$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.mft File: cgA7ZqRsigeu_fvVZhYXSr8XXyA.mft (raw, json) Hash identifier: l38+rWceu5Hv9jdxoFgMOCPD+KbcQXgIPWuBesk4TZY= Subject key identifier: DF:3F:2B:05:DE:B1:F9:48:07:70:80:E4:E4:97:5A:39:E0:C2:D0:CD Authority key identifier: 72:00:3B:66:A4:6C:8A:07:AE:FD:FB:D5:66:16:17:4A:BF:17:5F:20 Certificate issuer: /CN=72003B66A46C8A07AEFDFBD56616174ABF175F20 Certificate serial: 0664 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cgA7ZqRsigeu_fvVZhYXSr8XXyA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.mft Manifest number: 0664 Signing time: Fri 24 Oct 2025 18:07:20 +0000 Manifest this update: Fri 24 Oct 2025 18:07:20 +0000 Manifest next update: Sat 25 Oct 2025 00:07:20 +0000 Files and hashes: 1: cgA7ZqRsigeu_fvVZhYXSr8XXyA.crl (hash: sJF7ovjSrLhradEnPiSS6u6ITO7Qjlpvrn3sSXAI3r8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cgA7ZqRsigeu_fvVZhYXSr8XXyA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 00:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72003B66A46C8A07AEFDFBD56616174ABF175F20 Validity Not Before: Oct 24 18:07:20 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DF3F2B05DEB1F948077080E4E4975A39E0C2D0CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:e1:ab:a8:20:00:f2:22:78:52:33:97:f5: 24:0a:de:3b:c7:db:b3:64:9f:05:68:dd:33:a1:52: 00:1a:12:61:c6:63:dd:e1:22:4f:e0:19:e3:b3:52: 52:5d:f7:15:22:84:8a:7e:2b:47:1f:06:12:c4:96: 84:a0:ab:9a:cb:af:c3:c4:4d:ac:86:e2:7e:49:a0: 44:bc:b6:7f:02:18:0b:cb:55:9c:bd:64:16:99:0c: f0:a8:f2:56:42:30:08:c7:8a:d0:bf:50:1b:c7:c0: 68:09:61:61:f3:7f:cb:b2:a2:c2:9d:66:6e:1e:9e: cb:9d:eb:3c:6b:91:79:fe:23:d1:9e:54:ac:c7:fe: 94:80:c3:6d:b5:18:9c:7c:7c:55:20:67:9e:b8:b8: e7:bc:9e:1d:57:5b:63:db:1b:0b:4e:a0:8d:ad:9f: c4:28:14:0e:fe:3a:b8:3f:30:08:0d:bb:e8:49:0e: 84:a1:e5:c1:ac:05:8a:c6:56:93:98:0c:63:3d:7a: 92:34:f6:7b:5d:0f:d5:a2:08:fe:ec:f1:50:9d:1f: 79:54:23:3d:8f:92:c1:9a:22:6b:2a:a0:3d:0a:22: 94:5a:73:5b:0b:5e:c7:ce:43:8c:07:fd:6e:07:94: ae:90:b1:7c:3b:20:83:33:6e:21:a4:ff:04:fd:3b: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3F:2B:05:DE:B1:F9:48:07:70:80:E4:E4:97:5A:39:E0:C2:D0:CD X509v3 Authority Key Identifier: keyid:72:00:3B:66:A4:6C:8A:07:AE:FD:FB:D5:66:16:17:4A:BF:17:5F:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cgA7ZqRsigeu_fvVZhYXSr8XXyA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f4:06:02:e8:ea:15:aa:89:6b:5e:97:15:20:8b:3e:26:07: 