$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft File: ORZcru1PFFhR0mI9_l6jpZ2sur0.mft (raw, json) Hash identifier: SI5PQCfezZISOMswdMWJmkbKst0hwFUTKKrogsRopek= Subject key identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 Authority key identifier: 39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD Certificate issuer: /CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Certificate serial: AB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft Manifest number: AB Signing time: Tue 21 Oct 2025 07:34:50 +0000 Manifest this update: Tue 21 Oct 2025 07:34:50 +0000 Manifest next update: Tue 21 Oct 2025 13:34:50 +0000 Files and hashes: 1: ORZcru1PFFhR0mI9_l6jpZ2sur0.crl (hash: LlVUAH5oGTxXGp4w4P3OMt8YUyGxbbwZzjTI08DtM9I=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD Validity Not Before: Oct 21 07:34:50 2025 GMT Not After : Sep 17 01:12:15 2026 GMT Subject: CN=7608485AE05679629B857018E180B819839AD035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:04:b4:cf:06:53:6b:ad:46:fe:65:0a:53: 71:80:50:35:88:af:0e:e1:42:16:35:9c:5f:1f:42: de:5f:90:3e:65:59:a6:23:4f:25:64:b0:86:5d:4d: 67:4b:99:69:bb:a6:a7:fb:33:70:31:c8:55:11:d8: 20:ef:71:a6:3c:fb:35:fd:d4:bd:bd:e8:e0:83:fa: 88:dd:7a:59:f4:40:66:35:73:0c:1a:e1:e5:b4:e7: 98:33:be:a0:80:11:da:e3:9f:8e:3b:2d:70:0d:b5: c2:e1:76:30:53:ca:c2:78:44:98:22:7b:c4:96:e7: 32:96:e8:fb:fe:45:d3:33:e4:11:c5:38:cc:bc:46: 36:4f:42:10:3c:87:c0:2a:36:97:e5:99:81:76:74: 8c:88:91:11:97:f4:ef:0e:7a:7a:b5:53:9f:67:06: 22:b8:b5:31:f1:88:b3:e9:d4:ba:7f:0a:26:39:b3: 3e:24:98:9d:4a:85:c3:cb:65:94:56:12:49:ae:09: 9b:1d:47:cb:0d:d4:72:86:4c:47:2a:71:c5:de:11: a3:a0:d1:bf:a9:c7:ec:53:f7:1b:0b:64:1c:00:8d: 4c:40:bb:48:6e:37:1f:8d:88:5f:4a:33:8d:37:13: d6:49:28:0f:3d:69:f1:f9:ab:50:ff:16:ff:7a:0b: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:48:5A:E0:56:79:62:9B:85:70:18:E1:80:B8:19:83:9A:D0:35 X509v3 Authority Key Identifier: keyid:39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:9f:14:90:0c:64:05:2e:dd:a9:ec:6a:54:48:a6:33:aa:2a: 5a:ce:9e:28:0c:15:77:e7:db:8b:8e:c0:22:89:2a:cb:e2:b3: 54:69:d2:5f:b9:ea:10:8a:a4:ba:fc:da:85:1e:6c:a3:8a:df: fa:60:c4:eb:15:f1:0b:f4:c6:79:7c:ec:d0:a4:3a:d2:ff:10: de:1b:2a:63:66:9e:72:e4:b6:0c:d8:a5:0e:b1:48:e3:5c:20: e8:1a:3e:e5:d4:70:67:af:b6:74:1c:da:40:38:8d:7e:07:13: 38:cb:ca:9c:3f:86:4e:b7:90:96:a6:f6:a1:38:be:66:8b:18: c4:73:2b:6d:4d:58:ce:f5:ca:46:80:60:61:33:28:61:f9:c4: 99:ac:da:d2:50:4f:4a:e6:1d:8d:63:3b:f9:5d:43:74:49:80: 0d:b1:24:b6:b9:2b:75:71:4e:05:90:10:f0:bd:ce:dc:45:2d: 8b:fd:00:40:c7:90:58:eb:2d:ad:e8:c3:ff:0c:75:8c:44:f8: 1c:c4:f0:f8:a6:15:9c:55:ae:d7:00:65:f6:36:42:f1:0b:61: 18:c6:78:84:6c:2f:41:f8:a4:ce:24:a5:78:e4:77:bd:c4:e6: 66:a3:eb:37:c1:19:4a:76:e2:cc:93:ee:83:9a:1f:cb:89:78: 27:c9:32:40 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkx NjVDQUVFRDRGMTQ1ODUxRDI2MjNERkU1RUEzQTU5REFDQkFCRDAeFw0yNTEwMjEw NzM0NTBaFw0yNjA5MTcwMTEyMTVaMDMxMTAvBgNVBAMTKDc2MDg0ODVBRTA1Njc5 NjI5Qjg1NzAxOEUxODBCODE5ODM5QUQwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjaAS0zwZTa61G/mUKU3GAUDWIrw7hQhY1nF8fQt5fkD5lWaYj TyVksIZdTWdLmWm7pqf7M3AxyFUR2CDvcaY8+zX91L296OCD+ojdeln0QGY1cwwa 4eW055gzvqCAEdrjn447LXANtcLhdjBTysJ4RJgie8SW5zKW6Pv+RdMz5BHFOMy8 RjZPQhA8h8AqNpflmYF2dIyIkRGX9O8Oenq1U59nBiK4tTHxiLPp1Lp/CiY5sz4k mJ1KhcPLZZRWEkmuCZsdR8sN1HKGTEcqccXeEaOg0b+px+xT9xsLZBwAjUxAu0hu Nx+NiF9KM403E9ZJKA89afH5q1D/Fv96C2W3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdghIWuBWeWKbhXAY4YC4GYOa0DUwHwYDVR0jBBgwFoAUORZcru1PFFhR0mI9 /l6jpZ2sur0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 My9PUlpjcnUxUEZGaFIwbUk5X2w2anBaMnN1cjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09SWmNydTFQRkZoUjBtSTlfbDZqcFoyc3VyMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTMvT1JaY3J1MVBGRmhS MG1JOV9sNmpwWjJzdXIwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHGfFJAMZAUu3ansalRIpjOqKlrOnigMFXfn24uOwCKJKsvis1Rp0l+56hCK pLr82oUebKOK3/pgxOsV8Qv0xnl87NCkOtL/EN4bKmNmnnLktgzYpQ6xSONcIOga PuXUcGevtnQc2kA4jX4HEzjLypw/hk63kJam9qE4vmaLGMRzK21NWM71ykaAYGEz KGH5xJms2tJQT0rmHY1jO/ldQ3RJgA2xJLa5K3VxTgWQEPC9ztxFLYv9AEDHkFjr La3ow/8MdYxE+BzE8PimFZxVrtcAZfY2QvELYRjGeIRsL0H4pM4kpXjkd73E5maj 6zfBGUp24syT7oOaH8uJeCfJMkA= -----END CERTIFICATE-----Generated at Tue Oct 21 12:50:31 2025 by rpki-client