$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft File: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft (raw, json) Hash identifier: YYqmlCQUXTTtXOOKqHE/29lskhSisJqtcHoV4Glb1iM= Subject key identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B Authority key identifier: AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 Certificate issuer: /CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Certificate serial: 0962 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft Manifest number: 0962 Signing time: Fri 24 Oct 2025 18:05:59 +0000 Manifest this update: Fri 24 Oct 2025 18:05:59 +0000 Manifest next update: Sat 25 Oct 2025 00:05:59 +0000 Files and hashes: 1: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl (hash: Ec97yyiYLhtWu8k85oSU6OP3GtbECuZ6jrcCjHX5Jt4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 00:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Validity Not Before: Oct 24 18:05:59 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C95006BDDC4D9538F86B94D2F10A03B33D839E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:3e:d1:98:1a:5e:b9:06:33:2a:5d:0b:8a: 68:fa:99:a8:b8:39:6d:48:f2:36:5e:ee:a8:1b:70: 60:02:23:38:d0:dd:46:c7:60:cc:31:df:67:47:7a: db:fd:ec:e5:9f:b1:f9:33:b6:2e:6c:7d:7b:cc:1b: 71:0e:0b:77:95:f7:7a:2f:ed:aa:14:0c:0a:f4:df: 53:32:8f:e9:e8:36:73:85:7a:44:25:49:4e:53:b2: 73:39:dd:77:9d:a6:c3:da:61:ef:50:4a:01:c6:02: a3:ed:1e:32:14:23:61:26:2d:a1:46:0c:a5:f3:fa: d5:0b:71:4b:42:e5:83:91:e5:42:3b:32:92:a0:0b: e3:aa:80:7e:2c:41:69:db:59:4b:cc:c3:2b:5e:6c: d4:6f:62:c0:b7:8a:20:bd:97:c3:52:21:40:f7:e2: 7c:e6:b0:86:ce:32:56:5b:a3:94:df:4c:cb:a3:15: ce:8b:12:70:1b:6b:3e:38:3e:cc:d7:1b:a3:46:b3: a3:5b:57:63:05:c4:5a:e0:78:3d:e4:69:e1:92:0e: bc:4c:2c:1d:12:98:6d:3b:53:4d:cc:9e:9a:9e:49: a7:fc:1d:5a:08:fd:9c:7b:31:e9:c5:f0:3e:fc:b4: b1:7e:38:17:4c:b0:03:f7:4c:13:ea:c5:18:cb:67: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B X509v3 Authority Key Identifier: keyid:AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8c:bd:bd:7b:71:b4:c3:aa:ce:3a:cf:98:16:50:88:79:b5: 4f:88:f2:c5:8c:11:97:41:85:33:53:6e:28:5a:91:52:88:a6: aa:5a:97:76:b6:f0:69:9d:75:05:63:6d:05:91:9d:4f:82:8d: 18:00:7d:7b:9b:76:e9:8e:2d:e9:09:b9:27:85:33:32:77:84: 17:28:ce:9e:85:18:c8:c9:6a:cc:ec:b6:2a:cc:8f:ae:c5:f3: c9:f6:aa:42:e5:aa:d9:6a:3a:c4:fb:78:f2:d7:f7:7a:e7:9d: 77:a2:fd:a4:28:74:3e:31:84:50:27:14:52:69:27:dc:83:95: 3d:68:a8:7d:4a:41:6c:0c:f3:9c:57:2e:e6:0d:aa:a7:82:19: ad:6e:01:15:df:a0:63:df:42:2a:1a:f8:63:f4:c2:11:78:d6: d5:db:77:bd:8f:4d:f9:44:85:04:9a:8a:dd:fa:c4:02:58:2c: 37:bd:6d:ec:7f:b2:cc:28:93:1a:fa:6d:b4:f8:f6:2e:12:cb: 20:40:a8:f8:49:54:58:90:cd:13:d1:54:8a:7e:4c:47:d7:3b: d6:fc:88:64:29:92:39:f4:a2:dd:59:51:b3:2b:02:fc:43:3b: 16:83:9b:e0:bd:2b:ac:66:cf:24:49:00:38:a7:9b:19:b7:a2: 36:7d:a6:91 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUNE N0MwNzQ5RTUzQTEwQTAwMjVDRDlDQUZGODc4QkUyRERCNTYzODAeFw0yNTEwMjQx ODA1NTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEM5NTAwNkJEREM0RDk1 MzhGODZCOTREMkYxMEEwM0IzM0Q4MzlFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvVT7RmBpeuQYzKl0Limj6mai4OW1I8jZe7qgbcGACIzjQ3UbH YMwx32dHetv97OWfsfkzti5sfXvMG3EOC3eV93ov7aoUDAr031Myj+noNnOFekQl SU5TsnM53XedpsPaYe9QSgHGAqPtHjIUI2EmLaFGDKXz+tULcUtC5YOR5UI7MpKg C+OqgH4sQWnbWUvMwytebNRvYsC3iiC9l8NSIUD34nzmsIbOMlZbo5TfTMujFc6L EnAbaz44PszXG6NGs6NbV2MFxFrgeD3kaeGSDrxMLB0SmG07U03MnpqeSaf8HVoI /Zx7MenF8D78tLF+OBdMsAP3TBPqxRjLZ4eDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyVAGvdxNlTj4a5TS8QoDsz2DniswHwYDVR0jBBgwFoAUrNfAdJ5ToQoAJc2c r/h4vi3bVjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ni9yTmZBZEo1VG9Rb0FKYzJjcl9oNHZpM2JWamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JOZkFkSjVUb1FvQUpjMmNyX2g0dmkzYlZqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTYvck5mQWRKNVRvUW9B SmMyY3JfaDR2aTNiVmpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALmMvb17cbTDqs46z5gWUIh5tU+I8sWMEZdBhTNTbihakVKIpqpal3a28Gmd dQVjbQWRnU+CjRgAfXubdumOLekJuSeFMzJ3hBcozp6FGMjJaszstirMj67F88n2 qkLlqtlqOsT7ePLX93rnnXei/aQodD4xhFAnFFJpJ9yDlT1oqH1KQWwM85xXLuYN qqeCGa1uARXfoGPfQioa+GP0whF41tXbd72PTflEhQSait36xAJYLDe9bex/sswo kxr6bbT49i4SyyBAqPhJVFiQzRPRVIp+TEfXO9b8iGQpkjn0ot1ZUbMrAvxDOxaD m+C9K6xmzyRJADinmxm3ojZ9ppE= -----END CERTIFICATE-----Generated at Fri Oct 24 21:22:09 2025 by rpki-client