$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/616/aeIZ61u2_sIhJJFAsoBEtf5Fxxw.mft File: aeIZ61u2_sIhJJFAsoBEtf5Fxxw.mft (raw, json) Hash identifier: zUJ7PRj8SJ1z7vnBaObD5oCNy31rgy81i+C94tP7HRQ= Subject key identifier: F8:8C:E9:11:53:AC:BD:72:8C:F2:32:8F:7E:D2:6B:60:96:11:AC:32 Authority key identifier: 69:E2:19:EB:5B:B6:FE:C2:21:24:91:40:B2:80:44:B5:FE:45:C7:1C Certificate issuer: /CN=69E219EB5BB6FEC221249140B28044B5FE45C71C Certificate serial: 2055 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aeIZ61u2_sIhJJFAsoBEtf5Fxxw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/616/aeIZ61u2_sIhJJFAsoBEtf5Fxxw.mft Manifest number: 2055 Signing time: Mon 20 Oct 2025 12:08:36 +0000 Manifest this update: Mon 20 Oct 2025 12:08:36 +0000 Manifest next update: Mon 20 Oct 2025 18:08:36 +0000 Files and hashes: 1: aeIZ61u2_sIhJJFAsoBEtf5Fxxw.crl (hash: WrxwWQaRJMyxmv+aGzJ/xQAfG9L3QoTnjmNscP/6iPU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/616/aeIZ61u2_sIhJJFAsoBEtf5Fxxw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/616/aeIZ61u2_sIhJJFAsoBEtf5Fxxw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aeIZ61u2_sIhJJFAsoBEtf5Fxxw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8277 (0x2055) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69E219EB5BB6FEC221249140B28044B5FE45C71C Validity Not Before: Oct 20 12:08:36 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F88CE91153ACBD728CF2328F7ED26B609611AC32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:66:3f:14:18:44:bc:cb:8b:53:e0:d0:8a: ae:6a:af:b3:21:8f:73:2d:ee:02:7b:4c:54:10:2b: db:74:b2:32:0a:a4:a3:6a:e4:92:cc:a6:b8:84:21: 98:2d:9d:51:a7:e1:31:2e:3f:99:70:f9:61:55:4f: 3d:ba:e0:ab:b7:b3:c5:a2:58:e4:0f:a9:85:d4:51: 25:a7:de:c2:24:45:be:5c:30:bc:f3:75:c3:e6:a2: 67:b4:04:58:13:c4:85:3e:a4:d0:fa:e0:5b:bd:c9: 37:ed:2c:38:5a:29:fc:28:a0:ab:52:a1:4d:8c:4e: 1a:52:d1:04:b4:16:44:a9:d2:7f:42:59:48:6e:52: b0:a2:4f:5e:06:0c:a2:80:58:c7:d0:0a:ac:ec:40: f3:91:b7:2a:2e:2c:57:da:14:4a:51:03:ea:b1:57: 5b:9e:21:fa:e1:36:b2:8a:c8:2d:3d:ca:a0:63:27: 2a:45:1a:42:5c:c2:e7:26:eb:cd:53:15:9e:e9:79: e1:77:71:d7:7b:12:c8:b0:4e:83:82:bd:5d:8f:a9: 69:43:7c:c0:d2:d0:c4:f6:ea:7b:1b:3f:f1:98:74: 13:dd:d5:67:3a:e5:8f:08:75:53:a8:fd:75:2e:fd: 5c:ad:77:29:31:63:88:0c:f5:46:e6:d7:0e:52:d5: 1f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8C:E9:11:53:AC:BD:72:8C:F2:32:8F:7E:D2:6B:60:96:11:AC:32 X509v3 Authority Key Identifier: