$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft File: dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft (raw, json) Hash identifier: uJZq4b6M6ey53DcRNNASyjlbLeO0XG6dJiTOoVsfi/I= Subject key identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E Authority key identifier: 75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 Certificate issuer: /CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Certificate serial: 05E9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft Manifest number: 05E9 Signing time: Sat 26 Apr 2025 11:06:22 +0000 Manifest this update: Sat 26 Apr 2025 11:06:22 +0000 Manifest next update: Sat 26 Apr 2025 17:06:22 +0000 Files and hashes: 1: dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl (hash: XpEgap0VlAlD/yFOrQO5TOIDBGtshefI6+eRKQuBN8s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 17:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1513 (0x5e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Validity Not Before: Apr 26 11:06:22 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=535C665F13DA3DAA43F20BB04EA2A9E2FEBDE11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:fe:ee:ac:0a:c3:af:9a:a6:24:0c:ef:8c: 53:e1:9a:34:5e:38:70:c3:7d:00:e3:9c:92:a2:2e: 8a:5c:86:9c:00:5d:85:99:0c:be:4d:a9:08:27:43: f8:df:5c:65:ec:35:05:a4:90:7a:96:70:e0:a0:30: c2:3e:9c:9e:1b:01:04:9b:02:5b:ca:f9:de:9f:48: 8d:f4:f7:67:4e:55:d2:56:35:72:8f:12:8a:8a:e4: 34:55:3d:46:fc:98:c5:90:e6:f1:6b:35:b2:8a:be: d6:a3:50:bb:bb:0b:ea:6d:e2:fc:62:9e:0b:54:66: 0d:d5:65:fd:58:62:b6:06:e7:c5:d6:8a:ae:13:eb: 00:92:e3:35:20:a6:32:ee:4f:9d:07:1f:05:bd:29: 88:e7:21:b6:fc:07:4a:fe:9b:9d:c3:d8:7c:82:f1: f6:ef:2a:a4:5e:c7:10:ee:82:fc:de:f7:e2:64:e8: 11:3a:27:6d:26:ae:95:ae:19:32:30:e4:63:2c:b5: 7c:16:ba:9d:4e:5f:a8:72:e5:fe:ec:47:4c:00:09: 13:a7:a2:b9:81:f7:5a:bd:6b:31:e9:02:e2:ae:c6: 2d:e6:2f:88:28:c9:81:f5:58:ae:d2:6b:dd:3a:2a: eb:c0:07:0c:0c:23:48:00:7c:84:d1:fe:c8:fd:65: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E X509v3 Authority Key Identifier: keyid:75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:07:81:da:ad:50:10:8d:35:49:1c:1f:1f:c6:d9:73:af:8f: 7c:cb:dd:90:b3:44:c2:15:49:57:eb:ca:c7:3b:0a:e8:fd:4c: b5:b1:43:79:c8:98:e6:88:51:95:f3:b3:11:47:ef:f2:96:64: 38:f0:14:04:95:3a:8e:ac:8d:38:08:26:99:f0:10:23:6d:ac: d1:8e:50:20:3b:d2:02:0b:54:3a:ae:40:06:57:c1:3b:d8:83: 72:77:61:02:5e:35:c0:c6:91:d4:4e:7c:7b:5f:7a:27:9a:4e: 70:3a:b0:4c:78:be:f2:d8:5a:75:55:f9:7a:55:e2:9c:4c:d9: c4:58:ee:9f:d2:a5:85:1b:00:2c:ab:a1:47:1d:14:b7:1b:10: 9f:d0:d3:59:48:98:7d:74:17:c0:2f:4d:1f:bd:eb:6b:cd:2a: b7:4c:e6:9f:1d:f9:85:7a:06:5a:38:54:f1:35:40:ec:f3:cd: 51:3c:40:fd:e3:3e:0a:92:5f:b2:5a:c2:96:d7:24:bd:c9:44: 32:3c:03:93:a6:b0:4f:d0:15:7a:6b:0b:ff:31:c7:d5:89:bb: c7:fe:1d:31:fd:17:2e:8f:a4:85:ce:41:66:80:00:c0:35:d9: aa:3b:f7:7d:16:d1:45:9b:65:67:f5:14:02:41:06:ed:ad:12: 91:1f:1f:11 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU1 QUU2OEMxRTExQzI0N0U3MUE0OTNDNzZERTU3RkMzNDkyNjRGOTAeFw0yNTA0MjYx MTA2MjJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUzNUM2NjVGMTNEQTNE QUE0M0YyMEJCMDRFQTJBOUUyRkVCREUxMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLKP7urArDr5qmJAzvjFPhmjReOHDDfQDjnJKiLopchpwAXYWZ DL5NqQgnQ/jfXGXsNQWkkHqWcOCgMMI+nJ4bAQSbAlvK+d6fSI3092dOVdJWNXKP EoqK5DRVPUb8mMWQ5vFrNbKKvtajULu7C+pt4vxingtUZg3VZf1YYrYG58XWiq4T 6wCS4zUgpjLuT50HHwW9KYjnIbb8B0r+m53D2HyC8fbvKqRexxDugvze9+Jk6BE6 J20mrpWuGTIw5GMstXwWup1OX6hy5f7sR0wACROnormB91q9azHpAuKuxi3mL4go yYH1WK7Sa906KuvABwwMI0gAfITR/sj9ZUfZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUU1xmXxPaPapD8guwTqKp4v694R4wHwYDVR0jBBgwFoAUdVrmjB4RwkfnGkk8 dt5X/DSSZPkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9kVnJtakI0UndrZm5Ha2s4ZHQ1WF9EU1NaUGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RWcm1qQjRSd2tmbkdrazhkdDVYX0RTU1pQay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvZFZybWpCNFJ3a2Zu R2trOGR0NVhfRFNTWlBrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAcHgdqtUBCNNUkcHx/G2XOvj3zL3ZCzRMIVSVfrysc7Cuj9TLWxQ3nImOaI UZXzsxFH7/KWZDjwFASVOo6sjTgIJpnwECNtrNGOUCA70gILVDquQAZXwTvYg3J3 YQJeNcDGkdROfHtfeieaTnA6sEx4vvLYWnVV+XpV4pxM2cRY7p/SpYUbACyroUcd FLcbEJ/Q01lImH10F8AvTR+962vNKrdM5p8d+YV6Blo4VPE1QOzzzVE8QP3jPgqS X7JawpbXJL3JRDI8A5OmsE/QFXprC/8xx9WJu8f+HTH9Fy6PpIXOQWaAAMA12ao7 930W0UWbZWf1FAJBBu2tEpEfHxE= -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:07 2025 by rpki-client