$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft File: QfzZUdjNh-WF4Cc23dlPpCcqw70.mft (raw, json) Hash identifier: t3Qrt6vFYJj9WH+UGnAzMVoA8ol7vA5SLrGOez244Bo= Subject key identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC Authority key identifier: 41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD Certificate issuer: /CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Certificate serial: 0116 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft Manifest number: 0116 Signing time: Mon 20 Oct 2025 02:34:19 +0000 Manifest this update: Mon 20 Oct 2025 02:34:19 +0000 Manifest next update: Mon 20 Oct 2025 08:34:19 +0000 Files and hashes: 1: QfzZUdjNh-WF4Cc23dlPpCcqw70.crl (hash: 3TAnP3b+2y6Oq/FgeuRtQ3k97Yb591ewPNrbZYXvYqU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 08:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Validity Not Before: Oct 20 02:34:19 2025 GMT Not After : Aug 25 02:07:51 2026 GMT Subject: CN=8655254ADD036D7B08B936476485F6CCC77088BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:86:3e:66:19:d6:5d:f7:d4:f4:34:a7:5b: f8:0a:bc:6d:cd:97:03:fb:4f:65:5c:9b:30:e6:06: 11:f7:42:c1:60:c0:08:8e:b6:2e:15:70:1c:79:02: 48:32:17:9f:c8:b4:e5:0f:1f:98:49:86:b3:ae:e9: ca:b7:2b:19:0a:46:1f:04:f6:54:b1:16:92:71:6c: 7d:5b:df:2e:f3:57:83:e1:de:de:a1:99:bf:f6:dc: da:66:3c:dc:18:b6:68:fd:29:f0:cd:7d:51:06:57: 2c:5e:0c:6f:10:9b:74:d4:68:bd:97:00:51:7e:e7: e4:98:37:8d:c7:e7:6f:e7:e1:b7:61:bf:e7:fd:3f: b8:bf:68:43:98:78:f4:b8:11:98:15:6e:ce:3c:92: 61:ff:df:35:4a:45:d7:d1:39:3d:52:48:4e:58:40: 44:81:86:8c:39:39:e9:f2:0e:7c:e7:a4:c9:4e:c4: 7b:cd:9e:56:b1:7f:be:e2:24:bc:ca:a1:5b:29:3a: 2b:2e:7f:cf:de:12:ed:2c:d8:45:e6:40:5d:e2:5f: eb:8c:b0:42:75:da:a3:3f:da:62:3f:f1:1c:67:d3: 22:a6:35:90:86:8d:b0:f9:43:a6:29:6b:94:42:c6: b1:5e:fa:e8:c7:18:8a:ef:3c:b5:47:90:dc:2b:77: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC X509v3 Authority Key Identifier: keyid:41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:07:a4:e1:d3:70:3f:bc:b7:3f:93:b5:a4:4e:12:75:11:01: 73:de:8b:b8:4e:fc:4f:40:7a:07:75:f3:5a:ed:7f:d3:8a:9e: 45:69:01:70:37:78:62:3b:6e:53:a1:6f:29:0c:18:be:38:4d: a4:d4:ef:2c:fc:20:d3:f0:a0:16:ed:da:51:a0:bc:36:a9:30: 39:e3:c2:d3:7b:9c:fc:18:15:26:1f:e9:26:c4:f8:21:d2:f5: 2f:d2:8b:72:54:ac:aa:49:5d:37:37:31:89:9c:cb:3d:a7:07: d0:06:a4:a4:be:fc:2a:2f:57:d2:82:c8:56:e6:e0:e0:5a:bc: 6d:3f:24:ef:3c:64:eb:d3:93:30:57:97:75:9f:ac:d4:bb:1f: e3:a8:6a:36:b6:4f:2e:b3:51:32:b5:01:6e:d7:a4:b7:c4:1e: b4:d5:a4:c9:cb:c9:49:f3:05:cb:0d:46:f0:e4:45:1d:71:0c: 84:c9:3a:a6:8b:f5:40:d9:59:fc:dc:fd:3d:8f:c0:f2:26:b3: 7c:25:1d:cc:43:96:0c:a7:4e:ac:fd:11:4a:dd:cb:7a:35:b5: 80:5b:2a:f9:74:f3:8b:9e:e4:e9:6b:f6:94:70:bb:2a:a2:f5: 32:2e:32:5e:d9:f2:16:7b:de:7e:7a:e5:4f:4e:2f:61:1a:73: 19:f0:2e:39 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICARYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDFG Q0Q5NTFEOENEODdFNTg1RTAyNzM2REREOTRGQTQyNzJBQzNCRDAeFw0yNTEwMjAw MjM0MTlaFw0yNjA4MjUwMjA3NTFaMDMxMTAvBgNVBAMTKDg2NTUyNTRBREQwMzZE N0IwOEI5MzY0NzY0ODVGNkNDQzc3MDg4QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnGYY+ZhnWXffU9DSnW/gKvG3NlwP7T2VcmzDmBhH3QsFgwAiO ti4VcBx5AkgyF5/ItOUPH5hJhrOu6cq3KxkKRh8E9lSxFpJxbH1b3y7zV4Ph3t6h mb/23NpmPNwYtmj9KfDNfVEGVyxeDG8Qm3TUaL2XAFF+5+SYN43H52/n4bdhv+f9 P7i/aEOYePS4EZgVbs48kmH/3zVKRdfROT1SSE5YQESBhow5OenyDnznpMlOxHvN nlaxf77iJLzKoVspOisuf8/eEu0s2EXmQF3iX+uMsEJ12qM/2mI/8Rxn0yKmNZCG jbD5Q6Ypa5RCxrFe+ujHGIrvPLVHkNwrd5tfAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUhlUlSt0DbXsIuTZHZIX2zMdwiLwwHwYDVR0jBBgwFoAUQfzZUdjNh+WF4Cc2 3dlPpCcqw70wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5 L1FmelpVZGpOaC1XRjRDYzIzZGxQcENjcXc3MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUWZ6WlVkak5oLVdGNENjMjNkbFBwQ2NxdzcwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5L1FmelpVZGpOaC1XRjRD YzIzZGxQcENjcXc3MC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1B6Th03A/vLc/k7WkThJ1EQFz3ou4TvxPQHoHdfNa7X/Tip5FaQFwN3hiO25T oW8pDBi+OE2k1O8s/CDT8KAW7dpRoLw2qTA548LTe5z8GBUmH+kmxPgh0vUv0oty VKyqSV03NzGJnMs9pwfQBqSkvvwqL1fSgshW5uDgWrxtPyTvPGTr05MwV5d1n6zU ux/jqGo2tk8us1EytQFu16S3xB601aTJy8lJ8wXLDUbw5EUdcQyEyTqmi/VA2Vn8 3P09j8DyJrN8JR3MQ5YMp06s/RFK3ct6NbWAWyr5dPOLnuTpa/aUcLsqovUyLjJe 2fIWe95+euVPTi9hGnMZ8C45 -----END CERTIFICATE-----Generated at Mon Oct 20 08:31:58 2025 by rpki-client