$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft File: dme1o3MAnBs-wTTnPJk2NFMpLHg.mft (raw, json) Hash identifier: hM4AQN/Ny6ZMSE6JqC3rtu0LFO0IT5xdSxRx/3lYtpI= Subject key identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B Authority key identifier: 76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 Certificate issuer: /CN=7667B5A373009C1B3EC134E73C99363453292C78 Certificate serial: 0F98 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft Manifest number: 0F98 Signing time: Fri 04 Jul 2025 10:12:23 +0000 Manifest this update: Fri 04 Jul 2025 10:12:23 +0000 Manifest next update: Fri 04 Jul 2025 16:12:23 +0000 Files and hashes: 1: dme1o3MAnBs-wTTnPJk2NFMpLHg.crl (hash: eRqIrQ/L4UHLEIFhthL36K92Lq2epI/Q/88cGY4mlas=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3992 (0xf98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7667B5A373009C1B3EC134E73C99363453292C78 Validity Not Before: Jul 4 10:12:23 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=20DDEFF20DEE3DD8D69ACAB7C23E3119ABA8EE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:c4:d7:79:ff:fd:71:64:6b:ab:09:34:65: 9e:7c:a5:cd:d3:63:7b:64:c4:47:3b:b1:f8:b7:62: 7d:60:b5:c7:84:d9:96:4d:0d:8f:10:71:03:4e:4c: 1f:db:4d:c0:ca:43:54:ba:90:f4:2a:12:a7:9c:fb: 7a:55:33:0f:af:0f:49:cb:cf:b3:5b:40:12:0e:20: 70:47:ba:83:bb:b2:3a:55:fb:ec:71:a1:df:8c:e3: b8:fc:83:7f:1a:eb:60:6f:7b:0d:89:af:fd:f3:01: 72:bc:12:24:9c:87:7a:12:d0:04:97:b8:a7:8d:92: 8a:59:18:98:a8:41:4d:17:10:42:ec:e2:52:aa:e7: b1:dc:50:03:41:97:b5:00:6b:a0:1b:32:49:07:f6: ed:ed:83:48:10:0f:0b:f7:a6:ed:ad:65:38:9e:98: 5f:2e:05:7e:9b:cb:14:f4:52:68:63:f4:2d:57:32: 4d:a8:c0:66:e1:fe:ce:8d:e7:4a:0b:12:07:dd:64: 0e:ba:31:cd:a0:da:d5:9a:f3:73:72:c5:c1:dd:e8: 5a:37:93:c3:d9:a0:69:4e:2d:40:f5:89:52:ac:4b: 2e:28:a2:75:b5:cd:0f:95:47:ff:59:51:45:d9:87: f7:67:bf:fa:44:00:9d:22:18:59:54:86:c1:02:1e: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B X509v3 Authority Key Identifier: keyid:76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:10:cc:da:16:e5:c5:2c:3f:ba:f8:9a:55:57:fb:c3:df:93: 4e:10:71:15:5e:63:d6:c8:c5:ad:69:4a:03:be:5c:05:cf:74: 3f:61:e5:8a:12:b1:f8:97:bb:6f:56:f0:66:51:b9:c0:ff:8c: 0e:36:21:78:84:3a:7d:3c:3f:d4:30:35:fa:9b:d1:e4:87:98: f3:4e:e4:c5:6f:39:fc:86:95:b9:a0:c2:da:37:44:a2:9f:5f: b6:9b:ea:d3:d8:17:18:b4:9f:e9:82:c2:b7:03:3b:6c:af:54: bc:42:ff:32:a2:21:8a:34:f3:f3:8f:39:e7:84:c0:45:7d:ee: 63:38:1c:7f:42:8c:b7:f1:33:cb:d0:3f:43:89:55:ae:98:1f: cf:e3:92:21:51:5d:0c:3f:21:5c:ab:bb:ea:c3:ad:06:e1:7e: 19:5d:34:79:8e:f6:69:96:81:09:6a:c9:44:f0:52:e3:8a:4d: a7:e3:ce:82:6e:d3:ea:a8:dc:75:01:67:01:c3:03:c0:d3:f1: bf:8e:3d:b0:04:49:dd:6f:dd:53:be:f2:2c:1e:5e:8e:91:01: 4e:90:85:d5:17:74:df:cd:4f:b9:1f:db:ba:ce:f5:88:e9:23: a3:d0:bd:f4:b8:44:e8:69:0a:a8:76:04:b9:b3:68:51:5d:55: 87:55:68:c8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzY2 N0I1QTM3MzAwOUMxQjNFQzEzNEU3M0M5OTM2MzQ1MzI5MkM3ODAeFw0yNTA3MDQx MDEyMjNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIwRERFRkYyMERFRTNE RDhENjlBQ0FCN0MyM0UzMTE5QUJBOEVFNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMf8TXef/9cWRrqwk0ZZ58pc3TY3tkxEc7sfi3Yn1gtceE2ZZN DY8QcQNOTB/bTcDKQ1S6kPQqEqec+3pVMw+vD0nLz7NbQBIOIHBHuoO7sjpV++xx od+M47j8g38a62Bvew2Jr/3zAXK8EiSch3oS0ASXuKeNkopZGJioQU0XEELs4lKq 57HcUANBl7UAa6AbMkkH9u3tg0gQDwv3pu2tZTiemF8uBX6byxT0Umhj9C1XMk2o wGbh/s6N50oLEgfdZA66Mc2g2tWa83NyxcHd6Fo3k8PZoGlOLUD1iVKsSy4oonW1 zQ+VR/9ZUUXZh/dnv/pEAJ0iGFlUhsECHuTDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIN3v8g3uPdjWmsq3wj4xGauo7kswHwYDVR0jBBgwFoAUdme1o3MAnBs+wTTn PJk2NFMpLHgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OS9kbWUxbzNNQW5Ccy13VFRuUEprMk5GTXBMSGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RtZTFvM01BbkJzLXdUVG5QSmsyTkZNcExIZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvZG1lMW8zTUFuQnMt d1RUblBKazJORk1wTEhnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALkQzNoW5cUsP7r4mlVX+8Pfk04QcRVeY9bIxa1pSgO+XAXPdD9h5YoSsfiX u29W8GZRucD/jA42IXiEOn08P9QwNfqb0eSHmPNO5MVvOfyGlbmgwto3RKKfX7ab 6tPYFxi0n+mCwrcDO2yvVLxC/zKiIYo08/OPOeeEwEV97mM4HH9CjLfxM8vQP0OJ Va6YH8/jkiFRXQw/IVyru+rDrQbhfhldNHmO9mmWgQlqyUTwUuOKTafjzoJu0+qo 3HUBZwHDA8DT8b+OPbAESd1v3VO+8iweXo6RAU6QhdUXdN/NT7kf27rO9YjpI6PQ vfS4ROhpCqh2BLmzaFFdVYdVaMg= -----END CERTIFICATE-----Generated at Fri Jul 4 11:36:36 2025 by rpki-client