$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft File: RxbLW0SB7BOu3UCywwLFD2Aa930.mft (raw, json) Hash identifier: A5YipxVUMYyAXPYFnkxTQALMdGGP3aWgHE1fN9SyJTk= Subject key identifier: C2:2C:13:11:4C:CC:8B:43:21:C7:50:0F:23:AE:58:52:0E:14:F3:D7 Authority key identifier: 47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D Certificate issuer: /CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D Certificate serial: 1CE5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft Manifest number: 1CDC Signing time: Fri 22 Nov 2024 15:21:34 +0000 Manifest this update: Fri 22 Nov 2024 15:21:34 +0000 Manifest next update: Fri 22 Nov 2024 21:21:34 +0000 Files and hashes: 1: 2sXsVY7_2Ij-UFBaTCDkxAjTHQI.roa (hash: n2pOELU8tQSAxmbcXnybdckj6tPykjWnvA6eNWU3+iI=) 2: RxbLW0SB7BOu3UCywwLFD2Aa930.crl (hash: 2GgTaW+j46a/JkdCcOsW0FQHjcat+7JSZJ6XDWpbeSk=) 3: z8hNT_-BaDPv7L-q5i-asd7-phc.roa (hash: 1MaV40uOs5zTD5/4NL/YhZ5lzJPM/sgnUQqndz5Kmhk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7397 (0x1ce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D Validity Not Before: Nov 22 15:21:34 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C22C13114CCC8B4321C7500F23AE58520E14F3D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:b8:c4:ea:f1:00:5e:5b:39:17:4c:31:89: f5:ba:e8:28:09:65:f0:5f:6e:d7:ac:d1:0b:d9:7a: ea:56:82:9a:84:8b:c3:aa:86:dc:11:6e:20:ea:e8: 2d:5d:ed:10:1e:00:85:7d:37:2e:20:56:d0:bf:b0: 75:6a:2b:5d:32:ce:99:8c:fb:0e:e7:79:07:d9:f0: a8:98:fe:2c:08:ec:fa:33:de:94:7f:51:be:42:e3: 43:5c:ce:a0:65:dd:6c:18:2e:aa:48:05:bd:02:de: 1a:18:25:a2:e9:4c:5d:00:da:47:9a:5b:3e:53:06: 95:84:c1:e5:c9:6f:46:81:ab:1f:37:37:66:42:90: cb:7d:da:31:f5:ca:56:cc:5d:d4:43:95:15:0a:49: e7:f6:13:cc:8d:6a:b6:80:8e:1e:a0:2a:81:e5:37: fa:e1:e9:99:1c:f7:a4:08:26:65:1c:04:c9:8d:cf: e7:ff:05:7b:e5:0b:0e:c5:f7:5a:bf:c3:62:f5:0a: 3c:97:bd:25:06:4c:8a:cb:a0:de:4a:a6:cc:14:d3: ee:e5:a7:36:35:59:e0:2b:d5:17:0a:30:41:96:95: 4d:25:bc:c9:43:af:4a:0b:18:b4:39:7b:af:e4:0c: 22:84:91:59:87:79:5f:3f:90:d7:52:fd:b1:83:cd: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2C:13:11:4C:CC:8B:43:21:C7:50:0F:23:AE:58:52:0E:14:F3:D7 X509v3 Authority Key Identifier: keyid:47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b3:63:c0:fd:ea:6f:85:72:c7:82:3e:b7:1b:e1:e3:1a:e6: 19:a2:f3:67:a7:9c:56:66:52:88:fc:e6:41:6f:26:91:4b:06: 4a:c6:03:5e:8f:e2:9e:a8:5e:ce:94:64:6a:f6:13:58:46:a0: 12:c5:63:3d:ad:22:17:0f:e6:d2:59:47:ef:6e:cc:48:8c:98: a8:a6:b4:40:d0:a3:eb:94:45:d4:c5:be:f4:44:72:81:3b:b7: 02:b8:67:2f:b9:e3:07:9d:14:6e:e5:5a:a7:f3:54:ea:45:6b: c0:87:67:83:ac:a6:fa:59:76:bf:0b:c6:64:6a:52:5b:33:e5: 1d:e5:ac:f8:3c:88:ac:d4:28:b5:87:63:86:b9:bd:a0:41:ae: c9:1f:6d:00:ee:76:cf:fd:75:20:36:6d:f3:08:ff:87:77:d9: f2:68:61:7d:8d:53:4e:28:24:63:56:33:72:e2:4c:a2:96:8b: 52:30:5d:e2:6b:10:12:f8:c4:a5:04:3a:6c:f1:2e:81:4e:3d: eb:6f:a5:3f:b4:50:de:1d:7d:b1:a0:77:9e:1e:6d:f5:cf:5a: f3:5c:74:08:6a:2d:ba:36:0c:d8:bc:59:3b:a4:79:b4:8f:3c: 70:d0:b6:96:d4:90:08:d4:10:b0:80:5e:65:27:d0:a4:34:0f: 67:27:63:a9 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDcx NkNCNUI0NDgxRUMxM0FFREQ0MEIyQzMwMkM1MEY2MDFBRjc3RDAeFw0yNDExMjIx NTIxMzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMyMkMxMzExNENDQzhC NDMyMUM3NTAwRjIzQUU1ODUyMEUxNEYzRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ZbjE6vEAXls5F0wxifW66CgJZfBfbtes0QvZeupWgpqEi8Oq htwRbiDq6C1d7RAeAIV9Ny4gVtC/sHVqK10yzpmM+w7neQfZ8KiY/iwI7Poz3pR/ Ub5C40NczqBl3WwYLqpIBb0C3hoYJaLpTF0A2keaWz5TBpWEweXJb0aBqx83N2ZC kMt92jH1ylbMXdRDlRUKSef2E8yNaraAjh6gKoHlN/rh6Zkc96QIJmUcBMmNz+f/ BXvlCw7F91q/w2L1CjyXvSUGTIrLoN5KpswU0+7lpzY1WeAr1RcKMEGWlU0lvMlD r0oLGLQ5e6/kDCKEkVmHeV8/kNdS/bGDzQTZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUwiwTEUzMi0Mhx1API65YUg4U89cwHwYDVR0jBBgwFoAURxbLW0SB7BOu3UCy wwLFD2Aa930wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4 L1J4YkxXMFNCN0JPdTNVQ3l3d0xGRDJBYTkzMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUnhiTFcwU0I3Qk91M1VDeXd3TEZEMkFhOTMwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4L1J4YkxXMFNCN0JPdTNV Q3l3d0xGRDJBYTkzMC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQs2PA/epvhXLHgj63G+HjGuYZovNnp5xWZlKI/OZBbyaRSwZKxgNej+KeqF7O lGRq9hNYRqASxWM9rSIXD+bSWUfvbsxIjJioprRA0KPrlEXUxb70RHKBO7cCuGcv ueMHnRRu5Vqn81TqRWvAh2eDrKb6WXa/C8ZkalJbM+Ud5az4PIis1Ci1h2OGub2g Qa7JH20A7nbP/XUgNm3zCP+Hd9nyaGF9jVNOKCRjVjNy4kyilotSMF3iaxAS+MSl BDps8S6BTj3rb6U/tFDeHX2xoHeeHm31z1rzXHQIai26NgzYvFk7pHm0jzxw0LaW 1JAI1BCwgF5lJ9CkNA9nJ2Op -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org