$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft File: zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft (raw, json) Hash identifier: 6MS6vIGFft7sFVj2aaYvCKoojEa/SIr6bQQ/aLR0U4g= Subject key identifier: 52:5E:66:19:12:15:EC:C0:61:97:4A:DA:55:D6:26:AC:F4:E5:D5:A7 Authority key identifier: CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 Certificate issuer: /CN=CE0478FABE9196B54D0BD1AA84CB39073D6CF9F9 Certificate serial: 069C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft Manifest number: 069C Signing time: Fri 24 Oct 2025 18:07:06 +0000 Manifest this update: Fri 24 Oct 2025 18:07:06 +0000 Manifest next update: Sat 25 Oct 2025 00:07:06 +0000 Files and hashes: 1: zgR4-r6RlrVNC9GqhMs5Bz1s-fk.crl (hash: DSQe+FmwemSjAeTZiGAl759oowuX0Wbgm+TzLcXZ46c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 00:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0478FABE9196B54D0BD1AA84CB39073D6CF9F9 Validity Not Before: Oct 24 18:07:06 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=525E66191215ECC061974ADA55D626ACF4E5D5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:c6:7c:39:63:96:f1:d6:55:de:3a:6e:e7: d5:a7:5b:44:06:e6:54:93:82:46:5a:f7:cb:3d:fb: ba:4e:6c:47:e8:a4:84:dc:83:a3:3d:e1:bd:3d:8a: 38:9e:0c:98:eb:f0:da:e6:dd:b4:92:45:bc:c6:02: af:25:cb:91:01:db:b9:58:b8:0b:5d:bb:d4:e4:db: f0:02:b9:81:1c:bf:5f:d5:e4:7a:f3:fc:25:6b:76: 4d:e9:0e:72:0b:dc:f9:2b:7c:ad:d6:47:ac:ef:eb: b4:23:5d:bb:f9:cf:ef:ce:bf:53:24:20:7a:fb:15: 02:fc:d5:bb:c6:27:8b:e2:3b:ec:2f:43:94:8e:77: 56:f5:37:17:11:33:8f:e8:6d:af:92:0d:47:5d:e5: 75:08:ac:7b:05:30:51:d1:cc:dd:6e:ca:6c:cc:e7: 7e:15:16:d8:72:24:e1:f6:aa:77:21:69:46:75:10: 3f:ca:2f:06:51:60:63:96:3b:ac:38:78:a2:a3:93: 75:72:74:9f:2b:9f:b5:cd:de:0f:62:3e:7a:ad:bb: ac:c8:88:0d:73:ce:8b:f2:8a:96:14:28:07:91:fb: 0c:53:ee:e5:66:11:eb:40:96:72:23:8f:f5:e0:a8: a9:ae:2e:11:e8:7f:a9:bb:af:29:7f:a3:55:9b:2a: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:66:19:12:15:EC:C0:61:97:4A:DA:55:D6:26:AC:F4:E5:D5:A7 X509v3 Authority Key Identifier: keyid:CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:93:be:9a:32:72:9f:59:e4:be:05:2f:d5:bf:e2:d3:f0:f6: 81:a8:b7:50:21:c1:cc:f0:bc:42:e0:df:d4:cc:31:2b:6f:90: 1d:91:e1:93:05:64:05:ab:52:6e:4a:11:28:ca:d5:37:16:14: 73:3f:4a:1c:f2:4b:7d:65:2a:2e:a9:3a:3b:b8:96:10:9a:1d: 07:a7:60:3b:fe:08:85:84:87:96:c9:2d:bd:46:19:db:c9:34: df:ad:79:f2:d8:34:b9:58:07:7a:c9:a3:7a:10:58:8d:99:cd: 1f:8c:9d:f0:76:e7:1d:e7:5b:fb:28:b3:56:c3:1e:a7:5a:d9: f9:db:c7:35:2d:23:8e:d4:43:60:80:7b:b6:5c:96:9d:9e:99: b7:74:41:8f:fa:d5:15:8a:71:5a:77:02:e4:22:53:f7:5d:75: 8c:52:27:81:ae:73:93:bc:69:e4:f8:42:67:1c:7f:64:14:4b: fd:c1:3d:d2:a8:2a:3f:f3:8f:4c:5b:ef:e9:1c:b5:9f:a3:29: 78:f1:3d:2a:11:3e:d9:1e:5d:79:a5:30:5e:44:43:fa:55:c1: 40:df:e1:e8:24:7e:cc:00:91:5d:be:60:c1:78:c4:f0:5d:63: 5c:e3:74:41:32:75:21:73:78:ae:74:0d:8b:84:bb:af:b3:fa: d6:b3:27:5f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Uw NDc4RkFCRTkxOTZCNTREMEJEMUFBODRDQjM5MDczRDZDRjlGOTAeFw0yNTEwMjQx ODA3MDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUyNUU2NjE5MTIxNUVD QzA2MTk3NEFEQTU1RDYyNkFDRjRFNUQ1QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7YMZ8OWOW8dZV3jpu59WnW0QG5lSTgkZa98s9+7pObEfopITc g6M94b09ijieDJjr8Nrm3bSSRbzGAq8ly5EB27lYuAtdu9Tk2/ACuYEcv1/V5Hrz /CVrdk3pDnIL3PkrfK3WR6zv67QjXbv5z+/Ov1MkIHr7FQL81bvGJ4viO+wvQ5SO d1b1NxcRM4/oba+SDUdd5XUIrHsFMFHRzN1uymzM534VFthyJOH2qnchaUZ1ED/K LwZRYGOWO6w4eKKjk3VydJ8rn7XN3g9iPnqtu6zIiA1zzovyipYUKAeR+wxT7uVm EetAlnIjj/XgqKmuLhHof6m7ryl/o1WbKtPTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUl5mGRIV7MBhl0raVdYmrPTl1acwHwYDVR0jBBgwFoAUzgR4+r6RlrVNC9Gq hMs5Bz1s+fkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy OS96Z1I0LXI2UmxyVk5DOUdxaE1zNUJ6MXMtZmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pnUjQtcjZSbHJWTkM5R3FoTXM1Qnoxcy1may5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjkvemdSNC1yNlJsclZO QzlHcWhNczVCejFzLWZrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANGTvpoycp9Z5L4FL9W/4tPw9oGot1AhwczwvELg39TMMStvkB2R4ZMFZAWr Um5KESjK1TcWFHM/ShzyS31lKi6pOju4lhCaHQenYDv+CIWEh5bJLb1GGdvJNN+t efLYNLlYB3rJo3oQWI2ZzR+MnfB25x3nW/sos1bDHqda2fnbxzUtI47UQ2CAe7Zc lp2embd0QY/61RWKcVp3AuQiU/dddYxSJ4Guc5O8aeT4Qmccf2QUS/3BPdKoKj/z j0xb7+kctZ+jKXjxPSoRPtkeXXmlMF5EQ/pVwUDf4egkfswAkV2+YMF4xPBdY1zj dEEydSFzeK50DYuEu6+z+tazJ18= -----END CERTIFICATE-----Generated at Fri Oct 24 21:22:09 2025 by rpki-client