$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft File: ze9xEd6YvXVtkrNNOU2i057_m44.mft (raw, json) Hash identifier: BRTXZQMFVR3Swtc8EF7Raa/Siat/HCpHxlKbxhvDXII= Subject key identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 180D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft Manifest number: 17FD Signing time: Mon 20 Oct 2025 17:04:50 +0000 Manifest this update: Mon 20 Oct 2025 17:04:50 +0000 Manifest next update: Mon 20 Oct 2025 23:04:50 +0000 Files and hashes: 1: a-N6LzTA8FO-fdztzjUKxevidmk.roa (hash: /exAOixFzZwvK2SfZlbvbK7wI3FVov3/4HPzh5o2WJg=) 2: hpDRfZfLbmty0CpK9okCo-erNLg.roa (hash: A3GQyRKjDPG/OkNmlsS/2/RH9HbpUXi8SqknTsbjBX8=) 3: y5Q6HA5D5GRz6BmwK7FhJJIsJ5Q.roa (hash: Y+vesANaLlontYNQRMtnp1uxSgTzZMGCOsbIQKg1hEU=) 4: ze9xEd6YvXVtkrNNOU2i057_m44.crl (hash: 3a0c3EzX3MhYd95L0Ggy8ryEJr4FoE/ImhdrfNWGqWA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6157 (0x180d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Oct 20 17:04:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2A30BAAC6C80DCB960834B58D4E4945741F7D779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:c1:50:fb:62:2c:ae:7e:1f:1f:c5:69:be: 9f:6e:8b:51:05:a6:a8:80:48:d4:d9:8e:00:d2:b9: c3:8a:5e:7a:e9:d5:66:b5:e8:f9:4f:88:d2:09:34: a6:fa:6a:36:b9:3a:41:f4:b4:fd:81:c1:2b:51:b5: 06:3d:b0:07:02:df:6a:5e:f8:d3:91:23:6c:e1:40: 22:53:de:88:d2:52:76:1e:ef:fd:57:ef:55:9d:75: b9:25:43:38:cc:48:4b:73:69:11:37:9f:51:4f:92: 91:1c:a6:85:f0:56:8a:62:87:1b:0c:13:00:37:44: 5f:62:62:d2:3f:83:27:1d:85:1a:d6:d2:5d:9b:fd: f8:f3:14:83:47:27:32:da:2c:a7:2b:de:6b:ec:d9: 4f:e2:ec:2f:3e:e3:2a:37:24:32:af:90:8a:2c:5b: 5f:e5:8e:07:17:da:30:68:b0:05:b9:58:48:90:e7: 28:c0:d1:42:c9:96:20:37:c4:d1:49:bb:a5:0d:4b: 34:ae:b9:92:eb:11:db:ef:23:27:8c:48:d4:94:79: e0:58:af:a9:fd:50:8e:d7:81:d3:f6:05:bc:11:81: 6c:f2:7b:34:9a:d6:7f:da:16:1b:6a:ba:92:b5:c1: 30:3b:aa:f2:e8:c9:7c:fe:7d:de:c7:ec:3c:ef:2f: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e0:ac:c0:7f:de:c0:af:55:3d:a1:d0:9a:aa:5d:b2:4d:77: c0:49:9d:99:64:c4:54:15:49:d3:80:4a:30:22:d2:94:00:4a: ae:cc:7e:49:a7:f1:c0:b9:d6:a9:e8:40:4b:bc:f0:28:b2:d3: 1d:e8:38:56:11:36:c2:70:00:f4:46:be:92:36:6c:e4:24:f9: fd:71:3a:7d:a5:8b:74:8f:b8:3d:df:a6:d9:b8:54:48:5f:cf: c0:5a:7c:26:7e:71:cb:b2:eb:0f:d0:13:3b:e7:4f:9b:b1:f8: db:a0:ca:e4:8b:b9:4c:ea:91:56:41:8b:7c:81:e4:39:02:77: 5d:33:f7:09:a7:4f:dd:2c:c7:9f:70:5a:af:78:e9:e3:ac:4d: 65:25:36:9f:20:5a:c7:ad:fa:35:51:55:3e:f2:fe:f7:d7:93: ee:a0:19:4f:51:9e:86:71:fb:d1:63:ac:57:db:bd:80:3f:09: de:85:ca:ed:e8:b8:7e:01:8d:d7:ea:98:e5:37:bd:29:72:09: d3:85:ee:77:b1:01:0e:b5:cc:76:7f:4a:dd:67:5e:60:c8:c8: 9b:54:78:b3:0a:c7:d5:eb:ed:02:57:81:ee:17:87:a2:63:3e: bd:9e:0b:9e:02:f6:f8:ed:25:eb:b4:3c:9e:73:40:93:9c:44: a5:8a:7f:14 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNTEwMjAx NzA0NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJBMzBCQUFDNkM4MERD Qjk2MDgzNEI1OEQ0RTQ5NDU3NDFGN0Q3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw7MFQ+2Isrn4fH8Vpvp9ui1EFpqiASNTZjgDSucOKXnrp1Wa1 6PlPiNIJNKb6aja5OkH0tP2BwStRtQY9sAcC32pe+NORI2zhQCJT3ojSUnYe7/1X 71WddbklQzjMSEtzaRE3n1FPkpEcpoXwVopihxsMEwA3RF9iYtI/gycdhRrW0l2b /fjzFINHJzLaLKcr3mvs2U/i7C8+4yo3JDKvkIosW1/ljgcX2jBosAW5WEiQ5yjA 0ULJliA3xNFJu6UNSzSuuZLrEdvvIyeMSNSUeeBYr6n9UI7XgdP2BbwRgWzyezSa 1n/aFhtqupK1wTA7qvLoyXz+fd7H7DzvL8iFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKjC6rGyA3Llgg0tY1OSUV0H313kwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvemU5eEVkNll2WFZ0 a3JOTk9VMmkwNTdfbTQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALbgrMB/3sCvVT2h0JqqXbJNd8BJnZlkxFQVSdOASjAi0pQASq7Mfkmn8cC5 1qnoQEu88Ciy0x3oOFYRNsJwAPRGvpI2bOQk+f1xOn2li3SPuD3fptm4VEhfz8Ba fCZ+ccuy6w/QEzvnT5ux+NugyuSLuUzqkVZBi3yB5DkCd10z9wmnT90sx59wWq94 6eOsTWUlNp8gWset+jVRVT7y/vfXk+6gGU9RnoZx+9FjrFfbvYA/Cd6Fyu3ouH4B jdfqmOU3vSlyCdOF7nexAQ61zHZ/St1nXmDIyJtUeLMKx9Xr7QJXge4Xh6JjPr2e C54C9vjtJeu0PJ5zQJOcRKWKfxQ= -----END CERTIFICATE-----Generated at Mon Oct 20 21:45:20 2025 by rpki-client