$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft File: kEgXQ3MJLmD9IX-_HSOR79WjObw.mft (raw, json) Hash identifier: 7cqNeUOF6mOgeVz1ou1ydDyX3d513a9C5pmJymeQjk0= Subject key identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F Authority key identifier: 90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC Certificate issuer: /CN=9048174373092E60FD217FBF1D2391EFD5A339BC Certificate serial: 0738 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft Manifest number: 0738 Signing time: Mon 20 Oct 2025 07:38:48 +0000 Manifest this update: Mon 20 Oct 2025 07:38:48 +0000 Manifest next update: Mon 20 Oct 2025 13:38:48 +0000 Files and hashes: 1: kEgXQ3MJLmD9IX-_HSOR79WjObw.crl (hash: rlbY+BHzsdeWPTFoRT876kN+E0ABQd4UuoU3RAR0t00=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9048174373092E60FD217FBF1D2391EFD5A339BC Validity Not Before: Oct 20 07:38:48 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=30337587DFE9C72743A1F630DB98C1A2C739259F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:ba:ed:85:29:cf:39:2a:e0:6f:d7:56:94: bb:25:1a:e8:39:74:40:39:fb:bd:da:af:13:2d:47: 33:f5:50:8d:d9:25:74:61:57:c8:7c:b5:ee:77:75: 26:19:fd:e8:c5:50:0f:30:90:42:9c:a0:85:78:91: 78:2c:e5:db:df:3f:7f:a2:1b:7d:eb:71:8b:82:65: 21:4d:df:57:ca:76:30:ba:09:8f:52:2e:d9:70:db: e1:e2:52:6d:08:c4:16:f9:d1:ce:40:da:8c:e2:cd: ee:58:d3:68:a5:ba:4b:c3:92:3c:72:03:94:92:b4: 6f:ac:4b:ad:6b:05:88:ad:f4:a3:8a:42:62:5e:fb: 8a:c6:3c:51:aa:e4:d4:cd:a0:c0:48:62:ea:8d:0d: 22:a2:86:63:e3:1a:a0:83:f8:67:df:e1:1d:f6:99: b7:48:e6:07:d0:b2:58:a8:29:64:45:16:c4:ff:6b: 9e:3a:e2:25:f4:b4:8e:99:2f:fd:00:cc:05:a7:cd: 8c:a5:53:8a:ab:99:bc:93:65:99:bf:c7:2d:32:a2: 29:b4:12:82:3a:64:d8:8a:1a:4f:a2:37:90:cc:9c: 24:88:59:14:a3:b7:de:d3:4e:f5:0b:a2:e2:6b:ca: 93:65:10:e2:86:a5:71:56:fa:77:78:7b:19:cc:a1: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F X509v3 Authority Key Identifier: keyid:90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:02:86:52:00:bf:ed:94:19:25:99:6d:76:80:9c:f0:6b:49: 3c:22:f4:aa:56:20:c0:2f:f5:bc:3b:7d:29:37:e3:18:a5:0b: bf:ff:f8:25:ec:33:51:4f:4c:9d:47:8e:3d:59:37:76:06:e4: d9:1f:d2:ff:08:3a:99:e0:cc:bc:ba:b6:50:2b:62:04:04:c8: fd:31:6b:9c:7e:9c:76:ee:db:0b:b8:3f:7c:7a:82:0e:6d:41: b4:09:19:66:b4:d9:f2:7a:5f:92:97:d9:c9:2f:48:ae:44:e7: ff:ee:fd:df:24:8b:e6:86:3c:b1:21:94:1d:4b:46:5d:16:3f: ed:83:b0:d6:5d:4b:a6:da:bc:45:31:92:be:e2:75:e2:6a:78: 4d:39:31:fd:3c:cc:6a:fa:12:c0:1f:9a:72:7c:61:ac:d3:00: 8c:87:8f:f1:8f:3f:47:25:0b:75:a0:0b:08:25:ab:27:94:c8: b9:1e:0d:17:17:a4:a9:0b:8c:03:ee:69:20:f5:37:b3:35:04: 45:0c:f7:ee:8c:af:64:77:be:8a:13:10:8c:35:d2:91:05:9d: 8a:0b:d2:34:8c:b4:1a:18:a5:03:c0:77:0f:48:43:64:3a:c6: 00:21:00:28:22:e9:85:0f:68:56:ce:bf:ff:34:57:04:d4:9b: 13:3c:d8:dc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTA0 ODE3NDM3MzA5MkU2MEZEMjE3RkJGMUQyMzkxRUZENUEzMzlCQzAeFw0yNTEwMjAw NzM4NDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDMwMzM3NTg3REZFOUM3 Mjc0M0ExRjYzMERCOThDMUEyQzczOTI1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMUrrthSnPOSrgb9dWlLslGug5dEA5+73arxMtRzP1UI3ZJXRh V8h8te53dSYZ/ejFUA8wkEKcoIV4kXgs5dvfP3+iG33rcYuCZSFN31fKdjC6CY9S Ltlw2+HiUm0IxBb50c5A2ozize5Y02ilukvDkjxyA5SStG+sS61rBYit9KOKQmJe +4rGPFGq5NTNoMBIYuqNDSKihmPjGqCD+Gff4R32mbdI5gfQslioKWRFFsT/a546 4iX0tI6ZL/0AzAWnzYylU4qrmbyTZZm/xy0yoim0EoI6ZNiKGk+iN5DMnCSIWRSj t97TTvULouJrypNlEOKGpXFW+nd4exnMoZF1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMDN1h9/pxydDofYw25jBosc5JZ8wHwYDVR0jBBgwFoAUkEgXQ3MJLmD9IX+/ HSOR79WjObwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy MC9rRWdYUTNNSkxtRDlJWC1fSFNPUjc5V2pPYncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tFZ1hRM01KTG1EOUlYLV9IU09SNzlXak9idy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjAva0VnWFEzTUpMbUQ5 SVgtX0hTT1I3OVdqT2J3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE4ChlIAv+2UGSWZbXaAnPBrSTwi9KpWIMAv9bw7fSk34xilC7//+CXsM1FP TJ1Hjj1ZN3YG5Nkf0v8IOpngzLy6tlArYgQEyP0xa5x+nHbu2wu4P3x6gg5tQbQJ GWa02fJ6X5KX2ckvSK5E5//u/d8ki+aGPLEhlB1LRl0WP+2DsNZdS6bavEUxkr7i deJqeE05Mf08zGr6EsAfmnJ8YazTAIyHj/GPP0clC3WgCwglqyeUyLkeDRcXpKkL jAPuaSD1N7M1BEUM9+6Mr2R3vooTEIw10pEFnYoL0jSMtBoYpQPAdw9IQ2Q6xgAh ACgi6YUPaFbOv/80VwTUmxM82Nw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:35 2025 by rpki-client