$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft File: A8JGgRHqHFTvizzN765RbDCabsg.mft (raw, json) Hash identifier: L1D9FlE9zQdGcA4QufemnbLiZd/Wry0K75DMdA15gYI= Subject key identifier: 40:E8:44:62:90:F9:7A:3A:6D:7C:48:87:B3:13:FC:D3:B1:AE:09:A3 Authority key identifier: 03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8 Certificate issuer: /CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8 Certificate serial: 17EF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft Manifest number: 17EA Signing time: Sun 19 Oct 2025 23:05:25 +0000 Manifest this update: Sun 19 Oct 2025 23:05:25 +0000 Manifest next update: Mon 20 Oct 2025 05:05:25 +0000 Files and hashes: 1: 1BaPXImToIuFK4BWNNtuYSr1xSs.roa (hash: 0kFs+yiHRiw9WM1kz8pmSH14HDb/suhbncCkEWRjlzg=) 2: 245GYucSpaUoadtDQ8QIqw50V8U.roa (hash: fMgFFlzyEf5nzePcMKIWx0QdNucCDxf/kk1XhK/If+E=) 3: 7TNp04BVwJQHv1dTpUlNr2M_EVY.roa (hash: yU8KZh3ejWSVkJaNoqfDcd1ZHbJOOM2Z2NpvcoGuRRE=) 4: A8JGgRHqHFTvizzN765RbDCabsg.crl (hash: nvHS4qku4JuhI8SxyFOmVxyF/YylxCwyKfU0BK79V4w=) 5: LQsH_tF9tF9VXzV6Uq7lUCHdWS0.roa (hash: 2nQiV3yM4C9uHYb22n7t+ehtYvRe8MKJ9sBDK6zNMA0=) 6: cbKUR4BQHdrUir8bbKDhSJs8Mvw.roa (hash: xi3EzrF8AJJluHP7mpwsm0sUqDojImmwuHEyhBXFSF8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 04:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6127 (0x17ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8 Validity Not Before: Oct 19 23:05:25 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=40E8446290F97A3A6D7C4887B313FCD3B1AE09A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:e5:02:3a:07:fe:b0:b7:77:17:ee:fa:a3: ea:3b:73:73:27:29:98:72:24:b2:bd:ae:95:48:b6: 3c:52:8e:6c:fd:80:4e:c8:f2:aa:d4:c2:09:50:f6: 47:6e:46:ba:9b:bf:a6:e1:a2:7f:16:73:fc:4d:bb: 50:f6:48:ad:82:22:44:28:ff:c0:81:50:71:dd:25: b6:a3:7b:3d:0f:b6:5c:fc:ff:86:47:9e:19:86:f0: e8:62:31:44:33:73:40:de:f2:e4:29:ea:c9:c0:b5: 81:3e:6d:5a:03:e0:2f:ab:f4:86:d7:fc:89:95:ca: db:b9:ba:7d:e9:b9:3c:04:f0:c4:02:ae:38:e8:f4: 5b:22:8e:76:8e:ad:ee:4b:2b:5d:35:4e:ef:d1:78: 94:89:1a:e4:94:1f:31:ec:f8:31:3a:56:3e:44:35: 56:3f:9d:6f:17:5e:91:ef:55:cc:d6:fd:4d:84:55: 91:08:17:41:b6:35:b5:86:50:8a:b6:83:3e:7c:d4: d4:e2:f5:5b:6a:d3:53:26:f0:6c:9f:5b:0d:1a:6f: e6:ee:d7:d0:fd:8e:40:82:8c:0b:16:6b:96:ef:5d: 13:f6:bd:8c:1a:52:b5:9f:67:88:ff:3e:d0:e0:de: 74:a7:0a:cd:1f:c4:da:0d:34:9d:09:ea:35:63:2d: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E8:44:62:90:F9:7A:3A:6D:7C:48:87:B3:13:FC:D3:B1:AE:09:A3 