$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft File: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft (raw, json) Hash identifier: ZaFVKNFRpa0LyetLv3j1udHKO4E/eBCw7bb3MzndEOk= Subject key identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 Authority key identifier: 66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF Certificate issuer: /CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Certificate serial: 0675 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft Manifest number: 0672 Signing time: Fri 24 Oct 2025 18:06:10 +0000 Manifest this update: Fri 24 Oct 2025 18:06:10 +0000 Manifest next update: Sat 25 Oct 2025 00:06:10 +0000 Files and hashes: 1: ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl (hash: CwwOJuMdwDpWzdRBPlkpe66SYNszQ8YjY1F0A19wUUI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 00:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6676A6642A4F6016BC071DF626B2BEBCB43B5ECF Validity Not Before: Oct 24 18:06:10 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F0DCD3E56B07333F5EAD5D479ED734FE6D5AB0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f2:74:a3:57:8d:a7:30:b6:5d:54:f2:76:3c: 75:bc:97:b6:8e:5d:b3:36:fd:e9:56:18:78:96:73: d8:ff:17:78:38:2d:df:e3:72:28:58:4a:da:e9:ea: 9a:95:a1:b3:92:d1:35:e8:3f:13:90:b8:5f:b4:ca: 48:5a:e8:9d:51:8b:d6:93:fc:7a:50:db:32:4a:ed: cf:6b:64:ff:80:3c:35:c0:18:c4:0a:8f:89:ed:c9: c3:48:f2:9c:e1:fc:da:ff:83:2d:fc:2a:fd:c1:44: 18:e1:88:a5:33:ff:cb:89:e7:0e:24:d0:28:f9:89: 4b:6d:10:f6:7e:10:b8:e6:c1:fe:15:cb:e0:d8:ee: 9c:c1:95:47:af:6a:b5:5a:6f:60:3d:c7:02:c0:d0: f1:df:6b:c8:4f:02:f9:17:d4:ee:e5:d4:1b:45:0c: 28:35:38:d9:18:79:63:13:d0:5c:c5:bf:0e:df:4b: 15:1f:71:fb:68:43:dc:77:6b:e1:c8:f2:e9:a3:cf: ea:4b:40:da:e0:c4:d5:37:3a:36:c0:c5:cd:b1:e5: 79:30:6e:94:b3:86:33:e0:f5:cb:74:28:3c:07:24: d6:49:c5:cc:ec:51:b5:e2:98:6e:12:e0:24:ed:3d: 46:93:41:37:88:14:aa:c9:09:cd:72:f1:5f:7c:ae: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:D3:E5:6B:07:33:3F:5E:AD:5D:47:9E:D7:34:FE:6D:5A:B0:B3 X509v3 Authority Key Identifier: keyid:66:76:A6:64:2A:4F:60:16:BC:07:1D:F6:26:B2:BE:BC:B4:3B:5E:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/ZnamZCpPYBa8Bx32JrK-vLQ7Xs8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e3:71:7a:ce:ce:9b:cb:d6:b3:02:b5:da:b5:78:f7:b8:12: 2e:2f:e6:46:97:79:e0:1b:a0:c1:4a:06:1c:f5:ec:de:d2:91: d4:9f:9e:8b:bf:68:aa:de:00:6a:3f:c9:91:bc:61:54:02:01: 43:ba:ac:38:ea:34:ea:5a:0e:f7:30:bd:82:02:bb:5c:35:f4: 5d:7d:17:bb:b7:42:6f:72:24:98:37:68:fb:bf:c8:95:bb:fd: 77:03:64:6c:b6:86:48:c7:76:03:56:6d:e1:f8:11:15:ac:c5: f1:93:41:c5:f4:65:78:67:2f:e7:6d:87:7d:62:5a:1e:ec:66: dc:86:1d:4f:1f:00:f5:23:17:cb:5d:a4:64:33:a1:4a:52:56: f2:70:28:8d:a7:86:b8:1d:4c:5e:48:d0:d3:ee:12:00:e8:e3: 8a:c9:90:82:cd:db:f4:7c:87:f8:65:15:f8:03:b0:bc:5d:14: 58:d6:04:7f:52:56:3f:2d:f5:ff:d9:d5:20:cc:1c:57:9c:a7: 30:ad:d1:8f:e9:59:28:0c:6e:a7:55:b0:4a:2d:d4:97:d5:26: aa:ef:23:52:32:0a:cc:99:45:85:a4:a2:e3:42:01:30:5f:75: 72:4e:5e:7e:52:89:77:f5:fd:b1:ed:ac:e5:3e:6a:f2:98:d4: 28:e3:4b:65 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY3 NkE2NjQyQTRGNjAxNkJDMDcxREY2MjZCMkJFQkNCNDNCNUVDRjAeFw0yNTEwMjQx ODA2MTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYwRENEM0U1NkIwNzMz M0Y1RUFENUQ0NzlFRDczNEZFNkQ1QUIwQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD08nSjV42nMLZdVPJ2PHW8l7aOXbM2/elWGHiWc9j/F3g4Ld/j cihYStrp6pqVobOS0TXoPxOQuF+0ykha6J1Ri9aT/HpQ2zJK7c9rZP+APDXAGMQK j4ntycNI8pzh/Nr/gy38Kv3BRBjhiKUz/8uJ5w4k0Cj5iUttEPZ+ELjmwf4Vy+DY 7pzBlUevarVab2A9xwLA0PHfa8hPAvkX1O7l1BtFDCg1ONkYeWMT0FzFvw7fSxUf cftoQ9x3a+HI8umjz+pLQNrgxNU3OjbAxc2x5XkwbpSzhjPg9ct0KDwHJNZJxczs UbXimG4S4CTtPUaTQTeIFKrJCc1y8V98rimxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8NzT5WsHMz9erV1Hntc0/m1asLMwHwYDVR0jBBgwFoAUZnamZCpPYBa8Bx32 JrK+vLQ7Xs8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MS9abmFtWkNwUFlCYThCeDMySnJLLXZMUTdYczguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1puYW1aQ3BQWUJhOEJ4MzJKckstdkxRN1hzOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvWm5hbVpDcFBZQmE4 QngzMkpySy12TFE3WHM4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGjjcXrOzpvL1rMCtdq1ePe4Ei4v5kaXeeAboMFKBhz17N7SkdSfnou/aKre AGo/yZG8YVQCAUO6rDjqNOpaDvcwvYICu1w19F19F7u3Qm9yJJg3aPu/yJW7/XcD ZGy2hkjHdgNWbeH4ERWsxfGTQcX0ZXhnL+dth31iWh7sZtyGHU8fAPUjF8tdpGQz oUpSVvJwKI2nhrgdTF5I0NPuEgDo44rJkILN2/R8h/hlFfgDsLxdFFjWBH9SVj8t 9f/Z1SDMHFecpzCt0Y/pWSgMbqdVsEot1JfVJqrvI1IyCsyZRYWkouNCATBfdXJO Xn5SiXf1/bHtrOU+avKY1CjjS2U= -----END CERTIFICATE-----Generated at Fri Oct 24 21:22:06 2025 by rpki-client