$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft File: Z7bHlviRA1kP8cyQcd_kwN84_U0.mft (raw, json) Hash identifier: +z2PM6MuHcRXQq8E4nQYBeJvyXnQoOsPUchghK5N98c= Subject key identifier: 59:EA:CF:82:3B:3E:15:F6:9C:D6:25:5F:54:24:3B:C4:15:EB:80:6A Authority key identifier: 67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D Certificate issuer: /CN=67B6C796F89103590FF1CC9071DFE4C0DF38FD4D Certificate serial: 7F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z7bHlviRA1kP8cyQcd_kwN84_U0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft Manifest number: 7E Signing time: Tue 21 Oct 2025 09:34:40 +0000 Manifest this update: Tue 21 Oct 2025 09:34:40 +0000 Manifest next update: Tue 21 Oct 2025 15:34:40 +0000 Files and hashes: 1: Z7bHlviRA1kP8cyQcd_kwN84_U0.crl (hash: envI0nTk2+ab5KMc0NaJddIeSaUX6x9+byu5n9o+3Do=) 2: loLhskS-iZNnvxWA0PZirro_KmM.roa (hash: Pwatgv8DYXkuuWa++kua2bH5oIdl0XsHAQ6/LW4WROc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z7bHlviRA1kP8cyQcd_kwN84_U0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B6C796F89103590FF1CC9071DFE4C0DF38FD4D Validity Not Before: Oct 21 09:34:40 2025 GMT Not After : Sep 26 09:42:00 2026 GMT Subject: CN=59EACF823B3E15F69CD6255F54243BC415EB806A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:04:fb:58:14:da:e3:78:b4:21:e8:0f:fe: ad:d0:0a:2c:6a:40:e7:4a:59:df:e4:ba:d4:9c:06: 1d:03:cf:b8:c3:ea:c3:ab:f5:d9:77:f3:6a:8c:6f: eb:8a:80:4d:b7:a9:ee:7d:e0:14:fe:e4:3c:de:fc: 76:1e:79:c5:4b:d0:a3:92:a6:ad:b8:c0:78:84:4e: a3:b3:e6:74:ff:20:c5:e8:ed:3a:65:4d:bc:44:f9: 8f:68:ed:31:96:45:4a:2a:3d:35:4e:27:2f:fb:36: 55:8e:c5:1e:c7:09:c4:96:25:39:14:cf:3d:7e:07: 75:a9:96:24:d5:a2:af:cf:30:09:a9:48:91:d7:41: b5:6c:7a:4c:ea:31:3a:43:16:80:e0:b5:4e:ac:4a: dd:0b:a5:9f:07:bd:c2:8b:bc:e4:4e:2e:92:74:68: 05:04:1d:fc:80:ac:ea:b0:07:51:2b:4f:35:2a:95: e7:52:5d:7b:65:52:4b:60:c5:25:28:2b:38:5a:2d: 7a:38:c5:e4:4a:91:e5:1d:ce:26:1e:48:b9:00:c4: c3:d2:3d:4c:9d:45:d6:6a:c0:99:66:ab:bd:5b:fc: 86:4d:97:e6:b2:9e:90:aa:e5:cc:3c:9e:c1:1b:2f: bd:74:8d:23:65:b8:03:85:87:f1:c3:26:a0:37:4a: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EA:CF:82:3B:3E:15:F6:9C:D6:25:5F:54:24:3B:C4:15:EB:80:6A X509v3 Authority Key Identifier: keyid:67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z7bHlviRA1kP8cyQcd_kwN84_U0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0a:cf:12:08:e6:20:41:03:92:ab:4a:c4:f2:50:ca:fc:65: 