$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft File: jm3DpYneR53ZjpODO_zBYddCgiQ.mft (raw, json) Hash identifier: geGNpU9KoNL7CEWZSqu7ew+n6fNkhu2mfoww4Kj8xqg= Subject key identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 Authority key identifier: 8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 Certificate issuer: /CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Certificate serial: 1ACF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft Manifest number: 1ACF Signing time: Fri 22 Nov 2024 13:50:42 +0000 Manifest this update: Fri 22 Nov 2024 13:50:42 +0000 Manifest next update: Fri 22 Nov 2024 19:50:42 +0000 Files and hashes: 1: jm3DpYneR53ZjpODO_zBYddCgiQ.crl (hash: 6xES49L0A+N2K78XmPSfCRlgp2MaxeucGgOphRRaXTY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6863 (0x1acf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E6DC3A589DE479DD98E93833BFCC161D7428224 Validity Not Before: Nov 22 13:50:42 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D75FB06620B70BA3A0FF0F4FA2329D1AAC8F2131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:79:5d:b6:9a:ea:98:0e:97:0d:79:e7:b8: 2b:a6:e9:eb:40:e9:2f:31:d5:3b:8f:4e:74:ce:64: c0:8c:71:e7:75:d1:44:47:5b:88:d6:d8:32:2a:e6: 7c:56:0e:f3:a6:89:10:14:70:4d:fa:7f:9b:c0:26: 19:d7:c2:9a:c2:cf:74:26:90:25:69:0c:4a:26:63: 86:10:65:78:e9:60:7f:5e:61:10:75:cf:b6:b2:d7: d0:72:52:5d:16:61:7d:00:be:18:f4:0d:04:ea:13: 89:9b:74:56:b7:c4:8c:20:81:27:ef:e6:e7:35:fe: fe:3e:b4:c0:fa:1d:d1:d7:60:3c:56:1d:bc:b9:92: 44:47:27:a4:5a:12:9e:4f:c4:72:01:d7:be:48:ca: 43:a8:a0:19:4e:e6:07:a8:13:39:26:20:61:5b:ed: 6f:6d:a3:d1:da:64:5d:1b:6e:9d:dc:ba:b5:38:09: a7:f4:49:a6:b0:49:3f:ef:57:81:0c:13:a8:2f:58: 50:38:45:90:74:3a:4b:5a:b3:f3:b3:01:05:e7:07: 01:85:24:71:76:f1:6a:37:36:d5:d1:3d:82:65:51: c8:66:93:fa:12:7d:57:c7:a3:8c:86:e7:51:f9:73: 1f:ba:a8:db:d5:2a:10:d4:e6:dd:cd:e7:e4:8d:9b: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31 X509v3 Authority Key Identifier: keyid:8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:92:09:03:db:d7:f8:27:c7:62:79:8b:2f:34:43:4c:7d:3a: a9:19:f8:52:3a:f2:64:b3:83:2d:05:77:7a:ce:71:f1:78:d8: 92:76:12:c5:1e:ee:e2:fb:c6:2d:22:69:bc:67:93:5a:2e:ff: bb:b4:b9:25:61:34:17:8e:05:19:0e:3b:c1:d6:e3:75:fa:74: f3:a4:be:ec:56:8e:62:a9:6d:f7:34:9d:ba:8c:3e:de:66:cf: 14:c8:d2:07:0e:00:5c:0b:5d:f0:bb:e5:5d:33:f8:fc:64:65: cf:52:a4:38:56:51:c0:28:c9:bc:84:20:b2:de:b5:67:d4:3f: 5f:6e:38:47:4a:7c:08:37:22:30:57:90:a9:2f:1b:cb:1b:b4: c7:a5:1a:7c:73:b8:5f:49:ef:e7:c4:13:02:18:3f:8c:8d:b6: 81:43:a2:43:d7:46:92:8c:32:1f:da:6e:fb:cb:8f:a5:d4:54: ac:91:13:2f:90:f2:1f:fb:f9:5d:7d:66:ba:73:da:84:90:15: 95:a1:36:0e:3c:60:37:77:b8:9f:67:d8:1f:1a:f9:6e:62:26: 81:22:ad:40:14:30:90:a6:0e:f0:0d:fb:a3:2c:c8:49:a6:63: 33:6f:6a:26:a1:df:67:1f:97:22:e7:40:99:56:3c:3d:c4:89: c9:3b:9a:bf -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGs8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU2 REMzQTU4OURFNDc5REQ5OEU5MzgzM0JGQ0MxNjFENzQyODIyNDAeFw0yNDExMjIx MzUwNDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ3NUZCMDY2MjBCNzBC QTNBMEZGMEY0RkEyMzI5RDFBQUM4RjIxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVg3ldtprqmA6XDXnnuCum6etA6S8x1TuPTnTOZMCMced10URH W4jW2DIq5nxWDvOmiRAUcE36f5vAJhnXwprCz3QmkCVpDEomY4YQZXjpYH9eYRB1 z7ay19ByUl0WYX0Avhj0DQTqE4mbdFa3xIwggSfv5uc1/v4+tMD6HdHXYDxWHby5 kkRHJ6RaEp5PxHIB175IykOooBlO5geoEzkmIGFb7W9to9HaZF0bbp3curU4Caf0 SaawST/vV4EME6gvWFA4RZB0Oktas/OzAQXnBwGFJHF28Wo3NtXRPYJlUchmk/oS fVfHo4yG51H5cx+6qNvVKhDU5t3N5+SNm27rAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU11+wZiC3C6Og/w9PojKdGqyPITEwHwYDVR0jBBgwFoAUjm3DpYneR53ZjpOD O/zBYddCgiQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1 L2ptM0RwWW5lUjUzWmpwT0RPX3pCWWRkQ2dpUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvam0zRHBZbmVSNTNaanBPRE9fekJZZGRDZ2lRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1L2ptM0RwWW5lUjUzWmpw T0RPX3pCWWRkQ2dpUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDrkgkD29f4J8dieYsvNENMfTqpGfhSOvJks4MtBXd6znHxeNiSdhLFHu7i+8Yt Imm8Z5NaLv+7tLklYTQXjgUZDjvB1uN1+nTzpL7sVo5iqW33NJ26jD7eZs8UyNIH DgBcC13wu+VdM/j8ZGXPUqQ4VlHAKMm8hCCy3rVn1D9fbjhHSnwINyIwV5CpLxvL G7THpRp8c7hfSe/nxBMCGD+MjbaBQ6JD10aSjDIf2m77y4+l1FSskRMvkPIf+/ld fWa6c9qEkBWVoTYOPGA3d7ifZ9gfGvluYiaBIq1AFDCQpg7wDfujLMhJpmMzb2om od9nH5ci50CZVjw9xInJO5q/ -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org