$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft File: TS1a-PNilt7eZELYEcBKdAhswCk.mft (raw, json) Hash identifier: pGap3ke2baddNFacioj4/5+FOJ+RaefkLgIk89la9mQ= Subject key identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 Authority key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 Certificate issuer: /CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Certificate serial: 1FFD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft Manifest number: 1FFD Signing time: Mon 20 Oct 2025 07:38:03 +0000 Manifest this update: Mon 20 Oct 2025 07:38:03 +0000 Manifest next update: Mon 20 Oct 2025 13:38:03 +0000 Files and hashes: 1: TS1a-PNilt7eZELYEcBKdAhswCk.crl (hash: TM/ikN0nSjI3zWHzTpnRGBKg9y3FF59HqEqBZPf9AQc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8189 (0x1ffd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029 Validity Not Before: Oct 20 07:38:03 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FB05EB7D2AA945F23FDF3EE47C8BEE704F06A134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:4f:7d:fc:28:2d:d7:cd:f1:6e:6e:4e:d9: d7:54:74:5a:df:76:cd:82:70:0b:4d:ee:b7:b7:8a: 50:8a:b1:fd:c2:a7:0e:ac:0d:35:a3:59:47:52:b8: da:5c:4c:59:79:1d:ae:1f:06:ce:31:bb:67:03:b6: 18:7e:e6:6f:b9:2d:27:2b:59:a3:bd:d1:b7:7a:f2: c5:8f:5a:14:3c:c4:51:a6:7f:4b:42:fb:76:88:0d: 7f:f8:2d:36:29:1b:73:31:02:b2:f6:2f:84:c0:17: 67:5c:9e:b7:db:48:f1:e1:f9:1d:53:15:38:19:5e: 9e:3b:65:09:3d:2d:2b:14:9e:e9:44:ee:5c:fb:4c: 6d:31:68:42:0f:12:1f:f5:d2:50:57:ee:dc:a3:77: c4:e0:1c:65:0a:c3:fc:6d:98:0f:25:b7:51:c6:88: 34:3f:65:e9:e9:5b:8d:6e:64:75:b1:50:74:51:59: e7:21:fe:84:62:ef:e2:e4:8f:95:08:7e:7e:2f:b3: b7:d6:09:18:c8:aa:3b:86:c9:89:66:76:c6:c6:07: 8e:d9:19:9f:90:61:8e:3d:27:fb:d9:bc:21:3b:7e: f5:25:c9:e2:00:6e:22:09:21:da:1e:b3:8d:cd:73: 4c:a5:38:1f:4d:7e:47:0f:6d:cc:38:75:61:6a:b8: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34 X509v3 Authority Key Identifier: keyid:4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:1e:bd:ac:43:ef:38:38:28:2a:e2:21:0a:40:ec:d0:b2:25: 50:50:e4:b7:72:1e:5f:8a:4d:84:41:fa:02:d0:df:8a:1b:75: e8:ea:db:4b:30:f5:a8:44:81:c0:ff:fa:72:14:f1:41:d8:61: dc:3a:7b:79:b0:0b:29:70:55:b4:1c:e5:d4:bf:33:41:f1:e1: 77:6d:82:af:e2:93:5d:79:26:bc:bf:86:0f:0f:c4:86:b7:6d: 97:70:ea:75:b3:60:08:d3:81:03:b1:9c:f3:43:41:32:75:14: 92:4d:ec:db:00:1c:0e:12:32:79:84:d1:5f:27:2c:c4:b2:a3: 4d:56:f5:4c:a3:e6:ec:cb:f6:78:0b:78:c1:21:b4:2d:51:21: b9:51:4c:35:67:6d:7c:46:7f:93:04:bf:4f:ef:cc:a8:42:f6: a0:75:3a:13:a4:12:99:e5:65:70:cc:2e:b9:96:0b:86:5d:07: 7c:2b:6c:94:62:a0:17:83:b9:fd:43:67:65:b2:be:75:0c:4e: 88:39:6c:a5:1c:42:4b:5e:30:23:56:2a:3b:47:4c:2d:0c:fb: e5:c4:9c:dd:e4:91:63:2d:25:98:2f:5c:b1:9f:5f:d3:48:b0: 57:71:b8:ff:9b:b5:d0:bf:c0:de:ff:da:28:5f:30:94:7c:39: d7:a1:7d:b6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICH/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEQy RDVBRjhGMzYyOTZERURFNjQ0MkQ4MTFDMDRBNzQwODZDQzAyOTAeFw0yNTEwMjAw NzM4MDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZCMDVFQjdEMkFBOTQ1 RjIzRkRGM0VFNDdDOEJFRTcwNEYwNkExMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLMk99/Cgt183xbm5O2ddUdFrfds2CcAtN7re3ilCKsf3Cpw6s DTWjWUdSuNpcTFl5Ha4fBs4xu2cDthh+5m+5LScrWaO90bd68sWPWhQ8xFGmf0tC +3aIDX/4LTYpG3MxArL2L4TAF2dcnrfbSPHh+R1TFTgZXp47ZQk9LSsUnulE7lz7 TG0xaEIPEh/10lBX7tyjd8TgHGUKw/xtmA8lt1HGiDQ/ZenpW41uZHWxUHRRWech /oRi7+Lkj5UIfn4vs7fWCRjIqjuGyYlmdsbGB47ZGZ+QYY49J/vZvCE7fvUlyeIA biIJIdoes43Nc0ylOB9NfkcPbcw4dWFquOJtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU+wXrfSqpRfI/3z7kfIvucE8GoTQwHwYDVR0jBBgwFoAUTS1a+PNilt7eZELY EcBKdAhswCkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc5 MC9UUzFhLVBOaWx0N2VaRUxZRWNCS2RBaHN3Q2suY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RTMWEtUE5pbHQ3ZVpFTFlFY0JLZEFoc3dDay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3OTAvVFMxYS1QTmlsdDdl WkVMWUVjQktkQWhzd0NrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADIevaxD7zg4KCriIQpA7NCyJVBQ5LdyHl+KTYRB+gLQ34obdejq20sw9ahE gcD/+nIU8UHYYdw6e3mwCylwVbQc5dS/M0Hx4Xdtgq/ik115Jry/hg8PxIa3bZdw 6nWzYAjTgQOxnPNDQTJ1FJJN7NsAHA4SMnmE0V8nLMSyo01W9Uyj5uzL9ngLeMEh tC1RIblRTDVnbXxGf5MEv0/vzKhC9qB1OhOkEpnlZXDMLrmWC4ZdB3wrbJRioBeD uf1DZ2WyvnUMTog5bKUcQkteMCNWKjtHTC0M++XEnN3kkWMtJZgvXLGfX9NIsFdx uP+btdC/wN7/2ihfMJR8OdehfbY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:34 2025 by rpki-client