keyid:69:E2:19:EB:5B:B6:FE:C2:21:24:91:40:B2:80:44:B5:FE:45:C7:1C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/616/aeIZ61u2_sIhJJFAsoBEtf5Fxxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aeIZ61u2_sIhJJFAsoBEtf5Fxxw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/616/aeIZ61u2_sIhJJFAsoBEtf5Fxxw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:48:fe:a9:9a:d0:73:f6:fe:5c:c2:71:b0:8d:df:0a:44:72: be:5e:5d:2e:b8:46:86:e2:a5:0f:27:8a:7f:af:6a:50:a9:99: c4:f1:ce:d4:fb:9b:8d:2d:2d:65:8f:5f:10:58:41:f9:4e:68: 95:2c:27:e3:af:7b:06:d3:17:d6:db:18:30:6a:1a:a9:96:b4: bb:c7:24:b6:4e:e7:0a:a9:89:df:60:e8:d5:29:7a:bc:0d:bd: 93:0c:fd:4f:45:54:b3:1a:46:1b:57:fc:47:b2:e6:07:fc:f7: 44:b5:56:ec:64:98:f6:89:ba:d5:ef:6c:b4:06:ff:d9:03:1f: df:53:ff:73:91:7c:1e:93:32:fd:f9:dd:fa:2d:80:b5:cd:4d: 03:02:cc:75:fa:60:0e:a5:00:0e:41:d5:44:c7:56:62:b8:25: 94:9f:eb:bf:49:ef:97:55:dd:0c:f4:37:45:e9:0f:91:92:94: 0a:c1:1b:44:11:3c:aa:e7:38:8c:c2:81:28:76:f0:2e:43:dc: 5e:12:43:32:35:0b:32:6f:d3:46:f2:36:2a:ad:a5:36:19:c8: cc:a9:d7:b1:8c:c7:65:7f:28:5f:e7:26:0d:3f:3b:b9:48:c4: 91:e5:50:dd:f9:07:e9:20:6d:60:ea:f4:e2:e9:c2:2b:ae:23: 7c:9c:5c:c2 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjlF MjE5RUI1QkI2RkVDMjIxMjQ5MTQwQjI4MDQ0QjVGRTQ1QzcxQzAeFw0yNTEwMjAx MjA4MzZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY4OENFOTExNTNBQ0JE NzI4Q0YyMzI4RjdFRDI2QjYwOTYxMUFDMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClomY/FBhEvMuLU+DQiq5qr7Mhj3Mt7gJ7TFQQK9t0sjIKpKNq 5JLMpriEIZgtnVGn4TEuP5lw+WFVTz264Ku3s8WiWOQPqYXUUSWn3sIkRb5cMLzz dcPmome0BFgTxIU+pND64Fu9yTftLDhaKfwooKtSoU2MThpS0QS0FkSp0n9CWUhu UrCiT14GDKKAWMfQCqzsQPORtyouLFfaFEpRA+qxV1ueIfrhNrKKyC09yqBjJypF GkJcwucm681TFZ7peeF3cdd7EsiwToOCvV2PqWlDfMDS0MT26nsbP/GYdBPd1Wc6 5Y8IdVOo/XUu/VytdykxY4gM9Ubm1w5S1R+TAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU+IzpEVOsvXKM8jKPftJrYJYRrDIwHwYDVR0jBBgwFoAUaeIZ61u2/sIhJJFA soBEtf5FxxwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjE2 L2FlSVo2MXUyX3NJaEpKRkFzb0JFdGY1Rnh4dy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvYWVJWjYxdTJfc0loSkpGQXNvQkV0ZjVGeHh3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjE2L2FlSVo2MXUyX3NJaEpK RkFzb0JFdGY1Rnh4dy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCbSP6pmtBz9v5cwnGwjd8KRHK+Xl0uuEaG4qUPJ4p/r2pQqZnE8c7U+5uNLS1l j18QWEH5TmiVLCfjr3sG0xfW2xgwahqplrS7xyS2TucKqYnfYOjVKXq8Db2TDP1P RVSzGkYbV/xHsuYH/PdEtVbsZJj2ibrV72y0Bv/ZAx/fU/9zkXwekzL9+d36LYC1 zU0DAsx1+mAOpQAOQdVEx1ZiuCWUn+u/Se+XVd0M9DdF6Q+RkpQKwRtEETyq5ziM woEodvAuQ9xeEkMyNQsyb9NG8jYqraU2GcjMqdexjMdlfyhf5yYNPzu5SMSR5VDd +QfpIG1g6vTi6cIrriN8nFzC -----END CERTIFICATE-----Generated at Mon Oct 20 17:40:28 2025 by rpki-client