$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft File: aNHWIOHqFxAY048aCIaBCXhdurE.mft (raw, json) Hash identifier: QJ9hNgumOPpigpmkGkfvR8QPGelztg0qNUpddnBLDQQ= Subject key identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 Authority key identifier: 68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 Certificate issuer: /CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Certificate serial: 0106 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft Manifest number: 0106 Signing time: Mon 20 Oct 2025 03:06:39 +0000 Manifest this update: Mon 20 Oct 2025 03:06:39 +0000 Manifest next update: Mon 20 Oct 2025 09:06:39 +0000 Files and hashes: 1: aNHWIOHqFxAY048aCIaBCXhdurE.crl (hash: KitZbR2nHuNc6OInHFR42aY0YEqvnjvZmfv4oqQBdLM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Validity Not Before: Oct 20 03:06:39 2025 GMT Not After : Aug 28 02:43:41 2026 GMT Subject: CN=B236EA55FB0269C3807F4E9AD6D0E16157CB18E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:0b:0f:04:f5:c8:e4:00:9e:ea:f0:b3:6c: 8f:4d:4c:9f:9d:fa:90:e4:d0:84:eb:43:f5:08:fa: c8:dd:af:b5:93:39:75:5b:a6:b9:56:f7:cf:cf:78: a3:f8:4d:f6:93:a2:99:3e:05:d3:d1:8b:fc:a4:39: 6c:91:36:65:56:e6:79:fc:fe:c9:bb:6d:30:e1:35: a5:bc:97:42:a0:61:5c:96:c0:1b:af:07:e7:9e:ee: 0c:96:4c:b0:19:31:34:a6:7c:3a:b1:04:fd:59:76: 36:0c:39:c4:12:02:52:0d:83:af:92:37:e0:07:bf: ac:4f:99:e7:b8:a9:6b:5f:41:51:17:cc:fb:4c:49: 0a:75:b4:11:d3:eb:ca:8f:c0:8b:a6:93:e9:ff:6f: c3:58:78:77:2d:cb:e3:64:55:80:8e:fc:b4:c7:31: bb:ef:18:74:10:aa:6a:e5:a1:4f:89:6a:2a:49:e5: e1:73:a6:05:7b:c5:23:5f:d0:96:55:4f:a8:ec:e5: 36:e4:98:64:94:23:88:5f:e4:3a:59:9a:25:b4:34: d0:a4:bb:6a:9b:e1:6f:cc:74:7b:3c:63:d0:72:fd: 73:bb:5c:14:75:48:a8:d5:1b:3a:ca:cc:c9:6e:3e: 30:02:27:6f:28:34:c6:8a:d7:6e:78:65:6f:e8:4f: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 X509v3 Authority Key Identifier: keyid:68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f6:c7:ab:5e:52:b7:69:bf:90:c9:b9:cd:28:eb:b4:5c:4f: ce:11:e1:fb:e3:38:c3:80:f2:69:44:68:dc:cf:2c:8e:0d:04: dc:da:48:64:f9:44:74:b1:3b:0d:0e:39:66:64:e7:b7:e7:d6: 71:d0:d2:9a:6e:1f:26:1d:96:a9:df:ea:42:48:72:d0:75:f8: 77:23:02:71:52:a9:56:ff:7e:43:4d:d7:31:65:4d:9a:18:78: 42:70:08:66:f8:24:b7:d6:56:84:27:88:b6:30:f9:73:20:dc: ae:7c:01:9b:a6:92:f7:10:8f:a1:8e:0e:2a:95:41:e8:4f:02: 63:4b:76:3d:24:26:75:d7:8c:11:41:f8:7f:e3:be:46:19:3e: 58:60:55:78:82:67:e2:14:d2:35:b5:80:df:1e:3b:06:41:62: 8e:1f:a4:15:99:3e:f3:12:7a:3a:e7:50:75:33:c2:9c:2a:38: fe:5a:bf:02:10:73:17:01:03:29:3c:e5:f1:bc:eb:00:75:c1: b3:b5:e8:86:96:25:d0:9b:a2:b6:29:d6:be:b3:34:01:2d:1a: 1d:2d:7f:82:da:61:be:ee:ed:9b:8a:24:47:9d:8f:92:44:ad: 49:2f:46:02:31:4e:88:d9:ec:84:ca:eb:c5:fa:3e:49:9f:33: 6f:33:1d:01 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhE MUQ2MjBFMUVBMTcxMDE4RDM4RjFBMDg4NjgxMDk3ODVEQkFCMTAeFw0yNTEwMjAw MzA2MzlaFw0yNjA4MjgwMjQzNDFaMDMxMTAvBgNVBAMTKEIyMzZFQTU1RkIwMjY5 QzM4MDdGNEU5QUQ2RDBFMTYxNTdDQjE4RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/9AsPBPXI5ACe6vCzbI9NTJ+d+pDk0ITrQ/UI+sjdr7WTOXVb prlW98/PeKP4TfaTopk+BdPRi/ykOWyRNmVW5nn8/sm7bTDhNaW8l0KgYVyWwBuv B+ee7gyWTLAZMTSmfDqxBP1ZdjYMOcQSAlINg6+SN+AHv6xPmee4qWtfQVEXzPtM SQp1tBHT68qPwIumk+n/b8NYeHcty+NkVYCO/LTHMbvvGHQQqmrloU+JaipJ5eFz pgV7xSNf0JZVT6js5TbkmGSUI4hf5DpZmiW0NNCku2qb4W/MdHs8Y9By/XO7XBR1 SKjVGzrKzMluPjACJ28oNMaK1254ZW/oTwC5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUsjbqVfsCacOAf06a1tDhYVfLGOcwHwYDVR0jBBgwFoAUaNHWIOHqFxAY048a CIaBCXhdurEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 NS9hTkhXSU9IcUZ4QVkwNDhhQ0lhQkNYaGR1ckUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FOSFdJT0hxRnhBWTA0OGFDSWFCQ1hoZHVyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODUvYU5IV0lPSHFGeEFZ MDQ4YUNJYUJDWGhkdXJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJf2x6teUrdpv5DJuc0o67RcT84R4fvjOMOA8mlEaNzPLI4NBNzaSGT5RHSx Ow0OOWZk57fn1nHQ0ppuHyYdlqnf6kJIctB1+HcjAnFSqVb/fkNN1zFlTZoYeEJw CGb4JLfWVoQniLYw+XMg3K58AZumkvcQj6GODiqVQehPAmNLdj0kJnXXjBFB+H/j vkYZPlhgVXiCZ+IU0jW1gN8eOwZBYo4fpBWZPvMSejrnUHUzwpwqOP5avwIQcxcB Ayk85fG86wB1wbO16IaWJdCborYp1r6zNAEtGh0tf4LaYb7u7ZuKJEedj5JErUkv RgIxTojZ7ITK68X6PkmfM28zHQE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:31:27 2025 by rpki-client