$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft File: fCewZFm5zh-8LzSJoPxnKF1942A.mft (raw, json) Hash identifier: 2kKj8BU6EZ+xCdh7vsAPkiScHEX0sEAqxyE/2MZLsQc= Subject key identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A Authority key identifier: 7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 Certificate issuer: /CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Certificate serial: 096C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft Manifest number: 096C Signing time: Fri 24 Oct 2025 17:34:17 +0000 Manifest this update: Fri 24 Oct 2025 17:34:17 +0000 Manifest next update: Fri 24 Oct 2025 23:34:17 +0000 Files and hashes: 1: fCewZFm5zh-8LzSJoPxnKF1942A.crl (hash: mTeFILzNZHoTiuvI9lw6i37p+GPvgaVj/FDmQF7Gy08=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 23:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Validity Not Before: Oct 24 17:34:17 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7001E5871E36F731E219A480CB7C61ADFD6CCD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:90:72:05:4e:a9:49:22:a5:80:29:93:b0: a0:68:a4:6f:df:bc:f8:b7:18:cf:00:01:5d:6a:82: 16:ae:f1:d2:95:e9:79:77:92:df:fc:8f:a9:12:04: 91:60:3a:ae:f4:81:f0:ee:0d:7a:d7:48:ae:56:43: 6c:7b:d7:51:d2:cd:c3:33:43:40:31:37:67:18:9a: 17:d2:1b:e1:bc:6d:f4:29:08:8c:be:cc:52:60:96: cc:7f:f4:a8:c0:cf:6a:8a:b6:b4:7d:b2:9f:4a:fe: 0d:53:1c:b8:e8:80:ee:62:62:04:b6:12:bf:89:af: ec:3f:ea:0c:fb:a5:38:bf:af:ca:f3:b7:1a:8b:a3: 0c:67:1d:27:d8:9f:9f:3f:5a:4f:50:cd:db:4a:47: d0:c6:a6:05:b4:95:e1:a9:5b:55:04:d6:a8:da:d5: ab:9e:fd:71:ab:58:ad:8e:ee:29:13:d2:7d:1f:22: 61:78:9d:bf:d7:34:5a:0f:ef:31:8c:df:47:1d:eb: d7:bc:4f:03:d9:18:3d:a4:bd:b4:66:a4:b8:33:f9: da:79:4d:75:f4:d3:40:6e:6d:1a:26:f5:71:fc:8d: 7d:8e:26:ca:a8:bc:39:5a:40:1f:34:da:79:c1:61: 87:0d:8d:1f:f7:d3:f2:06:8b:4b:90:5a:c6:53:75: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A X509v3 Authority Key Identifier: keyid:7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:15:35:b5:8b:c3:ab:fe:22:52:97:b1:92:a0:6f:21:e1:25: f0:a6:36:5a:d8:36:fe:e1:cf:84:90:6b:51:66:45:31:96:f5: 0a:61:06:8e:90:c0:c8:aa:22:5a:7e:b7:5c:25:bf:eb:22:79: 7f:b4:77:5c:30:7c:a2:8c:c7:ff:01:fb:e6:bc:7f:6a:65:07: a0:b7:e3:0e:34:45:18:cd:a0:62:bf:da:5e:83:d5:d9:35:07: 09:a4:6c:32:8d:0a:c5:02:88:08:88:4a:60:aa:89:26:4d:c7: dd:6f:ca:26:a5:2e:10:8c:ee:4a:18:40:be:c6:16:b9:a3:4f: 65:d3:db:20:ac:d5:e9:0f:25:72:fa:3c:28:4e:93:f1:eb:c0: aa:57:a3:86:68:b6:d7:e1:dc:31:4a:a8:4f:08:7d:1d:e0:85: 93:58:90:f9:9d:d7:8f:3f:31:0a:12:a2:86:35:fd:27:1b:9b: 63:80:75:42:4f:de:9d:f7:7a:ef:de:87:cc:44:08:39:65:04: 7f:13:f4:c5:aa:d2:3c:05:2e:5c:67:c4:83:8d:3e:47:12:63: c3:45:5b:26:c3:32:22:b5:4b:dd:77:3a:b8:5a:3d:a1:55:94: 63:be:f8:76:d8:8c:9c:05:bc:df:ff:6b:9c:49:48:46:ff:05: f1:84:b1:6a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0My N0IwNjQ1OUI5Q0UxRkJDMkYzNDg5QTBGQzY3Mjg1RDdERTM2MDAeFw0yNTEwMjQx NzM0MTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDcwMDFFNTg3MUUzNkY3 MzFFMjE5QTQ4MENCN0M2MUFERkQ2Q0NENkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFgJByBU6pSSKlgCmTsKBopG/fvPi3GM8AAV1qghau8dKV6Xl3 kt/8j6kSBJFgOq70gfDuDXrXSK5WQ2x711HSzcMzQ0AxN2cYmhfSG+G8bfQpCIy+ zFJglsx/9KjAz2qKtrR9sp9K/g1THLjogO5iYgS2Er+Jr+w/6gz7pTi/r8rztxqL owxnHSfYn58/Wk9QzdtKR9DGpgW0leGpW1UE1qja1aue/XGrWK2O7ikT0n0fImF4 nb/XNFoP7zGM30cd69e8TwPZGD2kvbRmpLgz+dp5TXX000BubRom9XH8jX2OJsqo vDlaQB802nnBYYcNjR/30/IGi0uQWsZTdRtXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcAHlhx429zHiGaSAy3xhrf1szWowHwYDVR0jBBgwFoAUfCewZFm5zh+8LzSJ oPxnKF1942AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 OC9mQ2V3WkZtNXpoLThMelNKb1B4bktGMTk0MkEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZDZXdaRm01emgtOEx6U0pvUHhuS0YxOTQyQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTgvZkNld1pGbTV6aC04 THpTSm9QeG5LRjE5NDJBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH0VNbWLw6v+IlKXsZKgbyHhJfCmNlrYNv7hz4SQa1FmRTGW9QphBo6QwMiq Ilp+t1wlv+sieX+0d1wwfKKMx/8B++a8f2plB6C34w40RRjNoGK/2l6D1dk1Bwmk bDKNCsUCiAiISmCqiSZNx91vyialLhCM7koYQL7GFrmjT2XT2yCs1ekPJXL6PChO k/HrwKpXo4Zottfh3DFKqE8IfR3ghZNYkPmd148/MQoSooY1/Scbm2OAdUJP3p33 eu/eh8xECDllBH8T9MWq0jwFLlxnxIONPkcSY8NFWybDMiK1S913OrhaPaFVlGO+ +HbYjJwFvN//a5xJSEb/BfGEsWo= -----END CERTIFICATE-----Generated at Fri Oct 24 21:24:49 2025 by rpki-client