$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft File: qOvq1LE6eRhQyveRTqMND1A2w-c.mft (raw, json) Hash identifier: KVkkMyS2Hi27DF/VchOTFUqP44dDStgpoXCBWNPEJj0= Subject key identifier: 51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF Authority key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 Certificate issuer: /CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Certificate serial: 27 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft Manifest number: 22 Signing time: Mon 20 Oct 2025 13:34:38 +0000 Manifest this update: Mon 20 Oct 2025 13:34:38 +0000 Manifest next update: Mon 20 Oct 2025 19:34:38 +0000 Files and hashes: 1: -MrjC-Wa5eHOs5iz6663lcQmVdk.roa (hash: Cz4/7Zsm1ISGWWnX0XZFGpbGxCLE/5T6NkRhl97/hgg=) 2: 4NLDWWgvrdtoNmlZt6ha5D8LuEs.roa (hash: ifNnF9h072MS6Pwe42EJlNd8XK4udOUQoSw1UcbQjR8=) 3: oN6OAGOV0cdaPZu11iVZrCiBcBI.roa (hash: 3mNZCkp2vcw1/UmFCrK3Wmr5EPSAZSqKxAaz6I4tKuA=) 4: qOvq1LE6eRhQyveRTqMND1A2w-c.crl (hash: FhNj4NmtPAHpZp/xpPOy7jODpoiEI5zdCk3mmoewSiU=) 5: rQKvb1lXH1c4bNEw10BfeeCllHs.roa (hash: 8OQWQtkZaG38Cf7QP4OxXvHEUWrAzh4iUe3Z9rIcvNk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Validity Not Before: Oct 20 13:34:38 2025 GMT Not After : Oct 15 07:34:23 2026 GMT Subject: CN=5185FA67711A05EB5671FC1222CA12C680FF24BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:14:6f:77:34:72:f7:14:4c:75:ac:52:29:94: 56:4a:f5:d0:ea:5c:af:84:1b:b8:39:e2:6e:ab:b9: 37:2b:be:05:8a:91:29:a2:d7:53:da:45:08:a2:8e: 7b:d8:db:b5:67:c7:e0:fb:0f:f8:8f:c9:bc:ad:80: a2:92:0b:f7:eb:d0:03:77:85:3e:45:03:94:b2:14: c5:c2:10:a6:59:a2:a7:1d:c3:2e:03:03:9b:e2:d6: 50:f1:45:9f:aa:b8:51:5f:cc:47:fc:26:59:41:2b: 84:7c:e0:19:76:03:69:d5:75:eb:4c:44:97:91:3e: c2:c2:02:b4:30:8a:3a:aa:fb:fd:d4:e0:40:8a:0a: d3:c4:54:84:f9:29:91:cb:b3:a4:84:35:b3:99:7b: 2e:33:78:d9:d1:86:51:39:e2:86:36:88:21:57:80: 15:49:ef:ec:99:58:b2:4b:af:92:40:e6:58:03:65: 11:bf:70:3d:79:31:96:5b:48:e7:b6:9a:dc:08:6c: 6f:c6:09:ad:d7:5d:b1:a2:86:0b:de:aa:cd:73:1f: 65:88:56:12:f9:f2:42:58:ea:61:9e:57:06:c3:bf: 6d:f1:58:8d:09:44:29:db:44:c2:48:a2:1c:f7:51: 06:2c:6b:b4:c2:15:40:59:d3:31:5c:c8:c6:86:c1: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF X509v3 Authority Key Identifier: keyid:A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c9:54:db:8f:eb:0e:31:dc:bf:36:87:a5:3c:87:6a:53:af: 