$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft File: RA0YjgN6sufC2lviztymGqt4xaM.mft (raw, json) Hash identifier: oZ5kRSBUGXGewnRPZomddvyJ/fGVsUObrPCKgxi+690= Subject key identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 Authority key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 Certificate issuer: /CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Certificate serial: 082B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft Manifest number: 082B Signing time: Fri 24 Oct 2025 17:36:30 +0000 Manifest this update: Fri 24 Oct 2025 17:36:30 +0000 Manifest next update: Fri 24 Oct 2025 23:36:30 +0000 Files and hashes: 1: RA0YjgN6sufC2lviztymGqt4xaM.crl (hash: fUNQSA+CFJ3mm9WnfTM/0HcOmSTFnQtTeXC+QHeMbdk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 23:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Validity Not Before: Oct 24 17:36:30 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0FCB1E5BC5AB234106DA1AB44B2167950AE70EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:73:c5:fd:71:2e:83:56:1c:c4:e3:44:ee: 52:a2:b7:d4:c7:a3:4b:5b:ee:93:67:3e:7d:74:96: 75:e3:a5:67:a5:76:31:5e:b6:fe:38:03:35:34:ec: b0:a6:6a:17:cf:03:b3:fc:12:23:43:ad:c9:48:92: 53:b8:4d:05:d9:b3:a9:b6:e0:a6:c6:56:81:18:88: 2c:b5:9b:9f:95:09:31:06:1c:4d:8d:9e:75:d8:22: 92:43:f4:f0:11:11:83:fd:5e:c8:d6:29:8d:48:9c: 36:a6:8b:69:ea:8f:e4:3f:f1:79:f6:c0:dd:77:60: 10:bb:c3:c1:9c:f9:88:c6:f2:d2:9a:2e:fb:6a:86: a8:60:e5:c6:a0:16:e1:54:37:c9:00:e7:d7:19:c8: 40:bc:8f:4a:94:5a:43:a8:e0:2f:fc:e9:12:13:6c: cf:a9:e1:03:ef:47:69:c4:58:20:48:c2:15:d2:39: d2:30:f8:2f:25:78:85:a3:74:ac:e3:03:a2:6a:14: 33:94:90:48:cb:81:89:41:34:53:71:5c:5f:99:1b: 29:48:5d:cd:23:18:8c:e4:62:d5:06:c1:56:d4:32: 6d:40:1b:24:2d:22:f4:0e:82:76:02:31:dd:f5:6b: 8a:95:2a:84:55:90:32:fb:18:9d:27:7d:4b:0d:eb: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 X509v3 Authority Key Identifier: keyid:44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:40:c8:81:1e:c1:3c:93:7d:a3:71:fa:73:06:93:dd:ac:3b: f6:39:01:3a:27:9b:c9:30:aa:83:1f:7e:16:7d:42:c4:6b:b9: 8d:17:e0:df:f2:8b:4e:d6:1f:11:f2:03:4d:2b:e3:02:be:ce: 05:12:72:86:13:8a:89:3a:e1:ab:2b:7b:3b:1e:23:03:f2:da: c6:ce:56:4e:9c:57:7f:f7:7a:fa:41:df:9a:dd:f3:2f:6f:4c: 42:5f:e2:bb:46:2f:f0:b5:91:b7:94:c6:0d:8a:33:b3:63:bc: 08:de:eb:e2:e5:4b:86:b4:cd:26:d3:a7:7d:97:93:3e:3e:a5: 2f:87:d2:88:d4:ff:d2:e7:1e:7c:51:83:6e:e3:be:45:6e:f1: 40:f8:f0:38:60:8d:2b:f2:d7:40:4a:66:bd:4f:68:71:16:79: 07:8b:96:09:a5:0b:1b:50:53:6c:63:e6:09:b8:3b:d4:b4:43: 9f:d4:4e:2b:7f:a8:1c:51:67:b8:3d:b5:c7:f0:d5:ad:61:24: 14:07:81:8b:91:de:61:8b:f2:80:46:f9:01:9d:31:8f:d0:17: ae:21:73:b4:f7:92:16:48:58:d2:b7:ca:17:41:67:26:c3:15: fd:4d:ce:27:29:9a:22:8f:3f:e6:81:82:64:38:ce:af:b1:43: 7b:5e:d7:fb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQw RDE4OEUwMzdBQjJFN0MyREE1QkUyQ0VEQ0E2MUFBQjc4QzVBMzAeFw0yNTEwMjQx NzM2MzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBGQ0IxRTVCQzVBQjIz NDEwNkRBMUFCNDRCMjE2Nzk1MEFFNzBFQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN33PF/XEug1YcxONE7lKit9THo0tb7pNnPn10lnXjpWeldjFe tv44AzU07LCmahfPA7P8EiNDrclIklO4TQXZs6m24KbGVoEYiCy1m5+VCTEGHE2N nnXYIpJD9PAREYP9XsjWKY1InDami2nqj+Q/8Xn2wN13YBC7w8Gc+YjG8tKaLvtq hqhg5cagFuFUN8kA59cZyEC8j0qUWkOo4C/86RITbM+p4QPvR2nEWCBIwhXSOdIw +C8leIWjdKzjA6JqFDOUkEjLgYlBNFNxXF+ZGylIXc0jGIzkYtUGwVbUMm1AGyQt IvQOgnYCMd31a4qVKoRVkDL7GJ0nfUsN6wB3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUD8seW8WrI0EG2hq0SyFnlQrnDscwHwYDVR0jBBgwFoAURA0YjgN6sufC2lvi ztymGqt4xaMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My9SQTBZamdONnN1ZkMybHZpenR5bUdxdDR4YU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JBMFlqZ042c3VmQzJsdml6dHltR3F0NHhhTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTMvUkEwWWpnTjZzdWZD Mmx2aXp0eW1HcXQ0eGFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAtAyIEewTyTfaNx+nMGk92sO/Y5ATonm8kwqoMffhZ9QsRruY0X4N/yi07W HxHyA00r4wK+zgUScoYTiok64asrezseIwPy2sbOVk6cV3/3evpB35rd8y9vTEJf 4rtGL/C1kbeUxg2KM7NjvAje6+LlS4a0zSbTp32Xkz4+pS+H0ojU/9LnHnxRg27j vkVu8UD48DhgjSvy10BKZr1PaHEWeQeLlgmlCxtQU2xj5gm4O9S0Q5/UTit/qBxR Z7g9tcfw1a1hJBQHgYuR3mGL8oBG+QGdMY/QF64hc7T3khZIWNK3yhdBZybDFf1N zicpmiKPP+aBgmQ4zq+xQ3te1/s= -----END CERTIFICATE-----Generated at Fri Oct 24 21:24:50 2025 by rpki-client