$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json) Hash identifier: 3Uc1K53xQSL1afkVB53omglzUPTyTVbq3iUXXeRBdSQ= Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Certificate serial: 0FFC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft Manifest number: 0FFC Signing time: Mon 20 Oct 2025 22:08:09 +0000 Manifest this update: Mon 20 Oct 2025 22:08:09 +0000 Manifest next update: Tue 21 Oct 2025 04:08:09 +0000 Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: Ku++NMw4WqYej/HEO8CdgLnONW867k6b9N5rxUS9oqc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4092 (0xffc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14 Validity Not Before: Oct 20 22:08:09 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c: 6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62: a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5: 2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04: 54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03: df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db: c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2: 30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32: 00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92: 4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1: 6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac: c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4: 24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c: fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42: 8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc: 30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03: 1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13 X509v3 Authority Key Identifier: keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f0:98:8d:9f:58:ea:f8:97:15:60:eb:49:b2:64:56:f8:bc: 32:6f:90:20:67:47:cf:27:9b:6c:c6:a7:4c:7c:c3:cd:57:d4: f0:d7:ef:57:70:90:76:2d:93:a9:7f:30:40:6c:7c:7c:9e:fa: af:96:9f:75:3f:2c:22:87:10:4c:7f:12:55:59:d8:f1:2b:79: 7c:ab:bf:8c:2a:8d:f7:54:15:2a:7f:fc:af:25:46:68:a0:36: 41:68:32:93:a0:a4:cf:b8:7c:da:8b:6e:c5:60:4b:48:fa:9c: 2d:34:a3:7d:bc:e5:b4:8d:9f:47:28:62:db:65:97:da:36:cf: 28:ca:cb:c7:15:b6:13:35:14:01:ca:0e:c7:0a:1b:f6:62:9d: f9:0c:47:06:cd:bb:21:6d:32:80:cd:45:ec:6b:dc:01:ec:a0: 05:c9:09:8f:76:5f:79:1e:d7:de:3f:39:5d:92:f7:79:8f:01: 7b:db:73:88:aa:3f:fd:93:a3:fd:da:66:d6:e8:51:68:a6:c0: f2:e2:f3:ad:35:7c:c1:7c:2b:c2:09:89:9d:b0:1c:24:95:3e: cf:7b:e9:26:e2:c8:b7:f6:9d:3a:d9:ea:ac:62:2b:c1:10:4b: 17:ad:3a:0f:53:b1:31:c0:8f:33:c8:b1:9b:0d:c6:4d:96:94: b6:00:ac:c2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzM0 NjhGNTY4MjYxRjJEODA4RjcwMzBFMDlDRkFCQkUxRUUwRUQxNDAeFw0yNTEwMjAy MjA4MDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVEMzZBOTRBNUFEMEVD RkUwRDZFODFBREI3RTM3NUQyRTVDMjQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWa6duO8ddF5qkZmdJjGqWxoZBwN8Axaodn82PYqHXwy+JjOBP WcpEQGpLpSu8XrwLB53CadTFHAZABFRQW4cutdCsMz0KAcbgA9/3sh36A+ex9Un3 41wP28awOQgBeG+ISWWkCd61ojAG1miKFb/3UXd03zPfMgCiQtgBPf7Vk1InO+U1 kkxFZ7Y3GGWUDtjncnDL0W1E75gcI44rf3tSj30RrMRBKaMXo95HFKObmOpwtCRh 2MPN1GZ3NsDd8J+MnPxYV+0QpUdRWFhUx4CCQo65x55RavW5MSokneSPzDD9JB6u BELPrn9AKLEjAx18HZ6mjkdJUB3oGYBeGCzlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7TapSlrQ7P4NboGtt+N10uXCQBMwHwYDVR0jBBgwFoAUM0aPVoJh8tgI9wMO Cc+rvh7g7RQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy OC9NMGFQVm9KaDh0Z0k5d01PQ2MtcnZoN2c3UlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL00wYVBWb0poOHRnSTl3TU9DYy1ydmg3ZzdSUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjgvTTBhUFZvSmg4dGdJ OXdNT0NjLXJ2aDdnN1JRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHvwmI2fWOr4lxVg60myZFb4vDJvkCBnR88nm2zGp0x8w81X1PDX71dwkHYt k6l/MEBsfHye+q+Wn3U/LCKHEEx/ElVZ2PEreXyrv4wqjfdUFSp//K8lRmigNkFo MpOgpM+4fNqLbsVgS0j6nC00o3285bSNn0coYttll9o2zyjKy8cVthM1FAHKDscK G/ZinfkMRwbNuyFtMoDNRexr3AHsoAXJCY92X3ke194/OV2S93mPAXvbc4iqP/2T o/3aZtboUWimwPLi8601fMF8K8IJiZ2wHCSVPs976SbiyLf2nTrZ6qxiK8EQSxet Og9TsTHAjzPIsZsNxk2WlLYArMI= -----END CERTIFICATE-----Generated at Tue Oct 21 01:40:06 2025 by rpki-client