$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft File: dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft (raw, json) Hash identifier: n4mA7vkt+vsqAL6K3b+NgX8II7EvOjodvaGMLfLVEHk= Subject key identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E Authority key identifier: 75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 Certificate issuer: /CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Certificate serial: 074A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft Manifest number: 074A Signing time: Sat 05 Jul 2025 08:11:46 +0000 Manifest this update: Sat 05 Jul 2025 08:11:46 +0000 Manifest next update: Sat 05 Jul 2025 14:11:46 +0000 Files and hashes: 1: dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl (hash: /2HktMGYMSZFSvLczaeVFooVjRbsAnw9h4X3RmJ8Gfk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Validity Not Before: Jul 5 08:11:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=535C665F13DA3DAA43F20BB04EA2A9E2FEBDE11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:fe:ee:ac:0a:c3:af:9a:a6:24:0c:ef:8c: 53:e1:9a:34:5e:38:70:c3:7d:00:e3:9c:92:a2:2e: 8a:5c:86:9c:00:5d:85:99:0c:be:4d:a9:08:27:43: f8:df:5c:65:ec:35:05:a4:90:7a:96:70:e0:a0:30: c2:3e:9c:9e:1b:01:04:9b:02:5b:ca:f9:de:9f:48: 8d:f4:f7:67:4e:55:d2:56:35:72:8f:12:8a:8a:e4: 34:55:3d:46:fc:98:c5:90:e6:f1:6b:35:b2:8a:be: d6:a3:50:bb:bb:0b:ea:6d:e2:fc:62:9e:0b:54:66: 0d:d5:65:fd:58:62:b6:06:e7:c5:d6:8a:ae:13:eb: 00:92:e3:35:20:a6:32:ee:4f:9d:07:1f:05:bd:29: 88:e7:21:b6:fc:07:4a:fe:9b:9d:c3:d8:7c:82:f1: f6:ef:2a:a4:5e:c7:10:ee:82:fc:de:f7:e2:64:e8: 11:3a:27:6d:26:ae:95:ae:19:32:30:e4:63:2c:b5: 7c:16:ba:9d:4e:5f:a8:72:e5:fe:ec:47:4c:00:09: 13:a7:a2:b9:81:f7:5a:bd:6b:31:e9:02:e2:ae:c6: 2d:e6:2f:88:28:c9:81:f5:58:ae:d2:6b:dd:3a:2a: eb:c0:07:0c:0c:23:48:00:7c:84:d1:fe:c8:fd:65: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E X509v3 Authority Key Identifier: keyid:75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ea:25:c6:14:4c:5e:ad:8a:bf:1a:40:74:88:02:eb:12:22: ac:47:cd:42:04:6e:4c:75:8f:7f:26:ee:6c:3e:3a:78:7b:6d: 1c:d0:13:e1:68:66:c2:8a:d3:20:4b:92:a1:c1:cc:f0:da:af: 8d:3b:16:7d:30:a8:93:e5:78:ab:30:a4:0e:ca:94:8e:44:8a: 13:03:54:16:2e:54:17:23:5c:7d:5e:1e:02:f1:c9:10:c8:d1: e5:7a:77:06:9c:65:54:57:9d:51:11:60:51:61:34:35:21:a1: bd:8c:94:62:ce:67:bb:85:5a:93:1f:1d:15:cf:e5:1f:97:58: 68:c8:58:8e:8c:29:77:f2:72:65:68:6e:08:37:81:72:28:a1: b8:4a:f7:a1:d7:14:19:2f:a1:dd:b7:ea:29:3c:9a:2c:56:3c: b7:dd:84:01:b1:dc:0c:ee:df:32:b4:57:2f:5a:9b:04:6b:a8: bc:76:9b:2f:2e:c5:27:e7:82:89:db:2d:14:3f:59:b0:09:11: c2:16:1b:ac:0c:97:3a:8e:54:58:8d:fa:af:bd:5e:b6:2e:74: ee:54:86:c9:c2:fa:83:d8:29:21:a5:fc:c5:a2:8e:40:f8:e6: af:ee:a3:0d:8c:02:c0:75:00:5a:bd:9f:85:31:a5:b6:2f:54: 87:45:c8:ab -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU1 QUU2OEMxRTExQzI0N0U3MUE0OTNDNzZERTU3RkMzNDkyNjRGOTAeFw0yNTA3MDUw ODExNDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUzNUM2NjVGMTNEQTNE QUE0M0YyMEJCMDRFQTJBOUUyRkVCREUxMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLKP7urArDr5qmJAzvjFPhmjReOHDDfQDjnJKiLopchpwAXYWZ DL5NqQgnQ/jfXGXsNQWkkHqWcOCgMMI+nJ4bAQSbAlvK+d6fSI3092dOVdJWNXKP EoqK5DRVPUb8mMWQ5vFrNbKKvtajULu7C+pt4vxingtUZg3VZf1YYrYG58XWiq4T 6wCS4zUgpjLuT50HHwW9KYjnIbb8B0r+m53D2HyC8fbvKqRexxDugvze9+Jk6BE6 J20mrpWuGTIw5GMstXwWup1OX6hy5f7sR0wACROnormB91q9azHpAuKuxi3mL4go yYH1WK7Sa906KuvABwwMI0gAfITR/sj9ZUfZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUU1xmXxPaPapD8guwTqKp4v694R4wHwYDVR0jBBgwFoAUdVrmjB4RwkfnGkk8 dt5X/DSSZPkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9kVnJtakI0UndrZm5Ha2s4ZHQ1WF9EU1NaUGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RWcm1qQjRSd2tmbkdrazhkdDVYX0RTU1pQay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvZFZybWpCNFJ3a2Zu R2trOGR0NVhfRFNTWlBrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFDqJcYUTF6tir8aQHSIAusSIqxHzUIEbkx1j38m7mw+Onh7bRzQE+FoZsKK 0yBLkqHBzPDar407Fn0wqJPleKswpA7KlI5EihMDVBYuVBcjXH1eHgLxyRDI0eV6 dwacZVRXnVERYFFhNDUhob2MlGLOZ7uFWpMfHRXP5R+XWGjIWI6MKXfycmVobgg3 gXIoobhK96HXFBkvod236ik8mixWPLfdhAGx3Azu3zK0Vy9amwRrqLx2my8uxSfn gonbLRQ/WbAJEcIWG6wMlzqOVFiN+q+9XrYudO5UhsnC+oPYKSGl/MWijkD45q/u ow2MAsB1AFq9n4UxpbYvVIdFyKs= -----END CERTIFICATE-----Generated at Sat Jul 5 12:13:25 2025 by rpki-client