$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft (raw, json) Hash identifier: CsweagNN2cmYg8Rtdd51vQkmtHzaINWlgWh0i8Ej1s8= Subject key identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 Authority key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 Certificate issuer: /CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Certificate serial: 0650 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft Manifest number: 0650 Signing time: Mon 20 Oct 2025 17:09:05 +0000 Manifest this update: Mon 20 Oct 2025 17:09:05 +0000 Manifest next update: Mon 20 Oct 2025 23:09:05 +0000 Files and hashes: 1: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl (hash: Q7Xb7s3OGjFHMF3UmzbcKUj4ICAsJ+xK3hxK3B/gqSU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Validity Not Before: Oct 20 17:09:05 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A9C96D2CD7FF73A24D41602735A73A35A0695009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:d1:dd:7d:8d:3f:3f:cc:2b:5d:b7:4b:22: 98:52:25:29:58:7e:98:42:d4:70:0f:27:ed:8e:77: 8d:4d:36:96:c0:4c:60:f1:93:56:45:e4:12:33:e0: a3:45:1e:21:a4:f3:aa:81:04:cd:e3:8f:da:1c:f1: c6:5e:d0:38:98:b1:74:e9:2d:10:b0:f5:c4:25:2b: 8e:34:9f:77:dd:16:76:e5:54:7c:5b:84:a2:d1:5d: 28:5d:50:b6:46:2e:24:5c:63:6d:c2:e5:94:90:c9: 11:d1:61:fd:28:3f:f4:0d:cb:72:74:d2:80:ad:50: de:ee:8e:e0:ba:f3:92:4d:be:ba:cd:c4:2a:0f:6c: d8:0a:d3:b5:90:43:90:ff:d1:8b:6b:74:7f:cd:d1: a0:ac:33:30:9b:96:5e:6b:3a:4d:8b:b8:8d:c7:2c: e1:3e:2e:b5:5b:5e:35:48:08:eb:75:b9:24:7a:d3: d7:89:70:b9:87:fd:9d:45:3e:95:ce:bf:a3:96:c5: a0:31:c0:56:f9:76:ed:12:8f:dd:e9:54:26:cb:32: bb:dd:ba:79:af:ac:58:61:a1:87:09:a3:87:86:f0: 47:3a:d6:49:c5:df:3a:4b:e3:96:ac:0b:22:8b:c6: a8:fe:41:2d:02:7e:df:2a:b0:85:34:bf:21:47:f9: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:6D:2C:D7:FF:73:A2:4D:41:60:27:35:A7:3A:35:A0:69:50:09 X509v3 Authority Key Identifier: keyid:7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:24:30:90:40:fa:66:e8:34:51:2c:f6:ec:f3:ab:e0:0a:e7: 0f:78:9f:7c:8d:1f:6f:84:63:e7:1f:f3:0e:73:c4:70:a0:b0: 99:a4:8c:82:d9:f7:f8:6c:34:00:16:7b:69:4a:74:88:02:d6: 49:0f:a6:e6:48:bd:52:03:75:55:05:d5:04:fe:81:54:59:92: fd:07:7f:dc:00:eb:b8:26:28:97:53:d6:d7:90:eb:54:ad:42: 8b:61:f5:c7:ca:d1:25:39:b3:8e:ff:8e:36:63:53:82:80:60: 04:1c:b4:82:8c:8f:86:4a:13:59:5b:f2:14:15:87:d1:c9:c7: 27:72:0d:13:a9:eb:28:77:16:92:58:25:a9:ad:cb:26:ea:77: 71:a1:2a:be:72:6c:cd:de:2d:e0:a4:f8:61:60:02:7e:d9:6d: df:58:e7:4f:6d:12:72:23:6d:3f:7b:48:f6:75:77:e9:f6:6d: 28:c5:f3:b9:59:12:13:46:6f:86:06:88:bd:cb:70:47:ed:2e: 70:8c:42:31:69:a4:ed:73:cd:d1:48:61:aa:0f:07:7b:7a:2e: 47:03:6d:37:a6:db:ad:21:44:ad:a8:35:0b:2c:09:3b:35:aa: 31:a4:da:a2:2e:8c:44:b4:df:32:96:e1:3b:8b:cd:90:e7:7b: d5:4e:08:df -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U0 MDNCOTUyMEI0MjQ2NDQzRDNFQjg3RkYxQUNDNjk5RTA0REZCNjAeFw0yNTEwMjAx NzA5MDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE5Qzk2RDJDRDdGRjcz QTI0RDQxNjAyNzM1QTczQTM1QTA2OTUwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrJ9HdfY0/P8wrXbdLIphSJSlYfphC1HAPJ+2Od41NNpbATGDx k1ZF5BIz4KNFHiGk86qBBM3jj9oc8cZe0DiYsXTpLRCw9cQlK440n3fdFnblVHxb hKLRXShdULZGLiRcY23C5ZSQyRHRYf0oP/QNy3J00oCtUN7ujuC685JNvrrNxCoP bNgK07WQQ5D/0YtrdH/N0aCsMzCbll5rOk2LuI3HLOE+LrVbXjVICOt1uSR609eJ cLmH/Z1FPpXOv6OWxaAxwFb5du0Sj93pVCbLMrvdunmvrFhhoYcJo4eG8Ec61knF 3zpL45asCyKLxqj+QS0Cft8qsIU0vyFH+VOxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUqcltLNf/c6JNQWAnNac6NaBpUAkwHwYDVR0jBBgwFoAUfkA7lSC0JGRD0+uH /xrMaZ4E37YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi9ma0E3bFNDMEpHUkQwLXVIX3hyTWFaNEUzN1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZrQTdsU0MwSkdSRDAtdUhfeHJNYVo0RTM3WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzIvZmtBN2xTQzBKR1JE MC11SF94ck1hWjRFMzdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACAkMJBA+mboNFEs9uzzq+AK5w94n3yNH2+EY+cf8w5zxHCgsJmkjILZ9/hs NAAWe2lKdIgC1kkPpuZIvVIDdVUF1QT+gVRZkv0Hf9wA67gmKJdT1teQ61StQoth 9cfK0SU5s47/jjZjU4KAYAQctIKMj4ZKE1lb8hQVh9HJxydyDROp6yh3FpJYJamt yybqd3GhKr5ybM3eLeCk+GFgAn7Zbd9Y509tEnIjbT97SPZ1d+n2bSjF87lZEhNG b4YGiL3LcEftLnCMQjFppO1zzdFIYaoPB3t6LkcDbTem260hRK2oNQssCTs1qjGk 2qIujES03zKW4TuLzZDne9VOCN8= -----END CERTIFICATE-----Generated at Mon Oct 20 21:01:08 2025 by rpki-client