$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft File: qOvq1LE6eRhQyveRTqMND1A2w-c.mft (raw, json) Hash identifier: x7pUWOm1im/lJ6zKY5qixixmNzPG9sOy9mgA+3ac/kw= Subject key identifier: 51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF Authority key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 Certificate issuer: /CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Certificate serial: 2A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft Manifest number: 25 Signing time: Tue 21 Oct 2025 04:34:38 +0000 Manifest this update: Tue 21 Oct 2025 04:34:38 +0000 Manifest next update: Tue 21 Oct 2025 10:34:38 +0000 Files and hashes: 1: -MrjC-Wa5eHOs5iz6663lcQmVdk.roa (hash: Cz4/7Zsm1ISGWWnX0XZFGpbGxCLE/5T6NkRhl97/hgg=) 2: 4NLDWWgvrdtoNmlZt6ha5D8LuEs.roa (hash: ifNnF9h072MS6Pwe42EJlNd8XK4udOUQoSw1UcbQjR8=) 3: oN6OAGOV0cdaPZu11iVZrCiBcBI.roa (hash: 3mNZCkp2vcw1/UmFCrK3Wmr5EPSAZSqKxAaz6I4tKuA=) 4: qOvq1LE6eRhQyveRTqMND1A2w-c.crl (hash: Pt8peIsrSpjVu+Fk6nV92t3zAPcu40j9xq06Wox5Tio=) 5: rQKvb1lXH1c4bNEw10BfeeCllHs.roa (hash: 8OQWQtkZaG38Cf7QP4OxXvHEUWrAzh4iUe3Z9rIcvNk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Validity Not Before: Oct 21 04:34:38 2025 GMT Not After : Oct 15 07:34:23 2026 GMT Subject: CN=5185FA67711A05EB5671FC1222CA12C680FF24BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:14:6f:77:34:72:f7:14:4c:75:ac:52:29:94: 56:4a:f5:d0:ea:5c:af:84:1b:b8:39:e2:6e:ab:b9: 37:2b:be:05:8a:91:29:a2:d7:53:da:45:08:a2:8e: 7b:d8:db:b5:67:c7:e0:fb:0f:f8:8f:c9:bc:ad:80: a2:92:0b:f7:eb:d0:03:77:85:3e:45:03:94:b2:14: c5:c2:10:a6:59:a2:a7:1d:c3:2e:03:03:9b:e2:d6: 50:f1:45:9f:aa:b8:51:5f:cc:47:fc:26:59:41:2b: 84:7c:e0:19:76:03:69:d5:75:eb:4c:44:97:91:3e: c2:c2:02:b4:30:8a:3a:aa:fb:fd:d4:e0:40:8a:0a: d3:c4:54:84:f9:29:91:cb:b3:a4:84:35:b3:99:7b: 2e:33:78:d9:d1:86:51:39:e2:86:36:88:21:57:80: 15:49:ef:ec:99:58:b2:4b:af:92:40:e6:58:03:65: 11:bf:70:3d:79:31:96:5b:48:e7:b6:9a:dc:08:6c: 6f:c6:09:ad:d7:5d:b1:a2:86:0b:de:aa:cd:73:1f: 65:88:56:12:f9:f2:42:58:ea:61:9e:57:06:c3:bf: 6d:f1:58:8d:09:44:29:db:44:c2:48:a2:1c:f7:51: 06:2c:6b:b4:c2:15:40:59:d3:31:5c:c8:c6:86:c1: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF X509v3 Authority Key Identifier: keyid:A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:29:bb:af:e5:71:b2:55:40:0f:4f:63:25:ce:c3:c8:bd:ca: 