$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft File: YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft (raw, json) Hash identifier: d7fqab6pJaqo2mm5BKnQ6vRpi3VivcJ99vlMzXEuMk4= Subject key identifier: ED:23:7B:79:59:A2:7F:5B:DF:B8:CE:97:8E:E2:B5:50:34:03:80:39 Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E Certificate issuer: /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Certificate serial: 127A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft Manifest number: 1273 Signing time: Fri 22 Nov 2024 15:21:29 +0000 Manifest this update: Fri 22 Nov 2024 15:21:29 +0000 Manifest next update: Fri 22 Nov 2024 21:21:29 +0000 Files and hashes: 1: YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl (hash: rdC9DroryvMidPVi+FSgK0rjRkDBYjUlRi/UrIsELrQ=) 2: kjJM0y2oMYDfjy3wXpWpnyuNviI.roa (hash: WeUoKU26x82u6neTsxe4JUSptPM1sxzrvySPulzAAjk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4730 (0x127a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Validity Not Before: Nov 22 15:21:29 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=ED237B7959A27F5BDFB8CE978EE2B55034038039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:a0:22:5a:c4:f8:55:eb:26:40:78:97:1a: 25:53:eb:52:1f:70:45:64:cd:44:4d:14:15:83:e3: 8b:d3:48:e9:a9:e1:dd:2c:7b:d5:ae:6e:2f:9d:09: 4c:45:f1:7f:45:fd:89:62:a4:11:52:c5:cc:87:28: f6:50:9a:a8:67:87:90:c5:11:d7:05:b2:49:4f:cd: 70:52:63:4b:d3:88:b6:71:56:18:0d:eb:2b:ad:62: 49:00:2e:95:8d:99:37:16:bd:fb:71:ad:db:f4:0b: ca:80:ae:7e:15:0e:82:b5:0d:f9:ce:e2:3d:81:aa: a1:f4:10:f1:b9:2b:1c:cd:bc:a0:22:6a:65:2a:66: 82:86:09:85:2c:83:3d:a4:ce:57:49:c4:26:5e:25: dc:13:c9:08:6d:af:c8:6a:e5:41:55:57:1e:32:c2: 47:db:5b:1d:36:f4:8a:90:5f:86:b6:63:44:60:cd: 4f:5e:3a:00:6b:c3:8c:8d:98:5a:ae:5b:ad:82:6d: b2:99:32:3e:04:28:4a:d9:0c:3f:97:c2:0d:43:9e: 61:dc:c6:c0:71:82:5a:d7:b1:bc:6f:a1:46:08:b5: b1:c8:06:f9:1f:6c:48:32:d2:0b:d7:1b:96:39:62: 91:70:8b:00:10:2d:0e:e9:de:de:b1:e7:a0:b9:8b: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:23:7B:79:59:A2:7F:5B:DF:B8:CE:97:8E:E2:B5:50:34:03:80:39 X509v3 Authority Key Identifier: keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:52:26:32:c9:6e:32:c1:3a:46:de:e1:c9:04:14:6e:8a:9b: 93:b3:29:09:68:eb:6a:30:28:55:4e:4c:e1:1d:24:96:6b:92: d9:40:1c:91:9d:b0:4b:53:64:c3:33:e6:74:86:69:64:e0:cb: 91:2f:6f:6b:ae:41:38:1a:e4:55:a3:36:b2:70:7e:59:f3:0f: 66:4f:92:c4:e6:0a:e5:d3:b3:71:0e:02:c7:21:e9:08:b0:d6: ef:65:46:57:75:e5:94:b9:0f:6f:d9:18:34:99:18:14:3f:83: ca:cd:76:62:15:71:1e:6b:82:7f:92:35:09:9e:2b:73:98:73: 82:43:54:63:c7:6b:2d:9b:80:2a:e5:1f:23:af:98:28:c2:93: 73:d2:bf:2f:30:dd:0c:ea:06:56:d4:bf:b1:81:90:b6:36:fc: 15:7e:66:45:23:d8:41:55:74:21:13:a6:79:cb:67:e7:e3:66: 92:f0:7b:81:55:7f:88:08:ea:99:f8:08:4a:cd:99:56:0e:cf: db:26:f1:01:67:b9:1d:76:5d:c1:e8:68:82:32:79:44:f9:16: fc:06:5b:5c:72:79:ef:8c:6c:bd:85:d0:06:3e:0b:d0:f6:0c: 1a:ef:69:46:20:df:d1:8d:87:3b:8e:2a:89:f0:3f:3d:75:2a: 36:bc:22:33 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICEnowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 QkNFOEY3RjhBODNEQjkzOUFFMEY0MkZBMDU0MTNCMjg1MTgxRTAeFw0yNDExMjIx NTIxMjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVEMjM3Qjc5NTlBMjdG NUJERkI4Q0U5NzhFRTJCNTUwMzQwMzgwMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSbqAiWsT4VesmQHiXGiVT61IfcEVkzURNFBWD44vTSOmp4d0s e9Wubi+dCUxF8X9F/YlipBFSxcyHKPZQmqhnh5DFEdcFsklPzXBSY0vTiLZxVhgN 6yutYkkALpWNmTcWvftxrdv0C8qArn4VDoK1DfnO4j2BqqH0EPG5KxzNvKAiamUq ZoKGCYUsgz2kzldJxCZeJdwTyQhtr8hq5UFVVx4ywkfbWx029IqQX4a2Y0RgzU9e OgBrw4yNmFquW62CbbKZMj4EKErZDD+Xwg1DnmHcxsBxglrXsbxvoUYItbHIBvkf bEgy0gvXG5Y5YpFwiwAQLQ7p3t6x56C5izFbAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU7SN7eVmif1vfuM6XjuK1UDQDgDkwHwYDVR0jBBgwFoAUYVvOj3+Kg9uTmuD0 L6BUE7KFGB4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYx L1lWdk9qMy1LZzl1VG11RDBMNkJVRTdLRkdCNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWVZ2T2ozLUtnOXVUbXVEMEw2QlVFN0tGR0I0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYxL1lWdk9qMy1LZzl1VG11 RDBMNkJVRTdLRkdCNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB6UiYyyW4ywTpG3uHJBBRuipuTsykJaOtqMChVTkzhHSSWa5LZQByRnbBLU2TD M+Z0hmlk4MuRL29rrkE4GuRVozaycH5Z8w9mT5LE5grl07NxDgLHIekIsNbvZUZX deWUuQ9v2Rg0mRgUP4PKzXZiFXEea4J/kjUJnitzmHOCQ1Rjx2stm4Aq5R8jr5go wpNz0r8vMN0M6gZW1L+xgZC2NvwVfmZFI9hBVXQhE6Z5y2fn42aS8HuBVX+ICOqZ +AhKzZlWDs/bJvEBZ7kddl3B6GiCMnlE+Rb8BltccnnvjGy9hdAGPgvQ9gwa72lG IN/RjYc7jiqJ8D89dSo2vCIz -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:44 2024 by rpki-client on console-fra.rpki-client.org