$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft File: qZvZ5t79lpSrRdfzLK3QHlKz348.mft (raw, json) Hash identifier: MtpkVqfO2WK8SciJEut9jhwEFBoEE9zjHE2haM2CwU0= Subject key identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E Authority key identifier: A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F Certificate issuer: /CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Certificate serial: 17EE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft Manifest number: 17EE Signing time: Mon 20 Oct 2025 17:05:54 +0000 Manifest this update: Mon 20 Oct 2025 17:05:54 +0000 Manifest next update: Mon 20 Oct 2025 23:05:54 +0000 Files and hashes: 1: qZvZ5t79lpSrRdfzLK3QHlKz348.crl (hash: t2Cwso3bN18QeVYQBQ6Ee2vcNa6LOUPFyKGVLqC5gYk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6126 (0x17ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F Validity Not Before: Oct 20 17:05:54 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=DFD9F4D304399082BFD1C594FA44EA136887D66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:03:4e:2f:18:7b:b5:99:63:b9:d6:7b:b9: 0f:ed:ca:84:fc:26:50:4d:44:00:df:38:d0:64:3c: 3c:6e:ed:ee:d2:98:c1:32:c7:1b:0b:ed:ff:33:c3: db:86:a9:fd:8f:3e:bc:e5:fb:40:06:e5:e0:15:fa: a7:b9:21:f5:86:4c:be:84:09:88:b5:11:61:1f:cd: 3f:b5:e2:8c:22:7b:25:e7:dc:ce:80:96:df:69:c1: 84:88:7d:c6:67:a2:09:51:7a:a2:0d:6b:62:02:fa: 0a:b7:aa:63:47:d9:01:c3:02:b5:d4:9d:de:d0:77: 18:d4:36:5f:3d:4a:12:38:11:27:13:37:03:31:8c: d5:05:c5:1e:33:64:65:4e:df:4a:9b:71:47:4a:27: 76:a7:fa:b5:75:60:16:6e:8f:ef:af:05:8f:34:37: d1:80:7b:71:63:23:48:d3:87:05:50:3e:da:de:07: 60:d8:02:2c:66:38:81:aa:be:c6:10:b5:7d:65:4b: 66:9a:3b:5a:99:0c:02:d4:31:46:03:1c:78:c2:22: ca:ab:27:49:cf:91:26:90:78:b4:e9:55:e7:3e:97: 44:03:44:9e:69:05:1d:a7:06:27:b3:6d:0f:db:e0: 33:db:28:78:69:60:0b:60:9e:49:af:ee:a7:9e:af: bc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D9:F4:D3:04:39:90:82:BF:D1:C5:94:FA:44:EA:13:68:87:D6:6E X509v3 Authority Key Identifier: keyid:A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a8:ae:1f:51:c5:45:56:2b:ea:bc:14:7f:8c:3f:1c:7b:86: 8a:0b:22:75:51:1d:70:36:cc:89:3c:d4:ed:92:4c:04:65:c5: 4d:a6:06:ec:e5:62:72:1b:79:13:fa:e5:00:1c:bb:19:95:de: b4:b4:26:0a:9e:c7:94:b3:51:cd:be:c5:56:89:19:83:08:24: 3b:c2:98:2b:28:72:cd:1f:e8:2e:10:23:62:4b:0a:05:fd:a7: df:b0:24:e0:e6:c2:a2:84:88:30:a3:dd:2e:da:0e:b3:36:c8: 7f:b6:a4:af:34:6b:47:bf:af:17:34:38:8e:76:50:04:2c:8d: 58:ae:b6:29:1f:45:fc:12:56:d5:54:57:92:65:f2:63:19:95: f3:5e:cd:00:7c:45:be:09:5f:6c:f5:04:b9:32:dd:24:9d:e3: bd:97:63:07:2f:d6:a1:cd:7e:c1:b9:eb:19:6b:82:78:65:45: ac:9f:26:49:fc:06:9a:7c:7d:6a:d3:73:69:e8:be:ce:25:34: 64:4c:e0:a1:82:38:16:88:a9:49:e4:f3:9c:5e:55:9d:39:08: 73:83:bf:d7:b3:10:3b:f6:dc:ef:2b:1f:a9:7f:21:ee:95:bb: 16:a6:5e:5f:40:60:e1:bc:d2:0e:db:56:87:19:e0:89:93:97: c9:de:86:cd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICF+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTk5 QkQ5RTZERUZEOTY5NEFCNDVEN0YzMkNBREQwMUU1MkIzREY4RjAeFw0yNTEwMjAx NzA1NTRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKERGRDlGNEQzMDQzOTkw ODJCRkQxQzU5NEZBNDRFQTEzNjg4N0Q2NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDalANOLxh7tZljudZ7uQ/tyoT8JlBNRADfONBkPDxu7e7SmMEy xxsL7f8zw9uGqf2PPrzl+0AG5eAV+qe5IfWGTL6ECYi1EWEfzT+14owieyXn3M6A lt9pwYSIfcZnoglReqINa2IC+gq3qmNH2QHDArXUnd7QdxjUNl89ShI4EScTNwMx jNUFxR4zZGVO30qbcUdKJ3an+rV1YBZuj++vBY80N9GAe3FjI0jThwVQPtreB2DY AixmOIGqvsYQtX1lS2aaO1qZDALUMUYDHHjCIsqrJ0nPkSaQeLTpVec+l0QDRJ5p BR2nBiezbQ/b4DPbKHhpYAtgnkmv7qeer7xpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU39n00wQ5kIK/0cWU+kTqE2iH1m4wHwYDVR0jBBgwFoAUqZvZ5t79lpSrRdfz LK3QHlKz348wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM2 My9xWnZaNXQ3OWxwU3JSZGZ6TEszUUhsS3ozNDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Fadlo1dDc5bHBTclJkZnpMSzNRSGxLejM0OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzNjMvcVp2WjV0NzlscFNy UmRmekxLM1FIbEt6MzQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMKorh9RxUVWK+q8FH+MPxx7hooLInVRHXA2zIk81O2STARlxU2mBuzlYnIb eRP65QAcuxmV3rS0Jgqex5SzUc2+xVaJGYMIJDvCmCsocs0f6C4QI2JLCgX9p9+w JODmwqKEiDCj3S7aDrM2yH+2pK80a0e/rxc0OI52UAQsjViutikfRfwSVtVUV5Jl 8mMZlfNezQB8Rb4JX2z1BLky3SSd472XYwcv1qHNfsG56xlrgnhlRayfJkn8Bpp8 fWrTc2novs4lNGRM4KGCOBaIqUnk85xeVZ05CHODv9ezEDv23O8rH6l/Ie6Vuxam Xl9AYOG80g7bVocZ4ImTl8nehs0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:06 2025 by rpki-client