$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft File: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft (raw, json) Hash identifier: mPj3JxHUgs9hFYKEdlvyyiKEPLjtwYIevHLkSDC3mRk= Subject key identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC Authority key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F Certificate issuer: /CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Certificate serial: 2156 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft Manifest number: 2156 Signing time: Wed 05 Nov 2025 17:41:18 +0000 Manifest this update: Wed 05 Nov 2025 17:41:18 +0000 Manifest next update: Wed 05 Nov 2025 23:41:18 +0000 Files and hashes: 1: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl (hash: raxDkkw7qC1cYuagGaA808+GWxxAfNkMAQxhS84FJJc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8534 (0x2156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Validity Not Before: Nov 5 17:41:18 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=642E96922B46BF24EF102575A5DAA715488004CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:78:97:a8:9d:3f:e3:16:18:d4:df:23:a0: 92:64:4b:c9:36:9c:fd:be:09:98:fc:24:f7:23:77: 54:1b:52:12:55:f3:cc:82:81:53:99:fd:b4:ad:74: 6c:c6:fe:5b:df:bf:95:4d:77:68:71:a6:28:2a:b7: 84:3c:ec:50:d3:53:fe:7e:10:03:0a:87:7c:92:a4: ba:0e:5d:78:29:a5:54:dc:5b:a7:5a:95:3e:2e:d4: da:70:91:e6:1c:7b:c5:cf:fe:e0:5e:01:8a:69:9c: b0:30:55:0c:66:67:55:72:1f:69:14:9e:7f:50:fc: ba:99:d6:ad:d0:48:bb:0b:be:95:2d:06:30:d0:37: c7:db:13:86:aa:bf:d9:88:6c:a4:2a:d0:97:ec:32: 86:d1:48:b2:e6:5c:87:a9:10:06:89:62:df:52:67: 64:92:2b:8c:f5:77:4a:2d:5c:68:ef:4a:08:d6:ec: bf:1c:50:24:71:90:13:6a:95:6b:2b:63:72:d3:02: f3:16:b3:dd:62:33:75:5b:d6:63:34:fb:db:d5:96: 3c:04:22:89:a3:be:a5:6b:11:81:fe:30:13:b4:0e: 7b:be:b4:06:b2:be:81:01:24:51:96:9a:a9:f3:57: c2:20:d1:18:ce:e3:9b:0d:97:33:a9:23:51:e0:e6: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC X509v3 Authority Key Identifier: keyid:F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:58:5a:7b:76:30:76:e2:c1:43:20:42:af:2d:66:b7:d4:12: 70:be:61:cf:46:f7:89:fd:5a:12:eb:21:a6:f7:7e:71:54:17: f1:fc:95:23:98:c2:28:39:09:74:05:9a:ad:47:e8:87:24:81: c1:fd:a5:3d:01:14:e7:09:9f:e0:7f:b7:57:47:53:2e:3c:67: 79:8c:a4:23:ca:f0:cc:c6:7a:61:4e:77:58:6f:a1:bb:86:b5: 11:90:83:e5:08:a5:f5:de:be:27:ac:7d:ed:34:87:38:5e:09: b4:dd:06:63:9b:02:dd:68:9c:c7:1d:5e:52:7b:77:31:ca:b8: ef:ea:aa:cc:52:04:64:9a:b5:a0:9b:04:61:f6:42:7a:0f:cd: d7:1e:72:df:f4:58:c7:b4:cb:bf:73:ec:43:63:51:8e:02:3a: fb:7a:0c:41:d1:5c:e8:7a:28:cd:f1:b4:90:b3:25:34:1e:b9: 1a:07:35:c4:53:c6:dd:a6:d5:1f:af:95:e6:54:a0:89:5b:59: 79:18:51:67:06:48:b9:11:5e:0b:fd:f8:cc:37:fb:15:d0:fd: 5e:8b:ea:25:9b:1f:45:8d:cf:bc:14:71:d6:fd:36:73:e1:bc: 07:ee:ed:6f:ff:df:2e:f7:f0:51:14:7c:df:b4:0d:0a:8d:38: f9:8d:a3:2e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjJF ODQ4MkJGMTBCNEVFNjczNkY0MDFBRkZGMzcxMkZCNDQ2QkYyRjAeFw0yNTExMDUx NzQxMThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY0MkU5NjkyMkI0NkJG MjRFRjEwMjU3NUE1REFBNzE1NDg4MDA0Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDco3iXqJ0/4xYY1N8joJJkS8k2nP2+CZj8JPcjd1QbUhJV88yC gVOZ/bStdGzG/lvfv5VNd2hxpigqt4Q87FDTU/5+EAMKh3ySpLoOXXgppVTcW6da lT4u1NpwkeYce8XP/uBeAYppnLAwVQxmZ1VyH2kUnn9Q/LqZ1q3QSLsLvpUtBjDQ N8fbE4aqv9mIbKQq0JfsMobRSLLmXIepEAaJYt9SZ2SSK4z1d0otXGjvSgjW7L8c UCRxkBNqlWsrY3LTAvMWs91iM3Vb1mM0+9vVljwEIomjvqVrEYH+MBO0Dnu+tAay voEBJFGWmqnzV8Ig0RjO45sNlzOpI1Hg5lHJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUZC6WkitGvyTvECV1pdqnFUiABMwwHwYDVR0jBBgwFoAU8uhIK/ELTuZzb0Aa //NxL7RGvy8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMw Lzh1aElLX0VMVHVaemIwQWFfX054TDdSR3Z5OC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOHVoSUtfRUxUdVp6YjBBYV9fTnhMN1JHdnk4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDMwLzh1aElLX0VMVHVaemIw QWFfX054TDdSR3Z5OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCuWFp7djB24sFDIEKvLWa31BJwvmHPRveJ/VoS6yGm935xVBfx/JUjmMIoOQl0 BZqtR+iHJIHB/aU9ARTnCZ/gf7dXR1MuPGd5jKQjyvDMxnphTndYb6G7hrURkIPl CKX13r4nrH3tNIc4Xgm03QZjmwLdaJzHHV5Se3cxyrjv6qrMUgRkmrWgmwRh9kJ6 D83XHnLf9FjHtMu/c+xDY1GOAjr7egxB0VzoeijN8bSQsyU0HrkaBzXEU8bdptUf r5XmVKCJW1l5GFFnBki5EV4L/fjMN/sV0P1ei+olmx9Fjc+8FHHW/TZz4bwH7u1v /98u9/BRFHzftA0KjTj5jaMu -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:54 2025 by rpki-client