$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft File: bHGFaWGICFmFIGtbw8RT4SftD94.mft (raw, json) Hash identifier: FbIc6uwru7FYE+x953x4s6gE9LUoxcBAYEVfs5ZuZlA= Subject key identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D Authority key identifier: 6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE Certificate issuer: /CN=6C7185696188085985206B5BC3C453E127ED0FDE Certificate serial: 0666 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft Manifest number: 0666 Signing time: Fri 24 Oct 2025 18:07:25 +0000 Manifest this update: Fri 24 Oct 2025 18:07:25 +0000 Manifest next update: Sat 25 Oct 2025 00:07:25 +0000 Files and hashes: 1: bHGFaWGICFmFIGtbw8RT4SftD94.crl (hash: H+oeUcmhB4jXnFDzmjTqByknvD92oJgHYfEqYC7FXNs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 00:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1638 (0x666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C7185696188085985206B5BC3C453E127ED0FDE Validity Not Before: Oct 24 18:07:25 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=EBD0975A7BEC6943E8DF5934276DEB7EDD3A0A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:43:31:63:6a:f6:8a:7d:c3:cf:84:c1:85: 81:04:6f:3d:bf:3a:c9:34:64:5f:2b:3f:24:76:db: 0d:dc:01:fe:7b:bc:11:e5:2d:5f:3b:de:e7:87:14: 70:a5:35:bf:7d:29:a0:b8:16:16:5d:de:ad:c3:b2: 0f:0f:39:ff:1d:32:0d:f4:c5:6f:19:9e:62:c9:d6: 90:bf:33:57:c3:60:ea:8b:06:54:6f:5f:31:7a:9d: de:68:26:c3:2c:d2:5a:e0:9e:d8:c7:b6:8f:90:e1: 97:29:7b:aa:28:8b:1d:e1:0c:4c:50:f9:cc:a0:6b: d3:a6:a3:23:63:09:e9:4f:7d:0e:de:19:0e:76:00: 4c:17:04:d5:35:3e:3e:87:20:1c:46:bf:ca:34:b4: 9d:40:af:26:97:9e:8c:24:31:54:59:8e:6c:04:59: fe:c1:05:dc:1d:d3:6e:47:8d:55:7a:d6:45:87:b1: e8:f3:84:03:47:4a:60:83:e1:d4:c4:c8:81:e5:e9: ed:b5:20:e1:03:87:7d:5d:13:89:77:3d:81:a6:14: 06:b3:c4:92:09:8a:e2:76:28:48:b9:2e:b3:61:85: c0:dd:96:22:bf:85:d3:cd:7a:9b:e0:55:c5:6c:8f: 1b:86:69:74:8e:f5:90:5a:7c:89:2e:95:76:b3:60: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D X509v3 Authority Key Identifier: keyid:6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:1c:7f:9a:3f:5e:32:65:a9:5f:af:7b:38:bc:d7:f9:92:e1: a0:d7:a7:23:81:49:47:68:9a:3e:bd:0d:7b:e3:26:cc:73:0a: d1:e1:cb:c8:f9:db:32:22:84:db:29:7f:0a:fd:91:a1:25:fd: 62:29:4b:1f:74:ac:fe:d7:6b:82:60:7f:8b:14:d0:4e:47:c3: 77:6b:d6:7d:13:cb:0a:06:00:16:ad:02:63:3a:29:cb:b7:b2: dd:3c:26:f5:9b:6f:dd:7d:74:9f:71:b0:5c:9c:de:21:95:5a: 9a:55:89:29:b8:f5:21:bf:3c:5c:02:e1:35:fb:4e:94:f5:04: ec:ac:e7:34:55:cf:0f:e0:25:06:47:a6:ce:d0:82:6e:84:9f: db:6f:65:92:28:40:8a:51:49:48:ec:0c:27:28:7b:9d:a0:39: 94:03:81:e7:1f:67:f1:69:24:0b:54:73:57:64:b3:04:fc:b3: b7:00:5d:0b:82:fc:cd:ef:6c:ab:1a:dc:5e:30:49:a1:1d:88: 67:15:5d:d6:bc:3f:88:6e:4d:4b:64:45:0d:9e:69:72:62:1e: 35:93:fe:c2:8f:47:15:7c:ac:57:b9:71:fb:3b:04:df:eb:eb: cb:93:13:50:62:7f:20:35:c5:64:41:8a:4d:1c:33:50:4c:ad: a5:a1:e0:42 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkM3 MTg1Njk2MTg4MDg1OTg1MjA2QjVCQzNDNDUzRTEyN0VEMEZERTAeFw0yNTEwMjQx ODA3MjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVCRDA5NzVBN0JFQzY5 NDNFOERGNTkzNDI3NkRFQjdFREQzQTBBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOlEMxY2r2in3Dz4TBhYEEbz2/Osk0ZF8rPyR22w3cAf57vBHl LV873ueHFHClNb99KaC4FhZd3q3Dsg8POf8dMg30xW8ZnmLJ1pC/M1fDYOqLBlRv XzF6nd5oJsMs0lrgntjHto+Q4Zcpe6ooix3hDExQ+cyga9OmoyNjCelPfQ7eGQ52 AEwXBNU1Pj6HIBxGv8o0tJ1AryaXnowkMVRZjmwEWf7BBdwd025HjVV61kWHsejz hANHSmCD4dTEyIHl6e21IOEDh31dE4l3PYGmFAazxJIJiuJ2KEi5LrNhhcDdliK/ hdPNepvgVcVsjxuGaXSO9ZBafIkulXazYGtPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU69CXWnvsaUPo31k0J23rft06Ci0wHwYDVR0jBBgwFoAUbHGFaWGICFmFIGtb w8RT4SftD94wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz My9iSEdGYVdHSUNGbUZJR3RidzhSVDRTZnREOTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2JIR0ZhV0dJQ0ZtRklHdGJ3OFJUNFNmdEQ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzMvYkhHRmFXR0lDRm1G SUd0Ync4UlQ0U2Z0RDk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANIcf5o/XjJlqV+vezi81/mS4aDXpyOBSUdomj69DXvjJsxzCtHhy8j52zIi hNspfwr9kaEl/WIpSx90rP7Xa4Jgf4sU0E5Hw3dr1n0TywoGABatAmM6Kcu3st08 JvWbb919dJ9xsFyc3iGVWppViSm49SG/PFwC4TX7TpT1BOys5zRVzw/gJQZHps7Q gm6En9tvZZIoQIpRSUjsDCcoe52gOZQDgecfZ/FpJAtUc1dkswT8s7cAXQuC/M3v bKsa3F4wSaEdiGcVXda8P4huTUtkRQ2eaXJiHjWT/sKPRxV8rFe5cfs7BN/r68uT E1BifyA1xWRBik0cM1BMraWh4EI= -----END CERTIFICATE-----Generated at Fri Oct 24 21:13:46 2025 by rpki-client