$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft File: -1zNjvD7jk1PBz11qrCaEgrhgD4.mft (raw, json) Hash identifier: rg16dQRp0FA5XwcDy0pEfPNQ81zBrfuDaWDBobfJs+I= Subject key identifier: ED:5E:11:B4:3A:36:EA:46:7A:5D:97:3B:EA:A8:A1:71:A4:7B:AF:D1 Authority key identifier: FB:5C:CD:8E:F0:FB:8E:4D:4F:07:3D:75:AA:B0:9A:12:0A:E1:80:3E Certificate issuer: /CN=FB5CCD8EF0FB8E4D4F073D75AAB09A120AE1803E Certificate serial: 6B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-1zNjvD7jk1PBz11qrCaEgrhgD4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft Manifest number: 6B Signing time: Tue 21 Oct 2025 04:35:53 +0000 Manifest this update: Tue 21 Oct 2025 04:35:53 +0000 Manifest next update: Tue 21 Oct 2025 10:35:53 +0000 Files and hashes: 1: -1zNjvD7jk1PBz11qrCaEgrhgD4.crl (hash: Rnqe1oPC95aALEp4DWMvKN9Ph5wwmOrOgA+p+YNRnYI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-1zNjvD7jk1PBz11qrCaEgrhgD4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB5CCD8EF0FB8E4D4F073D75AAB09A120AE1803E Validity Not Before: Oct 21 04:35:53 2025 GMT Not After : Sep 18 02:42:28 2026 GMT Subject: CN=ED5E11B43A36EA467A5D973BEAA8A171A47BAFD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:a7:36:7d:b2:95:64:0a:65:c5:2c:dd:00: 10:1b:f2:0e:01:08:a9:cd:32:5a:fc:85:93:65:2a: 2c:4e:d5:1d:a8:12:03:da:16:43:71:59:51:41:9e: b3:06:58:63:cb:54:12:6f:f8:54:06:0d:4d:5c:2c: fa:00:27:07:43:08:12:e3:8c:c4:fd:fa:3f:1f:e7: 72:8c:d3:85:47:79:f2:02:be:ad:f3:9f:d6:44:56: a1:60:dd:09:0d:38:f7:81:99:4c:de:d5:8c:de:e2: 36:16:cd:3d:58:2e:22:9d:70:d5:c1:0e:f1:51:93: 48:02:35:0e:29:e8:68:f8:6d:41:ec:d7:75:5a:2c: ee:b8:e9:9f:f0:81:2c:3f:2b:f0:b3:fd:47:2f:b4: 70:89:e0:e6:7c:a8:cd:0e:a3:7f:a7:04:45:52:cc: 2e:f6:83:39:99:f8:52:9b:24:fa:8d:39:8e:e7:56: ec:4d:ed:15:93:87:59:80:f4:27:ce:4b:69:59:18: 05:6a:c7:1f:be:32:5e:58:be:c2:1e:80:66:86:13: 39:06:aa:be:5a:d6:13:db:8c:61:1a:b8:87:7f:01: 67:62:6f:19:eb:7a:0e:a8:b9:ed:49:52:a3:96:72: a3:7b:00:db:34:c5:b9:36:b7:ac:a6:df:6b:c5:cf: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5E:11:B4:3A:36:EA:46:7A:5D:97:3B:EA:A8:A1:71:A4:7B:AF:D1 X509v3 Authority Key Identifier: keyid:FB:5C:CD:8E:F0:FB:8E:4D:4F:07:3D:75:AA:B0:9A:12:0A:E1:80:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-1zNjvD7jk1PBz11qrCaEgrhgD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:6d:5a:39:a0:42:04:36:e3:1b:a4:89:65:06:03:c9:98:ac: 