$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft File: ldntqLoorwPp7aZMarFbbPYvoGM.mft (raw, json) Hash identifier: G3CYCYFgUBQ6q7e1/p+uVBe56n/DQU4RC0gp6RKFC4I= Subject key identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 Authority key identifier: 95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 Certificate issuer: /CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Certificate serial: 0603 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft Manifest number: 0603 Signing time: Sun 19 Oct 2025 22:08:18 +0000 Manifest this update: Sun 19 Oct 2025 22:08:18 +0000 Manifest next update: Mon 20 Oct 2025 04:08:18 +0000 Files and hashes: 1: ldntqLoorwPp7aZMarFbbPYvoGM.crl (hash: DxY3XTg25zvxjc5URyNs4UBLErhsrmwa4tOXNhgXaPc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 04:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1539 (0x603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Validity Not Before: Oct 19 22:08:18 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F1422785AEB77794E677E837686C920829C22C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:1f:1b:36:2f:ba:66:78:29:1c:e0:a7:3a: 97:52:e5:09:dd:d1:91:b2:73:8a:72:5a:fc:a9:11: 97:73:c7:c1:13:86:59:6c:bd:a3:25:61:19:5c:d7: b5:44:e8:47:12:14:87:85:36:53:cd:b7:8c:5a:0a: 86:22:22:05:c5:8e:1c:9f:27:8d:d0:8a:82:f3:20: ca:3c:41:96:1d:51:34:21:07:d8:78:7a:f9:35:f9: f0:0d:4c:70:c8:71:b5:74:b6:34:d8:38:6c:88:c6: b8:48:bd:24:d3:29:c3:d7:86:b8:08:12:f8:a0:01: 3c:63:5f:36:f8:36:15:90:cb:02:62:21:8b:4e:5d: 90:cd:e8:cb:d7:7c:6f:e4:54:09:01:77:f8:bc:8a: 71:90:b1:fc:a6:ad:c1:17:d0:66:90:b7:1e:53:98: e1:d6:30:e6:60:ef:29:8c:1e:48:d6:b0:cf:53:d7: 3a:22:b5:cd:53:64:8f:76:ca:4b:21:ec:90:ce:06: cd:4b:35:e0:75:02:fd:aa:fe:22:75:36:99:ea:32: 1d:4e:04:8a:56:3a:06:14:0f:f4:d5:60:02:81:2d: 20:30:5f:c3:48:55:ed:db:e7:72:77:e6:2c:99:ef: 84:7d:e3:ba:fc:f6:c7:f9:a2:35:46:c8:65:41:76: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 X509v3 Authority Key Identifier: keyid:95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:de:b7:a9:0c:dd:0c:d4:88:1d:0f:f1:29:6f:2a:c4:8d:08: 8e:7c:3c:f5:f6:d7:e0:52:db:a7:5f:e7:42:9a:dd:84:8d:c1: ce:b3:8d:1b:20:80:92:93:1e:65:d3:af:bb:b4:07:64:69:47: 00:37:f2:ae:94:8e:1b:df:ca:d6:f8:93:b9:f2:e5:c2:e4:41: 66:07:22:b5:35:9c:aa:b9:b3:8b:d2:f6:eb:a9:db:cc:ca:6b: f5:d5:c0:8c:54:8c:7c:df:43:36:37:8e:e8:71:24:99:b5:41: c8:3b:36:6a:e0:5c:de:db:54:8d:fa:67:90:62:dd:9e:93:3c: 24:3b:c2:88:0e:89:42:59:23:e8:92:29:9e:55:42:ea:db:bc: 80:58:01:1e:ca:fd:7c:cf:40:27:16:32:86:cb:24:77:2d:57: c5:e2:cf:bd:bd:6f:46:f2:9b:82:1e:f1:b5:5c:38:a8:d9:c7: aa:b9:77:e3:26:d0:d0:0b:1d:56:18:f4:52:67:07:11:6f:99: 22:bd:4b:d8:f4:99:87:69:d6:9b:6b:9e:15:58:53:e3:3a:32: 29:6a:2b:b3:60:c8:96:24:00:83:7e:7f:8d:86:a5:3e:9f:ae: 21:64:3f:46:87:48:71:99:6d:3b:8b:da:6a:75:d1:21:26:c5: b3:26:fc:0a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTVE OUVEQThCQTI4QUYwM0U5RURBNjRDNkFCMTVCNkNGNjJGQTA2MzAeFw0yNTEwMTky MjA4MThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEYxNDIyNzg1QUVCNzc3 OTRFNjc3RTgzNzY4NkM5MjA4MjlDMjJDNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJB8bNi+6ZngpHOCnOpdS5Qnd0ZGyc4pyWvypEZdzx8EThlls vaMlYRlc17VE6EcSFIeFNlPNt4xaCoYiIgXFjhyfJ43QioLzIMo8QZYdUTQhB9h4 evk1+fANTHDIcbV0tjTYOGyIxrhIvSTTKcPXhrgIEvigATxjXzb4NhWQywJiIYtO XZDN6MvXfG/kVAkBd/i8inGQsfymrcEX0GaQtx5TmOHWMOZg7ymMHkjWsM9T1zoi tc1TZI92yksh7JDOBs1LNeB1Av2q/iJ1NpnqMh1OBIpWOgYUD/TVYAKBLSAwX8NI Ve3b53J35iyZ74R947r89sf5ojVGyGVBdp5/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8UInha63d5Tmd+g3aGySCCnCLHAwHwYDVR0jBBgwFoAUldntqLoorwPp7aZM arFbbPYvoGMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OS9sZG50cUxvb3J3UHA3YVpNYXJGYmJQWXZvR00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xkbnRxTG9vcndQcDdhWk1hckZiYlBZdm9HTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzkvbGRudHFMb29yd1Bw N2FaTWFyRmJiUFl2b0dNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEvet6kM3QzUiB0P8SlvKsSNCI58PPX21+BS26df50Ka3YSNwc6zjRsggJKT HmXTr7u0B2RpRwA38q6Ujhvfytb4k7ny5cLkQWYHIrU1nKq5s4vS9uup28zKa/XV wIxUjHzfQzY3juhxJJm1Qcg7NmrgXN7bVI36Z5Bi3Z6TPCQ7wogOiUJZI+iSKZ5V QurbvIBYAR7K/XzPQCcWMobLJHctV8Xiz729b0bym4Ie8bVcOKjZx6q5d+Mm0NAL HVYY9FJnBxFvmSK9S9j0mYdp1ptrnhVYU+M6MilqK7NgyJYkAIN+f42GpT6friFk P0aHSHGZbTuL2mp10SEmxbMm/Ao= -----END CERTIFICATE-----Generated at Mon Oct 20 00:20:16 2025 by rpki-client