3a:3e:f9:62:5b:7b:ad:10:af:02:42:42:e6:f3:ed:76:29:10: 70:2c:9e:d8:b3:ad:20:d3:a6:f4:52:fd:d0:10:4a:a5:43:08: 8f:85:02:c4:97:bc:f3:d1:65:92:f1:13:24:d7:61:f5:6c:60: 11:be:25:de:c2:76:95:7f:ee:55:bf:cf:9d:d4:b1:25:ea:53: 3c:bc:93:29:1a:54:1b:b8:4d:56:99:4b:fd:d9:f9:1b:91:9f: ac:00:e2:28:5a:aa:4d:2a:f3:dd:d3:85:2f:19:fd:62:b7:06: e6:12:cf:17:af:e2:ae:9d:bd:e3:ab:f0:94:bc:82:5a:9f:25: bb:87:c4:26:30:89:03:61:c5:99:fb:63:08:d3:d3:19:d9:98: bd:dc:d6:a3:35:77:81:65:31:e2:c5:5f:6e:ab:90:30:e9:d2: 92:fe:00:81:87:8e:9b:68:b9:c6:21:3d:af:eb:63:8c:ae:cb: 94:3c:16:ba:89:df:a5:7c:d4:b9:0d:27:7b:aa:e2:57:9d:cb: 91:65:b7:1c:26:db:a5:83:b7:92:3c:05:f9:4f:8d:76:0a:ac: 40:91:1d:7f:38:e4:b4:f0:0c:c3:0e:c9:43:79:9a:ed:22:d1: 94:cf:23:0d -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2N0I2 Qzc5NkY4OTEwMzU5MEZGMUNDOTA3MURGRTRDMERGMzhGRDREMB4XDTI1MTAyMTA5 MzQ0MFoXDTI2MDkyNjA5NDIwMFowMzExMC8GA1UEAxMoNTlFQUNGODIzQjNFMTVG NjlDRDYyNTVGNTQyNDNCQzQxNUVCODA2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK3FBPtYFNrjeLQh6A/+rdAKLGpA50pZ3+S61JwGHQPPuMPqw6v1 2Xfzaoxv64qATbep7n3gFP7kPN78dh55xUvQo5KmrbjAeIROo7PmdP8gxejtOmVN vET5j2jtMZZFSio9NU4nL/s2VY7FHscJxJYlORTPPX4HdamWJNWir88wCalIkddB tWx6TOoxOkMWgOC1TqxK3Qulnwe9wou85E4uknRoBQQd/ICs6rAHUStPNSqV51Jd e2VSS2DFJSgrOFotejjF5EqR5R3OJh5IuQDEw9I9TJ1F1mrAmWarvVv8hk2X5rKe kKrlzDyewRsvvXSNI2W4A4WH8cMmoDdKBY8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRZ6s+COz4V9pzWJV9UJDvEFeuAajAfBgNVHSMEGDAWgBRntseW+JEDWQ/xzJBx 3+TA3zj9TTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzk2 L1o3YkhsdmlSQTFrUDhjeVFjZF9rd044NF9VMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWjdiSGx2aVJBMWtQOGN5UWNkX2t3Tjg0X1UwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5Ni9aN2JIbHZpUkExa1A4 Y3lRY2Rfa3dOODRfVTAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIArPEgjmIEEDkqtKxPJQyvxlOj75Ylt7rRCvAkJC5vPtdikQcCye2LOtINOm 9FL90BBKpUMIj4UCxJe889FlkvETJNdh9WxgEb4l3sJ2lX/uVb/PndSxJepTPLyT KRpUG7hNVplL/dn5G5GfrADiKFqqTSrz3dOFLxn9YrcG5hLPF6/irp2946vwlLyC Wp8lu4fEJjCJA2HFmftjCNPTGdmYvdzWozV3gWUx4sVfbquQMOnSkv4AgYeOm2i5 xiE9r+tjjK7LlDwWuonfpXzUuQ0ne6riV53LkWW3HCbbpYO3kjwF+U+NdgqsQJEd fzjktPAMww7JQ3ma7SLRlM8jDQ== -----END CERTIFICATE-----Generated at Tue Oct 21 12:20:46 2025 by rpki-client