$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft File: zfv2KGSEFu4dmdMuX5yWhae-K7w.mft (raw, json) Hash identifier: SlqKRSVADGSftrhamVUiakZl1r0G5URc4vDXI9eOaVc= Subject key identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B Authority key identifier: CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC Certificate issuer: /CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Certificate serial: 204F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft Manifest number: 204F Signing time: Mon 20 Oct 2025 22:07:52 +0000 Manifest this update: Mon 20 Oct 2025 22:07:52 +0000 Manifest next update: Tue 21 Oct 2025 04:07:52 +0000 Files and hashes: 1: zfv2KGSEFu4dmdMuX5yWhae-K7w.crl (hash: vgvENr8J44RmKmAc51adpRToFp8iZFWt8+VTAUbvbVI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8271 (0x204f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC Validity Not Before: Oct 20 22:07:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3C66EB21CE741247CB2A9320E25E8CEF324D467B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:49:8e:33:ee:b4:d8:a8:76:b4:9d:5b:cc:42: 2f:9f:47:62:a7:e1:8e:d7:07:e1:e0:5d:02:81:a9: d0:22:bd:24:a3:6e:9b:de:62:be:2a:40:6e:38:19: d3:66:28:57:3b:99:53:71:f2:5c:d4:ea:c3:bd:6c: 63:37:85:6b:ef:18:36:68:30:95:90:1a:8b:ee:0e: 89:8c:5e:43:ee:c6:df:15:16:3c:34:7e:46:5f:06: ec:d9:86:c9:7c:a8:28:9c:34:56:48:c9:b3:e5:a2: 6c:90:33:29:c8:8c:e9:57:34:c6:f6:45:37:f6:71: 00:2f:1b:b8:9e:8b:f3:92:5f:88:93:ed:a9:3d:ef: 3b:61:74:ad:7b:bf:e7:3e:27:63:a2:88:49:0a:a3: 1f:63:11:40:d4:86:24:0f:5a:73:f0:17:3d:33:25: 61:42:8f:5f:6e:85:46:f6:90:98:fd:ae:43:2b:02: e5:09:fd:c9:44:df:58:94:36:c2:a7:05:a9:60:18: 20:49:44:c6:b4:5a:20:a1:24:05:fa:5a:7e:e4:47: fe:e9:51:73:9b:c1:59:2e:be:3e:9a:84:64:52:8f: c3:c7:31:32:1f:f0:53:4d:4e:9c:81:0a:f0:13:99: d8:61:bf:3b:c8:1d:59:92:30:46:36:2a:ab:87:d8: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B X509v3 Authority Key Identifier: keyid:CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:58:c1:b3:2c:21:7e:fc:d5:6d:be:c4:d5:42:88:e8:04:02: 81:a0:b6:90:a1:ab:f1:a5:f3:60:7f:97:01:32:1d:b9:c6:74: 8d:6f:4b:62:ea:d9:b3:99:3b:e5:fa:7c:e2:1a:53:22:74:bc: 8a:68:82:98:78:84:33:2c:3e:01:bf:df:5a:40:9d:92:22:c1: f7:e3:29:3a:e9:65:5e:a5:2c:6c:35:0e:ac:4c:61:8d:ca:c6: 4a:6c:00:5b:60:55:d5:86:c7:2e:df:45:b2:1e:02:ad:77:1d: a9:43:f2:40:9e:63:cb:cb:3c:a0:d6:2c:99:83:60:25:75:73: 34:14:02:14:81:7f:24:e8:80:b5:ce:fc:f3:2e:bf:28:a5:c1: bc:43:63:f1:7a:53:75:fb:04:c4:c5:fa:2d:63:6c:8b:42:96: 1b:c7:1f:51:32:85:fa:00:00:e9:65:ec:38:fc:a1:8a:fa:32: 28:f9:a6:d8:93:10:0e:b6:02:4d:eb:31:86:d0:81:0a:c7:44: 8b:86:90:6b:3d:5b:11:7a:ed:ef:51:ad:b2:ac:83:c3:7e:1e: cb:76:1a:4b:70:d7:c6:09:92:c7:03:1a:66:ad:0c:05:35:e4: bf:61:f3:b4:28:71:66:3a:ae:6e:43:c7:68:06:3f:54:87:b9: cc:3e:b9:22 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIE8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RG QkY2Mjg2NDg0MTZFRTFEOTlEMzJFNUY5Qzk2ODVBN0JFMkJCQzAeFw0yNTEwMjAy MjA3NTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNDNjZFQjIxQ0U3NDEy NDdDQjJBOTMyMEUyNUU4Q0VGMzI0RDQ2N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtSY4z7rTYqHa0nVvMQi+fR2Kn4Y7XB+HgXQKBqdAivSSjbpve Yr4qQG44GdNmKFc7mVNx8lzU6sO9bGM3hWvvGDZoMJWQGovuDomMXkPuxt8VFjw0 fkZfBuzZhsl8qCicNFZIybPlomyQMynIjOlXNMb2RTf2cQAvG7iei/OSX4iT7ak9 7zthdK17v+c+J2OiiEkKox9jEUDUhiQPWnPwFz0zJWFCj19uhUb2kJj9rkMrAuUJ /clE31iUNsKnBalgGCBJRMa0WiChJAX6Wn7kR/7pUXObwVkuvj6ahGRSj8PHMTIf 8FNNTpyBCvATmdhhvzvIHVmSMEY2KquH2AjHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPGbrIc50EkfLKpMg4l6M7zJNRnswHwYDVR0jBBgwFoAUzfv2KGSEFu4dmdMu X5yWhae+K7wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy My96ZnYyS0dTRUZ1NGRtZE11WDV5V2hhZS1LN3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pmdjJLR1NFRnU0ZG1kTXVYNXlXaGFlLUs3dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjMvemZ2MktHU0VGdTRk bWRNdVg1eVdoYWUtSzd3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJlYwbMsIX781W2+xNVCiOgEAoGgtpChq/Gl82B/lwEyHbnGdI1vS2Lq2bOZ O+X6fOIaUyJ0vIpogph4hDMsPgG/31pAnZIiwffjKTrpZV6lLGw1DqxMYY3Kxkps AFtgVdWGxy7fRbIeAq13HalD8kCeY8vLPKDWLJmDYCV1czQUAhSBfyTogLXO/PMu vyilwbxDY/F6U3X7BMTF+i1jbItClhvHH1EyhfoAAOll7Dj8oYr6Mij5ptiTEA62 Ak3rMYbQgQrHRIuGkGs9WxF67e9RrbKsg8N+Hst2Gktw18YJkscDGmatDAU15L9h 87QocWY6rm5Dx2gGP1SHucw+uSI= -----END CERTIFICATE-----Generated at Tue Oct 21 02:24:57 2025 by rpki-client