$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft File: dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft (raw, json) Hash identifier: iZg4UyHnTgwbb6mHzqfFJA8nH3OsxT4MSw4HIfWjWFs= Subject key identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E Authority key identifier: 75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 Certificate issuer: /CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Certificate serial: 0704 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft Manifest number: 0704 Signing time: Sat 21 Jun 2025 12:40:59 +0000 Manifest this update: Sat 21 Jun 2025 12:40:59 +0000 Manifest next update: Sat 21 Jun 2025 18:40:59 +0000 Files and hashes: 1: dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl (hash: jInkDcftanOgztyhGvSU4NHGP2zTT1x6QIm7i06oasc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1796 (0x704) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755AE68C1E11C247E71A493C76DE57FC349264F9 Validity Not Before: Jun 21 12:40:59 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=535C665F13DA3DAA43F20BB04EA2A9E2FEBDE11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:fe:ee:ac:0a:c3:af:9a:a6:24:0c:ef:8c: 53:e1:9a:34:5e:38:70:c3:7d:00:e3:9c:92:a2:2e: 8a:5c:86:9c:00:5d:85:99:0c:be:4d:a9:08:27:43: f8:df:5c:65:ec:35:05:a4:90:7a:96:70:e0:a0:30: c2:3e:9c:9e:1b:01:04:9b:02:5b:ca:f9:de:9f:48: 8d:f4:f7:67:4e:55:d2:56:35:72:8f:12:8a:8a:e4: 34:55:3d:46:fc:98:c5:90:e6:f1:6b:35:b2:8a:be: d6:a3:50:bb:bb:0b:ea:6d:e2:fc:62:9e:0b:54:66: 0d:d5:65:fd:58:62:b6:06:e7:c5:d6:8a:ae:13:eb: 00:92:e3:35:20:a6:32:ee:4f:9d:07:1f:05:bd:29: 88:e7:21:b6:fc:07:4a:fe:9b:9d:c3:d8:7c:82:f1: f6:ef:2a:a4:5e:c7:10:ee:82:fc:de:f7:e2:64:e8: 11:3a:27:6d:26:ae:95:ae:19:32:30:e4:63:2c:b5: 7c:16:ba:9d:4e:5f:a8:72:e5:fe:ec:47:4c:00:09: 13:a7:a2:b9:81:f7:5a:bd:6b:31:e9:02:e2:ae:c6: 2d:e6:2f:88:28:c9:81:f5:58:ae:d2:6b:dd:3a:2a: eb:c0:07:0c:0c:23:48:00:7c:84:d1:fe:c8:fd:65: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:66:5F:13:DA:3D:AA:43:F2:0B:B0:4E:A2:A9:E2:FE:BD:E1:1E X509v3 Authority Key Identifier: keyid:75:5A:E6:8C:1E:11:C2:47:E7:1A:49:3C:76:DE:57:FC:34:92:64:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dVrmjB4RwkfnGkk8dt5X_DSSZPk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/dVrmjB4RwkfnGkk8dt5X_DSSZPk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9f:03:d0:8a:6e:e8:a0:16:44:21:bf:7d:d2:22:79:f9:85: 3b:ff:2a:50:54:dd:de:a0:f8:89:fa:30:6b:2a:3e:ac:d9:6c: 46:7b:5e:ab:d8:77:66:36:58:27:14:a6:62:68:00:92:bd:3b: c1:1a:37:d8:3f:b4:b3:42:9a:20:43:ec:43:29:96:56:d0:e5: 02:6b:1d:b8:17:30:08:62:0e:c1:2c:53:25:72:cc:33:2f:b5: 7e:4d:5f:74:38:74:65:e0:fd:15:64:5b:c1:ca:9b:1d:5e:c8: 04:73:4f:74:61:ad:95:09:4a:8f:e1:76:76:4c:7b:0f:44:4c: 30:0e:3c:19:67:a4:52:33:89:59:4f:9e:ad:54:c2:ef:2a:c7: 5f:32:70:c9:46:5d:22:1a:b7:59:55:60:01:10:2c:22:95:0c: 3f:d1:13:b9:c1:59:7a:66:af:d4:78:20:ea:5a:01:34:84:a9: ca:bc:9f:29:51:aa:7b:55:5d:9a:1f:40:39:0e:48:e9:b2:5d: b4:09:69:ca:9a:72:ca:85:a4:0b:15:15:1d:e1:a8:25:56:d9: 76:8d:b1:f2:67:ce:eb:51:d5:c8:41:3f:9f:30:04:91:23:56: c0:ae:70:03:3f:10:fc:74:02:b3:7d:fe:91:b0:ea:a2:c0:e3: a8:85:3f:a6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBwQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzU1 QUU2OEMxRTExQzI0N0U3MUE0OTNDNzZERTU3RkMzNDkyNjRGOTAeFw0yNTA2MjEx MjQwNTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUzNUM2NjVGMTNEQTNE QUE0M0YyMEJCMDRFQTJBOUUyRkVCREUxMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLKP7urArDr5qmJAzvjFPhmjReOHDDfQDjnJKiLopchpwAXYWZ DL5NqQgnQ/jfXGXsNQWkkHqWcOCgMMI+nJ4bAQSbAlvK+d6fSI3092dOVdJWNXKP EoqK5DRVPUb8mMWQ5vFrNbKKvtajULu7C+pt4vxingtUZg3VZf1YYrYG58XWiq4T 6wCS4zUgpjLuT50HHwW9KYjnIbb8B0r+m53D2HyC8fbvKqRexxDugvze9+Jk6BE6 J20mrpWuGTIw5GMstXwWup1OX6hy5f7sR0wACROnormB91q9azHpAuKuxi3mL4go yYH1WK7Sa906KuvABwwMI0gAfITR/sj9ZUfZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUU1xmXxPaPapD8guwTqKp4v694R4wHwYDVR0jBBgwFoAUdVrmjB4RwkfnGkk8 dt5X/DSSZPkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9kVnJtakI0UndrZm5Ha2s4ZHQ1WF9EU1NaUGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RWcm1qQjRSd2tmbkdrazhkdDVYX0RTU1pQay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvZFZybWpCNFJ3a2Zu R2trOGR0NVhfRFNTWlBrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFSfA9CKbuigFkQhv33SInn5hTv/KlBU3d6g+In6MGsqPqzZbEZ7XqvYd2Y2 WCcUpmJoAJK9O8EaN9g/tLNCmiBD7EMpllbQ5QJrHbgXMAhiDsEsUyVyzDMvtX5N X3Q4dGXg/RVkW8HKmx1eyARzT3RhrZUJSo/hdnZMew9ETDAOPBlnpFIziVlPnq1U wu8qx18ycMlGXSIat1lVYAEQLCKVDD/RE7nBWXpmr9R4IOpaATSEqcq8nylRqntV XZofQDkOSOmyXbQJacqacsqFpAsVFR3hqCVW2XaNsfJnzutR1chBP58wBJEjVsCu cAM/EPx0ArN9/pGw6qLA46iFP6Y= -----END CERTIFICATE-----Generated at Sat Jun 21 16:53:29 2025 by rpki-client