$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft File: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft (raw, json) Hash identifier: sYY7Mv+Gs7vYOFYvjg+yi78bioNw35b0XX0Pr47Wo5g= Subject key identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 Authority key identifier: 3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA Certificate issuer: /CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Certificate serial: 0D2E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft Manifest number: 0D2E Signing time: Mon 20 Oct 2025 12:06:41 +0000 Manifest this update: Mon 20 Oct 2025 12:06:41 +0000 Manifest next update: Mon 20 Oct 2025 18:06:41 +0000 Files and hashes: 1: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl (hash: eEWM61TkuIGyUmjgEtmkhekn5rD25J+JCzwshtqYh14=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Validity Not Before: Oct 20 12:06:41 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=074D0AC2BAE811F7784C6BDE285A83A1EF259DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:6e:10:c5:a5:7f:48:a5:30:8d:d9:ff:92: 31:c7:f3:6f:c3:9d:87:43:8f:17:92:1a:0b:87:a4: 43:d8:0e:5b:24:2c:4a:38:51:ec:89:c8:49:67:de: 82:53:ee:cf:e4:25:36:e2:54:0a:be:24:0e:76:ef: 2e:ca:ba:ba:7a:f4:ff:8f:ae:f6:d5:6c:05:ae:4b: 50:2c:e3:0b:19:92:f3:29:c6:c6:91:d2:5f:03:77: e7:45:26:7f:b9:40:6e:ff:99:ab:7e:c1:7f:d0:ce: cd:e8:10:3d:57:31:c8:c9:d5:d6:5f:3f:98:44:b7: 08:d3:40:b9:ae:6c:31:22:77:c9:2d:2d:a3:6a:85: f8:ba:a1:bb:e2:15:e4:a5:a5:1c:fb:d9:09:63:11: 95:e5:43:0e:8f:68:79:ad:a8:0e:4a:2f:c5:be:02: 5d:22:fc:f3:8a:26:9a:24:52:de:83:52:02:a2:89: 58:ae:c3:eb:dd:64:a2:b8:bf:d3:94:98:da:20:8b: 84:4c:6d:7c:bf:6a:e1:62:af:a6:0d:85:69:8a:44: 15:cd:b3:3a:32:ee:df:ac:e9:eb:74:33:a5:2b:91: 25:40:77:44:08:1d:74:2d:1f:d9:5b:1e:51:bb:6f: 40:73:63:fb:88:5c:1f:8e:2d:aa:ab:12:d5:a6:41: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 X509v3 Authority Key Identifier: keyid:3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fc:b9:73:96:85:87:d3:49:4f:a3:ba:68:ec:7b:c6:74:0a: c5:9a:61:41:09:34:db:de:84:aa:d1:f7:85:51:d6:83:55:74: 57:a3:96:e9:13:3d:c1:12:c1:78:aa:f6:6e:1a:07:e1:74:55: 13:2a:ad:f2:b6:69:60:74:74:26:b1:ca:ff:f6:fc:69:cf:8d: 32:0d:7d:8f:7d:51:a4:07:21:eb:41:0b:11:1c:34:48:35:f3: 81:13:85:2e:ed:cc:e8:a5:46:82:d2:66:25:78:80:8c:75:29: 5a:1c:a2:80:a6:8a:55:e1:bf:89:f3:97:42:9d:cc:db:92:52: fe:8d:3a:23:80:8f:97:64:88:46:5a:61:66:32:0b:01:c7:3d: 95:90:47:c5:91:5e:b5:cb:6c:4b:09:31:2d:9c:65:b3:64:20: b6:79:58:0c:51:7b:88:40:20:08:45:78:a8:25:09:82:db:f3: 83:b3:bc:c8:84:a1:4b:31:1b:66:47:36:29:fd:05:3b:b7:22: 75:33:ea:a4:85:e2:79:8e:45:ef:fa:88:f9:a2:02:f3:01:9f: f2:1c:2b:01:31:1c:cc:fd:b5:7a:d1:3e:29:e7:93:7a:93:5c: 8e:39:96:2d:1d:c9:ef:7b:ee:1d:6b:45:21:88:19:9b:6f:48: 39:cf:72:5c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Mw OEVGRDU5ODA5QzE5RkExM0FGNDQ2NEYwNzRFRjJEODIzMEZCQTAeFw0yNTEwMjAx MjA2NDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA3NEQwQUMyQkFFODEx Rjc3ODRDNkJERTI4NUE4M0ExRUYyNTlERTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvP24QxaV/SKUwjdn/kjHH82/DnYdDjxeSGguHpEPYDlskLEo4 UeyJyEln3oJT7s/kJTbiVAq+JA527y7Kurp69P+PrvbVbAWuS1As4wsZkvMpxsaR 0l8Dd+dFJn+5QG7/mat+wX/Qzs3oED1XMcjJ1dZfP5hEtwjTQLmubDEid8ktLaNq hfi6obviFeSlpRz72QljEZXlQw6PaHmtqA5KL8W+Al0i/POKJpokUt6DUgKiiViu w+vdZKK4v9OUmNogi4RMbXy/auFir6YNhWmKRBXNszoy7t+s6et0M6UrkSVAd0QI HXQtH9lbHlG7b0BzY/uIXB+OLaqrEtWmQWnJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUB00KwrroEfd4TGveKFqDoe8lneMwHwYDVR0jBBgwFoAUPAjv1ZgJwZ+hOvRG TwdO8tgjD7owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Ny9QQWp2MVpnSndaLWhPdlJHVHdkTzh0Z2pEN28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1BBanYxWmdKd1otaE92UkdUd2RPOHRnakQ3by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDcvUEFqdjFaZ0p3Wi1o T3ZSR1R3ZE84dGdqRDdvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE78uXOWhYfTSU+jumjse8Z0CsWaYUEJNNvehKrR94VR1oNVdFejlukTPcES wXiq9m4aB+F0VRMqrfK2aWB0dCaxyv/2/GnPjTINfY99UaQHIetBCxEcNEg184ET hS7tzOilRoLSZiV4gIx1KVocooCmilXhv4nzl0KdzNuSUv6NOiOAj5dkiEZaYWYy CwHHPZWQR8WRXrXLbEsJMS2cZbNkILZ5WAxRe4hAIAhFeKglCYLb84OzvMiEoUsx G2ZHNin9BTu3InUz6qSF4nmORe/6iPmiAvMBn/IcKwExHMz9tXrRPinnk3qTXI45 li0dye977h1rRSGIGZtvSDnPclw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:13 2025 by rpki-client