$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft File: ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json) Hash identifier: wLCmNBWtOBTNsT5yfmnvL5WkZFPL02vi0cD6QL/9edQ= Subject key identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE Certificate serial: 0846 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft Manifest number: 0845 Signing time: Mon 20 Oct 2025 22:04:38 +0000 Manifest this update: Mon 20 Oct 2025 22:04:38 +0000 Manifest next update: Tue 21 Oct 2025 04:04:38 +0000 Files and hashes: 1: N5T1V9JEe2hoUQkG3hJuNiSuYn8.roa (hash: vzjXOq9gWNducRtzdYPGbix/Jawvkq34+JnAREKG1mY=) 2: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: C83VtlmdDQNiQQrZMePlmfJH66V4B9t1HojXaoH1t+A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE Validity Not Before: Oct 20 22:04:38 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04: 90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1: 27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3: a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32: 04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9: 2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e: af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f: 45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5: 8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53: 48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca: 0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8: 5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b: 19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03: 2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93: 68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55: a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61: ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1 X509v3 Authority Key Identifier: keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ae:fb:c3:16:92:95:bf:8d:ac:47:b6:20:c4:7b:92:df:86: cf:9d:d0:60:bc:b4:2e:18:af:4b:70:fe:19:49:96:41:11:28: 60:8d:95:c3:b4:e0:58:b9:2c:48:af:d8:55:68:e0:27:61:48: 58:0b:a0:21:bf:ee:bb:30:05:2a:ec:ba:bd:49:42:35:95:52: 5d:62:b2:6a:0d:32:bb:a6:f6:d3:04:85:29:c4:5b:2d:dc:95: f2:11:ee:11:fb:4f:2d:ac:83:9f:9b:fc:a1:58:3e:57:08:00: a6:c3:9c:e0:49:b4:65:69:3a:7e:2a:58:ac:9c:db:8b:00:64: c2:dc:2e:f6:bb:b7:10:bd:c0:36:a0:87:98:62:95:70:1d:39: 47:d7:a5:1e:e7:fa:60:88:ac:a4:53:ba:cb:47:16:3a:06:27: 4b:c4:d3:43:b8:63:aa:80:aa:aa:2d:32:b0:2d:37:2d:98:c5: 0c:39:33:01:6f:c7:1d:b5:a2:b4:80:98:90:fc:77:86:48:c2: 73:66:38:01:fb:60:15:da:f9:35:7a:ef:b0:f3:e2:70:69:76: 48:92:0f:8f:bd:fc:a6:54:01:d3:22:0b:54:9b:42:8c:d5:51: 3a:42:90:26:5d:59:26:2e:8b:6e:f3:20:f9:56:95:f7:7e:21: 97:59:40:dd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY5 OTk3MjcxNjIyMjEzOEE0NUEzOUVCMEJGQUE4MTQ5NjgzNDBBRTAeFw0yNTEwMjAy MjA0MzhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY3MTE0RUU5NjNCNjgz RjhDQzk0RkU5N0JCRUFDRTU5MkU0MDIwQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfQ02hvSPxXx9HtpV7BJA8Pq+epask2MuMAYbzwSeuKJcXFpLS 6jjdESgZ06TCQ7OCKK2unw7eHYGbMgSHqSZvXBmo+hXHpno+6S3HVl/iZvqio+5o 4vepfq8687OBVJCkMGRb5SNhT0XLFbPjhVbo7ocanhFfpYxfDqufLaihVz2fmf7v U0idWL0RT37x0Pg6m+TGyg3X1dNGEN4NGy4/PsJX+F3MVrnfCEPg8xYDFs+LKxk+ 7+8kWdy8eS1WDf6dAy5HL+o3XNI535V/nhNjk2j/ZHjCZ1cnhomIwuvHVaJyeKQ1 nKSvRDX94Z6yYepBdAgom2JiLEn6FCDd91BzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZxFO6WO2g/jMlP6Xu+rOWS5AIMEwHwYDVR0jBBgwFoAUZpmXJxYiITikWjnr C/qoFJaDQK4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw OS9acG1YSnhZaUlUaWtXam5yQ19xb0ZKYURRSzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1pwbVhKeFlpSVRpa1dqbnJDX3FvRkphRFFLNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDkvWnBtWEp4WWlJVGlr V2puckNfcW9GSmFEUUs0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB+u+8MWkpW/jaxHtiDEe5Lfhs+d0GC8tC4Yr0tw/hlJlkERKGCNlcO04Fi5 LEiv2FVo4CdhSFgLoCG/7rswBSrsur1JQjWVUl1ismoNMrum9tMEhSnEWy3clfIR 7hH7Ty2sg5+b/KFYPlcIAKbDnOBJtGVpOn4qWKyc24sAZMLcLva7txC9wDagh5hi lXAdOUfXpR7n+mCIrKRTustHFjoGJ0vE00O4Y6qAqqotMrAtNy2YxQw5MwFvxx21 orSAmJD8d4ZIwnNmOAH7YBXa+TV677Dz4nBpdkiSD4+9/KZUAdMiC1SbQozVUTpC kCZdWSYui27zIPlWlfd+IZdZQN0= -----END CERTIFICATE-----Generated at Tue Oct 21 00:44:02 2025 by rpki-client