X509v3 Authority Key Identifier: keyid:03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d9:f6:7c:7c:93:24:a0:d8:12:91:e3:dc:c5:a9:e8:f3:ae: 1b:00:e2:fb:75:46:c6:15:39:9d:12:a2:00:92:9d:63:e8:f6: 49:26:57:1d:ff:12:b0:4f:ad:37:c6:68:00:33:a9:d7:49:d3: da:06:51:56:f1:2b:e9:18:3d:e5:86:82:bd:48:0a:e9:2d:4e: 97:68:57:40:3c:0a:de:83:9f:a1:9b:72:e6:a9:e4:77:43:e5: 0d:4d:ab:3b:f8:79:26:b0:05:9c:24:09:9c:7c:d5:81:88:87: b3:19:68:dd:ea:f5:db:4a:b2:c2:21:cf:a1:c5:09:d6:d7:5c: 82:fa:27:06:3e:57:5d:2c:41:cc:26:cd:92:71:65:28:61:cb: 1b:04:bb:17:72:ce:b0:69:91:b7:4e:f4:61:9f:2a:20:2c:59: 62:db:03:80:7f:32:97:89:6e:67:38:4a:aa:21:62:60:16:7e: 47:8e:50:79:27:d6:85:48:62:92:f4:e6:e5:67:c2:98:ad:5e: a2:ba:9e:e2:d4:f9:17:90:b1:9b:8c:ce:0f:3a:bb:e6:b7:38: b4:36:3f:a7:d9:8c:42:f8:6e:31:a9:7c:27:48:11:6a:fe:ec: 6d:74:14:75:f5:58:2b:27:e1:4a:d9:27:3b:2e:c5:15:08:48: af:14:de:ba -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICF+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDND MjQ2ODExMUVBMUM1NEVGOEIzQ0NERUZBRTUxNkMzMDlBNkVDODAeFw0yNTEwMTky MzA1MjVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQwRTg0NDYyOTBGOTdB M0E2RDdDNDg4N0IzMTNGQ0QzQjFBRTA5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjmuUCOgf+sLd3F+76o+o7c3MnKZhyJLK9rpVItjxSjmz9gE7I 8qrUwglQ9kduRrqbv6bhon8Wc/xNu1D2SK2CIkQo/8CBUHHdJbajez0Ptlz8/4ZH nhmG8OhiMUQzc0De8uQp6snAtYE+bVoD4C+r9IbX/ImVytu5un3puTwE8MQCrjjo 9FsijnaOre5LK101Tu/ReJSJGuSUHzHs+DE6Vj5ENVY/nW8XXpHvVczW/U2EVZEI F0G2NbWGUIq2gz581NTi9Vtq01Mm8GyfWw0ab+bu19D9jkCCjAsWa5bvXRP2vYwa UrWfZ4j/PtDg3nSnCs0fxNoNNJ0J6jVjLVIZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQOhEYpD5ejptfEiHsxP807GuCaMwHwYDVR0jBBgwFoAUA8JGgRHqHFTvizzN 765RbDCabsgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTA4 Mi9BOEpHZ1JIcUhGVHZpenpONzY1UmJEQ2Fic2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0E4SkdnUkhxSEZUdml6ek43NjVSYkRDYWJzZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwODIvQThKR2dSSHFIRlR2 aXp6Tjc2NVJiRENhYnNnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJjZ9nx8kySg2BKR49zFqejzrhsA4vt1RsYVOZ0SogCSnWPo9kkmVx3/ErBP rTfGaAAzqddJ09oGUVbxK+kYPeWGgr1ICuktTpdoV0A8Ct6Dn6Gbcuap5HdD5Q1N qzv4eSawBZwkCZx81YGIh7MZaN3q9dtKssIhz6HFCdbXXIL6JwY+V10sQcwmzZJx ZShhyxsEuxdyzrBpkbdO9GGfKiAsWWLbA4B/MpeJbmc4SqohYmAWfkeOUHkn1oVI YpL05uVnwpitXqK6nuLU+ReQsZuMzg86u+a3OLQ2P6fZjEL4bjGpfCdIEWr+7G10 FHX1WCsn4UrZJzsuxRUISK8U3ro= -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:41 2025 by rpki-client