$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft File: WBE1OPP_XM76JqEG222MbLwCoZ8.mft (raw, json) Hash identifier: ctRc82UfNS5v3F+iHTv8L/JhJv62EIaeNax8jX7gG9E= Subject key identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 Authority key identifier: 58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F Certificate issuer: /CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Certificate serial: 0977 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft Manifest number: 0977 Signing time: Fri 24 Oct 2025 17:36:25 +0000 Manifest this update: Fri 24 Oct 2025 17:36:25 +0000 Manifest next update: Fri 24 Oct 2025 23:36:25 +0000 Files and hashes: 1: WBE1OPP_XM76JqEG222MbLwCoZ8.crl (hash: xYQpSq6oQXWOmVm/dzpUAgssB7fSoroLRd2q2XiNMzk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 23:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2423 (0x977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Validity Not Before: Oct 24 17:36:25 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=22397420AA3CFFCFBCE8B2FD94D32408B1688B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:d9:3e:3e:32:2a:ec:41:f4:fc:57:14:a9: 88:cc:43:6a:cd:85:32:04:bd:91:0d:88:7a:fc:79: 3f:50:4c:68:e9:49:ea:36:50:53:5a:ee:96:31:ee: 6e:3a:ac:2c:e2:98:7c:11:16:1e:bc:b5:b3:82:38: b3:04:99:4b:b7:a5:8f:3c:bc:d2:c9:43:53:62:1b: 89:d1:ff:5f:0f:65:5d:35:fc:88:d7:86:d4:41:08: ec:f0:4f:06:d6:f4:1c:bf:51:4a:e9:08:66:50:c7: bd:2d:c3:50:44:de:3b:9d:fd:33:00:ec:7f:42:2e: ec:a1:00:d3:ec:43:d6:2c:8a:90:10:62:87:77:cf: 6b:b6:56:77:7f:76:11:f7:25:72:d5:70:d7:32:bc: c9:35:e5:30:94:38:c1:2b:63:a4:56:eb:14:89:03: 88:d5:d7:1a:ef:cc:ab:97:8c:95:7b:06:ff:1a:ba: d5:46:48:f9:50:98:33:db:cd:eb:76:e0:7f:9c:e3: dd:4c:1b:18:32:cb:21:0d:f3:03:09:97:ef:31:f0: 6c:10:3b:46:73:7f:c5:1c:54:9c:97:d0:36:f3:99: 89:60:98:c5:ed:a5:61:56:d3:ce:dd:38:f2:6f:56: 20:5a:6b:95:7a:9b:fd:86:4f:81:a4:27:33:40:13: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 X509v3 Authority Key Identifier: keyid:58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:76:2d:83:51:5f:ce:79:b4:ef:3b:d2:bf:13:9d:dd:64:46: a0:60:ca:ae:66:97:f5:88:f8:69:db:e3:10:b3:6e:3c:62:8e: c9:c8:ad:19:2b:b4:f7:9b:54:b9:12:70:c5:d1:cc:a2:d7:d0: 96:8d:2a:2b:f3:a5:c8:2b:56:7f:f7:fd:a6:8b:80:dc:e7:66: 87:1f:8f:a9:6e:6d:33:61:f1:a9:15:96:cd:d8:56:c1:6a:ac: 64:fd:7a:30:32:de:cd:06:a1:b1:7c:11:dd:53:86:4f:48:7f: 6c:28:b6:2b:47:b2:8d:5c:24:aa:47:57:34:2a:d2:4f:f0:5d: 52:c5:16:8e:5f:bc:a7:94:d4:02:8e:aa:2d:7e:d1:f8:81:14: d6:6c:8c:ec:c2:be:7d:89:a4:8e:25:27:22:d0:06:b2:1a:61: b9:79:86:e9:d8:8f:5a:b8:a3:ba:c3:1f:d1:b2:e5:0b:0c:f1: af:41:5c:7d:0b:80:0f:45:f4:f6:3e:b6:ee:d6:c3:1f:fb:b4: 5f:a8:c8:43:cd:bf:9c:75:83:0b:e9:7d:24:c0:b1:bf:94:74: c0:7b:04:ca:27:b4:7b:10:2b:7a:97:34:e6:f5:f6:4e:c2:46: f0:d9:3c:16:26:52:ee:73:f4:7c:43:fe:e5:6d:7a:52:97:4f: d7:ba:52:57 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgx MTM1MzhGM0ZGNUNDRUZBMjZBMTA2REI2RDhDNkNCQzAyQTE5RjAeFw0yNTEwMjQx NzM2MjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIyMzk3NDIwQUEzQ0ZG Q0ZCQ0U4QjJGRDk0RDMyNDA4QjE2ODhCMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiP9k+PjIq7EH0/FcUqYjMQ2rNhTIEvZENiHr8eT9QTGjpSeo2 UFNa7pYx7m46rCzimHwRFh68tbOCOLMEmUu3pY88vNLJQ1NiG4nR/18PZV01/IjX htRBCOzwTwbW9By/UUrpCGZQx70tw1BE3jud/TMA7H9CLuyhANPsQ9YsipAQYod3 z2u2Vnd/dhH3JXLVcNcyvMk15TCUOMErY6RW6xSJA4jV1xrvzKuXjJV7Bv8autVG SPlQmDPbzet24H+c491MGxgyyyEN8wMJl+8x8GwQO0Zzf8UcVJyX0DbzmYlgmMXt pWFW087dOPJvViBaa5V6m/2GT4GkJzNAE7+BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIjl0IKo8/8+86LL9lNMkCLFoiwYwHwYDVR0jBBgwFoAUWBE1OPP/XM76JqEG 222MbLwCoZ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9XQkUxT1BQX1hNNzZKcUVHMjIyTWJMd0NvWjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dCRTFPUFBfWE03NkpxRUcyMjJNYkx3Q29aOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvV0JFMU9QUF9YTTc2 SnFFRzIyMk1iTHdDb1o4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADd2LYNRX855tO870r8Tnd1kRqBgyq5ml/WI+Gnb4xCzbjxijsnIrRkrtPeb VLkScMXRzKLX0JaNKivzpcgrVn/3/aaLgNznZocfj6lubTNh8akVls3YVsFqrGT9 ejAy3s0GobF8Ed1Thk9If2wotitHso1cJKpHVzQq0k/wXVLFFo5fvKeU1AKOqi1+ 0fiBFNZsjOzCvn2JpI4lJyLQBrIaYbl5hunYj1q4o7rDH9Gy5QsM8a9BXH0LgA9F 9PY+tu7Wwx/7tF+oyEPNv5x1gwvpfSTAsb+UdMB7BMontHsQK3qXNOb19k7CRvDZ PBYmUu5z9HxD/uVtelKXT9e6Ulc= -----END CERTIFICATE-----Generated at Fri Oct 24 21:22:09 2025 by rpki-client