$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft File: jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft (raw, json) Hash identifier: sHFXouI+WboxAViGYyHvRXusjXwh94crSQ/XEJyes9c= Subject key identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 Authority key identifier: 8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D Certificate issuer: /CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Certificate serial: 0F27 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft Manifest number: 0F27 Signing time: Mon 20 Oct 2025 03:06:00 +0000 Manifest this update: Mon 20 Oct 2025 03:06:00 +0000 Manifest next update: Mon 20 Oct 2025 09:06:00 +0000 Files and hashes: 1: jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl (hash: kb3u3SqLPYJFTQxteEG5FKmwMHhYiZK+2S7pbP/y5hM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3879 (0xf27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E8DA59C810F132F1206E4F72CE686FDE3054E6D Validity Not Before: Oct 20 03:06:00 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=CDE39620232D3493A808C661D8F0441DB9B49F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:c5:81:52:c3:c3:16:cf:5d:20:16:5c:99: ba:5a:3b:ed:cf:8f:ac:8d:c7:ff:66:e4:12:18:ec: 3c:ab:b3:91:ce:a2:b7:d0:2f:6c:aa:94:d1:25:fe: ff:2b:20:8e:52:f3:c0:7c:6b:ca:6e:58:0e:5d:85: d3:ec:77:53:3d:d5:30:b5:b4:f8:30:c2:5b:88:95: 2d:4c:ac:21:8f:9d:bf:39:3a:78:56:33:3c:62:dc: ad:30:f6:a4:9f:2f:9e:f7:5a:11:33:f4:fe:0f:cd: f1:7d:d4:a2:b3:49:95:c2:26:91:79:7f:ec:cb:7f: d2:1d:1f:f9:4a:ff:f1:4d:32:93:ab:3c:a2:a6:92: 00:b6:36:a1:2f:ad:5c:c2:b5:bb:a2:56:be:b2:03: 87:29:36:1b:a1:d1:e4:b4:5d:82:b6:6b:34:ef:b1: 7b:4b:db:b8:a9:8f:e2:c0:7c:91:cb:67:4c:ae:56: e2:42:6a:cd:8d:e3:e2:97:ae:93:81:f9:3c:9d:77: 32:81:6e:16:76:a3:2f:9e:fc:6f:61:e1:2c:ed:cb: 1b:ae:52:d7:9a:e8:ae:cd:d5:50:91:57:98:0b:2b: 28:4a:2e:63:2b:cd:12:ca:2f:0a:88:c6:e8:c5:72: 4f:55:d4:ae:56:f4:8d:7e:40:f5:e0:89:06:34:fa: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E3:96:20:23:2D:34:93:A8:08:C6:61:D8:F0:44:1D:B9:B4:9F:67 X509v3 Authority Key Identifier: keyid:8E:8D:A5:9C:81:0F:13:2F:12:06:E4:F7:2C:E6:86:FD:E3:05:4E:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jo2lnIEPEy8SBuT3LOaG_eMFTm0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3237/jo2lnIEPEy8SBuT3LOaG_eMFTm0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:9d:c8:2e:6e:12:45:07:54:1c:f6:a6:27:75:05:b0:e6:e7: b0:fe:dd:2e:ae:7e:09:e0:39:bc:d8:6e:6a:e7:01:bc:89:12: a0:7b:36:9b:6a:72:1b:0c:96:d5:be:1e:b7:95:4f:d3:a5:c7: e9:3b:c4:64:cd:71:10:86:02:40:84:89:91:a6:75:5a:33:36: ce:8b:21:f6:ba:62:72:c4:e4:b9:33:5f:2a:e2:cf:e6:bf:bb: f0:ef:0a:78:9a:89:84:b0:53:e4:41:08:c7:03:2f:54:c5:86: 04:1e:f3:b3:9a:c5:cd:93:08:7d:30:8f:b2:34:00:70:76:a5: 92:94:b4:22:4b:7f:95:7e:52:90:fe:f6:b7:80:26:ba:6f:02: cd:ff:b8:c5:10:f9:c8:5e:bd:9b:12:7b:b4:6a:bf:d8:65:28: 6b:52:c2:d1:5f:46:07:38:97:04:fc:28:50:83:99:09:43:37: a1:8f:15:52:1d:3f:56:3a:48:ad:de:41:5f:7f:6a:be:0e:d8: ad:2f:15:67:6a:c7:8e:0c:5e:ea:bc:f4:1b:bc:01:d5:df:77: a5:84:33:39:e2:1e:ac:d1:38:79:f6:31:8b:d7:c2:16:f5:4d: f7:c5:85:05:26:00:59:b8:9c:8a:dc:07:2f:1b:24:5a:82:3d: 11:7a:b8:6b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU4 REE1OUM4MTBGMTMyRjEyMDZFNEY3MkNFNjg2RkRFMzA1NEU2RDAeFw0yNTEwMjAw MzA2MDBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKENERTM5NjIwMjMyRDM0 OTNBODA4QzY2MUQ4RjA0NDFEQjlCNDlGNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHNsWBUsPDFs9dIBZcmbpaO+3Pj6yNx/9m5BIY7Dyrs5HOorfQ L2yqlNEl/v8rII5S88B8a8puWA5dhdPsd1M91TC1tPgwwluIlS1MrCGPnb85OnhW Mzxi3K0w9qSfL573WhEz9P4PzfF91KKzSZXCJpF5f+zLf9IdH/lK//FNMpOrPKKm kgC2NqEvrVzCtbuiVr6yA4cpNhuh0eS0XYK2azTvsXtL27ipj+LAfJHLZ0yuVuJC as2N4+KXrpOB+TyddzKBbhZ2oy+e/G9h4SztyxuuUtea6K7N1VCRV5gLKyhKLmMr zRLKLwqIxujFck9V1K5W9I1+QPXgiQY0+sJDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzeOWICMtNJOoCMZh2PBEHbm0n2cwHwYDVR0jBBgwFoAUjo2lnIEPEy8SBuT3 LOaG/eMFTm0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz Ny9qbzJsbklFUEV5OFNCdVQzTE9hR19lTUZUbTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pvMmxuSUVQRXk4U0J1VDNMT2FHX2VNRlRtMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzcvam8ybG5JRVBFeThT QnVUM0xPYUdfZU1GVG0wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAISdyC5uEkUHVBz2pid1BbDm57D+3S6ufgngObzYbmrnAbyJEqB7NptqchsM ltW+HreVT9Olx+k7xGTNcRCGAkCEiZGmdVozNs6LIfa6YnLE5LkzXyriz+a/u/Dv CniaiYSwU+RBCMcDL1TFhgQe87Oaxc2TCH0wj7I0AHB2pZKUtCJLf5V+UpD+9reA JrpvAs3/uMUQ+chevZsSe7Rqv9hlKGtSwtFfRgc4lwT8KFCDmQlDN6GPFVIdP1Y6 SK3eQV9/ar4O2K0vFWdqx44MXuq89Bu8AdXfd6WEMzniHqzROHn2MYvXwhb1TffF hQUmAFm4nIrcBy8bJFqCPRF6uGs= -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:05 2025 by rpki-client