$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft File: v53ECbEbmTO6Vq39mHrqjUQseeY.mft (raw, json) Hash identifier: 3dcdCBETvTD8y936QMOl8f/Z++LYOqy9uX0g34lsC34= Subject key identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E Authority key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 Certificate issuer: /CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Certificate serial: 0321 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft Manifest number: 0321 Signing time: Wed 13 Aug 2025 16:02:37 +0000 Manifest this update: Wed 13 Aug 2025 16:02:37 +0000 Manifest next update: Wed 13 Aug 2025 22:02:37 +0000 Files and hashes: 1: v53ECbEbmTO6Vq39mHrqjUQseeY.crl (hash: pcql4WYRZL1FzYR8T0XzZS3gv7Q4I1haA5UXz5XTViM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Validity Not Before: Aug 13 16:02:37 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F8E22E50F93E415F3459D2358118CB2C26310B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:77:2d:29:68:98:00:29:fe:22:7e:7d:b9: 3a:e9:2b:47:d5:25:b3:7f:94:ee:92:e0:3d:94:40: 25:7f:40:5d:2e:bb:c1:fa:cd:e2:64:93:ee:a0:1d: 21:33:4e:76:b5:7e:71:6c:39:77:d8:56:9b:1a:3a: ac:e1:95:97:b5:d7:9f:c4:04:05:c6:d8:6d:46:e5: b1:85:ef:64:e5:f8:2d:1e:00:b4:79:cb:c3:86:73: 0a:05:36:dd:c5:67:41:83:03:df:ef:fe:9e:14:e7: 1d:d0:a3:50:3d:77:a7:ca:73:d8:53:48:71:d5:76: a0:dd:b9:cb:6a:82:db:3b:82:c7:33:8d:b6:42:2c: cb:05:ca:e4:95:b7:9f:fd:64:a4:7b:d9:dc:21:5b: ee:0e:b2:d8:0c:81:b5:98:55:41:90:b2:cd:d4:35: 68:1b:5b:38:63:03:b8:5b:0c:a3:ba:e3:94:fd:c8: ae:81:69:50:99:9c:b9:cd:7f:28:14:d6:b0:60:9a: 9f:25:35:77:fa:63:91:5c:5c:cf:a3:25:97:2f:0e: 5d:f1:8a:68:49:0b:94:89:74:0e:c7:ce:77:9c:8a: 84:14:46:4e:56:ee:f9:e4:4b:1c:d1:3c:df:94:e4: 8b:c8:ce:ae:af:7b:80:34:ff:6e:8a:de:a2:b3:10: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:2E:50:F9:3E:41:5F:34:59:D2:35:81:18:CB:2C:26:31:0B:8E X509v3 Authority Key Identifier: keyid:BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f0:b4:bd:40:95:aa:38:22:51:4a:32:ab:ac:b1:a5:26:dd: 6d:9f:7b:06:0e:10:6e:da:35:fc:61:9f:85:9b:44:9d:0f:88: c1:0a:63:db:a7:10:6c:6f:2c:34:4e:a9:f0:1f:cc:ee:e9:59: cc:c9:f8:e9:b1:20:0e:20:72:01:79:30:55:d6:dc:90:e2:01: f8:44:e9:2e:ac:d7:b5:ea:91:2b:82:0f:a7:ff:4a:96:bc:ae: c7:e9:36:74:3e:34:23:1f:bd:52:ff:d6:25:e8:d2:70:3b:42: 9b:59:db:99:60:ca:51:c8:c3:2f:c3:8b:c6:59:e9:a4:52:03: 7c:da:13:01:84:a2:22:e6:34:49:f8:10:57:5e:1a:d5:98:bf: c6:64:d3:05:6a:6d:04:04:b0:ed:84:d8:c2:56:9a:8a:bc:49: cc:84:e2:2b:f9:15:9e:9d:48:39:3d:71:aa:25:a0:49:dc:4c: 72:7a:bd:4a:15:e0:7b:9d:00:c2:b5:a6:69:61:c7:32:1d:29: fb:d7:4e:98:de:ec:35:47:95:05:19:3d:a0:77:c5:2d:5f:ad: 25:72:83:10:68:db:96:0e:81:35:71:21:c8:65:01:8f:c0:b2: da:01:ca:d1:9f:bf:81:ef:01:f6:c3:97:2d:fc:a5:6a:ff:64: c8:ef:9b:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY5 REM0MDlCMTFCOTkzM0JBNTZBREZEOTg3QUVBOEQ0NDJDNzlFNjAeFw0yNTA4MTMx NjAyMzdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY4RTIyRTUwRjkzRTQx NUYzNDU5RDIzNTgxMThDQjJDMjYzMTBCOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPz3ctKWiYACn+In59uTrpK0fVJbN/lO6S4D2UQCV/QF0uu8H6 zeJkk+6gHSEzTna1fnFsOXfYVpsaOqzhlZe115/EBAXG2G1G5bGF72Tl+C0eALR5 y8OGcwoFNt3FZ0GDA9/v/p4U5x3Qo1A9d6fKc9hTSHHVdqDductqgts7gsczjbZC LMsFyuSVt5/9ZKR72dwhW+4OstgMgbWYVUGQss3UNWgbWzhjA7hbDKO645T9yK6B aVCZnLnNfygU1rBgmp8lNXf6Y5FcXM+jJZcvDl3ximhJC5SJdA7HznecioQURk5W 7vnkSxzRPN+U5IvIzq6ve4A0/26K3qKzEOf3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+OIuUPk+QV80WdI1gRjLLCYxC44wHwYDVR0jBBgwFoAUv53ECbEbmTO6Vq39 mHrqjUQseeYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 Ni92NTNFQ2JFYm1UTzZWcTM5bUhycWpVUXNlZVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Y1M0VDYkVibVRPNlZxMzltSHJxalVRc2VlWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTYvdjUzRUNiRWJtVE82 VnEzOW1IcnFqVVFzZWVZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFjwtL1Alao4IlFKMqussaUm3W2fewYOEG7aNfxhn4WbRJ0PiMEKY9unEGxv LDROqfAfzO7pWczJ+OmxIA4gcgF5MFXW3JDiAfhE6S6s17XqkSuCD6f/Spa8rsfp NnQ+NCMfvVL/1iXo0nA7QptZ25lgylHIwy/Di8ZZ6aRSA3zaEwGEoiLmNEn4EFde GtWYv8Zk0wVqbQQEsO2E2MJWmoq8ScyE4iv5FZ6dSDk9caoloEncTHJ6vUoV4Hud AMK1pmlhxzIdKfvXTpje7DVHlQUZPaB3xS1frSVygxBo25YOgTVxIchlAY/AstoB ytGfv4HvAfbDly38pWr/ZMjvmwA= -----END CERTIFICATE-----Generated at Wed Aug 13 20:24:38 2025 by rpki-client