$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft File: mlx0rj-M07Z5rFbEc_RQN4WRkms.mft (raw, json) Hash identifier: PSVNrZxigpztIXxB6rb5iImp9xkrsjwCWH+uqAGyJzQ= Subject key identifier: DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07 Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B Certificate serial: 1B6A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft Manifest number: 1B5F Signing time: Fri 22 Nov 2024 11:50:39 +0000 Manifest this update: Fri 22 Nov 2024 11:50:39 +0000 Manifest next update: Fri 22 Nov 2024 17:50:39 +0000 Files and hashes: 1: 4CPbz1Q971itbf4bXNw_7tOqmyc.roa (hash: 4pu1JSAQfcEMBJgg7ptM6XR79OtQhF6xYtF7auaz0+k=) 2: IXeiX71f_6gAR548Nobga3lVkz8.roa (hash: smi9Kab98jhCPsMzxiV2ynWxTskxGQepYuwrRHTE0Ts=) 3: NsqXFtmbLmdkbjz7xTWYsdGFSeU.roa (hash: xvutAQhMubRWUKrhuTp3EUHcnZB5KCkuVVNsxU4iSy4=) 4: OJvUhpYZfiX4pTaDZBGKE2K2LEM.roa (hash: KZDZqIOR3Ahp91uOMUOp0x6UMHayorLhoAseE163U/w=) 5: mlx0rj-M07Z5rFbEc_RQN4WRkms.crl (hash: sb+0Ij4qoyk3v/oo6vqTshumvKh85q32CE9RF/BH3Xc=) 6: upTyCNqEZWn89tUrN96fiy_SSFQ.roa (hash: xU36AHhe5xF6wSTSVZtI2AgOCRoNR76kOePGwIlbZ40=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 17:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7018 (0x1b6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B Validity Not Before: Nov 22 11:50:39 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DED08EF758D4AC1835950E046F31B9ED40123207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:b4:f4:af:6f:ac:59:2d:d1:16:e3:99:9d: 09:77:1c:8a:5e:2d:8f:8b:bb:83:34:11:10:f9:8e: 84:8f:27:66:e9:3c:be:6d:8f:8f:4c:3c:ad:d7:2c: 0c:37:06:ac:4e:22:a3:e5:7f:e0:90:60:42:32:60: c2:25:cb:72:3e:b1:2d:30:c9:7d:98:0d:48:d5:44: 96:12:df:47:d9:8a:df:3b:ba:04:bd:b7:ba:c8:ce: 93:00:73:aa:4f:ca:13:74:a2:80:55:83:9e:d3:d1: 8b:50:fe:09:23:7a:ec:e6:d1:2f:9b:fe:36:e1:1e: 92:91:17:ee:56:0b:a6:70:07:68:74:62:a6:8f:29: 3c:24:4f:b0:c3:a2:ff:06:57:43:0d:77:1d:b0:fd: 1d:0b:63:19:1e:a6:cb:86:b4:77:0b:8b:80:b8:86: a6:55:45:dd:80:a4:32:16:45:8f:78:a1:b0:17:ab: 78:dd:54:a5:60:0d:71:9b:d3:59:78:a2:92:6b:a5: d4:f8:0c:a9:41:32:11:ec:94:c4:59:ba:8e:89:30: bb:b1:ef:1e:f1:fc:27:6c:6c:79:e3:13:6e:4d:f4: 8c:61:7b:20:dd:52:81:39:08:4f:da:10:13:81:29: c4:b2:f2:18:06:f2:99:9e:57:37:d1:c1:ae:7d:76: 9d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07 X509v3 Authority Key Identifier: keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:fe:86:2f:32:a5:1c:be:10:1a:91:5f:be:61:19:77:c8:66: 8a:84:f0:6f:0e:ef:d4:e9:53:7f:cb:40:2f:09:69:c2:cf:69: b7:f5:0b:70:88:34:08:c8:1b:ae:99:60:32:87:4d:04:35:df: 64:ef:7a:58:10:27:99:ca:c9:08:8c:b9:25:9f:ba:64:86:53: 3a:a3:39:65:66:f6:da:09:e5:37:b5:8e:5f:8d:40:07:4b:20: f2:27:f4:77:a3:10:e0:f3:7b:83:bf:4c:95:36:75:6e:6b:d1: 8d:bd:90:e6:83:58:4b:a0:cf:51:5c:ae:b4:1c:b3:31:ad:82: 16:08:d8:00:8b:7f:4d:44:5e:70:58:76:62:7c:45:1e:96:27: 33:0f:ea:40:48:70:77:70:f4:e6:ef:61:5d:1c:f8:38:e6:ae: ab:ce:77:0b:13:ed:ac:61:97:03:a9:aa:ab:38:07:ac:7e:66: 10:ee:b6:f2:ae:6b:c1:ce:3c:43:1c:b1:ed:a9:0c:c7:0a:b6: 0f:1f:b8:23:fa:57:98:d1:05:07:89:c9:e0:18:4a:95:a6:4c: 76:7d:d5:d8:d7:01:25:22:b0:0b:92:46:ce:7c:88:19:d0:5e: 60:52:a8:ea:83:49:0a:96:99:88:28:83:24:03:4b:6b:79:79: 36:24:37:d1 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICG2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUE1 Qzc0QUUzRjhDRDNCNjc5QUM1NkM0NzNGNDUwMzc4NTkxOTI2QjAeFw0yNDExMjIx MTUwMzlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERFRDA4RUY3NThENEFD MTgzNTk1MEUwNDZGMzFCOUVENDAxMjMyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHALT0r2+sWS3RFuOZnQl3HIpeLY+Lu4M0ERD5joSPJ2bpPL5t j49MPK3XLAw3BqxOIqPlf+CQYEIyYMIly3I+sS0wyX2YDUjVRJYS30fZit87ugS9 t7rIzpMAc6pPyhN0ooBVg57T0YtQ/gkjeuzm0S+b/jbhHpKRF+5WC6ZwB2h0YqaP KTwkT7DDov8GV0MNdx2w/R0LYxkepsuGtHcLi4C4hqZVRd2ApDIWRY94obAXq3jd VKVgDXGb01l4opJrpdT4DKlBMhHslMRZuo6JMLux7x7x/CdsbHnjE25N9IxheyDd UoE5CE/aEBOBKcSy8hgG8pmeVzfRwa59dp1LAgMBAAGjggIIMIICBDAdBgNVHQ4E FgQU3tCO91jUrBg1lQ4EbzG57UASMgcwHwYDVR0jBBgwFoAUmlx0rj+M07Z5rFbE c/RQN4WRkmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv bWx4MHJqLU0wN1o1ckZiRWNfUlFONFdSa21zLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tbHgwcmotTTA3WjVyRmJFY19SUU40V1JrbXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9tbHgwcmotTTA3WjVyRmJF Y19SUU40V1JrbXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA rf6GLzKlHL4QGpFfvmEZd8hmioTwbw7v1OlTf8tALwlpws9pt/ULcIg0CMgbrplg ModNBDXfZO96WBAnmcrJCIy5JZ+6ZIZTOqM5ZWb22gnlN7WOX41AB0sg8if0d6MQ 4PN7g79MlTZ1bmvRjb2Q5oNYS6DPUVyutByzMa2CFgjYAIt/TURecFh2YnxFHpYn Mw/qQEhwd3D05u9hXRz4OOauq853CxPtrGGXA6mqqzgHrH5mEO628q5rwc48Qxyx 7akMxwq2Dx+4I/pXmNEFB4nJ4BhKlaZMdn3V2NcBJSKwC5JGznyIGdBeYFKo6oNJ CpaZiCiDJANLa3l5NiQ30Q== -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org