$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft File: 0l8rHfhFF12JkzFKs-8VOushUQM.mft (raw, json) Hash identifier: fniGfxn2vKzwrXLqpKlPo5eC5mI0MAtOQpvzsi8J200= Subject key identifier: AA:D1:AB:C0:C4:57:D5:B6:8B:BD:E5:99:A8:58:F4:DB:C3:7A:0E:50 Authority key identifier: D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03 Certificate issuer: /CN=D25F2B1DF845175D8993314AB3EF153AEB215103 Certificate serial: 16 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft Manifest number: 16 Signing time: Tue 21 Oct 2025 02:05:24 +0000 Manifest this update: Tue 21 Oct 2025 02:05:24 +0000 Manifest next update: Tue 21 Oct 2025 08:05:24 +0000 Files and hashes: 1: 0l8rHfhFF12JkzFKs-8VOushUQM.crl (hash: 7saheLoj6kVQFZrU//5ebMVSy5+XTDh4ORzEr/hBjRI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25F2B1DF845175D8993314AB3EF153AEB215103 Validity Not Before: Oct 21 02:05:24 2025 GMT Not After : Oct 17 06:57:44 2026 GMT Subject: CN=AAD1ABC0C457D5B68BBDE599A858F4DBC37A0E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:9e:04:e6:0b:2a:b4:dc:ca:7f:5f:75:28: 86:85:89:d0:57:c6:78:3b:f9:68:1d:c1:67:df:84: ee:89:9f:4c:ff:3d:9a:0f:df:6f:ad:68:82:23:db: aa:06:82:ac:e7:b1:3c:89:45:71:b9:e6:fe:19:a2: fd:d5:b0:80:53:d5:99:38:5b:8e:70:e0:cd:a5:d1: 7e:5b:e4:86:24:91:f2:4e:b2:66:2e:c5:94:ba:8a: 03:e3:6e:62:ae:d6:39:ae:3e:89:5e:4a:a8:83:c2: d7:b1:dd:32:5f:9e:4c:97:bb:e3:71:0f:0f:e7:3e: d1:6a:d8:3d:14:24:d4:b9:87:71:aa:66:25:24:7a: 32:b1:7f:78:8e:87:f1:5d:52:ea:a8:bd:3d:7f:75: b7:77:13:fd:dc:cb:64:c2:19:a5:39:24:eb:42:94: 5e:ef:88:06:4e:4e:33:a8:a9:fd:b6:0c:5d:39:ea: d1:6b:88:f7:bb:0e:aa:7e:ea:69:ce:56:2b:21:28: 01:90:af:90:26:6c:92:dd:2c:de:ef:0d:30:a8:a0: 4f:6f:39:7e:76:54:63:5f:90:2a:e2:0f:6c:de:2e: 3c:4e:b9:a5:4d:d5:cd:64:72:c9:69:6b:02:92:b7: a8:62:0d:b4:10:b8:f5:1f:e6:5d:d5:1a:32:21:9c: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D1:AB:C0:C4:57:D5:B6:8B:BD:E5:99:A8:58:F4:DB:C3:7A:0E:50 X509v3 Authority Key Identifier: keyid:D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4a:49:e3:b0:c6:20:54:f0:9c:5e:ea:84:0e:60:8d:37:63: 37:47:03:3e:dc:85:bf:d8:4b:0a:f0:e8:ff:03:cc:13:09:89: dc:2d:92:d4:41:7b:cf:b1:b2:d2:5f:11:90:24:93:f8:0c:a0: 72:3c:07:a6:8d:5d:21:23:74:86:f8:0a:17:e7:dd:79:15:e5: 84:40:75:1f:65:71:d6:d3:87:df:3a:34:43:0d:15:7a:13:63: 7c:70:9e:83:25:6b:a7:17:25:ae:fa:8f:29:8f:15:73:6f:a4: ac:fb:6c:87:c8:63:4d:fa:ee:cf:35:d3:54:e5:cf:bc:a6:16: 01:cc:5f:41:ee:5f:6f:ae:a1:f5:27:4d:f6:08:0f:5c:bc:49: 56:10:45:48:ee:b5:31:4a:45:3b:80:e7:93:32:ef:8d:a2:bb: 94:ee:85:12:1c:d9:91:fe:27:f9:32:ec:5e:48:68:d5:e9:e8: 63:1f:dd:ee:b5:04:46:2b:d1:a1:80:be:78:66:bf:59:c9:39: 53:2f:e8:01:93:45:b6:48:6d:42:2d:17:07:fe:20:52:cc:73: 53:1f:9e:54:60:e4:a8:f2:79:e9:45:35:5f:1f:9f:51:b1:84: 6b:c2:e4:c6:bc:02:99:09:eb:be:56:d4:af:11:94:00:bf:18: d9:8c:e7:89 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMjVG MkIxREY4NDUxNzVEODk5MzMxNEFCM0VGMTUzQUVCMjE1MTAzMB4XDTI1MTAyMTAy MDUyNFoXDTI2MTAxNzA2NTc0NFowMzExMC8GA1UEAxMoQUFEMUFCQzBDNDU3RDVC NjhCQkRFNTk5QTg1OEY0REJDMzdBMEU1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKBfngTmCyq03Mp/X3UohoWJ0FfGeDv5aB3BZ9+E7omfTP89mg/f b61ogiPbqgaCrOexPIlFcbnm/hmi/dWwgFPVmThbjnDgzaXRflvkhiSR8k6yZi7F lLqKA+NuYq7WOa4+iV5KqIPC17HdMl+eTJe743EPD+c+0WrYPRQk1LmHcapmJSR6 MrF/eI6H8V1S6qi9PX91t3cT/dzLZMIZpTkk60KUXu+IBk5OM6ip/bYMXTnq0WuI 97sOqn7qac5WKyEoAZCvkCZskt0s3u8NMKigT285fnZUY1+QKuIPbN4uPE65pU3V zWRyyWlrApK3qGINtBC49R/mXdUaMiGc9mECAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSq0avAxFfVtou95ZmoWPTbw3oOUDAfBgNVHSMEGDAWgBTSXysd+EUXXYmTMUqz 7xU66yFRAzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMTg4 LzBsOHJIZmhGRjEySmt6RktzLThWT3VzaFVRTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMGw4ckhmaEZGMTJKa3pGS3MtOFZPdXNoVVFNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE4OC8wbDhySGZoRkYxMkpr ekZLcy04Vk91c2hVUU0ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC0pJ47DGIFTwnF7qhA5gjTdjN0cDPtyFv9hLCvDo/wPMEwmJ3C2S1EF7z7Gy 0l8RkCST+AygcjwHpo1dISN0hvgKF+fdeRXlhEB1H2Vx1tOH3zo0Qw0VehNjfHCe gyVrpxclrvqPKY8Vc2+krPtsh8hjTfruzzXTVOXPvKYWAcxfQe5fb66h9SdN9ggP XLxJVhBFSO61MUpFO4DnkzLvjaK7lO6FEhzZkf4n+TLsXkho1enoYx/d7rUERivR oYC+eGa/Wck5Uy/oAZNFtkhtQi0XB/4gUsxzUx+eVGDkqPJ56UU1Xx+fUbGEa8Lk xrwCmQnrvlbUrxGUAL8Y2YzniQ== -----END CERTIFICATE-----Generated at Tue Oct 21 05:50:54 2025 by rpki-client