$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft File: dme1o3MAnBs-wTTnPJk2NFMpLHg.mft (raw, json) Hash identifier: SvaElboT3RT1dxoI/vEB1GbidRAoC1gfeuBAvIWqCUI= Subject key identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B Authority key identifier: 76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 Certificate issuer: /CN=7667B5A373009C1B3EC134E73C99363453292C78 Certificate serial: 10DA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft Manifest number: 10DA Signing time: Mon 08 Sep 2025 01:03:43 +0000 Manifest this update: Mon 08 Sep 2025 01:03:43 +0000 Manifest next update: Mon 08 Sep 2025 07:03:43 +0000 Files and hashes: 1: dme1o3MAnBs-wTTnPJk2NFMpLHg.crl (hash: k0KIahODyg2Yza6CxIQHClJHh9/AICbcTSLo0y9eBcg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4314 (0x10da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7667B5A373009C1B3EC134E73C99363453292C78 Validity Not Before: Sep 8 01:03:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=20DDEFF20DEE3DD8D69ACAB7C23E3119ABA8EE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:c4:d7:79:ff:fd:71:64:6b:ab:09:34:65: 9e:7c:a5:cd:d3:63:7b:64:c4:47:3b:b1:f8:b7:62: 7d:60:b5:c7:84:d9:96:4d:0d:8f:10:71:03:4e:4c: 1f:db:4d:c0:ca:43:54:ba:90:f4:2a:12:a7:9c:fb: 7a:55:33:0f:af:0f:49:cb:cf:b3:5b:40:12:0e:20: 70:47:ba:83:bb:b2:3a:55:fb:ec:71:a1:df:8c:e3: b8:fc:83:7f:1a:eb:60:6f:7b:0d:89:af:fd:f3:01: 72:bc:12:24:9c:87:7a:12:d0:04:97:b8:a7:8d:92: 8a:59:18:98:a8:41:4d:17:10:42:ec:e2:52:aa:e7: b1:dc:50:03:41:97:b5:00:6b:a0:1b:32:49:07:f6: ed:ed:83:48:10:0f:0b:f7:a6:ed:ad:65:38:9e:98: 5f:2e:05:7e:9b:cb:14:f4:52:68:63:f4:2d:57:32: 4d:a8:c0:66:e1:fe:ce:8d:e7:4a:0b:12:07:dd:64: 0e:ba:31:cd:a0:da:d5:9a:f3:73:72:c5:c1:dd:e8: 5a:37:93:c3:d9:a0:69:4e:2d:40:f5:89:52:ac:4b: 2e:28:a2:75:b5:cd:0f:95:47:ff:59:51:45:d9:87: f7:67:bf:fa:44:00:9d:22:18:59:54:86:c1:02:1e: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B X509v3 Authority Key Identifier: keyid:76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0a:ee:49:c1:c6:d2:91:69:95:14:c7:ff:82:50:f8:4d:88: 9a:3d:d8:f1:64:bc:b7:ae:56:f8:fd:4a:0f:1b:c1:c4:45:ce: e1:62:7d:ef:c8:3c:8a:bf:1e:7e:af:91:7d:c2:9e:0c:63:6d: 0d:a2:ba:7a:7f:99:16:c2:5b:6b:34:8c:32:a3:29:73:b5:a8: 75:50:d7:f4:3e:c8:53:78:33:40:85:12:46:4f:8f:37:e4:1d: b6:eb:a1:32:a6:da:28:69:3a:cd:39:5a:ca:f2:2a:73:76:03: 48:b6:a8:20:cd:88:6c:42:e9:9e:33:40:30:5b:46:27:75:1e: 05:4f:86:0a:c4:59:e3:99:77:29:35:ba:7e:5f:22:76:5f:8f: 93:f9:a1:d1:84:3d:c4:77:a8:d0:08:6b:df:ab:03:68:6c:af: 3f:1a:88:b0:9e:d8:99:0e:0d:02:df:83:1c:90:9c:c0:8a:c3: 7a:ec:a8:a3:93:30:4b:11:19:98:3b:eb:3d:63:b3:60:15:dc: dd:5d:29:11:9d:72:4c:94:bd:99:86:34:cd:21:32:3d:d8:1f: aa:59:a4:69:75:80:01:7f:21:04:f1:8c:9d:6c:e9:df:d2:41: 34:cf:a4:99:84:3d:b9:97:cb:2c:01:f7:f2:0a:fd:76:ae:a8: bd:12:34:c3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICENowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzY2 N0I1QTM3MzAwOUMxQjNFQzEzNEU3M0M5OTM2MzQ1MzI5MkM3ODAeFw0yNTA5MDgw MTAzNDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIwRERFRkYyMERFRTNE RDhENjlBQ0FCN0MyM0UzMTE5QUJBOEVFNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMf8TXef/9cWRrqwk0ZZ58pc3TY3tkxEc7sfi3Yn1gtceE2ZZN DY8QcQNOTB/bTcDKQ1S6kPQqEqec+3pVMw+vD0nLz7NbQBIOIHBHuoO7sjpV++xx od+M47j8g38a62Bvew2Jr/3zAXK8EiSch3oS0ASXuKeNkopZGJioQU0XEELs4lKq 57HcUANBl7UAa6AbMkkH9u3tg0gQDwv3pu2tZTiemF8uBX6byxT0Umhj9C1XMk2o wGbh/s6N50oLEgfdZA66Mc2g2tWa83NyxcHd6Fo3k8PZoGlOLUD1iVKsSy4oonW1 zQ+VR/9ZUUXZh/dnv/pEAJ0iGFlUhsECHuTDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIN3v8g3uPdjWmsq3wj4xGauo7kswHwYDVR0jBBgwFoAUdme1o3MAnBs+wTTn PJk2NFMpLHgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OS9kbWUxbzNNQW5Ccy13VFRuUEprMk5GTXBMSGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RtZTFvM01BbkJzLXdUVG5QSmsyTkZNcExIZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvZG1lMW8zTUFuQnMt d1RUblBKazJORk1wTEhnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA4K7knBxtKRaZUUx/+CUPhNiJo92PFkvLeuVvj9Sg8bwcRFzuFife/IPIq/ Hn6vkX3CngxjbQ2iunp/mRbCW2s0jDKjKXO1qHVQ1/Q+yFN4M0CFEkZPjzfkHbbr oTKm2ihpOs05WsryKnN2A0i2qCDNiGxC6Z4zQDBbRid1HgVPhgrEWeOZdyk1un5f InZfj5P5odGEPcR3qNAIa9+rA2hsrz8aiLCe2JkODQLfgxyQnMCKw3rsqKOTMEsR GZg76z1js2AV3N1dKRGdckyUvZmGNM0hMj3YH6pZpGl1gAF/IQTxjJ1s6d/SQTTP pJmEPbmXyywB9/IK/XauqL0SNMM= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:18 2025 by rpki-client