$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft File: yZxuUM1dFkZVP-VT5x64vu2RUKo.mft (raw, json) Hash identifier: vSZ11hU3KHptI5yXY1TsHXw9/u1erEuZwVoJHYdqOAo= Subject key identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D Authority key identifier: C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA Certificate issuer: /CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Certificate serial: 20F6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft Manifest number: 20F6 Signing time: Mon 20 Oct 2025 22:06:05 +0000 Manifest this update: Mon 20 Oct 2025 22:06:05 +0000 Manifest next update: Tue 21 Oct 2025 04:06:05 +0000 Files and hashes: 1: yZxuUM1dFkZVP-VT5x64vu2RUKo.crl (hash: 8WKZtVoZOKZgkRjZKWwyyd22GpxU4t+YWSL3vrIZOoY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8438 (0x20f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Validity Not Before: Oct 20 22:06:05 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=677201A6628230D0D633B6E41AA4EA04F127C18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:c7:7c:50:81:f4:7e:df:0b:fd:f4:0e:76: 24:1c:17:31:c1:3b:df:fe:96:84:35:f6:a5:1d:83: b6:df:67:63:94:53:eb:e3:1d:3b:a7:24:4b:c3:df: 09:fe:24:f4:f1:9e:27:7c:36:75:2b:ed:54:62:e9: 66:e3:14:7b:db:a7:d9:9e:1d:27:06:b7:9b:c7:84: e7:95:6c:78:68:d8:e9:ce:51:41:52:79:f2:1c:f1: 72:90:57:2b:05:a5:99:3a:ed:a9:e1:bb:3e:9b:f9: ff:da:34:39:a5:d2:56:fb:64:14:74:3f:86:cf:97: 7e:fb:89:38:af:f7:98:55:e1:d5:e3:61:5b:78:7e: 70:0f:9c:81:3b:37:fd:5e:db:9e:5f:e3:e8:0b:8f: 88:0b:d8:b4:fb:4e:22:96:cd:e2:d3:9a:7d:bd:8b: 8c:83:d7:e4:c3:7d:0a:e0:09:e8:fa:18:e0:db:f3: 8f:64:4b:21:e9:fa:57:88:21:82:de:6d:77:0f:fb: cb:69:12:d8:bf:87:7b:02:fc:77:b5:7a:ec:d0:93: c6:01:00:a6:a7:5a:bd:7d:fa:e4:ec:32:b7:47:e6: c0:42:f3:ef:df:84:9d:d0:1d:54:ff:51:9a:8e:d5: 5c:0d:f8:d7:11:b3:c2:16:a5:27:0d:01:3e:d2:c1: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D X509v3 Authority Key Identifier: keyid:C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9d:0f:8e:02:c8:c1:2e:f7:d2:cb:d6:58:5a:09:9a:d5:8e: 1c:c4:9e:6c:07:e9:a5:2f:fc:ed:ce:78:a5:9d:62:25:dc:bb: 39:34:23:a8:8a:67:62:ed:46:de:55:fd:20:24:4b:0d:3a:f9: 08:7e:0b:be:3f:18:e6:8d:41:f5:f2:11:24:8b:46:1a:d1:54: 80:7d:03:a4:f6:45:bf:cc:14:2d:b9:35:4e:ee:ef:3e:db:37: 60:8a:94:b6:6e:89:76:83:18:5b:c7:07:2c:e5:5e:07:2d:5c: c1:3e:7f:cc:2a:2b:26:a7:88:83:a5:7b:15:fe:19:ed:e4:8f: 9c:05:81:67:68:ad:47:96:2f:29:49:28:60:f6:98:cb:e5:96: ad:73:12:ef:04:b3:67:d0:3a:04:b6:8a:f3:d9:6d:1c:2e:d6: b6:21:33:45:fe:cc:b9:08:a7:c5:a1:9c:4e:80:16:eb:39:53: f3:ca:72:2e:c8:8f:ca:91:cc:3c:ef:e0:63:2b:17:96:57:7b: 04:0f:8d:a4:9d:13:1c:31:2d:2c:20:6d:6b:a4:9e:97:96:d7: 67:6e:92:2c:9a:2d:8f:06:d0:c8:72:61:03:ed:c9:51:fe:e0: 51:c6:bb:55:77:ff:11:a4:6d:8b:76:c2:01:92:52:b7:86:20: 25:bd:06:2c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk5 QzZFNTBDRDVEMTY0NjU1M0ZFNTUzRTcxRUI4QkVFRDkxNTBBQTAeFw0yNTEwMjAy MjA2MDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY3NzIwMUE2NjI4MjMw RDBENjMzQjZFNDFBQTRFQTA0RjEyN0MxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXiMd8UIH0ft8L/fQOdiQcFzHBO9/+loQ19qUdg7bfZ2OUU+vj HTunJEvD3wn+JPTxnid8NnUr7VRi6WbjFHvbp9meHScGt5vHhOeVbHho2OnOUUFS efIc8XKQVysFpZk67anhuz6b+f/aNDml0lb7ZBR0P4bPl377iTiv95hV4dXjYVt4 fnAPnIE7N/1e255f4+gLj4gL2LT7TiKWzeLTmn29i4yD1+TDfQrgCej6GODb849k SyHp+leIIYLebXcP+8tpEti/h3sC/He1euzQk8YBAKanWr19+uTsMrdH5sBC8+/f hJ3QHVT/UZqO1VwN+NcRs8IWpScNAT7Swco5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ3IBpmKCMNDWM7bkGqTqBPEnwY0wHwYDVR0jBBgwFoAUyZxuUM1dFkZVP+VT 5x64vu2RUKowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy MC95Wnh1VU0xZEZrWlZQLVZUNXg2NHZ1MlJVS28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3laeHVVTTFkRmtaVlAtVlQ1eDY0dnUyUlVLby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjAveVp4dVVNMWRGa1pW UC1WVDV4NjR2dTJSVUtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJqdD44CyMEu99LL1lhaCZrVjhzEnmwH6aUv/O3OeKWdYiXcuzk0I6iKZ2Lt Rt5V/SAkSw06+Qh+C74/GOaNQfXyESSLRhrRVIB9A6T2Rb/MFC25NU7u7z7bN2CK lLZuiXaDGFvHByzlXgctXME+f8wqKyaniIOlexX+Ge3kj5wFgWdorUeWLylJKGD2 mMvllq1zEu8Es2fQOgS2ivPZbRwu1rYhM0X+zLkIp8WhnE6AFus5U/PKci7Ij8qR zDzv4GMrF5ZXewQPjaSdExwxLSwgbWuknpeW12dukiyaLY8G0MhyYQPtyVH+4FHG u1V3/xGkbYt2wgGSUreGICW9Biw= -----END CERTIFICATE-----Generated at Tue Oct 21 02:54:31 2025 by rpki-client