$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft (raw, json) Hash identifier: 7blwUsvTbpQPBQlE7rFh1Kd5WTMn3DP0Vv2598hasQQ= Subject key identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 Authority key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 Certificate issuer: /CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Certificate serial: 0926 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft Manifest number: 0926 Signing time: Mon 20 Oct 2025 12:04:52 +0000 Manifest this update: Mon 20 Oct 2025 12:04:52 +0000 Manifest next update: Mon 20 Oct 2025 18:04:52 +0000 Files and hashes: 1: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl (hash: RWPHzDftjyonb7fqGIDF0dXlsUfAgV3sNV0BLcdUYN4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2342 (0x926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Validity Not Before: Oct 20 12:04:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1F69946BDFFBCBE8EDE7A4D46B9143B895AB27A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:41:5e:8c:db:b0:01:a5:ed:6a:45:10:13: b3:1c:be:e8:22:60:92:bf:21:07:3e:da:14:e1:05: eb:85:b8:22:d8:0a:c7:80:5a:b1:3d:36:2d:78:db: ac:82:c7:fc:20:d1:37:c2:46:e2:c7:0e:7b:ea:7f: c8:c8:44:0c:f1:04:fb:6a:4d:c1:72:b6:58:a5:68: 0f:8f:99:2d:1b:9b:f8:e4:9b:61:b4:76:fb:36:07: f5:58:65:8c:fd:1d:be:8b:9a:42:a9:c6:19:32:ef: d6:7f:40:e3:1e:e8:ba:cd:f5:47:05:54:b0:9d:de: 9a:e9:93:1a:51:f1:b9:4f:34:f6:78:09:f4:f8:35: 32:41:52:75:fb:4d:43:e6:6f:10:27:bc:08:d4:0f: f5:a5:ea:fd:7c:e0:ee:d7:76:fd:f7:76:38:44:b5: d4:89:fb:e9:8d:f3:e8:27:2e:51:da:13:22:37:da: e4:d5:1b:ec:4a:51:88:75:d2:ea:73:8d:32:dc:54: a5:7c:81:39:e3:ae:04:d6:41:9a:0f:7b:92:c3:bf: 55:82:b7:ae:f3:91:0c:39:6a:67:db:c7:bb:c7:23: 19:e4:c1:c0:61:1c:35:15:ad:45:56:79:5f:28:9f: bd:f4:0c:60:e1:54:f7:40:e8:4b:8c:0b:a3:cb:5a: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 X509v3 Authority Key Identifier: keyid:32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:35:e3:46:7d:26:0e:e6:86:20:86:00:a6:fd:8b:8e:f1:aa: 06:7a:e9:4a:7c:d5:04:4c:3f:dc:09:b9:01:bd:36:bc:00:e7: bc:97:ac:d4:36:96:6d:1c:94:e1:bb:d1:bc:e4:0e:23:73:80: ba:21:93:57:ab:09:c4:6a:9d:41:5e:03:58:9d:6b:55:ed:7a: 9a:48:bb:b5:04:7b:77:f1:cf:e0:6d:84:4c:7e:bc:3c:ab:0f: 88:46:6c:b0:5c:f8:ae:1d:31:40:99:a5:fb:76:77:78:30:f1: e1:81:da:7a:67:48:d0:05:b6:f5:6f:33:47:23:4e:30:79:2b: bc:1e:99:9f:3c:4b:c1:28:c7:7c:de:57:7f:d1:ff:b8:9e:4f: 2d:82:e4:39:29:86:cc:1e:4a:03:95:00:8a:ea:a9:e8:2a:98: 56:37:a1:b2:39:2f:7b:00:c4:a8:94:c7:fb:e2:a9:bb:d5:67: 20:cb:82:84:69:a7:7f:12:58:35:20:bf:b6:9a:0f:89:34:19: 36:46:80:b6:a1:05:cb:53:74:3e:30:c1:06:31:a3:4c:7d:55: 8b:11:02:22:04:4b:d6:5c:47:2f:d8:7e:ea:1b:11:21:5f:a3: 88:9c:3c:4b:a0:f8:37:a5:65:6c:1e:0f:53:70:7b:b1:2f:98: f3:3e:5f:50 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI5 RjJBRkM4NkZFOUYxRkFDOUYyRjhCQjMxMkI1QUI5QzkxOEMyNjAeFw0yNTEwMjAx MjA0NTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFGNjk5NDZCREZGQkNC RThFREU3QTRENDZCOTE0M0I4OTVBQjI3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLgkFejNuwAaXtakUQE7McvugiYJK/IQc+2hThBeuFuCLYCseA WrE9Ni1426yCx/wg0TfCRuLHDnvqf8jIRAzxBPtqTcFytlilaA+PmS0bm/jkm2G0 dvs2B/VYZYz9Hb6LmkKpxhky79Z/QOMe6LrN9UcFVLCd3prpkxpR8blPNPZ4CfT4 NTJBUnX7TUPmbxAnvAjUD/Wl6v184O7Xdv33djhEtdSJ++mN8+gnLlHaEyI32uTV G+xKUYh10upzjTLcVKV8gTnjrgTWQZoPe5LDv1WCt67zkQw5amfbx7vHIxnkwcBh HDUVrUVWeV8on730DGDhVPdA6EuMC6PLWlxVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUH2mUa9/7y+jt56TUa5FDuJWrJ6YwHwYDVR0jBBgwFoAUMp8q/Ib+nx+sny+L sxK1q5yRjCYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL01wOHFfSWItbngtc255LUxzeEsxcTV5UmpDWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDEvTXA4cV9JYi1ueC1z bnktTHN4SzFxNXlSakNZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAG4140Z9Jg7mhiCGAKb9i47xqgZ66Up81QRMP9wJuQG9NrwA57yXrNQ2lm0c lOG70bzkDiNzgLohk1erCcRqnUFeA1ida1XteppIu7UEe3fxz+BthEx+vDyrD4hG bLBc+K4dMUCZpft2d3gw8eGB2npnSNAFtvVvM0cjTjB5K7wemZ88S8Eox3zeV3/R /7ieTy2C5DkphsweSgOVAIrqqegqmFY3obI5L3sAxKiUx/viqbvVZyDLgoRpp38S WDUgv7aaD4k0GTZGgLahBctTdD4wwQYxo0x9VYsRAiIES9ZcRy/YfuobESFfo4ic PEug+DelZWweD1Nwe7EvmPM+X1A= -----END CERTIFICATE-----Generated at Mon Oct 20 17:40:31 2025 by rpki-client