$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft File: dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft (raw, json) Hash identifier: eYDBCH5uPRGPsDKVEmmXF3rRtmyWCM9dxmB7c72j8z8= Subject key identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E Authority key identifier: 75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 Certificate issuer: /CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Certificate serial: 0805 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft Manifest number: 0805 Signing time: Mon 11 Aug 2025 08:01:35 +0000 Manifest this update: Mon 11 Aug 2025 08:01:35 +0000 Manifest next update: Mon 11 Aug 2025 14:01:35 +0000 Files and hashes: 1: dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl (hash: DIGsnx/lK1wVMZT6qFx0qf7JMfmCw0uen+k/Mso/ljc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2053 (0x805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Validity Not Before: Aug 11 08:01:35 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=535C665F13DA3DAA43F20BB04EA2A9E2FEBDE11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:fe:ee:ac:0a:c3:af:9a:a6:24:0c:ef:8c: 53:e1:9a:34:5e:38:70:c3:7d:00:e3:9c:92:a2:2e: 8a:5c:86:9c:00:5d:85:99:0c:be:4d:a9:08:27:43: f8:df:5c:65:ec:35:05:a4:90:7a:96:70:e0:a0:30: c2:3e:9c:9e:1b:01:04:9b:02:5b:ca:f9:de:9f:48: 8d:f4:f7:67:4e:55:d2:56:35:72:8f:12:8a:8a:e4: 34:55:3d:46:fc:98:c5:90:e6:f1:6b:35:b2:8a:be: d6:a3:50:bb:bb:0b:ea:6d:e2:fc:62:9e:0b:54:66: 0d:d5:65:fd:58:62:b6:06:e7:c5:d6:8a:ae:13:eb: 00:92:e3:35:20:a6:32:ee:4f:9d:07:1f:05:bd:29: 88:e7:21:b6:fc:07:4a:fe:9b:9d:c3:d8:7c:82:f1: f6:ef:2a:a4:5e:c7:10:ee:82:fc:de:f7:e2:64:e8: 11:3a:27:6d:26:ae:95:ae:19:32:30:e4:63:2c:b5: 7c:16:ba:9d:4e:5f:a8:72:e5:fe:ec:47:4c:00:09: 13:a7:a2:b9:81:f7:5a:bd:6b:31:e9:02:e2:ae:c6: 2d:e6:2f:88:28:c9:81:f5:58:ae:d2:6b:dd:3a:2a: eb:c0:07:0c:0c:23:48:00:7c:84:d1:fe:c8:fd:65: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E X509v3 Authority Key Identifier: keyid:75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:da:39:14:ef:1c:d0:16:63:c5:8b:19:5c:a6:89:93:9f:4c: 78:a8:cb:51:3b:10:59:70:74:03:be:15:3e:f7:48:08:78:3e: c2:9b:7f:7f:c6:1a:8d:98:3c:23:ec:ab:df:03:79:1b:ce:1d: 6e:cf:4a:ca:1f:d8:ca:87:d6:1c:40:d5:7e:88:ff:ab:6c:66: 60:77:85:79:4d:df:54:0b:2d:26:a6:36:18:ab:a6:77:89:8c: 66:e4:98:8e:24:ee:05:46:5a:8e:90:e5:38:c7:85:c3:78:3f: eb:0b:49:9c:0b:6d:bc:db:2a:6e:b5:8c:83:21:48:fe:6f:1a: ab:9e:9e:bb:3e:91:fd:bc:4a:77:33:1a:d7:ff:9d:20:bb:c7: 6a:ab:1a:18:93:ea:95:9e:75:38:71:93:dd:f0:d1:d7:ef:bb: 9c:ff:ae:30:d0:c0:98:cd:8e:d4:05:7c:14:36:c5:93:d2:a7: 56:87:ce:22:2b:e7:24:87:56:01:c4:ac:30:86:07:30:4a:e3: a4:25:7d:47:ae:b6:05:19:47:8e:1b:c1:da:9b:a9:be:8e:4e: 6c:e5:4d:96:5e:94:af:03:45:df:dd:c6:9a:20:f6:8b:e9:8b: a8:84:d0:5d:f7:75:cf:2d:db:84:a2:c1:d9:69:48:bc:93:e4: 61:a8:06:8a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU1 QUU2OEMxRTExQzI0N0U3MUE0OTNDNzZERTU3RkMzNDkyNjRGOTAeFw0yNTA4MTEw ODAxMzVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDUzNUM2NjVGMTNEQTNE QUE0M0YyMEJCMDRFQTJBOUUyRkVCREUxMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLKP7urArDr5qmJAzvjFPhmjReOHDDfQDjnJKiLopchpwAXYWZ DL5NqQgnQ/jfXGXsNQWkkHqWcOCgMMI+nJ4bAQSbAlvK+d6fSI3092dOVdJWNXKP EoqK5DRVPUb8mMWQ5vFrNbKKvtajULu7C+pt4vxingtUZg3VZf1YYrYG58XWiq4T 6wCS4zUgpjLuT50HHwW9KYjnIbb8B0r+m53D2HyC8fbvKqRexxDugvze9+Jk6BE6 J20mrpWuGTIw5GMstXwWup1OX6hy5f7sR0wACROnormB91q9azHpAuKuxi3mL4go yYH1WK7Sa906KuvABwwMI0gAfITR/sj9ZUfZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUU1xmXxPaPapD8guwTqKp4v694R4wHwYDVR0jBBgwFoAUdVrmjB4RwkfnGkk8 dt5X/DSSZPkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9kVnJtakI0UndrZm5Ha2s4ZHQ1WF9EU1NaUGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RWcm1qQjRSd2tmbkdrazhkdDVYX0RTU1pQay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvZFZybWpCNFJ3a2Zu R2trOGR0NVhfRFNTWlBrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF3aORTvHNAWY8WLGVymiZOfTHioy1E7EFlwdAO+FT73SAh4PsKbf3/GGo2Y PCPsq98DeRvOHW7PSsof2MqH1hxA1X6I/6tsZmB3hXlN31QLLSamNhirpneJjGbk mI4k7gVGWo6Q5TjHhcN4P+sLSZwLbbzbKm61jIMhSP5vGquenrs+kf28SnczGtf/ nSC7x2qrGhiT6pWedThxk93w0dfvu5z/rjDQwJjNjtQFfBQ2xZPSp1aHziIr5ySH VgHErDCGBzBK46QlfUeutgUZR44bwdqbqb6OTmzlTZZelK8DRd/dxpog9ovpi6iE 0F33dc8t24SiwdlpSLyT5GGoBoo= -----END CERTIFICATE-----Generated at Mon Aug 11 13:06:05 2025 by rpki-client