$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft File: LcO_WKfD4suVkd5E2HmTwNP3MnM.mft (raw, json) Hash identifier: QVWplMQ38PxS2I65pYUJYNbPLTWhDzlaYW/vTyOvrYQ= Subject key identifier: 36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4 Authority key identifier: 2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73 Certificate issuer: /CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273 Certificate serial: 0996 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft Manifest number: 0996 Signing time: Fri 24 Oct 2025 18:05:32 +0000 Manifest this update: Fri 24 Oct 2025 18:05:32 +0000 Manifest next update: Sat 25 Oct 2025 00:05:32 +0000 Files and hashes: 1: LcO_WKfD4suVkd5E2HmTwNP3MnM.crl (hash: zyBuG8lVIIQvQdFmHWt8QySzgt9Ml3zgfY16KYvocVc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 00:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273 Validity Not Before: Oct 24 18:05:32 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=367407F667E8B7FA6AB4E416F485B012C3A31CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:b9:90:a7:b9:1c:e8:12:8a:e5:8c:fb:aa: 6e:31:ee:eb:e5:b8:70:28:bd:51:a0:e3:9f:2a:d0: 77:8d:76:61:8b:9f:17:31:84:33:50:66:8a:09:bf: fa:99:0d:10:db:88:7e:b5:43:0c:12:1f:a7:fb:49: 3d:3f:c9:c4:0b:d4:a8:68:3f:82:bb:59:5a:b0:47: 27:a5:35:11:a1:ce:9a:12:83:1c:5c:81:e7:e8:70: d0:7a:ce:72:da:f7:6a:54:19:7c:d8:3c:c6:d5:21: fd:9d:fe:7e:b1:2a:ff:b3:ba:e7:e4:9d:5a:64:98: cb:25:63:14:3f:58:b6:f1:bf:80:c0:17:5d:98:c6: 3d:4e:f5:83:4e:be:e0:a7:74:13:93:92:9d:8d:0f: 2c:a0:b1:cb:c9:3d:55:83:4b:93:28:17:68:0b:19: b6:73:45:2d:61:38:c0:0a:e2:20:7f:57:ab:66:b8: 30:62:e6:dc:bd:28:4e:19:81:fb:31:92:b4:d5:46: 3a:56:52:c7:8c:ee:55:1c:b9:53:22:5e:23:da:23: 43:d1:4e:d5:9b:42:ab:50:2a:dc:bc:bf:5e:9a:36: 47:dc:38:18:a2:52:e4:b8:9a:20:cf:aa:af:a2:05: 4d:01:7b:f0:9d:72:5b:ff:b4:8c:08:33:ed:ee:6b: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4 X509v3 Authority Key Identifier: keyid:2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:48:6f:46:15:d7:6d:23:b4:20:73:05:f3:be:9c:f5:3d:24: e9:13:38:ac:45:0d:58:82:84:bd:95:40:6a:4e:fa:44:b5:3e: 63:92:63:e5:a3:1e:64:54:da:4a:8d:10:c9:b7:30:ff:d1:ca: 86:ab:e6:37:e8:93:ac:d6:50:fa:96:56:b1:0e:c2:af:b3:ec: 5a:f1:55:af:7f:e1:e6:dd:42:ad:a4:0b:ad:01:3f:0a:a6:1e: 25:32:7b:b8:8e:8c:29:ad:c5:7b:c5:26:ae:69:32:57:a5:7d: 9d:21:78:98:f8:77:74:df:18:c9:51:c3:09:5e:54:88:ea:f6: f6:f3:72:ac:e3:66:2e:4d:42:40:da:ee:9f:0a:b8:2a:16:c4: 08:d7:d6:39:46:70:c3:07:71:d4:9f:91:72:49:13:95:c5:86: 2b:e7:57:98:ec:d1:ae:0c:8c:5f:a9:c5:46:5c:cf:f9:01:05: cd:25:b5:d0:4d:7e:7e:d7:77:2d:b2:85:40:9f:82:a3:fe:bf: f6:d6:1d:82:6c:9d:e5:50:55:9a:26:89:db:68:4d:f7:fd:eb: c1:62:2f:41:ba:e4:a3:fa:63:e8:b4:2c:af:34:d0:70:ad:85: 51:fa:e9:55:dc:82:2e:89:01:10:c8:6e:50:09:8f:cf:86:f0: 9e:07:84:cc -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRD M0JGNThBN0MzRTJDQjk1OTFERTQ0RDg3OTkzQzBEM0Y3MzI3MzAeFw0yNTEwMjQx ODA1MzJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM2NzQwN0Y2NjdFOEI3 RkE2QUI0RTQxNkY0ODVCMDEyQzNBMzFDQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpQ7mQp7kc6BKK5Yz7qm4x7uvluHAovVGg458q0HeNdmGLnxcx hDNQZooJv/qZDRDbiH61QwwSH6f7ST0/ycQL1KhoP4K7WVqwRyelNRGhzpoSgxxc gefocNB6znLa92pUGXzYPMbVIf2d/n6xKv+zuufknVpkmMslYxQ/WLbxv4DAF12Y xj1O9YNOvuCndBOTkp2NDyygscvJPVWDS5MoF2gLGbZzRS1hOMAK4iB/V6tmuDBi 5ty9KE4ZgfsxkrTVRjpWUseM7lUcuVMiXiPaI0PRTtWbQqtQKty8v16aNkfcOBii UuS4miDPqq+iBU0Be/Cdclv/tIwIM+3uazaPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNnQH9mfot/pqtOQW9IWwEsOjHMQwHwYDVR0jBBgwFoAULcO/WKfD4suVkd5E 2HmTwNP3MnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Mi9MY09fV0tmRDRzdVZrZDVFMkhtVHdOUDNNbk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xjT19XS2ZENHN1VmtkNUUySG1Ud05QM01uTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTIvTGNPX1dLZkQ0c3VW a2Q1RTJIbVR3TlAzTW5NLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGpIb0YV120jtCBzBfO+nPU9JOkTOKxFDViChL2VQGpO+kS1PmOSY+WjHmRU 2kqNEMm3MP/Ryoar5jfok6zWUPqWVrEOwq+z7FrxVa9/4ebdQq2kC60BPwqmHiUy e7iOjCmtxXvFJq5pMlelfZ0heJj4d3TfGMlRwwleVIjq9vbzcqzjZi5NQkDa7p8K uCoWxAjX1jlGcMMHcdSfkXJJE5XFhivnV5js0a4MjF+pxUZcz/kBBc0ltdBNfn7X dy2yhUCfgqP+v/bWHYJsneVQVZomidtoTff968FiL0G65KP6Y+i0LK800HCthVH6 6VXcgi6JARDIblAJj8+G8J4HhMw= -----END CERTIFICATE-----Generated at Fri Oct 24 21:12:01 2025 by rpki-client