9e:76:74:e9:26:e7:94:4a:d4:26:00:b6:19:2a:8b:d8:5c:d1: 03:53:7f:8e:ad:cb:7f:98:84:25:92:a4:29:23:7a:97:86:96: 8c:7b:1f:b0:23:42:e0:85:24:37:cb:0e:1f:9f:d2:b6:40:f2: fe:bd:06:1a:85:85:2f:95:38:29:be:70:d3:d8:0b:20:e7:ec: c8:11:1a:ce:fa:d3:d6:3b:99:44:71:d0:1f:90:40:eb:e6:f9: 6d:f7:a4:5d:d5:2e:cc:0d:57:24:d7:d3:c0:f5:6d:6c:86:75: 51:0a:42:e8:0e:69:cf:bf:6a:81:4d:66:fc:f6:72:bd:e7:4c: 24:b3:8b:af:31:4c:e0:89:37:35:43:52:94:e6:fb:e2:1f:88: 85:d6:63:9f:69:d2:a5:38:05:4e:73:e5:7f:13:e6:12:e7:a9: d7:9e:27:d5:79:db:da:a2:d4:8a:ca:79:11:60:82:2d:1a:87: 46:f5:91:86:6c:a5:52:97:ba:73:57:e1:6c:ae:d2:56:36:38: 6d:3e:cf:c9:24:4b:30:b2:91:b4:a0:77:b8:dd:0b:b1:58:10: 2f:72:92:c6:7f:6d:71:67:b1:8c:b6:83:e1:5b:31:23:db:a3: ff:5c:db:b8 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOEVC RUFENEIxM0E3OTE4NTBDQUY3OTE0RUEzMEQwRjUwMzZDM0U3MB4XDTI1MTAyMTA0 MzQzOFoXDTI2MTAxNTA3MzQyM1owMzExMC8GA1UEAxMoNTE4NUZBNjc3MTFBMDVF QjU2NzFGQzEyMjJDQTEyQzY4MEZGMjRCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN8Ub3c0cvcUTHWsUimUVkr10Opcr4QbuDnibqu5Nyu+BYqRKaLX U9pFCKKOe9jbtWfH4PsP+I/JvK2AopIL9+vQA3eFPkUDlLIUxcIQplmipx3DLgMD m+LWUPFFn6q4UV/MR/wmWUErhHzgGXYDadV160xEl5E+wsICtDCKOqr7/dTgQIoK 08RUhPkpkcuzpIQ1s5l7LjN42dGGUTnihjaIIVeAFUnv7JlYskuvkkDmWANlEb9w PXkxlltI57aa3Ahsb8YJrdddsaKGC96qzXMfZYhWEvnyQljqYZ5XBsO/bfFYjQlE KdtEwkiiHPdRBixrtMIVQFnTMVzIxobBfdcCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRRhfpncRoF61Zx/BIiyhLGgP8kvzAfBgNVHSMEGDAWgBSo6+rUsTp5GFDK95FO ow0PUDbD5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yOTcy L3FPdnExTEU2ZVJoUXl2ZVJUcU1ORDFBMnctYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcU92cTFMRTZlUmhReXZlUlRxTU5EMUEydy1jLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk3Mi9xT3ZxMUxFNmVSaFF5 dmVSVHFNTkQxQTJ3LWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPCm7r+VxslVAD09jJc7DyL3KnnZ06SbnlErUJgC2GSqL2FzRA1N/jq3Lf5iE JZKkKSN6l4aWjHsfsCNC4IUkN8sOH5/StkDy/r0GGoWFL5U4Kb5w09gLIOfsyBEa zvrT1juZRHHQH5BA6+b5bfekXdUuzA1XJNfTwPVtbIZ1UQpC6A5pz79qgU1m/PZy vedMJLOLrzFM4Ik3NUNSlOb74h+IhdZjn2nSpTgFTnPlfxPmEuep154n1Xnb2qLU isp5EWCCLRqHRvWRhmylUpe6c1fhbK7SVjY4bT7PySRLMLKRtKB3uN0LsVgQL3KS xn9tcWexjLaD4VsxI9uj/1zbuA== -----END CERTIFICATE-----Generated at Tue Oct 21 09:51:40 2025 by rpki-client