$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft File: ORZcru1PFFhR0mI9_l6jpZ2sur0.mft (raw, json) Hash identifier: ZqVm6dbUZurXHDzR1Aob+6jcVHuc3RA2cucFexyH8do= Subject key identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 Authority key identifier: 39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD Certificate issuer: /CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Certificate serial: A5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft Manifest number: A5 Signing time: Mon 20 Oct 2025 02:34:49 +0000 Manifest this update: Mon 20 Oct 2025 02:34:49 +0000 Manifest next update: Mon 20 Oct 2025 08:34:49 +0000 Files and hashes: 1: ORZcru1PFFhR0mI9_l6jpZ2sur0.crl (hash: fxGl3evu2Q2Q1wciAhcVuVeMNlfjDh3jBgxpH8/qldY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 08:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Validity Not Before: Oct 20 02:34:49 2025 GMT Not After : Sep 17 01:12:15 2026 GMT Subject: CN=7608485AE05679629B857018E180B819839AD035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:04:b4:cf:06:53:6b:ad:46:fe:65:0a:53: 71:80:50:35:88:af:0e:e1:42:16:35:9c:5f:1f:42: de:5f:90:3e:65:59:a6:23:4f:25:64:b0:86:5d:4d: 67:4b:99:69:bb:a6:a7:fb:33:70:31:c8:55:11:d8: 20:ef:71:a6:3c:fb:35:fd:d4:bd:bd:e8:e0:83:fa: 88:dd:7a:59:f4:40:66:35:73:0c:1a:e1:e5:b4:e7: 98:33:be:a0:80:11:da:e3:9f:8e:3b:2d:70:0d:b5: c2:e1:76:30:53:ca:c2:78:44:98:22:7b:c4:96:e7: 32:96:e8:fb:fe:45:d3:33:e4:11:c5:38:cc:bc:46: 36:4f:42:10:3c:87:c0:2a:36:97:e5:99:81:76:74: 8c:88:91:11:97:f4:ef:0e:7a:7a:b5:53:9f:67:06: 22:b8:b5:31:f1:88:b3:e9:d4:ba:7f:0a:26:39:b3: 3e:24:98:9d:4a:85:c3:cb:65:94:56:12:49:ae:09: 9b:1d:47:cb:0d:d4:72:86:4c:47:2a:71:c5:de:11: a3:a0:d1:bf:a9:c7:ec:53:f7:1b:0b:64:1c:00:8d: 4c:40:bb:48:6e:37:1f:8d:88:5f:4a:33:8d:37:13: d6:49:28:0f:3d:69:f1:f9:ab:50:ff:16:ff:7a:0b: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 X509v3 Authority Key Identifier: keyid:39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c2:42:2c:12:02:2d:27:a1:35:dd:10:8f:56:06:d2:17:18: bb:97:2d:16:f1:60:70:be:17:30:52:9d:50:58:dc:3b:16:e8: 8c:06:4e:cb:f1:2b:2f:48:34:c2:c3:f2:5d:32:61:66:e8:b1: 8a:0c:be:26:c8:e9:b2:27:ae:db:f8:ca:0c:38:0a:25:ae:dd: b2:33:29:24:25:f2:bc:ca:43:5e:c1:8d:6c:e3:01:12:03:1d: a7:a5:0c:7c:55:9d:d2:9a:3a:2e:95:c8:b9:91:ba:68:e1:44: b2:0c:5c:ec:a5:87:77:90:9c:cd:44:fc:d1:09:e2:70:f9:fb: 93:a0:b3:b7:4b:3f:56:74:0d:16:46:dd:51:b8:d2:47:31:64: f4:3d:c9:d6:99:58:e8:bb:7d:0c:33:96:f4:bb:b3:20:05:21: 87:39:70:32:d2:06:52:7e:fe:31:3b:64:ef:54:1a:f5:9c:41: c6:cf:04:9b:8c:f0:fe:29:56:fb:68:6b:f9:9f:e2:34:11:d4: 70:e0:cc:17:64:44:16:71:f2:79:71:d0:37:ea:78:90:35:72: 81:d2:ab:33:9a:88:e2:75:3b:6d:a0:18:49:a8:b6:12:35:ab: cf:b5:61:bf:8d:39:a7:5b:c1:a8:a3:a6:32:05:e1:55:f0:63: e5:d7:29:09 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkx NjVDQUVFRDRGMTQ1ODUxRDI2MjNERkU1RUEzQTU5REFDQkFCRDAeFw0yNTEwMjAw MjM0NDlaFw0yNjA5MTcwMTEyMTVaMDMxMTAvBgNVBAMTKDc2MDg0ODVBRTA1Njc5 NjI5Qjg1NzAxOEUxODBCODE5ODM5QUQwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjaAS0zwZTa61G/mUKU3GAUDWIrw7hQhY1nF8fQt5fkD5lWaYj TyVksIZdTWdLmWm7pqf7M3AxyFUR2CDvcaY8+zX91L296OCD+ojdeln0QGY1cwwa 4eW055gzvqCAEdrjn447LXANtcLhdjBTysJ4RJgie8SW5zKW6Pv+RdMz5BHFOMy8 RjZPQhA8h8AqNpflmYF2dIyIkRGX9O8Oenq1U59nBiK4tTHxiLPp1Lp/CiY5sz4k mJ1KhcPLZZRWEkmuCZsdR8sN1HKGTEcqccXeEaOg0b+px+xT9xsLZBwAjUxAu0hu Nx+NiF9KM403E9ZJKA89afH5q1D/Fv96C2W3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdghIWuBWeWKbhXAY4YC4GYOa0DUwHwYDVR0jBBgwFoAUORZcru1PFFhR0mI9 /l6jpZ2sur0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 My9PUlpjcnUxUEZGaFIwbUk5X2w2anBaMnN1cjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09SWmNydTFQRkZoUjBtSTlfbDZqcFoyc3VyMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTMvT1JaY3J1MVBGRmhS MG1JOV9sNmpwWjJzdXIwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ7CQiwSAi0noTXdEI9WBtIXGLuXLRbxYHC+FzBSnVBY3DsW6IwGTsvxKy9I NMLD8l0yYWbosYoMvibI6bInrtv4ygw4CiWu3bIzKSQl8rzKQ17BjWzjARIDHael DHxVndKaOi6VyLmRumjhRLIMXOylh3eQnM1E/NEJ4nD5+5Ogs7dLP1Z0DRZG3VG4 0kcxZPQ9ydaZWOi7fQwzlvS7syAFIYc5cDLSBlJ+/jE7ZO9UGvWcQcbPBJuM8P4p Vvtoa/mf4jQR1HDgzBdkRBZx8nlx0DfqeJA1coHSqzOaiOJ1O22gGEmothI1q8+1 Yb+NOadbwaijpjIF4VXwY+XXKQk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:27:03 2025 by rpki-client