$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft File: xqqhwc8lwisJdbVYvDWjpnYmQiY.mft (raw, json) Hash identifier: rfgVI1zm0UlfEjc1roWWWlf5lscXJ4sQ+9+ksmI2bs4= Subject key identifier: AB:97:76:C5:D9:0F:AA:D3:24:F5:A3:06:CB:61:AE:63:19:CA:82:EC Authority key identifier: C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 Certificate issuer: /CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226 Certificate serial: 6C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft Manifest number: 6C Signing time: Mon 20 Oct 2025 13:34:28 +0000 Manifest this update: Mon 20 Oct 2025 13:34:28 +0000 Manifest next update: Mon 20 Oct 2025 19:34:28 +0000 Files and hashes: 1: xqqhwc8lwisJdbVYvDWjpnYmQiY.crl (hash: 1dMtOKau1Iu7o4sN0/d5ymhaazzgy+7NQ1u2WGZ/2E0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226 Validity Not Before: Oct 20 13:34:28 2025 GMT Not After : Sep 29 06:44:54 2026 GMT Subject: CN=AB9776C5D90FAAD324F5A306CB61AE6319CA82EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:62:96:d9:51:69:b3:fc:f8:d2:db:7d:6e: 84:89:97:b6:48:c5:17:75:57:9f:19:1a:ac:a2:01: 29:b5:55:2c:a6:b9:2a:12:66:b1:3e:e2:8b:e2:28: c6:d2:0d:b3:96:0f:c7:30:4b:17:8b:9c:f2:67:97: 55:c5:2e:df:19:e6:5f:8f:58:ab:5c:3a:06:66:63: e1:ba:7e:0d:2d:c6:80:b4:97:45:44:f1:16:86:5f: 21:c7:b0:2a:35:dc:6e:f0:f5:9a:a5:2e:d7:5c:42: 0c:6e:dc:ba:13:46:3b:59:00:b2:a9:02:2c:1f:04: 29:d6:3a:7c:01:22:15:ce:d3:a3:2e:bd:4e:62:d8: 6c:97:5c:b0:08:e6:ec:05:da:0c:2b:44:1e:49:a7: 47:40:44:6a:02:62:97:98:1d:76:1e:1a:64:15:b2: 0a:8d:6a:a0:f3:04:c0:67:c9:09:b2:e6:e5:05:32: 93:d0:f4:9c:10:49:63:82:6b:13:f7:76:06:11:a3: d3:6b:5f:55:94:77:38:83:79:65:7d:63:7c:8c:2d: d2:9d:33:b2:f8:1c:12:cb:60:14:8a:ad:6d:d8:99: bb:f9:30:50:1d:2e:45:6e:f4:7d:e2:9a:43:b0:a1: b7:bc:66:46:07:a0:da:88:9c:06:0a:1f:b7:e0:3e: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:97:76:C5:D9:0F:AA:D3:24:F5:A3:06:CB:61:AE:63:19:CA:82:EC X509v3 Authority Key Identifier: keyid:C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5b:43:ec:36:d4:a7:b0:9b:6c:ad:49:5d:0f:22:ce:ca:9f: 9d:ba:41:83:0b:bb:0d:3f:fe:47:97:01:19:d6:e4:4b:de:5a: d8:77:df:4a:a9:f4:73:9a:ba:28:a0:45:1e:db:32:be:56:9d: 68:46:7e:03:3a:32:e5:a6:84:02:cc:ba:31:c8:7d:90:35:31: 4e:5f:5a:de:87:75:fc:ef:e4:a5:3e:6a:1d:a0:6d:07:5e:bc: 57:54:8f:c0:39:ba:31:9e:45:45:27:4f:6e:c9:67:c7:29:91: 92:bc:60:c1:6e:24:df:e4:28:00:91:db:7a:83:f0:99:c3:17: 95:70:bd:52:73:61:74:83:97:9d:79:5d:25:4f:2f:fb:86:62: c8:45:75:48:72:07:1d:27:95:7e:e1:37:db:2d:70:19:8b:33: ad:bb:69:96:82:27:b1:dc:7e:4b:7d:f9:c9:6a:67:7d:bd:d0: 7b:93:47:7f:7c:81:c5:17:74:33:66:11:f5:3f:1c:e8:6c:87: 92:e2:bb:a9:35:7c:27:d5:8e:b4:2b:4b:8b:0c:c2:a6:f1:88: b1:7d:7b:46:d4:8e:01:3b:c5:42:e8:1a:49:9d:ec:49:c8:00: b6:35:61:3e:d0:ac:52:1b:ef:46:03:ad:b9:4b:e9:29:3a:9f: b1:5a:f1:db -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNkFB QTFDMUNGMjVDMjJCMDk3NUI1NThCQzM1QTNBNjc2MjY0MjI2MB4XDTI1MTAyMDEz MzQyOFoXDTI2MDkyOTA2NDQ1NFowMzExMC8GA1UEAxMoQUI5Nzc2QzVEOTBGQUFE MzI0RjVBMzA2Q0I2MUFFNjMxOUNBODJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMTsYpbZUWmz/PjS231uhImXtkjFF3VXnxkarKIBKbVVLKa5KhJm sT7ii+IoxtINs5YPxzBLF4uc8meXVcUu3xnmX49Yq1w6BmZj4bp+DS3GgLSXRUTx FoZfIcewKjXcbvD1mqUu11xCDG7cuhNGO1kAsqkCLB8EKdY6fAEiFc7Toy69TmLY bJdcsAjm7AXaDCtEHkmnR0BEagJil5gddh4aZBWyCo1qoPMEwGfJCbLm5QUyk9D0 nBBJY4JrE/d2BhGj02tfVZR3OIN5ZX1jfIwt0p0zsvgcEstgFIqtbdiZu/kwUB0u RW70feKaQ7Cht7xmRgeg2oicBgoft+A+c4cCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSrl3bF2Q+q0yT1owbLYa5jGcqC7DAfBgNVHSMEGDAWgBTGqqHBzyXCKwl1tVi8 NaOmdiZCJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzk3 L3hxcWh3Yzhsd2lzSmRiVll2RFdqcG5ZbVFpWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveHFxaHdjOGx3aXNKZGJWWXZEV2pwblltUWlZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5Ny94cXFod2M4bHdpc0pk YlZZdkRXanBuWW1RaVkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc1tD7DbUp7CbbK1JXQ8izsqfnbpBgwu7DT/+R5cBGdbkS95a2HffSqn0c5q6 KKBFHtsyvladaEZ+Azoy5aaEAsy6Mch9kDUxTl9a3od1/O/kpT5qHaBtB168V1SP wDm6MZ5FRSdPbslnxymRkrxgwW4k3+QoAJHbeoPwmcMXlXC9UnNhdIOXnXldJU8v +4ZiyEV1SHIHHSeVfuE32y1wGYszrbtploInsdx+S335yWpnfb3Qe5NHf3yBxRd0 M2YR9T8c6GyHkuK7qTV8J9WOtCtLiwzCpvGIsX17RtSOATvFQugaSZ3sScgAtjVh PtCsUhvvRgOtuUvpKTqfsVrx2w== -----END CERTIFICATE-----Generated at Mon Oct 20 16:29:13 2025 by rpki-client