$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft File: -7JZNquvAsZtbrsyhSU9KZuXQFk.mft (raw, json) Hash identifier: w0y6omfXSgafQWG2zn7V9hM4BR+z3GDyxZuBSB0e4eI= Subject key identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD Authority key identifier: FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 Certificate issuer: /CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Certificate serial: 4D6A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft Manifest number: 4D6A Signing time: Mon 20 Oct 2025 03:08:07 +0000 Manifest this update: Mon 20 Oct 2025 03:08:07 +0000 Manifest next update: Mon 20 Oct 2025 09:08:07 +0000 Files and hashes: 1: -7JZNquvAsZtbrsyhSU9KZuXQFk.crl (hash: 8ORdgScAk+5YeBvOZWzqvlMcsB0PyCZgL6TbWvr4eu8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19818 (0x4d6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBB25936ABAF02C66D6EBB3285253D299B974059 Validity Not Before: Oct 20 03:08:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B468794992F37BADE13F31D88901F83D053D70FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:3e:c7:56:4d:10:09:46:e5:3d:42:bb:6e: 0c:b6:4c:30:39:58:09:b5:98:14:4b:c0:cb:f4:f7: 19:b1:d9:ac:34:d9:20:61:68:2b:d4:67:bd:ca:56: 00:6a:57:c0:76:7b:7b:62:ea:17:fa:8d:c8:79:25: a4:94:58:fc:cd:a4:91:c2:f3:fd:f5:19:43:cc:fb: 01:80:84:46:64:75:1d:ce:ff:c7:f6:d6:4a:0a:fa: 52:02:52:14:b7:b1:bb:52:08:93:5a:52:11:ef:fc: 43:42:62:07:e4:83:fd:35:a5:36:6f:5b:7b:32:24: 5b:72:2e:20:3b:a6:88:b6:3e:5f:b1:2c:5b:ae:35: 27:cc:b7:d3:64:74:9f:ca:08:7f:41:e4:40:d4:4e: be:83:02:b7:96:7a:b4:fc:35:14:a0:da:bc:41:ec: 6a:d9:59:34:81:f8:fc:b0:1a:e3:b7:28:de:9f:65: fa:1e:96:16:19:1f:e6:2b:b7:73:68:e2:ae:a7:19: ba:32:32:57:ec:a5:4e:bc:8d:ea:d1:1a:13:b0:fd: d0:06:04:70:4d:50:75:3c:6f:be:81:d4:ed:6e:90: 50:93:4d:9c:7b:ae:55:d2:4b:fc:2b:2c:c7:f9:ac: 8c:b7:14:4b:be:0f:91:79:4d:c8:24:f5:42:c0:e1: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:68:79:49:92:F3:7B:AD:E1:3F:31:D8:89:01:F8:3D:05:3D:70:FD X509v3 Authority Key Identifier: keyid:FB:B2:59:36:AB:AF:02:C6:6D:6E:BB:32:85:25:3D:29:9B:97:40:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-7JZNquvAsZtbrsyhSU9KZuXQFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/-7JZNquvAsZtbrsyhSU9KZuXQFk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:31:72:31:1a:e4:66:ea:86:20:40:84:56:6a:1e:76:c3:7a: 1a:f3:d9:53:00:a5:20:86:d6:ab:be:90:2a:66:f4:89:e5:b8: cf:1e:a0:50:ca:99:ef:f0:32:a1:e9:8d:f6:7c:d7:cf:6a:7e: 4d:b4:62:44:8f:1d:f7:7b:93:5a:2e:13:9d:cd:13:ee:76:0d: 79:5e:f1:b8:2d:97:24:64:53:1f:e7:a1:eb:21:5f:66:5f:cb: 55:8f:4a:33:59:b6:d4:8a:dd:01:f2:ee:62:ff:df:5a:57:4d: c7:2e:2e:f3:20:87:1b:5b:3e:82:24:41:d8:7e:6d:60:36:ff: fe:79:63:28:60:47:8b:eb:39:7a:5f:0e:da:0f:fa:30:9e:3c: cf:13:43:13:1d:ea:4f:fd:da:c9:e2:7a:0c:d5:fd:98:e0:40: 32:8f:e1:34:db:63:f6:87:3c:77:08:99:84:65:51:55:d1:8c: 44:71:23:ba:93:51:75:4d:9c:0e:a7:91:a7:19:de:0f:ee:e3: 0e:bf:f4:e7:60:a4:c9:ab:03:9d:dc:c5:fe:fc:2b:e3:e2:f9: 5e:f4:11:bb:f4:e5:87:57:6d:9b:90:cd:4b:7d:91:35:ba:f7: 5a:7e:8a:30:08:23:3a:ef:c0:84:8c:64:ab:4e:33:ed:55:9e: cb:a5:a0:98 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICTWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJC MjU5MzZBQkFGMDJDNjZENkVCQjMyODUyNTNEMjk5Qjk3NDA1OTAeFw0yNTEwMjAw MzA4MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEI0Njg3OTQ5OTJGMzdC QURFMTNGMzFEODg5MDFGODNEMDUzRDcwRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCBD7HVk0QCUblPUK7bgy2TDA5WAm1mBRLwMv09xmx2aw02SBh aCvUZ73KVgBqV8B2e3ti6hf6jch5JaSUWPzNpJHC8/31GUPM+wGAhEZkdR3O/8f2 1koK+lICUhS3sbtSCJNaUhHv/ENCYgfkg/01pTZvW3syJFtyLiA7poi2Pl+xLFuu NSfMt9NkdJ/KCH9B5EDUTr6DAreWerT8NRSg2rxB7GrZWTSB+PywGuO3KN6fZfoe lhYZH+Yrt3No4q6nGboyMlfspU68jerRGhOw/dAGBHBNUHU8b76B1O1ukFCTTZx7 rlXSS/wrLMf5rIy3FEu+D5F5Tcgk9ULA4XtvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUtGh5SZLze63hPzHYiQH4PQU9cP0wHwYDVR0jBBgwFoAU+7JZNquvAsZtbrsy hSU9KZuXQFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx MC8tN0paTnF1dkFzWnRicnN5aFNVOUtadVhRRmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy03SlpOcXV2QXNadGJyc3loU1U5S1p1WFFGay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTAvLTdKWk5xdXZBc1p0 YnJzeWhTVTlLWnVYUUZrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI4xcjEa5GbqhiBAhFZqHnbDehrz2VMApSCG1qu+kCpm9InluM8eoFDKme/w MqHpjfZ8189qfk20YkSPHfd7k1ouE53NE+52DXle8bgtlyRkUx/noeshX2Zfy1WP SjNZttSK3QHy7mL/31pXTccuLvMghxtbPoIkQdh+bWA2//55YyhgR4vrOXpfDtoP +jCePM8TQxMd6k/92sniegzV/ZjgQDKP4TTbY/aHPHcImYRlUVXRjERxI7qTUXVN nA6nkacZ3g/u4w6/9OdgpMmrA53cxf78K+Pi+V70Ebv05YdXbZuQzUt9kTW691p+ ijAIIzrvwISMZKtOM+1VnsuloJg= -----END CERTIFICATE-----Generated at Mon Oct 20 05:49:39 2025 by rpki-client