$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft File: TKBmowwWxZe0k6YQetAWDYvQCSY.mft (raw, json) Hash identifier: uUm2SdLzpjmm0a6RIZYKRIb42Twe3KksamOhx2fs45w= Subject key identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 Authority key identifier: 4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 Certificate issuer: /CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Certificate serial: F6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft Manifest number: F6 Signing time: Mon 20 Oct 2025 13:34:18 +0000 Manifest this update: Mon 20 Oct 2025 13:34:18 +0000 Manifest next update: Mon 20 Oct 2025 19:34:18 +0000 Files and hashes: 1: TKBmowwWxZe0k6YQetAWDYvQCSY.crl (hash: 1Pg/XWpHYSGlc6BzFuZnlNiRCo72Q/di3etqlAZe+2g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Validity Not Before: Oct 20 13:34:18 2025 GMT Not After : Sep 1 03:37:07 2026 GMT Subject: CN=327CFBC75AEE907367E3332E3278BEC1F7916319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:50:b9:3f:fc:f4:ee:33:bc:2c:32:96:19: 9f:c2:06:bc:7b:41:7b:91:94:f3:63:ec:ca:90:f7: ee:15:85:99:33:89:f5:43:24:de:15:8e:ae:1b:45: 64:4e:2c:e3:e8:a6:1f:fb:87:1d:b7:b6:b2:bc:aa: c3:7f:37:80:b0:f2:24:36:d9:43:75:1e:74:e9:3a: bf:a6:c3:a1:ec:85:93:81:36:3b:85:0c:b3:3e:87: 96:4f:fb:55:ed:bf:14:af:34:2a:92:46:2b:97:67: e5:98:3f:e2:1d:08:67:da:57:aa:b3:20:7e:3b:c0: 4b:e9:86:c8:d8:64:db:4b:0e:2c:b4:c9:13:c1:d0: 47:29:8f:dc:a4:2e:fd:df:cb:9b:fc:88:70:51:af: 0b:0b:03:57:a8:fe:c7:73:f0:a3:c3:c8:bd:42:1e: 59:c0:1a:b7:87:3b:2a:ee:e1:83:b7:00:32:c2:bd: 2b:de:f4:42:e9:f4:54:37:cf:19:86:79:40:7c:93: 75:8c:b8:c1:65:26:e2:1c:c5:b0:64:61:ea:91:72: 93:a3:f2:53:e3:1d:d1:a2:3d:8e:86:ee:d8:3c:3a: fd:72:a8:5d:0a:53:82:b3:95:06:64:cd:45:b5:3d: ed:af:0d:d3:05:c3:8e:11:fc:90:f6:ac:ff:b2:87: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 X509v3 Authority Key Identifier: keyid:4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1e:d8:4c:a5:f5:5f:62:96:26:4e:f8:0f:16:21:11:ae:11: 55:51:e5:16:a0:2b:ee:d5:15:f1:b2:5f:e3:2f:0b:9e:fe:44: fc:3f:22:6e:31:c7:a3:f7:58:49:d4:a6:65:0f:4e:9a:1c:0a: 71:03:19:61:85:30:f9:56:24:f2:13:9e:8b:82:3f:eb:39:cf: 04:41:3d:29:8d:a4:4a:23:bb:2a:b0:f5:8e:13:4c:e6:5f:ac: a4:6d:cc:1f:e3:0d:df:2c:1f:4e:2b:b8:1f:a6:b5:d0:f6:f1: f2:8e:bd:89:46:12:c0:07:e0:24:90:3a:05:7f:36:65:97:b6: 74:38:7f:8f:06:0f:05:8b:79:0f:72:6d:3f:69:58:96:3a:dd: c8:06:61:b6:50:f1:9d:dd:6f:6c:ce:21:86:1c:89:c5:da:e2: 6a:4d:f1:d5:b0:26:97:8f:c3:65:b8:60:a5:6d:ce:dd:a9:e9: 4f:b3:7f:96:34:78:28:d6:37:09:cb:7e:58:8c:cc:57:cc:80: 61:29:f6:8f:04:ea:29:26:9e:33:43:29:01:29:13:a5:d0:ad: eb:fc:88:c8:c9:ec:02:a1:1f:bd:6e:01:64:ed:b2:43:d3:4b: 19:47:9f:9f:7f:11:77:c9:7e:9e:11:fd:fe:e1:26:e1:b0:c7: d1:f2:49:3e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNENB MDY2QTMwQzE2QzU5N0I0OTNBNjEwN0FEMDE2MEQ4QkQwMDkyNjAeFw0yNTEwMjAx MzM0MThaFw0yNjA5MDEwMzM3MDdaMDMxMTAvBgNVBAMTKDMyN0NGQkM3NUFFRTkw NzM2N0UzMzMyRTMyNzhCRUMxRjc5MTYzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWj1C5P/z07jO8LDKWGZ/CBrx7QXuRlPNj7MqQ9+4VhZkzifVD JN4Vjq4bRWROLOPoph/7hx23trK8qsN/N4Cw8iQ22UN1HnTpOr+mw6HshZOBNjuF DLM+h5ZP+1XtvxSvNCqSRiuXZ+WYP+IdCGfaV6qzIH47wEvphsjYZNtLDiy0yRPB 0Ecpj9ykLv3fy5v8iHBRrwsLA1eo/sdz8KPDyL1CHlnAGreHOyru4YO3ADLCvSve 9ELp9FQ3zxmGeUB8k3WMuMFlJuIcxbBkYeqRcpOj8lPjHdGiPY6G7tg8Ov1yqF0K U4KzlQZkzUW1Pe2vDdMFw44R/JD2rP+yh98/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMnz7x1rukHNn4zMuMni+wfeRYxkwHwYDVR0jBBgwFoAUTKBmowwWxZe0k6YQ etAWDYvQCSYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 OS9US0Jtb3d3V3haZTBrNllRZXRBV0RZdlFDU1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RLQm1vd3dXeFplMGs2WVFldEFXRFl2UUNTWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODkvVEtCbW93d1d4WmUw azZZUWV0QVdEWXZRQ1NZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAIe2Eyl9V9iliZO+A8WIRGuEVVR5RagK+7VFfGyX+MvC57+RPw/Im4xx6P3 WEnUpmUPTpocCnEDGWGFMPlWJPITnouCP+s5zwRBPSmNpEojuyqw9Y4TTOZfrKRt zB/jDd8sH04ruB+mtdD28fKOvYlGEsAH4CSQOgV/NmWXtnQ4f48GDwWLeQ9ybT9p WJY63cgGYbZQ8Z3db2zOIYYcicXa4mpN8dWwJpePw2W4YKVtzt2p6U+zf5Y0eCjW NwnLfliMzFfMgGEp9o8E6ikmnjNDKQEpE6XQrev8iMjJ7AKhH71uAWTtskPTSxlH n59/EXfJfp4R/f7hJuGwx9HyST4= -----END CERTIFICATE-----Generated at Mon Oct 20 16:08:53 2025 by rpki-client