$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft File: RJgA4NOab6QpLdGwZto9qI0i-rw.mft (raw, json) Hash identifier: zdzXFy8vnqYyjyzfO85tm/Dmb7rTkWuEwuxPrFrZAO4= Subject key identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 Authority key identifier: 44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC Certificate issuer: /CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Certificate serial: 069D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft Manifest number: 069D Signing time: Fri 24 Oct 2025 18:07:09 +0000 Manifest this update: Fri 24 Oct 2025 18:07:09 +0000 Manifest next update: Sat 25 Oct 2025 00:07:09 +0000 Files and hashes: 1: RJgA4NOab6QpLdGwZto9qI0i-rw.crl (hash: nVTPzL5+9WKPQfJGINgbcJP6Qwv6Li6ehb3RT3DDK/8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 00:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC Validity Not Before: Oct 24 18:07:09 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A21902D82F6C08116AC14E15D910AA41902FB009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b6:d6:e9:4a:69:59:89:35:9b:c3:c0:9d:01: 96:9b:84:97:1a:d0:7a:63:ed:5a:a8:10:c7:1c:cb: 52:e9:ab:01:5c:2d:b2:b6:a0:66:50:e2:c5:3f:43: c0:ff:11:cd:5b:c6:f5:0e:f3:fe:b5:78:08:26:66: bb:3f:e1:36:82:ee:7f:c3:60:10:76:04:8e:26:10: 13:a8:0f:30:3f:0e:16:87:45:a6:1b:33:21:eb:02: 12:58:2a:b3:5c:96:64:90:8d:c8:1a:a0:5e:8a:f2: ac:95:c5:fa:e0:ab:d7:1a:89:98:45:4d:ab:20:3f: 18:43:2d:02:2b:56:95:b9:73:05:a2:9a:ec:d5:20: dd:1b:0e:78:ce:a6:66:eb:ba:47:af:4d:35:29:d4: fe:d0:c3:0a:07:3f:1d:b4:0c:f2:48:2d:c9:fd:81: a5:3b:3f:29:a6:3f:42:3f:00:a6:f4:e0:ee:4a:ab: 84:4b:56:8b:db:24:d2:54:4b:ca:4e:e3:ab:4d:72: 08:34:47:1b:e2:f7:be:66:d5:ad:89:ba:d4:52:ca: 6d:d4:6a:30:48:e0:bc:13:54:82:4d:4f:3b:60:18: ba:15:4e:56:c0:8b:27:21:26:11:4c:0f:71:3b:24: cf:f4:57:fe:93:e8:e6:69:25:09:0b:db:d3:80:67: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09 X509v3 Authority Key Identifier: keyid:44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f8:e9:a8:bf:32:c6:2c:8a:8a:26:94:5f:61:d4:2d:6c:c3: c7:3c:c1:bf:bc:af:5c:98:39:80:18:e7:12:9d:cb:ae:a1:93: db:4d:b7:5a:d0:9a:68:b3:af:6f:b2:25:cd:1d:22:cc:b3:af: 22:37:d8:5a:e2:a3:5b:d0:b8:e4:68:ba:5e:f2:c0:09:ad:52: 9d:26:0b:00:ee:3b:51:40:90:a5:54:fd:f7:16:57:fa:d9:db: c6:88:8a:83:04:eb:30:73:24:82:45:93:72:d1:e4:74:de:3c: 96:45:e9:f2:7f:c3:05:93:8e:5e:19:e6:db:f8:9e:ab:cd:9e: 4f:33:f3:c9:eb:d1:ef:53:0b:35:32:72:7a:ff:d0:3b:04:8b: f6:7f:ba:00:3c:97:9a:8c:96:d9:2b:9f:90:15:a8:86:00:0e: f2:ff:59:f6:2b:8b:e3:05:0e:e1:e1:0e:dc:61:a5:bb:80:9d: 10:56:14:72:a4:c0:f1:67:49:b5:8f:03:b5:a5:9c:3d:c7:93: 90:8f:fc:85:38:24:35:4e:93:22:db:cc:f1:74:89:d1:ac:ee: b8:2e:56:e9:71:cf:04:5b:4d:91:a1:01:e4:9e:3b:77:da:14: f4:77:ea:6e:d5:e8:33:c7:95:1d:23:2e:6a:32:6c:ff:15:b6: 8a:b2:10:2e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ5 ODAwRTBEMzlBNkZBNDI5MkREMUIwNjZEQTNEQTg4RDIyRkFCQzAeFw0yNTEwMjQx ODA3MDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEEyMTkwMkQ4MkY2QzA4 MTE2QUMxNEUxNUQ5MTBBQTQxOTAyRkIwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwttbpSmlZiTWbw8CdAZabhJca0Hpj7VqoEMccy1LpqwFcLbK2 oGZQ4sU/Q8D/Ec1bxvUO8/61eAgmZrs/4TaC7n/DYBB2BI4mEBOoDzA/DhaHRaYb MyHrAhJYKrNclmSQjcgaoF6K8qyVxfrgq9caiZhFTasgPxhDLQIrVpW5cwWimuzV IN0bDnjOpmbrukevTTUp1P7QwwoHPx20DPJILcn9gaU7PymmP0I/AKb04O5Kq4RL VovbJNJUS8pO46tNcgg0Rxvi975m1a2JutRSym3UajBI4LwTVIJNTztgGLoVTlbA iychJhFMD3E7JM/0V/6T6OZpJQkL29OAZ/FLAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUohkC2C9sCBFqwU4V2RCqQZAvsAkwHwYDVR0jBBgwFoAURJgA4NOab6QpLdGw Zto9qI0i+rwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy NC9SSmdBNE5PYWI2UXBMZEd3WnRvOXFJMGktcncuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JKZ0E0Tk9hYjZRcExkR3dadG85cUkwaS1ydy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjQvUkpnQTROT2FiNlFw TGRHd1p0bzlxSTBpLXJ3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHX46ai/MsYsioomlF9h1C1sw8c8wb+8r1yYOYAY5xKdy66hk9tNt1rQmmiz r2+yJc0dIsyzryI32Frio1vQuORoul7ywAmtUp0mCwDuO1FAkKVU/fcWV/rZ28aI ioME6zBzJIJFk3LR5HTePJZF6fJ/wwWTjl4Z5tv4nqvNnk8z88nr0e9TCzUycnr/ 0DsEi/Z/ugA8l5qMltkrn5AVqIYADvL/WfYri+MFDuHhDtxhpbuAnRBWFHKkwPFn SbWPA7WlnD3Hk5CP/IU4JDVOkyLbzPF0idGs7rguVulxzwRbTZGhAeSeO3faFPR3 6m7V6DPHlR0jLmoybP8VtoqyEC4= -----END CERTIFICATE-----Generated at Fri Oct 24 21:13:47 2025 by rpki-client