$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft File: dme1o3MAnBs-wTTnPJk2NFMpLHg.mft (raw, json) Hash identifier: Ke4Xl5L/bYKdhVcgB9j9+heNvanYwVETxv9E7cMq2jE= Subject key identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B Authority key identifier: 76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 Certificate issuer: /CN=7667B5A373009C1B3EC134E73C99363453292C78 Certificate serial: 0FE7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft Manifest number: 0FE7 Signing time: Sun 20 Jul 2025 06:40:16 +0000 Manifest this update: Sun 20 Jul 2025 06:40:16 +0000 Manifest next update: Sun 20 Jul 2025 12:40:16 +0000 Files and hashes: 1: dme1o3MAnBs-wTTnPJk2NFMpLHg.crl (hash: z9Etsw0TypEPD/AA80leoqYcoC7CY9WQISR3kvHNwSQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 12:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4071 (0xfe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7667B5A373009C1B3EC134E73C99363453292C78 Validity Not Before: Jul 20 06:40:16 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=20DDEFF20DEE3DD8D69ACAB7C23E3119ABA8EE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:c4:d7:79:ff:fd:71:64:6b:ab:09:34:65: 9e:7c:a5:cd:d3:63:7b:64:c4:47:3b:b1:f8:b7:62: 7d:60:b5:c7:84:d9:96:4d:0d:8f:10:71:03:4e:4c: 1f:db:4d:c0:ca:43:54:ba:90:f4:2a:12:a7:9c:fb: 7a:55:33:0f:af:0f:49:cb:cf:b3:5b:40:12:0e:20: 70:47:ba:83:bb:b2:3a:55:fb:ec:71:a1:df:8c:e3: b8:fc:83:7f:1a:eb:60:6f:7b:0d:89:af:fd:f3:01: 72:bc:12:24:9c:87:7a:12:d0:04:97:b8:a7:8d:92: 8a:59:18:98:a8:41:4d:17:10:42:ec:e2:52:aa:e7: b1:dc:50:03:41:97:b5:00:6b:a0:1b:32:49:07:f6: ed:ed:83:48:10:0f:0b:f7:a6:ed:ad:65:38:9e:98: 5f:2e:05:7e:9b:cb:14:f4:52:68:63:f4:2d:57:32: 4d:a8:c0:66:e1:fe:ce:8d:e7:4a:0b:12:07:dd:64: 0e:ba:31:cd:a0:da:d5:9a:f3:73:72:c5:c1:dd:e8: 5a:37:93:c3:d9:a0:69:4e:2d:40:f5:89:52:ac:4b: 2e:28:a2:75:b5:cd:0f:95:47:ff:59:51:45:d9:87: f7:67:bf:fa:44:00:9d:22:18:59:54:86:c1:02:1e: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B X509v3 Authority Key Identifier: keyid:76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:20:a6:02:9a:45:75:c6:c4:a4:bf:b5:08:0b:0f:7e:f1:b8: 34:49:ba:3d:e1:72:80:c3:ce:85:2f:65:c1:1f:1e:df:8d:78: dd:81:88:43:9f:10:4e:83:3e:1e:e1:0a:b8:f5:4d:e5:b2:d2: 98:d3:15:ec:db:b7:16:7d:80:0a:c4:bf:31:3f:87:b1:73:62: d6:a2:23:10:72:57:bc:1f:5e:4c:6d:b1:8b:e4:70:e9:1a:aa: 74:c3:62:c8:cc:62:db:f9:0a:ae:a8:53:03:32:ff:59:8c:66: e5:31:24:83:5e:24:02:d8:4f:e8:9d:26:17:77:6e:a3:82:6e: 9f:e4:59:e1:f2:84:a2:99:b5:3c:b8:fe:73:df:fa:26:e0:78: bb:de:78:ce:f7:fb:e4:2a:52:97:04:1e:4b:95:4e:32:71:70: d8:0b:9d:51:81:e8:33:75:51:56:c2:b2:6f:e8:1d:6c:a7:ea: 15:44:4a:73:bf:a2:6a:45:d6:54:7d:4b:27:b1:58:19:03:4b: c6:8a:a1:ca:cb:03:3a:c1:1c:3f:d5:7c:d1:ad:8e:b7:e3:08: 93:74:34:e3:1b:ce:73:18:09:c9:af:23:84:7a:21:13:c9:5e: 74:e7:89:aa:7a:7e:ab:72:1a:93:22:3c:c4:84:f9:8c:8d:79: 1a:a3:1e:80 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzY2 N0I1QTM3MzAwOUMxQjNFQzEzNEU3M0M5OTM2MzQ1MzI5MkM3ODAeFw0yNTA3MjAw NjQwMTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIwRERFRkYyMERFRTNE RDhENjlBQ0FCN0MyM0UzMTE5QUJBOEVFNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMf8TXef/9cWRrqwk0ZZ58pc3TY3tkxEc7sfi3Yn1gtceE2ZZN DY8QcQNOTB/bTcDKQ1S6kPQqEqec+3pVMw+vD0nLz7NbQBIOIHBHuoO7sjpV++xx od+M47j8g38a62Bvew2Jr/3zAXK8EiSch3oS0ASXuKeNkopZGJioQU0XEELs4lKq 57HcUANBl7UAa6AbMkkH9u3tg0gQDwv3pu2tZTiemF8uBX6byxT0Umhj9C1XMk2o wGbh/s6N50oLEgfdZA66Mc2g2tWa83NyxcHd6Fo3k8PZoGlOLUD1iVKsSy4oonW1 zQ+VR/9ZUUXZh/dnv/pEAJ0iGFlUhsECHuTDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIN3v8g3uPdjWmsq3wj4xGauo7kswHwYDVR0jBBgwFoAUdme1o3MAnBs+wTTn PJk2NFMpLHgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx OS9kbWUxbzNNQW5Ccy13VFRuUEprMk5GTXBMSGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RtZTFvM01BbkJzLXdUVG5QSmsyTkZNcExIZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTkvZG1lMW8zTUFuQnMt d1RUblBKazJORk1wTEhnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAogpgKaRXXGxKS/tQgLD37xuDRJuj3hcoDDzoUvZcEfHt+NeN2BiEOfEE6D Ph7hCrj1TeWy0pjTFezbtxZ9gArEvzE/h7FzYtaiIxByV7wfXkxtsYvkcOkaqnTD YsjMYtv5Cq6oUwMy/1mMZuUxJINeJALYT+idJhd3bqOCbp/kWeHyhKKZtTy4/nPf +ibgeLveeM73++QqUpcEHkuVTjJxcNgLnVGB6DN1UVbCsm/oHWyn6hVESnO/ompF 1lR9SyexWBkDS8aKocrLAzrBHD/VfNGtjrfjCJN0NOMbznMYCcmvI4R6IRPJXnTn iap6fqtyGpMiPMSE+YyNeRqjHoA= -----END CERTIFICATE-----Generated at Sun Jul 20 12:39:24 2025 by rpki-client