$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft File: nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft (raw, json) Hash identifier: LyC7650ZTrkJ4qul81tsXX1QnLIJK1HOuBAEu30mxaQ= Subject key identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 Authority key identifier: 9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 Certificate issuer: /CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Certificate serial: 02F9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft Manifest number: 02F9 Signing time: Mon 20 Oct 2025 16:04:10 +0000 Manifest this update: Mon 20 Oct 2025 16:04:10 +0000 Manifest next update: Mon 20 Oct 2025 22:04:10 +0000 Files and hashes: 1: nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl (hash: gYMucuNsno+wW9mM/IDyq5teH6fsVWGIWhwXITaawmg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DF8EFA88E2ABCE193E4EDF0E1D6A8AA84B95BE4 Validity Not Before: Oct 20 16:04:10 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C6279EA9F47099A4B320B69DB6EBFCDCFBAEA616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:b6:23:03:35:f1:e9:a2:c2:c0:d2:60:9e: 33:93:a0:b3:93:60:ed:5a:02:d8:97:10:15:23:02: 06:bc:53:bd:f8:8d:ed:29:95:fe:4d:d7:c2:d4:58: a0:7d:d0:ea:31:55:83:bf:8f:1b:f3:89:42:ef:db: 71:b7:5f:ac:c9:38:33:9a:4c:24:e8:9e:15:d0:32: d9:4b:3c:c1:17:73:89:dc:0f:35:9e:b7:b9:8a:a4: 96:34:8a:08:8e:b1:27:e2:8a:c0:df:ee:ec:3b:7e: 25:6a:02:9b:4c:5f:47:60:b7:24:92:02:e6:50:48: 46:cf:cd:51:d6:d1:94:c6:78:50:b1:22:b4:f2:ab: 0e:d2:84:2a:8a:12:05:bd:c0:1a:d0:44:35:2a:67: f5:db:9a:f7:b3:f1:fc:33:b0:77:fa:bf:cc:37:28: ab:8e:33:69:10:b9:9a:99:16:e6:67:89:1a:2b:52: 01:59:f8:6f:4d:b3:93:74:89:d5:66:59:d8:2b:b4: d5:1d:5f:b5:23:b1:2c:07:80:53:d0:22:4b:56:25: 02:da:71:d6:e5:84:1c:78:a2:7e:84:37:fc:c6:9d: a1:72:e9:b4:3a:d3:3f:4e:27:fa:97:9e:73:a2:fc: e8:9b:21:7f:df:41:e9:04:a1:a6:ec:f3:3a:ec:8b: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:9E:A9:F4:70:99:A4:B3:20:B6:9D:B6:EB:FC:DC:FB:AE:A6:16 X509v3 Authority Key Identifier: keyid:9D:F8:EF:A8:8E:2A:BC:E1:93:E4:ED:F0:E1:D6:A8:AA:84:B9:5B:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nfjvqI4qvOGT5O3w4daoqoS5W-Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3371/nfjvqI4qvOGT5O3w4daoqoS5W-Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:8b:7e:c9:c4:1c:b7:6f:e7:c0:7d:b1:df:fe:7e:73:15:cf: 5f:19:86:e5:2c:95:cb:d9:0f:5a:73:d0:1d:23:a5:a7:cc:b8: e2:05:82:21:34:63:ad:4c:d2:06:0e:66:7a:6b:4f:68:43:1a: 37:ac:d4:b1:83:d4:b3:8a:77:04:11:9c:41:42:e2:dd:f6:65: 9a:78:0d:44:3f:21:64:9b:4e:72:d6:39:9b:43:00:14:4e:10: ef:7d:6e:cc:92:b5:3b:88:1d:c6:3d:51:19:6c:cc:51:37:fc: 0c:47:e5:25:2a:5d:37:e4:d5:a4:df:fe:60:ba:c2:9f:fa:ef: 6c:09:bf:91:3c:33:e8:c0:bf:0f:c8:75:0c:2d:70:e3:28:7a: 0e:11:b0:12:b8:e7:f2:06:25:ac:d2:1c:2c:a1:da:40:0f:39: 9e:31:19:54:f4:e3:78:73:33:43:0d:c0:3e:00:b0:03:c9:09: 54:e6:5f:ae:29:94:b9:09:b0:41:7c:d2:5b:14:94:b8:79:6e: 4a:f3:fe:cc:1f:d4:68:7d:12:8f:64:da:83:aa:51:5c:7a:d0: c4:8d:4c:16:63:09:5a:a3:bb:b6:bd:ae:aa:05:6d:a6:cb:72: 4b:ce:40:b4:4f:3f:d8:b1:d1:2a:1c:60:12:94:64:f1:95:ea: 0b:46:0c:9d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURG OEVGQTg4RTJBQkNFMTkzRTRFREYwRTFENkE4QUE4NEI5NUJFNDAeFw0yNTEwMjAx NjA0MTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM2Mjc5RUE5RjQ3MDk5 QTRCMzIwQjY5REI2RUJGQ0RDRkJBRUE2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG5LYjAzXx6aLCwNJgnjOToLOTYO1aAtiXEBUjAga8U734je0p lf5N18LUWKB90OoxVYO/jxvziULv23G3X6zJODOaTCTonhXQMtlLPMEXc4ncDzWe t7mKpJY0igiOsSfiisDf7uw7fiVqAptMX0dgtySSAuZQSEbPzVHW0ZTGeFCxIrTy qw7ShCqKEgW9wBrQRDUqZ/Xbmvez8fwzsHf6v8w3KKuOM2kQuZqZFuZniRorUgFZ +G9Ns5N0idVmWdgrtNUdX7UjsSwHgFPQIktWJQLacdblhBx4on6EN/zGnaFy6bQ6 0z9OJ/qXnnOi/OibIX/fQekEoabs8zrsi2UXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUxieeqfRwmaSzILadtuv83PuuphYwHwYDVR0jBBgwFoAUnfjvqI4qvOGT5O3w 4daoqoS5W+QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 MS9uZmp2cUk0cXZPR1Q1TzN3NGRhb3FvUzVXLVEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL25manZxSTRxdk9HVDVPM3c0ZGFvcW9TNVctUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzEvbmZqdnFJNHF2T0dU NU8zdzRkYW9xb1M1Vy1RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKCLfsnEHLdv58B9sd/+fnMVz18ZhuUslcvZD1pz0B0jpafMuOIFgiE0Y61M 0gYOZnprT2hDGjes1LGD1LOKdwQRnEFC4t32ZZp4DUQ/IWSbTnLWOZtDABROEO99 bsyStTuIHcY9URlszFE3/AxH5SUqXTfk1aTf/mC6wp/672wJv5E8M+jAvw/IdQwt cOMoeg4RsBK45/IGJazSHCyh2kAPOZ4xGVT043hzM0MNwD4AsAPJCVTmX64plLkJ sEF80lsUlLh5bkrz/swf1Gh9Eo9k2oOqUVx60MSNTBZjCVqju7a9rqoFbabLckvO QLRPP9ix0SocYBKUZPGV6gtGDJ0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:48 2025 by rpki-client