$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft File: k3fSYykHgztKOfdV9B9C-yOpSdI.mft (raw, json) Hash identifier: fRirpHFET0pVBj2DS7yBn+PINeWP4sK1AnwxU0i0mAY= Subject key identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 Authority key identifier: 93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 Certificate issuer: /CN=9377D2632907833B4A39F755F41F42FB23A949D2 Certificate serial: 0138 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft Manifest number: 0138 Signing time: Mon 20 Oct 2025 12:05:02 +0000 Manifest this update: Mon 20 Oct 2025 12:05:02 +0000 Manifest next update: Mon 20 Oct 2025 18:05:02 +0000 Files and hashes: 1: k3fSYykHgztKOfdV9B9C-yOpSdI.crl (hash: Amr42Rky+2RdVrwGxW3K0UVB/3l0YLRDTXXw7JQ70Dc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9377D2632907833B4A39F755F41F42FB23A949D2 Validity Not Before: Oct 20 12:05:02 2025 GMT Not After : Aug 18 08:08:12 2026 GMT Subject: CN=F4853C9CB5E88A02A1505C2C9283A34FC9C12BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:4e:39:6b:2a:a1:1c:72:5c:27:a3:6e:3b: 20:90:90:4c:62:e2:b5:7a:60:66:52:71:04:9f:3a: 0d:70:d7:23:c4:be:48:6b:f8:68:13:e9:ae:c7:2f: c6:11:3e:7f:f7:f0:2d:33:e5:30:f7:91:44:9c:4d: a6:d0:a1:ae:b0:ad:67:f6:51:3e:09:7b:d5:58:da: ff:ac:ee:67:85:78:f1:c6:5d:2a:00:f4:85:6e:1d: b0:d2:98:a9:9c:d4:e7:e3:0a:39:03:45:27:26:e0: 34:01:46:e4:36:3f:26:13:ea:20:10:c8:9d:a6:28: 43:db:cd:e7:d8:e4:50:38:7f:b5:73:25:86:76:01: 08:75:c7:27:56:9f:f6:23:07:ee:09:05:a6:e3:9b: c0:4a:ee:01:f3:b0:48:49:b9:e0:c6:98:d1:a7:c5: 87:b0:dd:45:60:9b:7c:0c:32:7b:b0:27:20:ee:14: a3:79:58:0d:e4:c4:f5:1b:36:b1:aa:65:c6:eb:ec: 9f:9a:42:19:5e:e0:5f:97:29:9d:a4:09:e2:59:5d: 84:ec:ff:47:24:b8:85:c2:00:0e:23:c0:57:8e:e3: b6:e3:a2:42:3a:06:19:1f:2f:ea:df:b7:77:11:7a: 5d:34:8b:16:de:2c:2c:c3:b1:36:5a:34:d6:b8:45: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 X509v3 Authority Key Identifier: keyid:93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f5:eb:8a:23:7d:ae:76:f5:35:79:d0:57:3c:08:6b:3a:ef: ec:41:9e:de:20:15:d7:4c:68:74:e8:4d:5c:3e:ac:5d:30:7e: 25:fa:ae:55:03:f4:6c:76:61:1c:f4:a5:da:2f:e0:f4:d5:00: a3:0d:bf:fc:f5:bb:40:a4:66:de:6c:78:b0:52:ae:76:77:7d: 91:ac:b9:a0:46:fc:17:78:a8:b4:de:d9:fc:9f:76:9e:dc:c8: 2b:23:39:bb:3c:c1:17:9b:f6:ff:e4:ae:2e:c3:c2:a1:61:78: 96:fe:84:15:66:ff:75:de:c2:33:36:9f:ed:52:c6:77:7e:be: 59:3c:a0:ed:af:6d:f0:d6:11:78:ad:eb:78:25:df:c3:a7:7d: 7e:3c:3c:92:bc:ab:73:92:41:c7:9e:e3:9f:b1:2b:a7:8b:f2: ca:06:e3:2d:88:c2:ed:b2:bc:ce:05:62:2b:50:11:b4:22:68: 30:39:b7:aa:ee:93:98:81:88:a6:33:41:a6:ab:db:00:6e:f9: 20:c2:e9:ea:dd:7b:2c:4f:80:b8:c9:2f:98:3d:59:93:4a:f1: 0a:78:7d:da:4b:1e:6b:48:12:af:24:37:23:a0:cb:c8:5b:c6: 22:cd:68:4d:3b:01:91:d9:5a:10:3f:ee:7a:de:15:7a:e6:29: 65:70:39:99 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICATgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTM3 N0QyNjMyOTA3ODMzQjRBMzlGNzU1RjQxRjQyRkIyM0E5NDlEMjAeFw0yNTEwMjAx MjA1MDJaFw0yNjA4MTgwODA4MTJaMDMxMTAvBgNVBAMTKEY0ODUzQzlDQjVFODhB MDJBMTUwNUMyQzkyODNBMzRGQzlDMTJCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHZE45ayqhHHJcJ6NuOyCQkExi4rV6YGZScQSfOg1w1yPEvkhr +GgT6a7HL8YRPn/38C0z5TD3kUScTabQoa6wrWf2UT4Je9VY2v+s7meFePHGXSoA 9IVuHbDSmKmc1OfjCjkDRScm4DQBRuQ2PyYT6iAQyJ2mKEPbzefY5FA4f7VzJYZ2 AQh1xydWn/YjB+4JBabjm8BK7gHzsEhJueDGmNGnxYew3UVgm3wMMnuwJyDuFKN5 WA3kxPUbNrGqZcbr7J+aQhle4F+XKZ2kCeJZXYTs/0ckuIXCAA4jwFeO47bjokI6 BhkfL+rft3cRel00ixbeLCzDsTZaNNa4RYTJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU9IU8nLXoigKhUFwskoOjT8nBK/EwHwYDVR0jBBgwFoAUk3fSYykHgztKOfdV 9B9C+yOpSdIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 OC9rM2ZTWXlrSGd6dEtPZmRWOUI5Qy15T3BTZEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2szZlNZeWtIZ3p0S09mZFY5QjlDLXlPcFNkSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODgvazNmU1l5a0hnenRL T2ZkVjlCOUMteU9wU2RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA7164ojfa529TV50Fc8CGs67+xBnt4gFddMaHToTVw+rF0wfiX6rlUD9Gx2 YRz0pdov4PTVAKMNv/z1u0CkZt5seLBSrnZ3fZGsuaBG/Bd4qLTe2fyfdp7cyCsj Obs8wReb9v/kri7DwqFheJb+hBVm/3XewjM2n+1Sxnd+vlk8oO2vbfDWEXit63gl 38OnfX48PJK8q3OSQcee45+xK6eL8soG4y2Iwu2yvM4FYitQEbQiaDA5t6ruk5iB iKYzQaar2wBu+SDC6erdeyxPgLjJL5g9WZNK8Qp4fdpLHmtIEq8kNyOgy8hbxiLN aE07AZHZWhA/7nreFXrmKWVwOZk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:23 2025 by rpki-client