$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft File: dme1o3MAnBs-wTTnPJk2NFMpLHg.mft (raw, json) Hash identifier: mNVcuS8wYdTEJGwVOlODJ4XH/sAaI19qs01dbnW0VvE= Subject key identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B Authority key identifier: 76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 Certificate issuer: /CN=7667B5A373009C1B3EC134E73C99363453292C78 Certificate serial: 108F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft Manifest number: 108F Signing time: Sat 23 Aug 2025 16:02:57 +0000 Manifest this update: Sat 23 Aug 2025 16:02:57 +0000 Manifest next update: Sat 23 Aug 2025 22:02:57 +0000 Files and hashes: 1: dme1o3MAnBs-wTTnPJk2NFMpLHg.crl (hash: 5BKo1LeL4gBeqn8uLxDfNcaYlI1BFznksPMCmhkC/O0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4239 (0x108f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7667B5A373009C1B3EC134E73C99363453292C78 Validity Not Before: Aug 23 16:02:57 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=20DDEFF20DEE3DD8D69ACAB7C23E3119ABA8EE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:c4:d7:79:ff:fd:71:64:6b:ab:09:34:65: 9e:7c:a5:cd:d3:63:7b:64:c4:47:3b:b1:f8:b7:62: 7d:60:b5:c7:84:d9:96:4d:0d:8f:10:71:03:4e:4c: 1f:db:4d:c0:ca:43:54:ba:90:f4:2a:12:a7:9c:fb: 7a:55:33:0f:af:0f:49:cb:cf:b3:5b:40:12:0e:20: 70:47:ba:83:bb:b2:3a:55:fb:ec:71:a1:df:8c:e3: b8:fc:83:7f:1a:eb:60:6f:7b:0d:89:af:fd:f3:01: 72:bc:12:24:9c:87:7a:12:d0:04:97:b8:a7:8d:92: 8a:59:18:98:a8:41:4d:17:10:42:ec:e2:52:aa:e7: b1:dc:50:03:41:97:b5:00:6b:a0:1b:32:49:07:f6: ed:ed:83:48:10:0f:0b:f7:a6:ed:ad:65:38:9e:98: 5f:2e:05:7e:9b:cb:14:f4:52:68:63:f4:2d:57:32: 4d:a8:c0:66:e1:fe:ce:8d:e7:4a:0b:12:07:dd:64: 0e:ba:31:cd:a0:da:d5:9a:f3:73:72:c5:c1:dd:e8: 5a:37:93:c3:d9:a0:69:4e:2d:40:f5:89:52:ac:4b: 2e:28:a2:75:b5:cd:0f:95:47:ff:59:51:45:d9:87: f7:67:bf:fa:44:00:9d:22:18:59:54:86:c1:02:1e: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B X509v3 Authority Key Identifier: keyid:76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b7:ec:f5:19:7b:6d:89:62:c0:00:5c:d8:8b:91:09:59:96: 8c:25:9b:e2:ee:d5:0f:17:96:f1:fd:d5:12:03:9a:ef:39:eb: 6f:dc:4b:a4:ea:4a:76:ad:60:e8:de:cb:1a:bf:bf:74:7e:49: 0d:78:f8:b8:0f:7e:97:2c:8a:1f:b9:0f:6b:7a:0a:f7:10:11: 5d:58:9e:d8:30:5a:ba:56:d3:37:52:2f:5c:95:b8:14:1c:17: 96:67:8c:90:4f:e0:63:46:fe:4b:a5:8b:ac:a9:64:63:ba:9d: 9a:1a:f2:e4:af:8f:31:28:19:a7:c0:68:f3:10:69:b0:02:e0: 66:ea:61:ec:e2:9e:83:ad:b2:b6:6b:25:c3:c6:a8:cf:e9:61: b6:f2:77:1d:73:a9:d3:8b:f9:3b:c0:06:7f:f6:85:81:8b:16: 94:f6:95:55:fd:47:cb:8b:b2:02:e0:06:95:ea:10:71:3f:cb: 2e:68:48:2a:06:9b:96:65:49:cc:9f:b3:15:44:c8:46:fe:e7: e9:70:49:49:e6:4d:00:fc:61:e5:ea:6d:7a:a8:a8:a6:43:8e: e2:62:8f:11:72:09:52:8c:11:e6:72:8f:d8:a9:4b:55:0f:f6: b9:c5:55:30:ce:1c:69:7a:6a:bc:57:01:8c:48:a7:3c:13:15: 66:08:c9:ab -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzY2 N0I1QTM3MzAwOUMxQjNFQzEzNEU3M0M5OTM2MzQ1MzI5MkM3ODAeFw0yNTA4MjMx NjAyNTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIwRERFRkYyMERFRTNE RDhENjlBQ0FCN0MyM0UzMTE5QUJBOEVFNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMf8TXef/9cWRrqwk0ZZ58pc3TY3tkxEc7sfi3Yn1gtceE2ZZN DY8QcQNOTB/bTcDKQ1S6kPQqEqec+3pVMw+vD0nLz7NbQBIOIHBHuoO7sjpV++xx od+M47j8g38a62Bvew2Jr/3zAXK8EiSch3oS0ASXuKeNkopZGJioQU0XEELs4lKq 57HcUANBl7UAa6AbMkkH9u3tg0gQDwv3pu2tZTiemF8uBX6byxT0Umhj9C1XMk2o wGbh/s6N50oLEgfdZA66Mc2g2tWa83NyxcHd6Fo3k8PZoGlOLUD1iVKsSy4oonW1 zQ+VR/9ZUUXZh/dnv/pEAJ0iGFlUhsECHuTDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIN3v8g3uPdjWmsq3wj4xGauo7kswHwYDVR0jBBgwFoAUdme1o3MAnBs+wTTn PJk2NFMpLHgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OS9kbWUxbzNNQW5Ccy13VFRuUEprMk5GTXBMSGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RtZTFvM01BbkJzLXdUVG5QSmsyTkZNcExIZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvZG1lMW8zTUFuQnMt d1RUblBKazJORk1wTEhnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFq37PUZe22JYsAAXNiLkQlZlowlm+Lu1Q8XlvH91RIDmu8562/cS6TqSnat YOjeyxq/v3R+SQ14+LgPfpcsih+5D2t6CvcQEV1YntgwWrpW0zdSL1yVuBQcF5Zn jJBP4GNG/kuli6ypZGO6nZoa8uSvjzEoGafAaPMQabAC4GbqYezinoOtsrZrJcPG qM/pYbbydx1zqdOL+TvABn/2hYGLFpT2lVX9R8uLsgLgBpXqEHE/yy5oSCoGm5Zl ScyfsxVEyEb+5+lwSUnmTQD8YeXqbXqoqKZDjuJijxFyCVKMEeZyj9ipS1UP9rnF VTDOHGl6arxXAYxIpzwTFWYIyas= -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:59 2025 by rpki-client