$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft File: BFagwwe9oIjxq3j2p-wFemB5Yy4.mft (raw, json) Hash identifier: qzxxd5v8O4GKY93NB1kh03RfQYX1NS6HSLRjIwzcixs= Subject key identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 Authority key identifier: 04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E Certificate issuer: /CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Certificate serial: 2EB6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft Manifest number: 2EB6 Signing time: Fri 22 Nov 2024 10:25:28 +0000 Manifest this update: Fri 22 Nov 2024 10:25:28 +0000 Manifest next update: Fri 22 Nov 2024 16:25:28 +0000 Files and hashes: 1: BFagwwe9oIjxq3j2p-wFemB5Yy4.crl (hash: tIv21B8lwGABbElosyvx0m+FdunE9E30bF0PtgE3cmE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11958 (0x2eb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Validity Not Before: Nov 22 10:25:28 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=458891FA790C06BC3506F01EC58C2286F412A8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:bc:c9:e8:e6:04:bb:64:b8:68:bb:18:11: 8b:8d:7e:fc:53:d0:c1:e4:bb:57:e3:e0:48:ec:3a: 3d:fb:a6:04:d4:97:f3:f3:9c:be:f8:19:0e:60:7a: 56:bb:35:09:d7:90:56:0d:db:4b:0b:de:8d:98:83: af:fc:0f:80:17:f2:13:72:5a:5e:34:02:c5:7d:c9: 97:81:89:9d:43:8a:8f:51:13:34:e0:1a:8e:94:dc: 8c:12:4f:6c:1e:f1:2d:c2:7e:5f:62:88:40:96:c4: 93:5e:bb:4b:9b:08:ce:36:da:15:6b:40:d3:b0:38: 1d:52:78:09:1f:87:df:1e:0c:27:e1:fa:75:b8:07: b1:2a:2e:19:cf:80:28:b4:24:f8:bc:56:5b:cb:06: d7:64:27:0f:6b:fa:05:ed:94:2e:a8:94:3c:d7:fe: 0c:21:30:53:a3:07:c6:5a:36:48:d3:ca:81:fd:49: 2c:88:93:b5:9e:11:3f:f6:a1:cd:bf:27:71:0c:23: e7:23:f2:f6:ff:4b:50:77:17:23:ab:40:c5:5e:6f: dd:5b:0e:8f:a8:84:a8:2a:cf:9e:b5:b3:ba:62:61: f2:17:3e:00:9a:d2:82:a9:2a:a6:bf:5f:0c:72:30: d6:0e:a7:33:18:fe:aa:ff:8c:38:42:54:2f:b3:af: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 X509v3 Authority Key Identifier: keyid:04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:41:34:d2:2d:62:c6:3a:81:7e:56:c1:88:27:39:54:f7:be: d5:c3:6d:d4:0a:a3:30:77:fe:72:f4:04:31:0c:ea:ad:98:ee: 6c:55:a0:c2:49:a3:7d:9c:f3:2e:06:41:c8:ce:dc:fe:98:9d: cd:18:7b:7a:22:72:10:67:69:6e:31:b3:cf:e7:eb:0e:c7:d5: ff:7b:d5:19:b4:0a:0e:93:9f:50:4b:6f:35:20:d4:00:bd:52: b9:a2:c9:2d:93:2a:ed:9b:02:77:bb:d0:9c:22:51:be:4f:a8: 68:e7:70:4e:fc:38:71:68:a5:07:f6:c4:22:af:83:99:d0:03: 90:03:09:68:6f:1a:d8:91:11:e1:62:b4:a1:ed:d6:de:78:16: eb:11:49:3f:30:f6:ef:2b:19:0e:fe:e6:48:e8:70:ff:67:a7: cd:e8:96:7a:da:6b:80:9a:ac:30:89:c0:c6:7b:a0:a8:d0:80: 79:9a:79:39:52:1a:d6:6c:32:93:f5:36:fd:e8:eb:9e:0b:cf: f0:e2:e2:c5:f1:37:6c:b7:85:d9:a5:5c:1f:30:2c:b5:ec:03: 94:06:1e:75:8c:ce:ee:47:fc:62:f7:5c:75:65:a4:2a:ae:97: 0c:22:65:6f:b3:e0:3f:a7:e8:6a:3e:0f:2b:83:59:2f:ec:36: a7:f3:0c:33 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICLrYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ1 NkEwQzMwN0JEQTA4OEYxQUI3OEY2QTdFQzA1N0E2MDc5NjMyRTAeFw0yNDExMjIx MDI1MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ1ODg5MUZBNzkwQzA2 QkMzNTA2RjAxRUM1OEMyMjg2RjQxMkE4QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVvbzJ6OYEu2S4aLsYEYuNfvxT0MHku1fj4EjsOj37pgTUl/Pz nL74GQ5gela7NQnXkFYN20sL3o2Yg6/8D4AX8hNyWl40AsV9yZeBiZ1Dio9REzTg Go6U3IwST2we8S3Cfl9iiECWxJNeu0ubCM422hVrQNOwOB1SeAkfh98eDCfh+nW4 B7EqLhnPgCi0JPi8VlvLBtdkJw9r+gXtlC6olDzX/gwhMFOjB8ZaNkjTyoH9SSyI k7WeET/2oc2/J3EMI+cj8vb/S1B3FyOrQMVeb91bDo+ohKgqz561s7piYfIXPgCa 0oKpKqa/XwxyMNYOpzMY/qr/jDhCVC+zr7L/AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQURYiR+nkMBrw1BvAexYwihvQSqKMwHwYDVR0jBBgwFoAUBFagwwe9oIjxq3j2 p+wFemB5Yy4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzcv QkZhZ3d3ZTlvSWp4cTNqMnAtd0ZlbUI1WXk0LmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9CRmFnd3dlOW9JanhxM2oycC13RmVtQjVZeTQuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ny9CRmFnd3dlOW9JanhxM2oy cC13RmVtQjVZeTQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA KEE00i1ixjqBflbBiCc5VPe+1cNt1AqjMHf+cvQEMQzqrZjubFWgwkmjfZzzLgZB yM7c/pidzRh7eiJyEGdpbjGzz+frDsfV/3vVGbQKDpOfUEtvNSDUAL1SuaLJLZMq 7ZsCd7vQnCJRvk+oaOdwTvw4cWilB/bEIq+DmdADkAMJaG8a2JER4WK0oe3W3ngW 6xFJPzD27ysZDv7mSOhw/2enzeiWetprgJqsMInAxnugqNCAeZp5OVIa1mwyk/U2 /ejrngvP8OLixfE3bLeF2aVcHzAstewDlAYedYzO7kf8YvdcdWWkKq6XDCJlb7Pg P6foaj4PK4NZL+w2p/MMMw== -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:41 2024 by rpki-client on console-fra.rpki-client.org