$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft File: 5pgpU98Hd67biO4_8goVJkBXF4U.mft (raw, json) Hash identifier: JuVPw5Z5CUlofNNeFwgTXVvviRyZ49Uufl26STpEV+Q= Subject key identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 Certificate issuer: /CN=E6982953DF0777AEDB88EE3FF20A152640571785 Certificate serial: 2147 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft Manifest number: 2144 Signing time: Mon 20 Oct 2025 12:05:39 +0000 Manifest this update: Mon 20 Oct 2025 12:05:39 +0000 Manifest next update: Mon 20 Oct 2025 18:05:39 +0000 Files and hashes: 1: 5pgpU98Hd67biO4_8goVJkBXF4U.crl (hash: 0c9whjk19a+VAPYTvDqjR9YysHiCEiFneQrfxeCPv/U=) 2: KTepAzZWdUebrEm_rhVA4g3HJ1o.roa (hash: +d/Ee/Je7JgCG3rEnJO49Lnf8W/8QSIMlfKpPFFwIj4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8519 (0x2147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785 Validity Not Before: Oct 20 12:05:39 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F56C6695780DDAF190BA5FB98C6980AADF62154E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:f9:ff:3a:5a:43:5a:91:63:2e:4d:ef:18: 5b:0b:0a:09:ca:d7:1d:0c:25:df:6d:00:13:84:bd: fd:4f:6a:e7:d8:48:ff:f1:f2:0a:62:d4:37:a4:a1: c8:bd:54:7c:b6:a7:72:d6:61:a8:39:d7:0f:52:21: 3f:56:13:3a:d7:be:50:e4:5b:ad:e0:18:7f:ce:34: de:d6:2e:28:36:a7:f3:59:66:fd:13:12:63:a4:21: ac:37:54:a9:5b:91:31:0c:15:3f:cb:1e:cf:cd:37: 59:e1:40:9e:da:92:74:06:f9:07:19:af:a2:a9:e5: 7c:fe:a1:6b:8a:8e:e2:4a:2d:63:fb:4f:20:fd:a5: 82:54:f0:25:ce:f4:b9:a1:da:b1:10:8a:7e:43:98: b9:7f:8f:c9:11:e8:cd:59:de:a7:ed:85:b4:44:61: a0:99:ce:f4:9b:46:27:fd:88:c1:30:d7:9a:4c:16: 20:04:49:a8:eb:96:d8:98:96:09:01:3f:2a:9a:c0: 19:ee:f8:17:ad:8d:e8:fa:b8:64:0e:f7:82:87:a6: c0:59:dc:77:98:b5:6f:80:40:f6:ad:7d:c9:e9:5f: 21:41:b0:64:c9:53:61:c7:99:72:da:92:99:cf:ac: c1:e3:dc:49:79:c2:2e:c7:58:bf:e9:f4:6a:4e:95: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E X509v3 Authority Key Identifier: keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a7:9a:02:66:37:1e:91:15:76:f2:13:e8:d8:be:44:9c:ad: 3c:33:57:33:b9:19:3d:73:fb:25:d1:bb:10:24:41:d4:63:7f: 23:64:c9:4a:c2:20:c3:62:d9:ef:24:d8:3c:7a:12:fb:ac:1e: f8:54:05:03:c4:99:01:4e:e3:69:1c:d8:b6:e0:7d:11:7b:70: be:28:41:58:4b:34:aa:29:d3:20:93:57:ba:c6:8c:6d:4f:f2: e5:76:bb:46:ed:57:38:33:8e:28:f2:a8:2d:32:d9:17:55:ce: dd:ae:61:38:2c:db:49:ec:e1:15:3e:04:78:20:54:09:9e:af: d1:c4:2b:5e:36:4c:b1:ff:a5:64:35:38:97:22:aa:20:c3:39: e1:e7:ea:dd:a1:be:ac:93:38:9d:be:81:b8:13:9c:2e:0b:87: 71:2b:8c:99:c2:26:61:d0:94:3c:18:0d:fa:80:92:0d:20:88: 25:4e:f9:46:58:1d:f0:69:12:81:25:46:5e:9c:e0:70:6b:f2: bf:0c:56:36:8d:2c:f3:8c:ce:87:74:93:88:b7:21:4c:89:25: 29:ba:ed:16:70:54:1e:45:10:ad:e8:ca:f4:6e:c8:9f:86:42: f9:08:61:27:8a:27:08:cf:a4:27:3e:ac:de:67:2a:15:6a:46: e8:db:dd:b6 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY5 ODI5NTNERjA3NzdBRURCODhFRTNGRjIwQTE1MjY0MDU3MTc4NTAeFw0yNTEwMjAx MjA1MzlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY1NkM2Njk1NzgwRERB RjE5MEJBNUZCOThDNjk4MEFBREY2MjE1NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa3vn/OlpDWpFjLk3vGFsLCgnK1x0MJd9tABOEvf1PaufYSP/x 8gpi1Dekoci9VHy2p3LWYag51w9SIT9WEzrXvlDkW63gGH/ONN7WLig2p/NZZv0T EmOkIaw3VKlbkTEMFT/LHs/NN1nhQJ7aknQG+QcZr6Kp5Xz+oWuKjuJKLWP7TyD9 pYJU8CXO9Lmh2rEQin5DmLl/j8kR6M1Z3qfthbREYaCZzvSbRif9iMEw15pMFiAE SajrltiYlgkBPyqawBnu+Betjej6uGQO94KHpsBZ3HeYtW+AQPatfcnpXyFBsGTJ U2HHmXLakpnPrMHj3El5wi7HWL/p9GpOlTODAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU9WxmlXgN2vGQul+5jGmAqt9iFU4wHwYDVR0jBBgwFoAU5pgpU98Hd67biO4/ 8goVJkBXF4UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5 LzVwZ3BVOThIZDY3YmlPNF84Z29WSmtCWEY0VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNXBncFU5OEhkNjdiaU80Xzhnb1ZKa0JYRjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5LzVwZ3BVOThIZDY3YmlP NF84Z29WSmtCWEY0VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnp5oCZjcekRV28hPo2L5EnK08M1czuRk9c/sl0bsQJEHUY38jZMlKwiDDYtnv JNg8ehL7rB74VAUDxJkBTuNpHNi24H0Re3C+KEFYSzSqKdMgk1e6xoxtT/LldrtG 7Vc4M44o8qgtMtkXVc7drmE4LNtJ7OEVPgR4IFQJnq/RxCteNkyx/6VkNTiXIqog wznh5+rdob6skzidvoG4E5wuC4dxK4yZwiZh0JQ8GA36gJINIIglTvlGWB3waRKB JUZenOBwa/K/DFY2jSzzjM6HdJOItyFMiSUpuu0WcFQeRRCt6Mr0bsifhkL5CGEn iicIz6QnPqzeZyoVakbo2922 -----END CERTIFICATE-----Generated at Mon Oct 20 14:12:40 2025 by rpki-client