68:2f:53:ed:85:43:85:51:1a:ea:59:ee:98:c5:9f:b8:b3:28: f8:78:a3:03:30:80:3c:83:c7:50:f3:60:23:27:c3:d6:ea:17: 72:2e:34:b8:0b:41:56:14:4f:78:77:8f:65:4a:17:a4:da:e0: a0:34:5b:07:16:e4:10:43:70:68:0f:da:a8:ba:54:75:ef:86: 67:f9:a0:50:da:ef:4f:f3:67:22:42:50:bd:c9:d2:25:61:72: 10:a8:d9:8d:f9:74:4a:df:bd:a9:8a:5e:46:59:16:15:11:5e: 9f:e1:4d:12:8a:0b:64:ed:a8:52:9c:6a:0c:f8:d3:6a:93:bf: e5:9a:62:3b:e3:6d:67:e3:a9:89:b6:f5:87:5e:ba:e8:31:a9: 49:48:4f:92:99:89:48:02:68:f4:6c:f1:87:ea:b8:7c:76:52: 89:a7:1b:28:6e:d8:11:04:51:a1:d2:39:b3:fb:c2:a2:5e:e0: ce:c0:6d:29:40:fa:b0:c2:23:62:c2:4d:f0:1d:16:c8:4e:de: 86:03:ed:d3:22:15:45:d1:1a:aa:ac:80:80:7b:db:58:54:94: 31:f5:98:17:eb:b6:5c:82:a1:bb:59:98:46:32:9b:dd:4b:d1: 92:38:b0:e4 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjVD Q0Q4RUYwRkI4RTRENEYwNzNENzVBQUIwOUExMjBBRTE4MDNFMB4XDTI1MTAyMTA0 MzU1M1oXDTI2MDkxODAyNDIyOFowMzExMC8GA1UEAxMoRUQ1RTExQjQzQTM2RUE0 NjdBNUQ5NzNCRUFBOEExNzFBNDdCQUZEMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMoYpzZ9spVkCmXFLN0AEBvyDgEIqc0yWvyFk2UqLE7VHagSA9oW Q3FZUUGeswZYY8tUEm/4VAYNTVws+gAnB0MIEuOMxP36Px/ncozThUd58gK+rfOf 1kRWoWDdCQ0494GZTN7VjN7iNhbNPVguIp1w1cEO8VGTSAI1DinoaPhtQezXdVos 7rjpn/CBLD8r8LP9Ry+0cIng5nyozQ6jf6cERVLMLvaDOZn4Upsk+o05judW7E3t FZOHWYD0J85LaVkYBWrHH74yXli+wh6AZoYTOQaqvlrWE9uMYRq4h38BZ2JvGet6 Dqi57UlSo5Zyo3sA2zTFuTa3rKbfa8XPi88CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTtXhG0OjbqRnpdlzvqqKFxpHuv0TAfBgNVHSMEGDAWgBT7XM2O8PuOTU8HPXWq sJoSCuGAPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzk0 Ly0xek5qdkQ3amsxUEJ6MTFxckNhRWdyaGdENC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvLTF6Tmp2RDdqazFQQnoxMXFyQ2FFZ3JoZ0Q0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5NC8tMXpOanZEN2prMVBC ejExcXJDYUVncmhnRDQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsW1aOaBCBDbjG6SJZQYDyZisaC9T7YVDhVEa6lnumMWfuLMo+HijAzCAPIPH UPNgIyfD1uoXci40uAtBVhRPeHePZUoXpNrgoDRbBxbkEENwaA/aqLpUde+GZ/mg UNrvT/NnIkJQvcnSJWFyEKjZjfl0St+9qYpeRlkWFRFen+FNEooLZO2oUpxqDPjT apO/5ZpiO+NtZ+Opibb1h1666DGpSUhPkpmJSAJo9Gzxh+q4fHZSiacbKG7YEQRR odI5s/vCol7gzsBtKUD6sMIjYsJN8B0WyE7ehgPt0yIVRdEaqqyAgHvbWFSUMfWY F+u2XIKhu1mYRjKb3UvRkjiw5A== -----END CERTIFICATE-----Generated at Tue Oct 21 09:53:42 2025 by rpki-client