61:4a:fc:87:1a:8e:0f:bc:6e:8f:37:79:d3:36:30:ce:70:e3: a7:0c:ca:a2:74:c7:11:d2:88:9e:52:3f:f0:d5:f4:93:84:fb: 92:5f:4e:de:d2:37:56:81:d3:d8:2b:a5:73:d8:c0:53:ec:91: 95:f8:b7:22:f4:18:e7:3f:52:ab:81:d1:4d:53:3e:de:15:14: 0a:65:34:e6:c2:2e:93:29:8c:40:af:53:da:cf:39:46:59:c1: aa:b2:43:bd:7e:50:f2:cb:fc:93:1b:8e:ac:d4:1d:58:3d:4d: ef:7a:5e:9f:a6:6d:2b:8b:35:d4:c6:93:c2:34:33:4b:eb:3f: 51:3c:ca:7d:8a:c2:5c:9a:d2:76:b1:3d:80:ce:27:98:d4:d6: 82:4e:3d:40:6c:3e:91:ea:02:d8:60:8c:58:2c:30:0a:4f:64: 9f:0b:77:f1:86:8b:f9:9d:82:34:c4:7c:c0:5f:9d:a2:47:51: 80:d4:76:f7:29:fd:d9:06:a0:b4:fd:3c:af:0c:10:10:0b:ba: 1a:54:eb:64:93:1e:48:3f:41:bc:de:15:a0:35:d7:ce:96:43: 2b:4f:32:06:d6:0a:55:90:a6:0b:22:f8:96:83:14:25:80:a0: 0c:dc:2a:ff -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOEVC RUFENEIxM0E3OTE4NTBDQUY3OTE0RUEzMEQwRjUwMzZDM0U3MB4XDTI1MTAyMDEz MzQzOFoXDTI2MTAxNTA3MzQyM1owMzExMC8GA1UEAxMoNTE4NUZBNjc3MTFBMDVF QjU2NzFGQzEyMjJDQTEyQzY4MEZGMjRCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN8Ub3c0cvcUTHWsUimUVkr10Opcr4QbuDnibqu5Nyu+BYqRKaLX U9pFCKKOe9jbtWfH4PsP+I/JvK2AopIL9+vQA3eFPkUDlLIUxcIQplmipx3DLgMD m+LWUPFFn6q4UV/MR/wmWUErhHzgGXYDadV160xEl5E+wsICtDCKOqr7/dTgQIoK 08RUhPkpkcuzpIQ1s5l7LjN42dGGUTnihjaIIVeAFUnv7JlYskuvkkDmWANlEb9w PXkxlltI57aa3Ahsb8YJrdddsaKGC96qzXMfZYhWEvnyQljqYZ5XBsO/bfFYjQlE KdtEwkiiHPdRBixrtMIVQFnTMVzIxobBfdcCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRRhfpncRoF61Zx/BIiyhLGgP8kvzAfBgNVHSMEGDAWgBSo6+rUsTp5GFDK95FO ow0PUDbD5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yOTcy L3FPdnExTEU2ZVJoUXl2ZVJUcU1ORDFBMnctYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcU92cTFMRTZlUmhReXZlUlRxTU5EMUEydy1jLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk3Mi9xT3ZxMUxFNmVSaFF5 dmVSVHFNTkQxQTJ3LWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP8lU24/rDjHcvzaHpTyHalOvYUr8hxqOD7xujzd50zYwznDjpwzKonTHEdKI nlI/8NX0k4T7kl9O3tI3VoHT2Culc9jAU+yRlfi3IvQY5z9Sq4HRTVM+3hUUCmU0 5sIukymMQK9T2s85RlnBqrJDvX5Q8sv8kxuOrNQdWD1N73pen6ZtK4s11MaTwjQz S+s/UTzKfYrCXJrSdrE9gM4nmNTWgk49QGw+keoC2GCMWCwwCk9knwt38YaL+Z2C NMR8wF+dokdRgNR29yn92QagtP08rwwQEAu6GlTrZJMeSD9BvN4VoDXXzpZDK08y BtYKVZCmCyL4loMUJYCgDNwq/w== -----END CERTIFICATE-----Generated at Mon Oct 20 15:30:06 2025 by rpki-client