$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft File: Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft (raw, json) Hash identifier: PfHrYuU8Fzkg0Mx7GQF4LIvLe/h6phhz46Sqs0ZBdmU= Subject key identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 Authority key identifier: 1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A Certificate issuer: /CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Certificate serial: 213C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft Manifest number: 213C Signing time: Mon 20 Oct 2025 17:04:59 +0000 Manifest this update: Mon 20 Oct 2025 17:04:59 +0000 Manifest next update: Mon 20 Oct 2025 23:04:59 +0000 Files and hashes: 1: Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl (hash: S883PbBSuzH4IWUigW1BJ2i/vbO/YY3tii2y0LFp0qc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8508 (0x213c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Validity Not Before: Oct 20 17:04:59 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=DB081190A93335A4E93878C7856B0F9DA70C2A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:29:0c:3c:46:6f:85:b2:e2:b1:63:21:68: 78:37:d6:ca:8c:b0:f4:28:08:6a:2f:b0:56:4c:b8: ab:b8:65:6a:2e:77:ca:96:2d:4f:c4:ec:5e:56:50: 2e:f2:5f:04:cf:cd:18:d3:37:83:04:9e:78:bc:82: 4d:ed:18:62:1f:54:86:e5:f8:9d:d4:b3:c9:c0:15: e2:3b:d2:85:1c:6b:0b:bb:7c:af:4b:a0:9c:61:f2: 0d:dd:13:59:77:88:64:2d:0e:96:ef:3e:77:b3:8b: 14:a2:aa:59:fc:7b:a1:0a:ad:7e:74:a6:d7:d2:8b: 0c:ce:85:db:61:dd:bf:5b:02:a0:26:2c:a1:58:dc: e0:2c:89:65:99:c5:d9:e1:7d:02:12:0f:68:46:19: 29:fe:9b:12:f2:8d:2c:02:45:01:ac:46:59:4e:80: 02:79:18:1c:f6:fc:04:c6:5e:07:56:58:ef:89:cc: 31:5d:f6:93:59:61:8c:b5:9c:ad:ea:74:d4:33:7d: b1:50:db:51:f9:3c:b5:13:d5:30:46:72:77:f3:10: 59:04:89:dd:1b:8a:d2:5c:e2:da:fb:44:59:6d:81: 86:3c:f7:7f:0e:db:6f:83:d4:b2:2d:65:37:da:b5: 21:38:b8:15:9e:a2:69:79:d6:a1:5b:3b:78:c2:00: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 X509v3 Authority Key Identifier: keyid:1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:fa:a3:f1:59:98:ae:a4:73:8f:5d:39:57:32:ac:92:97:64: b2:c6:95:ec:55:bb:23:4f:11:e6:2b:56:09:e8:ee:24:a5:9c: 9a:97:26:47:af:d4:8a:11:90:2a:91:98:b6:ff:9b:fd:45:bd: 2a:ab:56:2f:e8:05:b8:ce:3b:80:77:3e:99:cf:2a:45:cc:1f: af:68:03:de:dc:99:dc:58:dd:e4:8c:e2:e7:e9:f7:f2:5e:36: ca:94:c8:2c:7b:9d:b7:b1:87:6f:67:94:4e:25:c1:98:ea:6e: 94:93:09:b2:10:e4:6e:8e:bf:84:6f:2d:fd:18:06:f0:27:b4: c9:83:2e:4e:3f:63:f7:72:ad:0b:0b:85:30:81:d2:14:10:9c: df:f5:d0:ac:11:1e:af:5e:88:7b:df:93:09:39:8a:1c:44:d9: 57:0a:d9:3d:fd:0c:2e:3c:eb:9b:10:5e:47:3a:3f:ac:a7:94: c9:fa:dc:c8:cb:22:8e:60:b0:61:fb:80:09:54:2c:00:bf:0e: 1e:93:f1:d1:c4:76:cb:38:aa:f4:15:85:3a:7b:31:a3:86:c8: 91:dc:9f:04:f0:5e:75:d2:b9:e1:15:3c:0f:f5:d3:09:c3:d2: d4:04:85:e9:38:2f:a7:d0:16:57:51:b7:3d:aa:13:dc:52:9a: fc:5a:36:88 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICITwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUEz Q0I3MzI2NzBGRTVDRTVGMkI1QkMxRkE4MTI1RTk1Mzg2MzI3QTAeFw0yNTEwMjAx NzA0NTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKERCMDgxMTkwQTkzMzM1 QTRFOTM4NzhDNzg1NkIwRjlEQTcwQzJBNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9sCkMPEZvhbLisWMhaHg31sqMsPQoCGovsFZMuKu4ZWoud8qW LU/E7F5WUC7yXwTPzRjTN4MEnni8gk3tGGIfVIbl+J3Us8nAFeI70oUcawu7fK9L oJxh8g3dE1l3iGQtDpbvPnezixSiqln8e6EKrX50ptfSiwzOhdth3b9bAqAmLKFY 3OAsiWWZxdnhfQISD2hGGSn+mxLyjSwCRQGsRllOgAJ5GBz2/ATGXgdWWO+JzDFd 9pNZYYy1nK3qdNQzfbFQ21H5PLUT1TBGcnfzEFkEid0bitJc4tr7RFltgYY8938O 22+D1LItZTfatSE4uBWeoml51qFbO3jCAPZlAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU2wgRkKkzNaTpOHjHhWsPnacMKlMwHwYDVR0jBBgwFoAUGjy3MmcP5c5fK1vB +oEl6VOGMnowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1 L0dqeTNNbWNQNWM1ZksxdkItb0VsNlZPR01uby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvR2p5M01tY1A1YzVmSzF2Qi1vRWw2Vk9HTW5vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1L0dqeTNNbWNQNWM1Zksx dkItb0VsNlZPR01uby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC8+qPxWZiupHOPXTlXMqySl2SyxpXsVbsjTxHmK1YJ6O4kpZyalyZHr9SKEZAq kZi2/5v9Rb0qq1Yv6AW4zjuAdz6ZzypFzB+vaAPe3JncWN3kjOLn6ffyXjbKlMgs e523sYdvZ5ROJcGY6m6UkwmyEORujr+Eby39GAbwJ7TJgy5OP2P3cq0LC4UwgdIU EJzf9dCsER6vXoh735MJOYocRNlXCtk9/QwuPOubEF5HOj+sp5TJ+tzIyyKOYLBh +4AJVCwAvw4ek/HRxHbLOKr0FYU6ezGjhsiR3J8E8F510rnhFTwP9dMJw9LUBIXp OC+n0BZXUbc9qhPcUpr8WjaI -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:01 2025 by rpki-client