$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft File: dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft (raw, json) Hash identifier: U3SFUZWbdd+2umbxptYyOGFSJscL1IzGhv71MItfC7U= Subject key identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E Authority key identifier: 75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 Certificate issuer: /CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Certificate serial: 0961 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft Manifest number: 0961 Signing time: Mon 20 Oct 2025 17:04:07 +0000 Manifest this update: Mon 20 Oct 2025 17:04:07 +0000 Manifest next update: Mon 20 Oct 2025 23:04:07 +0000 Files and hashes: 1: dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl (hash: YffyxccctLZRcaIzVGIETq24qYN2ugiFdBqSfKFKkYw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Validity Not Before: Oct 20 17:04:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=535C665F13DA3DAA43F20BB04EA2A9E2FEBDE11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:fe:ee:ac:0a:c3:af:9a:a6:24:0c:ef:8c: 53:e1:9a:34:5e:38:70:c3:7d:00:e3:9c:92:a2:2e: 8a:5c:86:9c:00:5d:85:99:0c:be:4d:a9:08:27:43: f8:df:5c:65:ec:35:05:a4:90:7a:96:70:e0:a0:30: c2:3e:9c:9e:1b:01:04:9b:02:5b:ca:f9:de:9f:48: 8d:f4:f7:67:4e:55:d2:56:35:72:8f:12:8a:8a:e4: 34:55:3d:46:fc:98:c5:90:e6:f1:6b:35:b2:8a:be: d6:a3:50:bb:bb:0b:ea:6d:e2:fc:62:9e:0b:54:66: 0d:d5:65:fd:58:62:b6:06:e7:c5:d6:8a:ae:13:eb: 00:92:e3:35:20:a6:32:ee:4f:9d:07:1f:05:bd:29: 88:e7:21:b6:fc:07:4a:fe:9b:9d:c3:d8:7c:82:f1: f6:ef:2a:a4:5e:c7:10:ee:82:fc:de:f7:e2:64:e8: 11:3a:27:6d:26:ae:95:ae:19:32:30:e4:63:2c:b5: 7c:16:ba:9d:4e:5f:a8:72:e5:fe:ec:47:4c:00:09: 13:a7:a2:b9:81:f7:5a:bd:6b:31:e9:02:e2:ae:c6: 2d:e6:2f:88:28:c9:81:f5:58:ae:d2:6b:dd:3a:2a: eb:c0:07:0c:0c:23:48:00:7c:84:d1:fe:c8:fd:65: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E X509v3 Authority Key Identifier: keyid:75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8c:34:a7:27:99:9b:a4:04:cb:f3:92:37:b5:49:72:70:ea: 70:e2:44:66:6c:de:87:ea:53:52:2d:25:52:57:c5:79:56:c6: 51:92:5b:32:43:04:29:40:8e:ec:24:a8:98:4f:fb:ff:0f:30: 0f:6d:8c:64:d9:09:a1:cc:05:5e:31:b8:39:ae:44:bf:ec:a8: f5:1b:2c:60:0c:48:1b:f4:e2:d9:7b:ff:c9:b5:d4:ff:29:b1: ab:da:60:db:30:ec:2e:e9:f4:dd:9d:28:5b:3a:b1:48:1f:02: 57:bd:78:36:e1:4e:63:2c:09:eb:a4:19:56:44:6b:4d:8e:69: 37:72:25:60:01:7d:e3:1e:85:fb:5b:12:25:05:ff:23:eb:19: a4:0d:01:90:87:1c:27:93:71:42:a0:d4:29:5f:77:f7:3e:17: 9a:02:55:d5:14:be:6e:05:78:b6:d0:4c:da:53:c0:da:c7:a0: 59:19:88:56:47:a8:b9:ba:47:f8:10:ec:e9:46:db:fc:b7:00: ae:f4:03:06:ab:b5:f8:4e:11:dc:19:b8:aa:c2:f0:73:76:60: af:26:65:11:d1:08:fb:1c:55:bc:bc:30:8a:c0:7a:62:ae:2a: f8:38:5d:21:1d:b3:4f:a5:e2:ff:21:58:a2:8c:20:a2:91:70: 71:18:88:7e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU1 QUU2OEMxRTExQzI0N0U3MUE0OTNDNzZERTU3RkMzNDkyNjRGOTAeFw0yNTEwMjAx NzA0MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDUzNUM2NjVGMTNEQTNE QUE0M0YyMEJCMDRFQTJBOUUyRkVCREUxMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLKP7urArDr5qmJAzvjFPhmjReOHDDfQDjnJKiLopchpwAXYWZ DL5NqQgnQ/jfXGXsNQWkkHqWcOCgMMI+nJ4bAQSbAlvK+d6fSI3092dOVdJWNXKP EoqK5DRVPUb8mMWQ5vFrNbKKvtajULu7C+pt4vxingtUZg3VZf1YYrYG58XWiq4T 6wCS4zUgpjLuT50HHwW9KYjnIbb8B0r+m53D2HyC8fbvKqRexxDugvze9+Jk6BE6 J20mrpWuGTIw5GMstXwWup1OX6hy5f7sR0wACROnormB91q9azHpAuKuxi3mL4go yYH1WK7Sa906KuvABwwMI0gAfITR/sj9ZUfZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUU1xmXxPaPapD8guwTqKp4v694R4wHwYDVR0jBBgwFoAUdVrmjB4RwkfnGkk8 dt5X/DSSZPkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9kVnJtakI0UndrZm5Ha2s4ZHQ1WF9EU1NaUGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RWcm1qQjRSd2tmbkdrazhkdDVYX0RTU1pQay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvZFZybWpCNFJ3a2Zu R2trOGR0NVhfRFNTWlBrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGqMNKcnmZukBMvzkje1SXJw6nDiRGZs3ofqU1ItJVJXxXlWxlGSWzJDBClA juwkqJhP+/8PMA9tjGTZCaHMBV4xuDmuRL/sqPUbLGAMSBv04tl7/8m11P8psava YNsw7C7p9N2dKFs6sUgfAle9eDbhTmMsCeukGVZEa02OaTdyJWABfeMehftbEiUF /yPrGaQNAZCHHCeTcUKg1Clfd/c+F5oCVdUUvm4FeLbQTNpTwNrHoFkZiFZHqLm6 R/gQ7OlG2/y3AK70AwartfhOEdwZuKrC8HN2YK8mZRHRCPscVby8MIrAemKuKvg4 XSEds0+l4v8hWKKMIKKRcHEYiH4= -----END CERTIFICATE-----Generated at Mon Oct 20 20:46:12 2025 by rpki-client