$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft File: c_jFHpB2aR787kYX7QQw9Xy8gB0.mft (raw, json) Hash identifier: XnUYuhZoFs8RwNRD0fQkuCx/jLzY3mjrGB+G8kzPxsg= Subject key identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 Authority key identifier: 73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D Certificate issuer: /CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Certificate serial: 0A46 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft Manifest number: 0A46 Signing time: Mon 20 Oct 2025 11:04:07 +0000 Manifest this update: Mon 20 Oct 2025 11:04:07 +0000 Manifest next update: Mon 20 Oct 2025 17:04:07 +0000 Files and hashes: 1: c_jFHpB2aR787kYX7QQw9Xy8gB0.crl (hash: bJeJ+62lIRjcVr9I4hANr2m/jevMFbGu/sEOK0R6C6w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73F8C51E9076691EFCEE4617ED0430F57CBC801D Validity Not Before: Oct 20 11:04:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1A96673E80786404FE296B91E5825FA196604F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:78:3d:60:00:57:d1:46:10:20:61:9e:95: b0:49:1e:0d:5c:52:0b:c8:7a:1c:81:d0:ed:72:56: ee:19:51:41:e0:24:b0:4d:06:1a:5d:3b:2c:8c:fb: 3d:11:d0:0c:29:ef:27:77:69:b8:2b:11:aa:83:4a: a1:2b:ad:60:3b:f0:c1:4b:77:9c:38:cb:c6:39:9d: 80:df:69:73:ae:95:5e:ba:25:2d:b2:5d:27:67:74: 3a:d9:ec:52:fe:af:0b:9c:5f:9b:dd:00:ca:95:5d: dc:5f:ad:55:3a:07:58:79:a2:39:2e:61:35:3b:80: 69:6c:60:58:d7:6a:11:2a:5e:86:a3:c5:1d:e6:08: 09:f7:5e:cb:6c:37:a0:c7:db:43:07:8e:40:b0:f5: af:5d:89:94:f4:99:d8:ad:a3:4f:e6:94:9a:6d:36: 71:00:29:8e:2e:a4:3b:3e:04:a7:9f:57:16:e8:0b: 4a:6d:56:61:3f:85:74:d0:1a:4d:75:87:34:24:81: 3d:82:dc:41:54:70:cb:fa:58:69:2d:c9:fd:b4:94: 06:71:fe:be:99:8e:74:40:10:ab:98:00:cb:83:d9: 23:24:b9:23:b9:51:d8:51:6c:fd:14:59:7b:a4:37: 2a:54:8d:96:54:08:95:f7:8b:75:9e:40:9f:eb:5a: 8b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:67:3E:80:78:64:04:FE:29:6B:91:E5:82:5F:A1:96:60:4F:17 X509v3 Authority Key Identifier: keyid:73:F8:C5:1E:90:76:69:1E:FC:EE:46:17:ED:04:30:F5:7C:BC:80:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c_jFHpB2aR787kYX7QQw9Xy8gB0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/c_jFHpB2aR787kYX7QQw9Xy8gB0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:66:8d:34:36:48:8a:c8:a3:ad:e6:a4:02:2a:d4:f2:19:ca: 39:9c:41:ae:8c:e0:ae:68:a6:5e:23:4f:a2:e0:a9:b5:f1:7e: d9:2c:a6:32:da:70:f1:4d:74:6a:92:44:97:75:e4:50:74:a5: fd:37:7d:fa:54:37:95:9b:cc:9b:d8:5f:2a:70:a7:2b:6b:7e: c8:f7:0a:e0:9b:e7:a2:e1:fd:67:1c:d6:6d:73:be:26:e1:4e: 10:ff:e1:c1:30:46:db:c3:1f:a9:67:4b:c0:d8:8d:a6:60:3d: 09:59:4c:4b:f8:45:77:9f:c5:2d:78:ac:3b:9e:49:a4:b3:1d: 61:bb:a3:1f:d2:e2:4c:ba:dd:5e:5b:d2:5d:bc:3b:2a:80:52: 0b:aa:61:ce:e9:f7:d2:9d:b4:3b:f9:2f:6b:b4:f1:61:34:fa: ca:8d:c4:92:bd:f8:14:25:a9:6c:42:3c:c2:81:10:57:80:e6: 7b:91:0a:9c:e7:e3:20:ad:42:e3:f2:32:e8:22:fd:b0:f9:d9: fe:91:8b:f2:83:17:72:ed:2d:ff:61:9a:a3:f5:61:b4:06:d0: 5b:04:c3:dc:b8:74:d3:a2:b0:3b:b6:87:b9:2c:56:0f:f4:be: 5c:b1:da:76:84:1e:7f:a5:e9:fa:fb:31:eb:bb:30:a6:db:97: f3:81:fe:50 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNG OEM1MUU5MDc2NjkxRUZDRUU0NjE3RUQwNDMwRjU3Q0JDODAxRDAeFw0yNTEwMjAx MTA0MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFBOTY2NzNFODA3ODY0 MDRGRTI5NkI5MUU1ODI1RkExOTY2MDRGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIGng9YABX0UYQIGGelbBJHg1cUgvIehyB0O1yVu4ZUUHgJLBN BhpdOyyM+z0R0Awp7yd3abgrEaqDSqErrWA78MFLd5w4y8Y5nYDfaXOulV66JS2y XSdndDrZ7FL+rwucX5vdAMqVXdxfrVU6B1h5ojkuYTU7gGlsYFjXahEqXoajxR3m CAn3XstsN6DH20MHjkCw9a9diZT0mdito0/mlJptNnEAKY4upDs+BKefVxboC0pt VmE/hXTQGk11hzQkgT2C3EFUcMv6WGktyf20lAZx/r6ZjnRAEKuYAMuD2SMkuSO5 UdhRbP0UWXukNypUjZZUCJX3i3WeQJ/rWourAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGpZnPoB4ZAT+KWuR5YJfoZZgTxcwHwYDVR0jBBgwFoAUc/jFHpB2aR787kYX 7QQw9Xy8gB0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 MS9jX2pGSHBCMmFSNzg3a1lYN1FRdzlYeThnQjAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NfakZIcEIyYVI3ODdrWVg3UVF3OVh5OGdCMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODEvY19qRkhwQjJhUjc4 N2tZWDdRUXc5WHk4Z0IwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACNmjTQ2SIrIo63mpAIq1PIZyjmcQa6M4K5opl4jT6LgqbXxftkspjLacPFN dGqSRJd15FB0pf03ffpUN5WbzJvYXypwpytrfsj3CuCb56Lh/Wcc1m1zvibhThD/ 4cEwRtvDH6lnS8DYjaZgPQlZTEv4RXefxS14rDueSaSzHWG7ox/S4ky63V5b0l28 OyqAUguqYc7p99KdtDv5L2u08WE0+sqNxJK9+BQlqWxCPMKBEFeA5nuRCpzn4yCt QuPyMugi/bD52f6Ri/KDF3LtLf9hmqP1YbQG0FsEw9y4dNOisDu2h7ksVg/0vlyx 2naEHn+l6fr7Meu7MKbbl/OB/lA= -----END CERTIFICATE-----Generated at Mon Oct 20 16:43:11 2025 by rpki-client