19:81:c4:6c:49:b7:40:58:87:0a:9a:be:dc:d7:71:19:67:02: c1:a6:a5:34:3e:32:fa:f5:76:3e:0e:e8:d5:6e:99:ff:39:a0: 29:fc:77:fa:30:c4:1b:5e:1c:e5:ca:a9:da:e6:95:eb:39:e9: 03:cb:0c:df:b8:62:62:94:f7:12:7c:6b:26:bc:cc:c4:a1:c8: df:2d:c1:f5:7c:fe:7b:07:6c:f8:e8:e0:15:3e:91:3a:8a:ff: 2b:db:69:89:51:3d:4a:6c:62:57:f6:f2:6e:85:37:40:e4:8c: 86:8c:b3:bd:f9:87:bf:f5:c7:ae:9a:5f:d7:e0:f9:1d:e4:34: ea:b5:36:1c:64:65:14:79:9a:9a:f8:f7:0f:d5:5d:3b:d2:e8: 33:2e:ab:9d:4d:9b:f8:32:f5:b8:e4:50:50:73:80:c7:76:3a: fa:bc:58:9a:c1:db:94:7c:d8:8c:73:e7:6e:fa:45:df:f4:87: 6c:ff:c7:52:03:46:91:48:6b:0e:a8:90:f3:55:2e:84:40:82: 3d:0d:d1:e1:2d:4f:9c:5e:cb:18:0d:52:31:92:90:96:60:55: f2:0d:f5:dc:c3:f5:a8:6c:7b:c7:a6:17:7a:91:e8:e8:33:3b: 0d:53:6c:d3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzIw MDNCNjZBNDZDOEEwN0FFRkRGQkQ1NjYxNjE3NEFCRjE3NUYyMDAeFw0yNTEwMjQx ODA3MjBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERGM0YyQjA1REVCMUY5 NDgwNzcwODBFNEU0OTc1QTM5RTBDMkQwQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk6OGrqCAA8iJ4UjOX9SQK3jvH27NknwVo3TOhUgAaEmHGY93h Ik/gGeOzUlJd9xUihIp+K0cfBhLEloSgq5rLr8PETayG4n5JoES8tn8CGAvLVZy9 ZBaZDPCo8lZCMAjHitC/UBvHwGgJYWHzf8uyosKdZm4ensud6zxrkXn+I9GeVKzH /pSAw221GJx8fFUgZ564uOe8nh1XW2PbGwtOoI2tn8QoFA7+Org/MAgNu+hJDoSh 5cGsBYrGVpOYDGM9epI09ntdD9WiCP7s8VCdH3lUIz2PksGaImsqoD0KIpRac1sL XsfOQ4wH/W4HlK6QsXw7IIMzbiGk/wT9Ox09AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3z8rBd6x+UgHcIDk5JdaOeDC0M0wHwYDVR0jBBgwFoAUcgA7ZqRsigeu/fvV ZhYXSr8XXyAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MC9jZ0E3WnFSc2lnZXVfZnZWWmhZWFNyOFhYeUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NnQTdacVJzaWdldV9mdlZaaFlYU3I4WFh5QS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzAvY2dBN1pxUnNpZ2V1 X2Z2VlpoWVhTcjhYWHlBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABX0BgLo6hWqiWtelxUgiz4mBxmBxGxJt0BYhwqavtzXcRlnAsGmpTQ+Mvr1 dj4O6NVumf85oCn8d/owxBteHOXKqdrmles56QPLDN+4YmKU9xJ8aya8zMShyN8t wfV8/nsHbPjo4BU+kTqK/yvbaYlRPUpsYlf28m6FN0DkjIaMs735h7/1x66aX9fg +R3kNOq1NhxkZRR5mpr49w/VXTvS6DMuq51Nm/gy9bjkUFBzgMd2Ovq8WJrB25R8 2Ixz5276Rd/0h2z/x1IDRpFIaw6okPNVLoRAgj0N0eEtT5xeyxgNUjGSkJZgVfIN 9dzD9ahse8emF3qR6OgzOw1TbNM= -----END CERTIFICATE-----Generated at Fri Oct 24 21:24:49 2025 by rpki-client