$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft File: FCweOZsxNmQg7EfS4xcbGllluJM.mft (raw, json) Hash identifier: B4gMXtgdQrRp7HrRBDAvm7CvNCis6gEC8LLaM25RV9Y= Subject key identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B Authority key identifier: 14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 Certificate issuer: /CN=142C1E399B31366420EC47D2E3171B1A5965B893 Certificate serial: 01C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft Manifest number: 01C0 Signing time: Tue 21 Oct 2025 07:34:53 +0000 Manifest this update: Tue 21 Oct 2025 07:34:53 +0000 Manifest next update: Tue 21 Oct 2025 13:34:53 +0000 Files and hashes: 1: FCweOZsxNmQg7EfS4xcbGllluJM.crl (hash: YBJFeFEotXS+oigEIcuwnya41NmbROPDhIl/I+rDi1w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142C1E399B31366420EC47D2E3171B1A5965B893 Validity Not Before: Oct 21 07:34:53 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1C51D217224E6245574DA14CCBA48E0C1C765B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:a4:f0:43:1b:b9:27:9d:81:d0:4f:48:bd: 71:b6:a1:c2:e3:36:9a:84:9c:6a:64:6f:df:e6:5c: c6:7c:71:0d:6d:00:c1:5c:db:4a:ae:04:1e:fb:22: 9d:f7:ea:82:10:e1:a7:70:6d:94:a9:10:ed:32:ae: 03:77:df:6a:65:a1:64:04:dc:d1:94:b7:fa:07:20: a9:cd:17:14:eb:d9:c9:e2:07:dc:ee:81:9d:bc:9f: b1:52:5d:3a:49:af:f7:bc:8f:4f:d6:5f:e6:86:20: 4a:d0:d5:36:e4:b1:72:51:01:18:82:c3:cc:18:3e: 9d:40:b8:fc:8d:93:ad:0f:b8:aa:a3:3a:6a:3e:88: 71:ff:b9:de:ff:e3:54:31:58:1b:e5:42:ed:91:bb: 0f:20:eb:bf:1a:77:61:a3:2f:e5:0c:4c:e7:9e:52: b9:04:b5:b5:26:49:37:97:2e:64:c2:c7:e5:53:d3: 0e:dd:02:27:ea:aa:93:23:8a:4d:80:2f:17:c9:a5: 63:51:89:e1:60:01:49:ca:1d:95:a9:3a:f5:04:bb: 98:6b:b8:b8:25:67:1c:f9:4f:21:a6:17:a1:22:51: 0d:57:66:26:5c:1b:be:1c:a6:35:67:31:83:7c:bc: ed:a7:f8:0c:9e:58:6d:ca:1a:78:74:09:14:5b:7b: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B X509v3 Authority Key Identifier: keyid:14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a3:9e:4e:db:61:7f:8e:30:36:b9:06:d6:5d:4d:49:94:c0: de:4e:72:80:99:00:ac:d4:6b:ba:4f:9a:7b:de:07:f9:4c:20: 89:9b:68:10:9e:85:e7:3c:f0:90:98:d0:19:45:a6:4e:bd:8b: ba:d7:20:1d:b8:52:8f:fa:11:01:09:94:0f:c6:e3:df:f4:a9: ed:d2:84:e5:19:6a:77:17:67:f1:18:21:15:02:b5:5a:48:92: 2b:b2:0c:d2:cc:c8:5a:5a:3c:ae:60:b4:a7:3b:3e:96:91:85: ab:8a:0d:48:20:30:1c:73:5f:23:da:cb:76:a1:88:d4:f3:2c: e0:79:76:90:3a:a9:d6:43:0e:7d:d7:92:8a:35:62:26:18:4b: 3a:f1:f7:ca:1f:45:62:6f:b2:40:3f:25:ff:02:1c:47:36:65: c7:42:83:e6:54:f2:96:b1:a4:6c:e2:03:cb:9e:30:21:df:20: 79:4e:10:f2:3d:74:e8:bf:97:e3:5f:d2:cf:59:97:a8:22:43: 59:c2:6f:67:21:e8:e1:37:40:4e:dd:55:ac:ad:10:23:27:f5: 7f:30:6f:93:2c:5f:41:ea:cb:32:4a:81:0e:74:d4:0c:8a:e5: 06:c2:c1:94:75:22:fe:d1:bf:be:cc:4f:d4:55:20:a6:d4:02: 69:db:06:87 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTQy QzFFMzk5QjMxMzY2NDIwRUM0N0QyRTMxNzFCMUE1OTY1Qjg5MzAeFw0yNTEwMjEw NzM0NTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFDNTFEMjE3MjI0RTYy NDU1NzREQTE0Q0NCQTQ4RTBDMUM3NjVCMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw0KTwQxu5J52B0E9IvXG2ocLjNpqEnGpkb9/mXMZ8cQ1tAMFc 20quBB77Ip336oIQ4adwbZSpEO0yrgN332ploWQE3NGUt/oHIKnNFxTr2cniB9zu gZ28n7FSXTpJr/e8j0/WX+aGIErQ1TbksXJRARiCw8wYPp1AuPyNk60PuKqjOmo+ iHH/ud7/41QxWBvlQu2Ruw8g678ad2GjL+UMTOeeUrkEtbUmSTeXLmTCx+VT0w7d AifqqpMjik2ALxfJpWNRieFgAUnKHZWpOvUEu5hruLglZxz5TyGmF6EiUQ1XZiZc G74cpjVnMYN8vO2n+AyeWG3KGnh0CRRbey2HAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUHFHSFyJOYkVXTaFMy6SODBx2WwswHwYDVR0jBBgwFoAUFCweOZsxNmQg7EfS 4xcbGllluJMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 NS9GQ3dlT1pzeE5tUWc3RWZTNHhjYkdsbGx1Sk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZDd2VPWnN4Tm1RZzdFZlM0eGNiR2xsbHVKTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODUvRkN3ZU9ac3hObVFn N0VmUzR4Y2JHbGxsdUpNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADujnk7bYX+OMDa5BtZdTUmUwN5OcoCZAKzUa7pPmnveB/lMIImbaBCehec8 8JCY0BlFpk69i7rXIB24Uo/6EQEJlA/G49/0qe3ShOUZancXZ/EYIRUCtVpIkiuy DNLMyFpaPK5gtKc7PpaRhauKDUggMBxzXyPay3ahiNTzLOB5dpA6qdZDDn3Xkoo1 YiYYSzrx98ofRWJvskA/Jf8CHEc2ZcdCg+ZU8paxpGziA8ueMCHfIHlOEPI9dOi/ l+Nf0s9Zl6giQ1nCb2ch6OE3QE7dVaytECMn9X8wb5MsX0HqyzJKgQ501AyK5QbC wZR1Iv7Rv77MT9RVIKbUAmnbBoc= -----END CERTIFICATE-----Generated at Tue Oct 21 11:00:28 2025 by rpki-client