$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft File: hPLNDLUaQjf34fOuhRnjzCZEi38.mft (raw, json) Hash identifier: 2oqJJKWt3SHT1CaMBrmjjB8bL6FYpol2/peVZRSU1YE= Subject key identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 Authority key identifier: 84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F Certificate issuer: /CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Certificate serial: 17F4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft Manifest number: 17F4 Signing time: Mon 20 Oct 2025 03:08:36 +0000 Manifest this update: Mon 20 Oct 2025 03:08:36 +0000 Manifest next update: Mon 20 Oct 2025 09:08:36 +0000 Files and hashes: 1: hPLNDLUaQjf34fOuhRnjzCZEi38.crl (hash: 9ufpRbdFdgEJF4DQgBsQEeJphsYyJarI7BEyzkoPIaM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6132 (0x17f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Validity Not Before: Oct 20 03:08:36 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=45D7AFE026C8570C156C22E7C7BB2BA905E91F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:81:29:9b:33:04:d8:e0:06:be:7b:f6:7f: c6:b1:b8:45:75:d2:d8:ba:d8:83:ce:d8:e2:f7:e9: 30:9b:ba:8e:82:1a:4b:6c:f3:c2:11:24:d1:0a:d4: 42:b5:91:00:a8:ff:1c:0d:26:a7:74:21:dc:50:3e: 7b:5c:fe:01:d6:32:15:54:12:e5:08:02:19:4c:c1: b2:04:ad:76:0a:35:04:a3:9d:37:f7:7e:66:a0:9b: b5:08:a5:6d:66:65:97:57:3f:47:8c:03:59:db:55: da:14:e5:84:43:00:91:be:e2:44:b5:cc:a9:30:7f: 5e:e6:25:fb:7d:89:ec:2d:b6:f1:f9:c1:dc:9b:b7: da:d7:81:e5:d9:2e:a9:54:2f:8d:3d:bf:39:b6:e3: a1:b7:4b:85:57:f4:87:ba:79:21:0d:62:9e:60:d0: 9e:fe:a6:8a:c2:04:22:aa:2b:8a:fc:41:dc:c9:48: f5:74:fe:d8:25:73:d3:40:d9:f0:a1:1a:6a:7d:54: f1:04:53:ea:bd:a2:48:4d:a8:3d:ad:bd:d4:1f:7d: 89:3d:51:70:7c:3e:ef:ef:b2:90:86:55:07:37:66: f2:a8:17:9c:1d:93:41:5e:e4:1b:40:84:6a:87:fe: 68:02:df:a0:40:10:47:6d:39:c4:44:ce:53:2d:0e: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 X509v3 Authority Key Identifier: keyid:84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:c2:87:22:c6:c9:19:2f:ab:3c:01:7e:a9:44:c0:3a:fe:d5: c3:2a:d1:25:93:c6:8e:73:f4:34:7b:0d:3b:89:08:41:e0:ad: 8d:13:21:72:65:cf:2e:08:30:c1:8f:0c:cc:ed:0a:fd:ea:8b: f7:63:e8:3f:b0:22:b6:3d:b1:66:2b:07:a2:b7:35:40:6d:0e: 22:7a:5a:60:f8:c2:b3:48:9f:0e:50:a4:15:39:cb:e7:87:e9: 9b:f6:cc:cf:38:07:d8:56:8c:42:71:39:64:24:1c:68:36:50: 56:60:cf:8e:21:1f:ed:15:01:4e:bf:ed:07:e8:d1:d8:9e:01: 2f:7b:35:c2:01:17:67:32:93:64:7e:a3:54:0c:7e:cf:36:7f: 44:52:ac:e3:c5:0f:4d:61:eb:bb:7a:53:84:82:a8:f2:d2:86: 9a:e1:81:d3:a5:5a:87:f1:c9:1c:28:09:66:17:37:ca:55:e7: 7a:5c:21:c9:61:94:88:6a:0a:62:48:9d:ce:ee:ec:dd:35:1d: 3f:25:99:eb:b1:39:ea:74:7d:80:0a:b1:50:f7:13:30:86:7a: 0f:85:ca:46:be:d0:e4:db:64:df:98:11:19:ed:41:73:c2:7e: cb:e2:b1:b9:a2:22:4d:00:d4:87:16:20:56:72:31:1b:df:4f: e0:d8:fa:c4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRG MkNEMENCNTFBNDIzN0Y3RTFGM0FFODUxOUUzQ0MyNjQ0OEI3RjAeFw0yNTEwMjAw MzA4MzZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQ1RDdBRkUwMjZDODU3 MEMxNTZDMjJFN0M3QkIyQkE5MDVFOTFGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+ZIEpmzME2OAGvnv2f8axuEV10ti62IPO2OL36TCbuo6CGkts 88IRJNEK1EK1kQCo/xwNJqd0IdxQPntc/gHWMhVUEuUIAhlMwbIErXYKNQSjnTf3 fmagm7UIpW1mZZdXP0eMA1nbVdoU5YRDAJG+4kS1zKkwf17mJft9iewttvH5wdyb t9rXgeXZLqlUL409vzm246G3S4VX9Ie6eSENYp5g0J7+porCBCKqK4r8QdzJSPV0 /tglc9NA2fChGmp9VPEEU+q9okhNqD2tvdQffYk9UXB8Pu/vspCGVQc3ZvKoF5wd k0Fe5BtAhGqH/mgC36BAEEdtOcREzlMtDsjJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURdev4CbIVwwVbCLnx7srqQXpHxQwHwYDVR0jBBgwFoAUhPLNDLUaQjf34fOu hRnjzCZEi38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1 L2hQTE5ETFVhUWpmMzRmT3VoUm5qekNaRWkzOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFBMTkRMVWFRamYzNGZPdWhSbmp6Q1pFaTM4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1L2hQTE5ETFVhUWpmMzRm T3VoUm5qekNaRWkzOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmwocixskZL6s8AX6pRMA6/tXDKtElk8aOc/Q0ew07iQhB4K2NEyFyZc8uCDDB jwzM7Qr96ov3Y+g/sCK2PbFmKweitzVAbQ4ielpg+MKzSJ8OUKQVOcvnh+mb9szP OAfYVoxCcTlkJBxoNlBWYM+OIR/tFQFOv+0H6NHYngEvezXCARdnMpNkfqNUDH7P Nn9EUqzjxQ9NYeu7elOEgqjy0oaa4YHTpVqH8ckcKAlmFzfKVed6XCHJYZSIagpi SJ3O7uzdNR0/JZnrsTnqdH2ACrFQ9xMwhnoPhcpGvtDk22TfmBEZ7UFzwn7L4rG5 oiJNANSHFiBWcjEb30/g2PrE -----END CERTIFICATE-----Generated at Mon Oct 20 05:44:57 2025 by rpki-client