$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft File: DuhjrFcK7qH5ML6l52qufdVTgE4.mft (raw, json) Hash identifier: TV/tAaEWUUd1kIxXPpKoOYiw0X64PJi6/TpTv+IWuI8= Subject key identifier: 0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E Certificate serial: 082C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft Manifest number: 0804 Signing time: Fri 22 Nov 2024 15:22:52 +0000 Manifest this update: Fri 22 Nov 2024 15:22:52 +0000 Manifest next update: Fri 22 Nov 2024 21:22:52 +0000 Files and hashes: 1: 8bt_w9N3b0u3QE9xayaSAtQVeyE.roa (hash: QKLF9PiGEZy6YjR1G8lFbvyEah6QFW78vzFqjnr3TAk=) 2: DuhjrFcK7qH5ML6l52qufdVTgE4.crl (hash: cWOuUWXZDa5XOYpC2V+7GZnHE/IkMpkA3K4+JnMJt4s=) 3: NcdIdiXPc4pHKEzYVdTZp9Z750c.roa (hash: +zpHOVxmWF8Gob8Ql2+QUVQyIAVnnWKBvhQXURLhLkE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E Validity Not Before: Nov 22 15:22:52 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0A6B3361E1F5FA9B0266D7DF924422A40B47149A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:3a:68:7a:71:a9:0e:99:d5:4d:01:d6:5a: 1f:8c:a0:a8:28:df:03:51:4b:45:8e:5a:38:00:08: 03:c7:a6:b6:a7:86:94:91:59:23:85:b1:d4:3f:9b: a4:f6:0f:d0:22:54:63:c7:80:21:e6:1f:54:57:14: 85:47:2e:4b:6d:17:8b:98:7b:60:66:ce:57:5b:2d: f4:31:0a:d2:15:14:7f:06:c2:9e:8e:46:75:89:0f: 64:b0:fd:19:43:33:68:c0:33:95:05:89:fe:a4:7c: 5a:fe:fc:8e:75:77:8d:08:3f:9b:77:44:78:37:ac: ca:7c:85:64:b8:fb:24:24:36:d5:c8:97:db:87:0d: b0:fe:4c:ae:25:ec:c1:ec:ff:5b:7a:29:d1:5a:cd: d5:56:47:55:02:d6:c6:13:96:90:03:ed:82:e5:b8: 0a:a6:ca:ba:0a:ea:15:38:8a:4b:c0:e1:61:ff:6a: a7:bb:40:1d:5a:d9:af:b4:45:92:4f:fc:46:b2:4f: 13:cb:9b:a4:46:c2:b9:b7:cf:05:a2:73:d7:cc:c4: f5:f2:43:ef:5b:b5:09:de:44:f7:6d:27:6c:0f:43: f8:15:5a:72:30:b4:82:97:46:41:65:8d:a1:48:45: b3:bf:aa:58:cc:59:61:c1:48:1c:e3:01:3e:78:96: 59:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A X509v3 Authority Key Identifier: keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9c:b7:43:2d:bc:08:8f:7c:76:47:57:1c:85:c6:cd:50:3f: 66:e6:c0:34:d6:a7:fd:02:8b:3c:9b:cf:ba:3f:30:4b:51:c5: 08:3c:ed:82:89:5e:32:1d:ba:18:a9:b7:82:bf:a7:09:18:c3: c2:8a:95:ae:96:91:2e:46:aa:86:42:13:80:9c:f7:39:3b:2f: 8d:33:9e:f3:26:e4:d3:e0:5a:dd:c0:cc:dd:8f:ae:d8:82:97: c9:fc:b4:98:9f:84:15:77:8c:fb:0e:49:7b:ba:b3:2b:00:54: 32:f4:3d:ec:29:36:c5:b9:d4:26:75:61:77:9c:e0:28:0a:7e: 9e:c5:ce:1d:98:f6:1c:1e:a9:9c:0a:5c:0c:c4:62:e4:90:ce: d8:68:38:8c:85:4c:01:ea:62:d4:d5:af:f7:29:00:41:40:dd: 41:70:8f:d5:f2:89:20:be:4f:fb:0c:fd:5e:ea:5d:5e:1c:b5: 28:a3:7d:09:4b:d0:6d:f6:a0:32:0d:d4:f8:4b:5e:ec:16:d4: 3a:28:bc:c8:ff:84:e5:17:a8:af:37:e3:bc:f5:2c:7a:08:19: 56:d1:c7:bc:5b:d0:f1:88:f1:ca:a3:85:ab:ee:c3:97:39:c1: 4a:0f:9c:1e:45:5d:78:aa:cf:7d:66:58:8b:82:af:36:06:72: 84:1b:8d:d4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVF ODYzQUM1NzBBRUVBMUY5MzBCRUE1RTc2QUFFN0RENTUzODA0RTAeFw0yNDExMjIx NTIyNTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBBNkIzMzYxRTFGNUZB OUIwMjY2RDdERjkyNDQyMkE0MEI0NzE0OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChKDpoenGpDpnVTQHWWh+MoKgo3wNRS0WOWjgACAPHpranhpSR WSOFsdQ/m6T2D9AiVGPHgCHmH1RXFIVHLkttF4uYe2BmzldbLfQxCtIVFH8Gwp6O RnWJD2Sw/RlDM2jAM5UFif6kfFr+/I51d40IP5t3RHg3rMp8hWS4+yQkNtXIl9uH DbD+TK4l7MHs/1t6KdFazdVWR1UC1sYTlpAD7YLluAqmyroK6hU4ikvA4WH/aqe7 QB1a2a+0RZJP/EayTxPLm6RGwrm3zwWic9fMxPXyQ+9btQneRPdtJ2wPQ/gVWnIw tIKXRkFljaFIRbO/qljMWWHBSBzjAT54lln9AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUCmszYeH1+psCZtffkkQipAtHFJowHwYDVR0jBBgwFoAUDuhjrFcK7qH5ML6l 52qufdVTgE4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkw L0R1aGpyRmNLN3FINU1MNmw1MnF1ZmRWVGdFNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvRHVoanJGY0s3cUg1TUw2bDUycXVmZFZUZ0U0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkwL0R1aGpyRmNLN3FINU1M Nmw1MnF1ZmRWVGdFNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBtnLdDLbwIj3x2R1cchcbNUD9m5sA01qf9Aos8m8+6PzBLUcUIPO2CiV4yHboY qbeCv6cJGMPCipWulpEuRqqGQhOAnPc5Oy+NM57zJuTT4FrdwMzdj67YgpfJ/LSY n4QVd4z7Dkl7urMrAFQy9D3sKTbFudQmdWF3nOAoCn6exc4dmPYcHqmcClwMxGLk kM7YaDiMhUwB6mLU1a/3KQBBQN1BcI/V8okgvk/7DP1e6l1eHLUoo30JS9Bt9qAy DdT4S17sFtQ6KLzI/4TlF6ivN+O89Sx6CBlW0ce8W9DxiPHKo4Wr7sOXOcFKD5we RV14qs99ZliLgq82BnKEG43U -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:44 2024 by rpki-client on console-fra.rpki-client.org