$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft File: rG7v4uYozkZswlwA92XMjVOKljE.mft (raw, json) Hash identifier: Lt/mh49tcxGrnvSsS4/ScJmBhmVm4firpMbfNqpEIbs= Subject key identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 Authority key identifier: AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 Certificate issuer: /CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Certificate serial: 08F1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft Manifest number: 08F1 Signing time: Mon 20 Oct 2025 17:04:48 +0000 Manifest this update: Mon 20 Oct 2025 17:04:48 +0000 Manifest next update: Mon 20 Oct 2025 23:04:48 +0000 Files and hashes: 1: rG7v4uYozkZswlwA92XMjVOKljE.crl (hash: 32+R+NA1wwvUkpFd5N+ifpA+217PaTkkfGLQ4j3e6Ls=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Validity Not Before: Oct 20 17:04:48 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5DBC1774C216B68CB2FB36DF3273F6DA28545505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ad:ac:7b:44:6c:5d:ff:9e:5f:48:e2:5c:c2: 37:32:a8:5e:a5:34:31:87:30:f0:cf:f6:0b:4b:cc: ac:9c:37:fa:25:e8:d2:c0:e1:84:b2:39:ea:b5:63: 8d:f6:9c:1c:00:e6:13:0c:a8:1a:f0:33:39:ed:65: 24:bc:be:49:b0:50:8c:74:7b:e3:42:91:a1:21:f2: 70:2f:36:66:5e:41:b4:e2:bd:c6:cf:f1:0c:84:04: 12:a8:f2:ed:61:6c:b5:36:65:09:04:f0:a7:aa:82: cc:69:51:7b:c0:76:ef:12:65:50:2f:8b:71:3d:05: bd:d6:37:1e:8a:b7:82:ba:08:77:19:44:e1:31:f9: 82:3c:1a:83:73:e0:cf:e5:82:3d:25:f1:29:25:3d: e0:63:be:5d:d5:08:31:89:bb:3a:c4:53:02:72:18: 1d:4c:1f:40:4c:86:e0:a6:0c:14:f8:6a:e6:06:23: 77:3e:44:06:b1:aa:78:71:e7:22:9b:90:87:44:9d: 60:f9:cd:01:89:3e:43:11:61:ff:72:8a:a1:3e:01: ef:33:45:f3:e8:b0:08:4f:79:73:cd:85:fd:6b:57: ec:42:d9:83:61:77:22:ae:1d:26:b6:12:c3:fb:34: f7:4c:4e:54:00:4d:85:89:7a:cd:55:cf:58:c6:cc: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 X509v3 Authority Key Identifier: keyid:AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:25:4a:7c:12:65:7d:8a:a2:5a:70:2e:60:4e:28:c0:b5:67: ae:4a:3f:fc:7d:bb:80:82:f8:c0:b5:fc:b8:d3:8e:40:8e:06: 18:4e:0d:cb:e6:a7:6e:05:9e:e9:ac:e7:24:fb:e2:f3:8f:a1: a3:c5:d5:d0:33:e6:34:2a:0a:b7:df:98:4b:a4:ec:fe:1e:79: 50:d2:87:c4:29:28:e2:19:5f:f2:9c:a9:a1:06:ed:1e:82:b2: fd:f7:e1:84:16:40:17:d2:84:c6:6d:b3:55:41:ce:89:0f:75: ee:30:7c:1c:af:68:a5:78:1d:9d:3b:75:e3:50:c7:c2:54:df: f5:d3:9d:03:63:e5:fb:08:53:ca:62:d9:78:4d:49:cb:95:8b: f1:af:cd:66:dc:d4:cc:37:a6:e8:cf:5d:10:f4:f0:98:45:ae: b5:b8:ec:f7:de:14:66:89:3c:a6:22:32:33:0f:8c:48:b3:27: 56:60:c5:02:ce:77:4e:e7:e5:15:0b:c4:4b:46:08:fc:b4:a9: 9a:72:15:89:05:c3:ce:bd:d8:41:87:78:56:99:07:13:49:41: d2:6b:bc:c2:61:d6:71:0a:e5:e5:4b:2a:81:b2:46:56:be:a0: 61:cd:e5:11:9c:3a:73:90:0f:df:13:05:c3:3d:e2:4c:e7:ae: 80:4b:0c:ad -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUM2 RUVGRTJFNjI4Q0U0NjZDQzI1QzAwRjc2NUNDOEQ1MzhBOTYzMTAeFw0yNTEwMjAx NzA0NDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVEQkMxNzc0QzIxNkI2 OENCMkZCMzZERjMyNzNGNkRBMjg1NDU1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0rax7RGxd/55fSOJcwjcyqF6lNDGHMPDP9gtLzKycN/ol6NLA 4YSyOeq1Y432nBwA5hMMqBrwMzntZSS8vkmwUIx0e+NCkaEh8nAvNmZeQbTivcbP 8QyEBBKo8u1hbLU2ZQkE8KeqgsxpUXvAdu8SZVAvi3E9Bb3WNx6Kt4K6CHcZROEx +YI8GoNz4M/lgj0l8SklPeBjvl3VCDGJuzrEUwJyGB1MH0BMhuCmDBT4auYGI3c+ RAaxqnhx5yKbkIdEnWD5zQGJPkMRYf9yiqE+Ae8zRfPosAhPeXPNhf1rV+xC2YNh dyKuHSa2EsP7NPdMTlQATYWJes1Vz1jGzBWfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXbwXdMIWtoyy+zbfMnP22ihUVQUwHwYDVR0jBBgwFoAUrG7v4uYozkZswlwA 92XMjVOKljEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw Mi9yRzd2NHVZb3prWnN3bHdBOTJYTWpWT0tsakUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JHN3Y0dVlvemtac3dsd0E5MlhNalZPS2xqRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDIvckc3djR1WW96a1pz d2x3QTkyWE1qVk9LbGpFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACclSnwSZX2KolpwLmBOKMC1Z65KP/x9u4CC+MC1/LjTjkCOBhhODcvmp24F nums5yT74vOPoaPF1dAz5jQqCrffmEuk7P4eeVDSh8QpKOIZX/KcqaEG7R6Csv33 4YQWQBfShMZts1VBzokPde4wfByvaKV4HZ07deNQx8JU3/XTnQNj5fsIU8pi2XhN ScuVi/GvzWbc1Mw3pujPXRD08JhFrrW47PfeFGaJPKYiMjMPjEizJ1ZgxQLOd07n 5RULxEtGCPy0qZpyFYkFw8692EGHeFaZBxNJQdJrvMJh1nEK5eVLKoGyRla+oGHN 5RGcOnOQD98TBcM94kznroBLDK0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:03 2025 by rpki-client