$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft File: f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft (raw, json) Hash identifier: j9zUwV86OzhUV7Nk3KMWWN3NGruNK2r1LwiS1/AlSRk= Subject key identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C Authority key identifier: 7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 Certificate issuer: /CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Certificate serial: 0C7E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft Manifest number: 0C79 Signing time: Mon 20 Oct 2025 17:05:30 +0000 Manifest this update: Mon 20 Oct 2025 17:05:30 +0000 Manifest next update: Mon 20 Oct 2025 23:05:30 +0000 Files and hashes: 1: 3kY-W2DzzQgIYqWj02E7erQNW4c.roa (hash: nRO2jqx2JO4q4Ht0LRbD0tkIA6beoFq/ALxWOLJtGCE=) 2: _BP2LqZJMcOyQvNBpa3Q47BT6oA.roa (hash: yDSr2meIUpsVWLqpJTPM9gyFnwq268HREVuKgOGwG1Y=) 3: f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl (hash: SCZNYF9eSR04VqD7o20iFy/USP0aTsxkVlIrjR9tKsU=) 4: o20OnybD-WkAm5evvwhJNKnM-Ao.roa (hash: 2bSg/d3A1gH/o2Wn28q7GzlM0t0VvvKRE0U+8yda8Rs=) 5: oGei8yg9fd9SkrzhzuLc-JojTYY.roa (hash: 2V/6e6KOfi1svdPiW7H733/F3UuvvZUsPn4oRJj/Udc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Validity Not Before: Oct 20 17:05:30 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=229A4488A06AE99167E29F0F5A53BEC21DE1AF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:be:bb:ac:d1:89:8b:e9:9a:bd:0b:83:83: 9c:a1:61:ea:25:ae:7c:c1:ca:6d:8b:87:e0:26:fd: c1:96:8f:48:ce:ef:af:d8:a8:d4:7f:d1:60:3d:53: 7e:5c:f8:19:fb:bc:08:e2:9b:aa:84:76:cc:8f:d1: ff:37:07:44:cd:5f:44:d8:94:2b:8e:47:8e:ee:b6: 26:a5:83:8d:22:a9:b6:b3:2e:83:84:0c:a4:1a:b3: e7:43:ab:32:25:a3:7a:d1:7e:52:6c:6c:63:d5:e3: c7:34:37:4b:81:10:bd:cf:c5:4f:be:90:ea:27:fa: 9b:52:ae:60:00:63:e1:4e:d0:3c:99:d3:e2:59:b4: b6:b3:1b:c1:0a:e2:46:e7:5a:73:f3:b7:86:c7:fc: 5c:fe:0c:29:61:b8:4d:fa:b1:fa:d5:a5:ca:2f:4e: 25:06:03:4c:89:c1:53:ff:18:2c:19:3b:74:b3:76: 1b:75:22:7e:04:00:7d:8d:60:d1:f2:33:df:ec:54: bc:2b:30:4f:8f:d7:11:21:7e:d5:32:5a:74:81:dc: 6c:68:72:4b:32:68:55:4f:6a:1c:1b:0e:7a:86:32: 8e:32:ce:2f:96:03:00:e8:f2:49:45:83:78:8a:51: e5:27:23:8d:c2:1f:b5:7f:8c:e3:eb:7b:e4:24:b1: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C X509v3 Authority Key Identifier: keyid:7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:01:eb:1f:05:d9:eb:f7:be:0e:5b:55:50:aa:2a:99:6a:9d: 30:ce:f3:fa:29:38:1f:6b:ef:86:1e:e0:57:07:8c:8b:37:80: 96:4f:c3:b6:cc:35:23:fb:ce:59:9d:29:6a:e7:40:b4:f2:c2: 49:e8:ad:69:0b:a5:61:b8:94:31:cf:46:f2:f2:07:51:96:58: a0:6f:dd:b3:b0:11:b5:b4:62:30:f2:77:1f:bf:4e:ea:31:d1: d0:25:64:66:8a:14:4d:fb:0b:8f:28:c9:35:e8:ce:9d:5b:71: 6e:7c:09:59:6e:c3:a6:5a:70:23:3e:8f:bf:9d:3f:e0:30:ee: 53:38:2a:29:92:11:58:04:3c:6e:13:a2:fb:d2:ac:c2:c3:c2: 6b:00:c5:d1:17:ea:6e:eb:c5:dc:a6:17:80:80:2b:35:9b:c8: 90:d2:d5:7a:10:69:9f:5b:d9:c0:a8:ff:05:65:b3:90:8a:e0: 5e:7c:73:9e:50:81:60:83:f2:34:22:e8:73:e0:00:eb:30:fb: 6d:e2:53:09:e8:a1:d5:97:4e:7b:75:f5:47:32:49:da:5f:8d: 40:e7:88:83:81:ea:8e:85:cb:b8:a6:8a:8a:52:b9:d3:d8:db: 69:ed:92:10:47:29:7d:42:59:b1:44:07:e0:e6:e7:87:01:9d: 89:f3:14:77 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Y5 MThDRjI2NTAzRDFGOUJDRkE3N0RDMEFBNTkyQTU3RERGODI0NTAeFw0yNTEwMjAx NzA1MzBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDIyOUE0NDg4QTA2QUU5 OTE2N0UyOUYwRjVBNTNCRUMyMURFMUFGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHhb67rNGJi+mavQuDg5yhYeolrnzBym2Lh+Am/cGWj0jO76/Y qNR/0WA9U35c+Bn7vAjim6qEdsyP0f83B0TNX0TYlCuOR47utialg40iqbazLoOE DKQas+dDqzIlo3rRflJsbGPV48c0N0uBEL3PxU++kOon+ptSrmAAY+FO0DyZ0+JZ tLazG8EK4kbnWnPzt4bH/Fz+DClhuE36sfrVpcovTiUGA0yJwVP/GCwZO3Szdht1 In4EAH2NYNHyM9/sVLwrME+P1xEhftUyWnSB3GxocksyaFVPahwbDnqGMo4yzi+W AwDo8klFg3iKUeUnI43CH7V/jOPre+QksWjNAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIppEiKBq6ZFn4p8PWlO+wh3hrywwHwYDVR0jBBgwFoAUf5GM8mUD0fm8+nfc CqWSpX3fgkUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 NS9mNUdNOG1VRDBmbTgtbmZjQ3FXU3BYM2Zna1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2Y1R004bVVEMGZtOC1uZmNDcVdTcFgzZmdrVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTUvZjVHTThtVUQwZm04 LW5mY0NxV1NwWDNmZ2tVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADQB6x8F2ev3vg5bVVCqKplqnTDO8/opOB9r74Ye4FcHjIs3gJZPw7bMNSP7 zlmdKWrnQLTywknorWkLpWG4lDHPRvLyB1GWWKBv3bOwEbW0YjDydx+/Tuox0dAl ZGaKFE37C48oyTXozp1bcW58CVluw6ZacCM+j7+dP+Aw7lM4KimSEVgEPG4TovvS rMLDwmsAxdEX6m7rxdymF4CAKzWbyJDS1XoQaZ9b2cCo/wVls5CK4F58c55QgWCD 8jQi6HPgAOsw+23iUwnoodWXTnt19UcySdpfjUDniIOB6o6Fy7imiopSudPY22nt khBHKX1CWbFEB+Dm54cBnYnzFHc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:25 2025 by rpki-client