$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft File: ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft (raw, json) Hash identifier: EaSCCxURSgziS4W9DPLViS2aqo8BPKDbSoi+ZcoqudE= Subject key identifier: 7C:CC:E5:F9:52:59:DA:47:95:EE:28:77:18:0C:7D:C6:40:70:B1:E4 Authority key identifier: 7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2 Certificate issuer: /CN=7B36CC310661BFB97FF31EFFD426B49A9C8448F2 Certificate serial: 0A5E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft Manifest number: 0A5E Signing time: Wed 05 Nov 2025 10:13:52 +0000 Manifest this update: Wed 05 Nov 2025 10:13:52 +0000 Manifest next update: Wed 05 Nov 2025 16:13:52 +0000 Files and hashes: 1: ezbMMQZhv7l_8x7_1Ca0mpyESPI.crl (hash: MlXJ/cF/w64fhSNHg5M4aeuNqCFOuD8e4usF3ZlECD0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2654 (0xa5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B36CC310661BFB97FF31EFFD426B49A9C8448F2 Validity Not Before: Nov 5 10:13:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7CCCE5F95259DA4795EE2877180C7DC64070B1E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:46:2b:c2:aa:92:4d:1e:f1:af:68:be:04: b2:4b:e6:ce:d6:56:f8:ba:99:f7:4f:f6:ef:70:6c: 5d:93:65:1d:4a:38:0e:38:d8:7c:9c:2d:0c:87:97: df:ca:7d:14:ac:a9:0c:82:aa:68:6a:61:c2:97:31: 14:63:b7:a2:44:c1:51:f1:c9:b8:06:c7:52:e6:d7: 3e:f6:5b:9b:05:05:34:3d:e0:23:ca:0e:0b:ce:ba: 52:96:0c:15:aa:79:d9:0b:c7:82:9c:f0:ba:56:17: 65:bf:13:74:ea:a6:0f:ff:3a:16:09:7c:64:cb:61: 60:b5:6c:26:87:c9:2f:61:06:78:28:0c:9d:13:1c: 17:bd:4b:d6:b3:8f:02:eb:8c:cc:4a:63:3d:e3:ff: 68:c8:1f:36:6d:47:0a:76:e7:17:49:7e:5c:6a:a7: 05:16:42:79:8a:bb:aa:ce:89:4e:ee:38:a2:d8:47: 92:08:4e:bb:c2:f0:84:3a:53:3d:6b:98:e7:13:bf: cd:91:de:84:1a:d6:9f:38:41:ad:0d:f5:e1:31:f0: fd:6e:58:1f:f3:e3:2b:c9:bb:f9:ae:9d:0a:2b:cd: a7:0d:bf:48:91:f2:24:3c:de:33:55:60:2e:7f:f7: 00:1f:70:7b:b7:c9:a6:1b:d7:21:24:23:d7:d5:26: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:E5:F9:52:59:DA:47:95:EE:28:77:18:0C:7D:C6:40:70:B1:E4 X509v3 Authority Key Identifier: keyid:7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f9:c4:8e:21:86:ea:b9:70:b4:69:4c:4c:b7:50:49:bb:02: 37:45:5f:52:e9:78:6b:53:2f:c7:6a:20:1e:35:a0:5e:6f:00: c2:e8:f4:72:a3:ac:f4:dc:63:a5:dc:c2:0b:d2:a6:86:78:b4: 83:33:e4:3b:63:de:d7:97:5f:05:90:83:de:67:82:3d:75:e5: 41:b2:5f:72:0b:67:24:87:e6:ad:de:65:23:64:8c:b5:c6:f9: e4:2e:4b:82:75:56:69:98:fa:b5:17:d0:ad:c5:bf:0d:b4:86: 9e:ae:82:1d:bf:d1:77:e0:f9:04:f0:52:a7:83:14:60:ce:68: 75:fe:9d:11:c6:6c:bc:18:1c:b3:32:92:83:bb:71:4a:87:e9: 32:b0:4d:46:da:5f:89:ba:02:30:3c:75:78:a5:d7:c9:36:9f: d0:50:bc:bf:83:c6:df:bd:eb:a7:be:df:82:15:92:12:e0:9c: 2c:7a:da:9d:1b:c0:78:1b:ee:d9:c0:26:16:25:b0:16:ac:3f: 12:97:67:88:0b:25:6a:78:8f:de:d9:bc:d7:e5:a3:3d:77:cf: 7f:2c:0e:59:d0:05:80:2f:d2:f4:c1:8b:a2:ba:80:d5:a5:e5: 82:01:90:44:55:0e:68:26:09:b7:e0:b1:ba:2c:c7:51:99:ff: e4:8b:93:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Iz NkNDMzEwNjYxQkZCOTdGRjMxRUZGRDQyNkI0OUE5Qzg0NDhGMjAeFw0yNTExMDUx MDEzNTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdDQ0NFNUY5NTI1OURB NDc5NUVFMjg3NzE4MEM3REM2NDA3MEIxRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQQEYrwqqSTR7xr2i+BLJL5s7WVvi6mfdP9u9wbF2TZR1KOA44 2HycLQyHl9/KfRSsqQyCqmhqYcKXMRRjt6JEwVHxybgGx1Lm1z72W5sFBTQ94CPK DgvOulKWDBWqedkLx4Kc8LpWF2W/E3Tqpg//OhYJfGTLYWC1bCaHyS9hBngoDJ0T HBe9S9azjwLrjMxKYz3j/2jIHzZtRwp25xdJflxqpwUWQnmKu6rOiU7uOKLYR5II TrvC8IQ6Uz1rmOcTv82R3oQa1p84Qa0N9eEx8P1uWB/z4yvJu/munQorzacNv0iR 8iQ83jNVYC5/9wAfcHu3yaYb1yEkI9fVJt5LAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUfMzl+VJZ2keV7ih3GAx9xkBwseQwHwYDVR0jBBgwFoAUezbMMQZhv7l/8x7/ 1Ca0mpyESPIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 My9lemJNTVFaaHY3bF84eDdfMUNhMG1weUVTUEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2V6Yk1NUVpodjdsXzh4N18xQ2EwbXB5RVNQSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODMvZXpiTU1RWmh2N2xf OHg3XzFDYTBtcHlFU1BJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ/5xI4hhuq5cLRpTEy3UEm7AjdFX1LpeGtTL8dqIB41oF5vAMLo9HKjrPTc Y6XcwgvSpoZ4tIMz5Dtj3teXXwWQg95ngj115UGyX3ILZySH5q3eZSNkjLXG+eQu S4J1VmmY+rUX0K3Fvw20hp6ugh2/0Xfg+QTwUqeDFGDOaHX+nRHGbLwYHLMykoO7 cUqH6TKwTUbaX4m6AjA8dXil18k2n9BQvL+Dxt+966e+34IVkhLgnCx62p0bwHgb 7tnAJhYlsBasPxKXZ4gLJWp4j97ZvNfloz13z38sDlnQBYAv0vTBi6K6gNWl5YIB kERVDmgmCbfgsbosx1GZ/+SLkwA= -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:15 2025 by rpki-client