYQ+Qwe7OKR xqbC4Bf1n4yRj405H3NxEkNKHcUvl5WiHAzyKN2JbfNf6R6zAKExcdApXNzySqMP CP9TgceYrMRb6LSAmJ+712Wk -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:41 2024 by rpki-client on console-fra.rpki-client.org