$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft File: VyVNn31j60IRhMWNAuBBlwWaag4.mft (raw, json) Hash identifier: G7Xt2X68qERGTzVYAuepiPbuJvAc1KquYQ66blArT+4= Subject key identifier: 8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB Authority key identifier: 57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E Certificate issuer: /CN=57254D9F7D63EB421184C58D02E04197059A6A0E Certificate serial: 0B5B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft Manifest number: 0B5B Signing time: Mon 20 Oct 2025 07:38:31 +0000 Manifest this update: Mon 20 Oct 2025 07:38:31 +0000 Manifest next update: Mon 20 Oct 2025 13:38:31 +0000 Files and hashes: 1: VyVNn31j60IRhMWNAuBBlwWaag4.crl (hash: Y3LFmuljG3oIHGCPYDT4ID5VYV5bvFhV7c0YiJaOwhI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57254D9F7D63EB421184C58D02E04197059A6A0E Validity Not Before: Oct 20 07:38:31 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8C0973127E8D45EBCEC8F7DEB61FDBF61CD5E2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:a3:56:2e:72:20:0b:b8:87:bc:20:2a:f8: e5:6a:81:f5:dc:d9:16:77:cd:f1:1d:03:a8:a6:59: 1f:7c:4c:0c:9e:1e:dc:9b:47:ef:a3:69:b4:8e:16: 2a:db:ab:2f:da:c9:f5:3a:8a:a9:43:f8:d7:59:76: 5d:0b:e5:83:af:e0:08:04:9a:51:ff:2e:78:64:cc: 12:f4:7f:f7:d8:01:11:8b:51:87:8a:5c:ca:a9:41: 5c:f2:36:ce:07:4a:2d:88:1d:64:d6:53:6d:0f:4d: fb:70:e9:17:c4:e9:b6:ac:39:77:b0:64:45:53:66: 25:19:f8:c5:35:83:2c:7b:4b:83:ea:98:74:03:a0: a9:cf:08:ba:47:6d:17:fa:56:a8:eb:f8:fd:2d:e6: cf:18:49:fa:7f:2e:1b:74:23:74:37:44:a7:61:77: 55:91:7a:1c:41:f1:df:61:c1:1d:47:9f:21:18:6f: ca:77:44:06:8f:0e:89:d2:67:12:e8:d0:b2:b2:62: 8f:49:21:65:cc:64:3f:8c:1f:79:f0:6f:8b:dd:94: 63:e2:d9:04:bc:42:fb:5a:38:c6:dd:33:00:b9:30: 07:15:70:5f:4a:0a:a8:d9:a6:dc:a5:98:5e:32:d1: 45:3a:96:e9:2e:d0:63:af:66:ca:3e:83:d0:53:86: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB X509v3 Authority Key Identifier: keyid:57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c4:52:12:57:7f:12:e5:63:18:4f:90:d5:ab:e5:86:9a:40: a0:c0:2a:1b:50:18:cc:0f:ed:a1:12:d3:1b:08:36:16:40:b6: 4d:28:b1:ee:73:28:27:b1:6f:60:65:9a:6d:d0:de:f0:55:86: 77:92:5f:64:57:5e:4c:5e:32:b3:bd:db:13:58:c7:ac:e3:bd: 8d:22:76:21:21:21:d9:58:7c:57:ff:45:3c:9f:c5:b5:c0:49: fd:6b:f1:db:bf:0a:51:54:9d:15:65:af:1b:23:0a:bf:d9:53: 17:55:e9:0c:b5:ff:39:4d:d4:06:22:b9:5c:fe:bd:d8:3b:3a: 53:d0:a9:63:b7:f8:20:a3:13:1f:81:15:79:b7:de:f7:28:f6: 6d:4d:c8:29:ba:f8:4e:b1:b0:0e:82:86:11:45:20:b7:b8:f8: 53:2d:36:e6:e1:f3:f5:dc:3e:3b:c0:84:f5:d7:dc:8f:b0:de: 77:0d:89:ba:40:da:12:6d:21:0e:b9:76:53:14:18:01:04:f7: e0:aa:8e:6e:59:ae:93:6a:8d:9d:8d:52:b8:b3:2f:f3:42:56: b1:79:88:eb:65:3f:b2:58:fc:2c:e4:2a:4c:12:2a:0d:f5:3b: 53:f0:9c:17:8f:80:79:88:5d:3f:ee:6c:b8:f9:87:7a:b4:d1: c8:38:96:78 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTcy NTREOUY3RDYzRUI0MjExODRDNThEMDJFMDQxOTcwNTlBNkEwRTAeFw0yNTEwMjAw NzM4MzFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDhDMDk3MzEyN0U4RDQ1 RUJDRUM4RjdERUI2MUZEQkY2MUNENUUyQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDThqNWLnIgC7iHvCAq+OVqgfXc2RZ3zfEdA6imWR98TAyeHtyb R++jabSOFirbqy/ayfU6iqlD+NdZdl0L5YOv4AgEmlH/LnhkzBL0f/fYARGLUYeK XMqpQVzyNs4HSi2IHWTWU20PTftw6RfE6basOXewZEVTZiUZ+MU1gyx7S4PqmHQD oKnPCLpHbRf6Vqjr+P0t5s8YSfp/Lht0I3Q3RKdhd1WRehxB8d9hwR1HnyEYb8p3 RAaPDonSZxLo0LKyYo9JIWXMZD+MH3nwb4vdlGPi2QS8QvtaOMbdMwC5MAcVcF9K CqjZptylmF4y0UU6luku0GOvZso+g9BThsAjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUjAlzEn6NRevOyPfeth/b9hzV4qswHwYDVR0jBBgwFoAUVyVNn31j60IRhMWN AuBBlwWaag4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC9WeVZObjMxajYwSVJoTVdOQXVCQmx3V2FhZzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1Z5Vk5uMzFqNjBJUmhNV05BdUJCbHdXYWFnNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzAvVnlWTm4zMWo2MElS aE1XTkF1QkJsd1dhYWc0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACfEUhJXfxLlYxhPkNWr5YaaQKDAKhtQGMwP7aES0xsINhZAtk0ose5zKCex b2Blmm3Q3vBVhneSX2RXXkxeMrO92xNYx6zjvY0idiEhIdlYfFf/RTyfxbXASf1r 8du/ClFUnRVlrxsjCr/ZUxdV6Qy1/zlN1AYiuVz+vdg7OlPQqWO3+CCjEx+BFXm3 3vco9m1NyCm6+E6xsA6ChhFFILe4+FMtNubh8/XcPjvAhPXX3I+w3ncNibpA2hJt IQ65dlMUGAEE9+Cqjm5ZrpNqjZ2NUrizL/NCVrF5iOtlP7JY/CzkKkwSKg31O1Pw nBePgHmIXT/ubLj5h3q00cg4lng= -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:36 2025 by rpki-client