$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft File: U8kE5DbkCUsscVNNs_Vzviozvjk.mft (raw, json) Hash identifier: fcsoWegIx9+JnhJF800kak9IlVOHCTLXm8q0tzpr6AE= Subject key identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 Authority key identifier: 53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 Certificate issuer: /CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Certificate serial: 0A90 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft Manifest number: 0A90 Signing time: Fri 24 Oct 2025 17:36:32 +0000 Manifest this update: Fri 24 Oct 2025 17:36:32 +0000 Manifest next update: Fri 24 Oct 2025 23:36:32 +0000 Files and hashes: 1: U8kE5DbkCUsscVNNs_Vzviozvjk.crl (hash: 38R2Mnp3FM6Wsb0kSRX328bb4R+pI7YrPcR0gAnJxGo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 23:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2704 (0xa90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53C904E436E4094B2C71534DB3F573BE2A33BE39 Validity Not Before: Oct 24 17:36:32 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CC485786D4ADBCDBFD1672905DD43CF845F24440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:58:66:c3:97:42:5c:cf:b5:79:44:d3:e4: 72:f0:d7:db:1b:f8:1b:67:1c:16:1b:5f:8c:e6:2e: 5f:ba:fc:6a:2a:74:3c:8a:c5:54:cd:c8:6a:08:3d: 16:e0:6d:dd:d0:6c:66:0f:60:b6:dc:f1:47:69:c0: 6e:15:28:f5:76:ee:8c:43:00:fd:97:f9:8b:a1:ce: e6:06:8d:cc:23:7f:f2:4c:33:0a:92:ec:57:52:5f: f0:51:ea:3b:4c:bb:9e:fb:27:0a:47:1e:91:31:df: 9f:e4:6e:a8:58:6b:ef:9c:7d:cb:71:ea:4e:5b:e4: aa:e2:7f:5f:da:d5:f6:64:71:80:44:b5:30:ef:2b: 9e:5b:bd:37:4b:5e:88:a7:91:98:f7:d5:a0:37:ef: 42:da:ca:cd:0d:2c:01:7c:9e:93:3b:e0:ab:27:de: 14:76:f2:bc:67:62:5b:12:a2:c7:d4:d4:26:b6:dc: bf:64:c8:0a:c3:14:07:39:82:fb:45:5b:9b:8b:d6: b3:9a:22:e2:03:d2:3c:19:19:70:1a:3e:7c:4a:12: 56:a1:0e:b9:53:5a:98:6c:eb:43:3a:c3:ef:b0:34: 22:84:aa:47:6f:a4:0b:18:53:15:a7:73:a3:17:57: d3:79:45:b7:28:98:6f:6e:cf:3f:86:bd:e7:39:f0: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:57:86:D4:AD:BC:DB:FD:16:72:90:5D:D4:3C:F8:45:F2:44:40 X509v3 Authority Key Identifier: keyid:53:C9:04:E4:36:E4:09:4B:2C:71:53:4D:B3:F5:73:BE:2A:33:BE:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8kE5DbkCUsscVNNs_Vzviozvjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/U8kE5DbkCUsscVNNs_Vzviozvjk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a6:19:91:8f:bc:74:7b:bc:db:cc:08:3d:09:21:ab:cc:ae: a6:4e:5a:3d:72:b3:35:e8:76:38:9a:65:72:c8:5e:5b:70:22: 90:37:c4:7a:23:d1:01:17:cf:4d:f7:43:41:ae:3b:d2:5f:98: fb:6b:75:f8:9c:02:a4:2f:c5:2b:69:a0:68:6b:c1:6d:08:0f: 35:08:12:c1:85:08:47:34:68:b2:a4:61:3f:9b:77:5a:6c:c4: fa:06:b6:cc:07:48:3a:65:d6:b8:c7:c4:72:a3:c0:02:30:b7: b1:36:8e:c0:20:23:b6:8b:5a:69:53:62:a5:7c:5b:ef:7e:aa: 68:b9:8f:86:f0:20:26:b4:6f:08:8c:6d:d5:b7:58:5f:19:08: fa:7c:2b:37:9a:17:4b:f6:bd:82:a0:d7:9e:94:35:73:36:a8: 63:eb:b9:95:81:6a:1e:89:ee:3d:b7:b5:4b:a5:bf:eb:03:19: 93:3d:c7:84:2c:28:17:6d:af:be:4f:62:d1:21:16:71:55:dd: a3:cc:9f:a6:c8:3a:58:83:80:4e:a4:2d:70:32:0f:91:5f:8a: 3b:e0:33:c5:da:1c:ee:c3:83:80:6d:8d:3c:4f:27:86:ff:a9: 53:29:47:f5:07:f5:db:54:66:38:06:29:86:e7:03:18:34:9f: 19:d0:ca:d1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTND OTA0RTQzNkU0MDk0QjJDNzE1MzREQjNGNTczQkUyQTMzQkUzOTAeFw0yNTEwMjQx NzM2MzJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENDNDg1Nzg2RDRBREJD REJGRDE2NzI5MDVERDQzQ0Y4NDVGMjQ0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGWlhmw5dCXM+1eUTT5HLw19sb+BtnHBYbX4zmLl+6/GoqdDyK xVTNyGoIPRbgbd3QbGYPYLbc8UdpwG4VKPV27oxDAP2X+YuhzuYGjcwjf/JMMwqS 7FdSX/BR6jtMu577JwpHHpEx35/kbqhYa++cfctx6k5b5Krif1/a1fZkcYBEtTDv K55bvTdLXoinkZj31aA370Lays0NLAF8npM74Ksn3hR28rxnYlsSosfU1Ca23L9k yArDFAc5gvtFW5uL1rOaIuID0jwZGXAaPnxKElahDrlTWphs60M6w++wNCKEqkdv pAsYUxWnc6MXV9N5RbcomG9uzz+Gvec58OZFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzEhXhtStvNv9FnKQXdQ8+EXyREAwHwYDVR0jBBgwFoAUU8kE5DbkCUsscVNN s/VzviozvjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OC9VOGtFNURia0NVc3NjVk5Oc19WenZpb3p2amsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1U4a0U1RGJrQ1Vzc2NWTk5zX1Z6dmlvenZqay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzgvVThrRTVEYmtDVXNz Y1ZOTnNfVnp2aW96dmprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC2mGZGPvHR7vNvMCD0JIavMrqZOWj1yszXodjiaZXLIXltwIpA3xHoj0QEX z033Q0GuO9JfmPtrdficAqQvxStpoGhrwW0IDzUIEsGFCEc0aLKkYT+bd1psxPoG tswHSDpl1rjHxHKjwAIwt7E2jsAgI7aLWmlTYqV8W+9+qmi5j4bwICa0bwiMbdW3 WF8ZCPp8KzeaF0v2vYKg156UNXM2qGPruZWBah6J7j23tUulv+sDGZM9x4QsKBdt r75PYtEhFnFV3aPMn6bIOliDgE6kLXAyD5FfijvgM8XaHO7Dg4BtjTxPJ4b/qVMp R/UH9dtUZjgGKYbnAxg0nxnQytE= -----END CERTIFICATE-----Generated at Fri Oct 24 21:16:09 2025 by rpki-client