$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft File: dme1o3MAnBs-wTTnPJk2NFMpLHg.mft (raw, json) Hash identifier: TTtL3YWcuhE97wl4hAId6v40ZgTFfRq9SpFlOQ8n5tU= Subject key identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B Authority key identifier: 76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 Certificate issuer: /CN=7667B5A373009C1B3EC134E73C99363453292C78 Certificate serial: 0EAA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft Manifest number: 0EAA Signing time: Sat 17 May 2025 08:08:28 +0000 Manifest this update: Sat 17 May 2025 08:08:28 +0000 Manifest next update: Sat 17 May 2025 14:08:28 +0000 Files and hashes: 1: dme1o3MAnBs-wTTnPJk2NFMpLHg.crl (hash: 0y+riLFzoZQYdmDIoflwdnzZpqhllr3LFmk7jrKXiPI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3754 (0xeaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7667B5A373009C1B3EC134E73C99363453292C78 Validity Not Before: May 17 08:08:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=20DDEFF20DEE3DD8D69ACAB7C23E3119ABA8EE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:c4:d7:79:ff:fd:71:64:6b:ab:09:34:65: 9e:7c:a5:cd:d3:63:7b:64:c4:47:3b:b1:f8:b7:62: 7d:60:b5:c7:84:d9:96:4d:0d:8f:10:71:03:4e:4c: 1f:db:4d:c0:ca:43:54:ba:90:f4:2a:12:a7:9c:fb: 7a:55:33:0f:af:0f:49:cb:cf:b3:5b:40:12:0e:20: 70:47:ba:83:bb:b2:3a:55:fb:ec:71:a1:df:8c:e3: b8:fc:83:7f:1a:eb:60:6f:7b:0d:89:af:fd:f3:01: 72:bc:12:24:9c:87:7a:12:d0:04:97:b8:a7:8d:92: 8a:59:18:98:a8:41:4d:17:10:42:ec:e2:52:aa:e7: b1:dc:50:03:41:97:b5:00:6b:a0:1b:32:49:07:f6: ed:ed:83:48:10:0f:0b:f7:a6:ed:ad:65:38:9e:98: 5f:2e:05:7e:9b:cb:14:f4:52:68:63:f4:2d:57:32: 4d:a8:c0:66:e1:fe:ce:8d:e7:4a:0b:12:07:dd:64: 0e:ba:31:cd:a0:da:d5:9a:f3:73:72:c5:c1:dd:e8: 5a:37:93:c3:d9:a0:69:4e:2d:40:f5:89:52:ac:4b: 2e:28:a2:75:b5:cd:0f:95:47:ff:59:51:45:d9:87: f7:67:bf:fa:44:00:9d:22:18:59:54:86:c1:02:1e: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B X509v3 Authority Key Identifier: keyid:76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:45:94:99:88:10:ea:1c:e8:e3:bc:d6:23:9b:17:7e:2e:12: 6d:e9:02:fd:6e:4f:57:55:ef:aa:86:34:c8:97:c0:43:32:cf: d8:c0:18:c9:3f:e2:2b:68:32:1e:95:cf:7c:4f:ca:25:8d:6b: 66:eb:bc:9d:75:98:a3:a5:dd:d7:b9:60:bf:9d:f1:80:48:f5: 2f:34:a1:4c:ee:38:18:0c:15:c1:43:06:98:9f:00:54:26:9e: 23:cd:dd:f2:b2:d8:12:19:7a:8f:02:09:d5:7d:01:e6:df:27: 29:8b:a8:4f:4b:74:0d:3d:1f:c5:02:fe:32:5b:bb:2a:f5:0e: 94:09:2e:a9:db:9b:73:42:9a:e0:79:21:b4:fe:3b:6e:52:8a: 79:c6:d3:af:ed:b5:72:46:a5:c9:b2:a6:33:91:36:9e:fa:b1: 49:d5:2b:93:dc:41:e6:df:35:02:46:d3:5f:c3:2f:5d:0f:ed: 53:3c:4f:95:9b:fc:15:6b:a3:00:e5:31:08:f1:3c:14:18:1f: eb:65:39:68:ca:be:07:9b:cb:e6:3f:92:ec:ad:86:2d:1c:6a: 7b:0b:ab:69:15:4d:0d:f1:f2:5d:78:94:44:5b:8a:16:c6:03: f5:75:0d:f1:62:8b:34:f8:39:27:8c:4b:84:cf:9a:b2:f7:a2: 4d:a2:d3:8b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzY2 N0I1QTM3MzAwOUMxQjNFQzEzNEU3M0M5OTM2MzQ1MzI5MkM3ODAeFw0yNTA1MTcw ODA4MjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIwRERFRkYyMERFRTNE RDhENjlBQ0FCN0MyM0UzMTE5QUJBOEVFNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMf8TXef/9cWRrqwk0ZZ58pc3TY3tkxEc7sfi3Yn1gtceE2ZZN DY8QcQNOTB/bTcDKQ1S6kPQqEqec+3pVMw+vD0nLz7NbQBIOIHBHuoO7sjpV++xx od+M47j8g38a62Bvew2Jr/3zAXK8EiSch3oS0ASXuKeNkopZGJioQU0XEELs4lKq 57HcUANBl7UAa6AbMkkH9u3tg0gQDwv3pu2tZTiemF8uBX6byxT0Umhj9C1XMk2o wGbh/s6N50oLEgfdZA66Mc2g2tWa83NyxcHd6Fo3k8PZoGlOLUD1iVKsSy4oonW1 zQ+VR/9ZUUXZh/dnv/pEAJ0iGFlUhsECHuTDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIN3v8g3uPdjWmsq3wj4xGauo7kswHwYDVR0jBBgwFoAUdme1o3MAnBs+wTTn PJk2NFMpLHgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OS9kbWUxbzNNQW5Ccy13VFRuUEprMk5GTXBMSGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RtZTFvM01BbkJzLXdUVG5QSmsyTkZNcExIZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvZG1lMW8zTUFuQnMt d1RUblBKazJORk1wTEhnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALNFlJmIEOoc6OO81iObF34uEm3pAv1uT1dV76qGNMiXwEMyz9jAGMk/4ito Mh6Vz3xPyiWNa2brvJ11mKOl3de5YL+d8YBI9S80oUzuOBgMFcFDBpifAFQmniPN 3fKy2BIZeo8CCdV9AebfJymLqE9LdA09H8UC/jJbuyr1DpQJLqnbm3NCmuB5IbT+ O25SinnG06/ttXJGpcmypjORNp76sUnVK5PcQebfNQJG01/DL10P7VM8T5Wb/BVr owDlMQjxPBQYH+tlOWjKvgeby+Y/kuythi0cansLq2kVTQ3x8l14lERbihbGA/V1 DfFiizT4OSeMS4TPmrL3ok2i04s= -----END CERTIFICATE-----Generated at Sat May 17 11:17:20 2025 by rpki-client