$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft File: iye4K0wLcXWPOXfCb1wNgKXHauc.mft (raw, json) Hash identifier: 9E5PxD/Fxy+a8mOIgQyyzhIJ3L9BvqHr5vYURVOlWNc= Subject key identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B Authority key identifier: 8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 Certificate issuer: /CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Certificate serial: 68 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft Manifest number: 68 Signing time: Mon 20 Oct 2025 12:07:21 +0000 Manifest this update: Mon 20 Oct 2025 12:07:21 +0000 Manifest next update: Mon 20 Oct 2025 18:07:21 +0000 Files and hashes: 1: iye4K0wLcXWPOXfCb1wNgKXHauc.crl (hash: 12iJTxdIoUcizhmFo7H47dc6Z6CeX3aT3bBIu1ifNlI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Validity Not Before: Oct 20 12:07:21 2025 GMT Not After : Sep 30 02:26:39 2026 GMT Subject: CN=1246FF04A200201BCC83278BD3E0D125C50EC15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:c1:f1:dd:e9:2f:ad:9d:5e:3c:58:9f:b3: 5e:72:29:60:08:00:83:15:0b:e0:c3:99:18:a0:88: 47:e8:e0:1b:42:44:84:df:77:7e:5d:d8:6f:49:05: a6:f8:5a:e1:fe:8b:b0:a7:3c:ad:1b:25:1c:76:e8: 8f:21:d3:17:bd:1c:53:78:4a:c1:76:01:3c:da:4e: 2c:08:ca:87:5f:0e:6c:91:91:66:6c:a8:f2:5f:2c: 44:58:ff:f9:ad:b4:8f:9b:56:aa:07:b4:08:09:da: fa:71:0b:49:cb:6d:38:c0:17:c0:57:c4:9f:a5:c3: c2:06:c6:73:da:0c:dd:fa:30:00:e8:eb:db:ea:cf: 0b:1c:7b:8a:a3:b3:31:7b:fe:94:bc:c4:a3:6a:8c: b5:da:7e:23:fe:26:75:1d:ca:5c:5a:95:03:79:19: 1d:f4:39:ed:a8:b2:69:15:6d:9c:a8:44:49:4c:10: 56:49:5f:e7:bc:27:d3:b5:3f:22:81:5d:14:3e:27: 89:b1:de:49:fe:a9:05:77:75:5f:27:9b:fc:ec:ad: 51:8b:42:c9:9e:ec:e3:ed:31:ed:07:1b:6e:05:a5: 8b:24:c4:23:93:53:7c:04:47:96:4f:95:bc:f3:e9: f5:a5:79:ac:37:4b:16:38:7b:7a:f7:96:9a:7e:c5: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B X509v3 Authority Key Identifier: keyid:8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d2:97:d0:3d:3a:e1:57:59:07:d2:9c:05:33:2c:44:0a:ea: c6:47:ae:d6:4a:e4:ae:e4:dc:59:2f:02:94:34:4a:95:53:41: 35:b9:9b:1f:2a:ed:6b:a2:a7:e9:c3:70:c9:6a:6c:31:5c:4a: 74:82:ec:cb:62:1e:8d:20:97:d8:0b:1e:90:f5:fc:c1:ba:06: 41:49:ef:a1:af:70:c9:5c:99:2d:43:dc:03:f1:3d:6b:7f:7a: 0b:e0:b7:92:27:26:60:cb:90:a8:97:af:df:40:83:42:ce:a0: ef:9b:f8:fb:6d:81:22:ae:be:40:15:ea:a6:ee:4d:77:a7:1e: e4:91:1f:5e:73:e2:f1:fc:d8:ff:0f:05:33:96:a7:a5:fb:25: a1:2c:e5:a2:87:40:63:6c:e7:04:2d:b1:c1:51:86:6e:dc:4b: d6:d2:01:12:aa:18:87:8c:28:ef:5e:92:0e:7d:6e:d1:94:33: 61:e5:05:c2:78:b7:9f:94:19:93:55:4e:d5:22:a6:32:de:1f: 20:25:a7:5c:ac:44:f8:52:99:c4:24:97:be:b8:51:29:d5:14: 13:d1:eb:1e:b5:cc:c5:7b:7a:97:5d:be:38:af:fe:cb:1e:e8: 45:f8:2a:49:56:39:aa:f3:9c:44:8d:f4:95:db:e2:28:a2:ff: f7:4b:34:5a -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QjI3 QjgyQjRDMEI3MTc1OEYzOTc3QzI2RjVDMEQ4MEE1Qzc2QUU3MB4XDTI1MTAyMDEy MDcyMVoXDTI2MDkzMDAyMjYzOVowMzExMC8GA1UEAxMoMTI0NkZGMDRBMjAwMjAx QkNDODMyNzhCRDNFMEQxMjVDNTBFQzE1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMSVwfHd6S+tnV48WJ+zXnIpYAgAgxUL4MOZGKCIR+jgG0JEhN93 fl3Yb0kFpvha4f6LsKc8rRslHHbojyHTF70cU3hKwXYBPNpOLAjKh18ObJGRZmyo 8l8sRFj/+a20j5tWqge0CAna+nELScttOMAXwFfEn6XDwgbGc9oM3fowAOjr2+rP Cxx7iqOzMXv+lLzEo2qMtdp+I/4mdR3KXFqVA3kZHfQ57aiyaRVtnKhESUwQVklf 57wn07U/IoFdFD4nibHeSf6pBXd1Xyeb/OytUYtCyZ7s4+0x7QcbbgWliyTEI5NT fARHlk+VvPPp9aV5rDdLFjh7eveWmn7FWGMCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQSRv8EogAgG8yDJ4vT4NElxQ7BWzAfBgNVHSMEGDAWgBSLJ7grTAtxdY85d8Jv XA2Apcdq5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzk4 L2l5ZTRLMHdMY1hXUE9YZkNiMXdOZ0tYSGF1Yy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaXllNEswd0xjWFdQT1hmQ2Ixd05nS1hIYXVjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5OC9peWU0SzB3TGNYV1BP WGZDYjF3TmdLWEhhdWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnNKX0D064VdZB9KcBTMsRArqxkeu1krkruTcWS8ClDRKlVNBNbmbHyrta6Kn 6cNwyWpsMVxKdILsy2IejSCX2AsekPX8wboGQUnvoa9wyVyZLUPcA/E9a396C+C3 kicmYMuQqJev30CDQs6g75v4+22BIq6+QBXqpu5Nd6ce5JEfXnPi8fzY/w8FM5an pfsloSzloodAY2znBC2xwVGGbtxL1tIBEqoYh4wo716SDn1u0ZQzYeUFwni3n5QZ k1VO1SKmMt4fICWnXKxE+FKZxCSXvrhRKdUUE9HrHrXMxXt6l12+OK/+yx7oRfgq SVY5qvOcRI30ldviKKL/90s0Wg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:29:15 2025 by rpki-client