$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft File: tsENcoo4JDG6wfFJMND8HgdZU6Y.mft (raw, json) Hash identifier: 4hx0e/r6+AXUIEXn+oK8wtUtAPHmUisA3we6U4Kke7w= Subject key identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 Authority key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 Certificate issuer: /CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Certificate serial: 7F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft Manifest number: 7D Signing time: Mon 20 Oct 2025 23:34:40 +0000 Manifest this update: Mon 20 Oct 2025 23:34:40 +0000 Manifest next update: Tue 21 Oct 2025 05:34:40 +0000 Files and hashes: 1: Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa (hash: vgo47MVbe1jdt+qM+TAEnzsTDcFBW80hb3tLyIo70XI=) 2: tsENcoo4JDG6wfFJMND8HgdZU6Y.crl (hash: 8mZOvxxBQvFRgNkaqzh5dHTilNR9iAsuAZ71EFXTbic=) 3: x7OS7_8T2MiGQoCgovK3XNX_N60.roa (hash: UHgJn4apbq/7wYUqVwpc3LyEUozcrbpDkNNvfwCHElo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 05:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Validity Not Before: Oct 20 23:34:40 2025 GMT Not After : Sep 26 09:42:00 2026 GMT Subject: CN=BBA6129164418AB343C2331CCD2D9CD8222A5656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:30:2d:a8:ac:f2:dc:74:58:28:b1:59:3a: 73:e2:3b:c4:29:cf:f1:f6:a2:13:4b:62:e7:e8:af: 8a:dc:d8:b8:f7:92:87:ba:52:76:46:82:19:8e:fe: 61:f7:14:cc:d4:c4:ad:85:99:0f:51:5a:5c:d3:49: 2e:86:62:8e:2d:a5:78:f6:e5:c0:d1:c9:8d:d3:8c: f1:91:f5:2b:f1:ac:b2:79:c1:5f:4f:a9:8d:2e:b4: 6f:a4:cf:32:ec:eb:db:40:7f:6d:f8:06:b3:31:ec: 92:27:80:ff:2f:c4:87:fc:a7:12:f5:32:23:a4:ec: bd:8f:56:8e:20:59:b0:76:47:14:33:65:2c:c0:e9: 6d:54:72:d9:a8:63:d5:ca:bd:d9:57:de:55:f3:e0: 3f:bd:4e:c8:86:e1:d7:07:59:84:2b:18:4d:b2:d3: fc:20:9b:64:ac:49:53:98:c7:37:fe:bf:f7:f9:76: 4d:af:b6:b2:fc:10:c1:e3:18:d0:7d:62:68:ca:d7: 6b:e4:e4:1b:35:85:de:98:cd:65:ce:45:05:9f:74: 9d:c4:65:70:4a:57:65:16:fc:f4:77:75:74:8a:fc: d2:19:1d:50:59:2e:59:2f:10:eb:b0:ca:c2:46:63: d0:fd:9f:6b:75:69:4b:21:eb:d8:50:ae:6e:97:de: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 X509v3 Authority Key Identifier: keyid:B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:47:3e:83:b6:77:2c:c8:56:88:a2:62:15:1b:62:69:9f:14: 4f:5d:b2:9f:5a:43:99:c1:0e:77:8b:0a:54:ca:5e:bc:91:76: ed:e7:0b:82:45:25:16:82:fc:eb:29:0c:43:0e:20:c2:9c:b8: 87:08:86:a2:bf:d2:ca:1c:e9:32:30:db:4b:a4:88:a8:ca:12: 1a:e3:39:93:a5:fb:09:8f:7f:5b:a0:90:30:66:70:77:bc:c7: 98:07:db:40:92:26:2d:bf:07:94:13:07:ce:46:f5:9f:47:11: 3d:16:2f:ac:90:13:db:37:dd:13:f2:e6:37:40:58:29:65:04: db:bf:ed:e0:49:a8:8b:8a:61:98:40:b4:3e:c0:f6:bd:8b:75: 84:2f:d1:23:d7:da:0c:d9:60:60:3f:46:d2:71:78:51:9b:3d: 64:35:50:c8:84:82:87:aa:d5:65:73:d3:1e:be:97:5e:7c:42: dc:34:2c:23:20:2d:60:3c:dc:0e:ef:44:8e:0b:a9:80:c5:71: fc:c6:02:e9:d0:ec:9a:ac:7f:36:99:2e:af:f6:12:1d:c7:d2: b0:ff:ad:a1:83:40:20:fc:1b:2f:e7:b8:c9:f2:63:12:a1:4c: 08:78:b9:9f:b1:1a:f4:89:4e:56:52:5a:f5:e4:0d:ca:c3:93: f1:7a:2c:da -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNkMx MEQ3MjhBMzgyNDMxQkFDMUYxNDkzMEQwRkMxRTA3NTk1M0E2MB4XDTI1MTAyMDIz MzQ0MFoXDTI2MDkyNjA5NDIwMFowMzExMC8GA1UEAxMoQkJBNjEyOTE2NDQxOEFC MzQzQzIzMzFDQ0QyRDlDRDgyMjJBNTY1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKIxMC2orPLcdFgosVk6c+I7xCnP8faiE0ti5+ivitzYuPeSh7pS dkaCGY7+YfcUzNTErYWZD1FaXNNJLoZiji2lePblwNHJjdOM8ZH1K/GssnnBX0+p jS60b6TPMuzr20B/bfgGszHskieA/y/Eh/ynEvUyI6TsvY9WjiBZsHZHFDNlLMDp bVRy2ahj1cq92VfeVfPgP71OyIbh1wdZhCsYTbLT/CCbZKxJU5jHN/6/9/l2Ta+2 svwQweMY0H1iaMrXa+TkGzWF3pjNZc5FBZ90ncRlcEpXZRb89Hd1dIr80hkdUFku WS8Q67DKwkZj0P2fa3VpSyHr2FCubpfe2fMCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBS7phKRZEGKs0PCMxzNLZzYIipWVjAfBgNVHSMEGDAWgBS2wQ1yijgkMbrB8Ukw 0PweB1lTpjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzk2 L3RzRU5jb280SkRHNndmRkpNTkQ4SGdkWlU2WS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdHNFTmNvbzRKREc2d2ZGSk1ORDhIZ2RaVTZZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5Ni90c0VOY29vNEpERzZ3 ZkZKTU5EOEhnZFpVNlkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxEc+g7Z3LMhWiKJiFRtiaZ8UT12yn1pDmcEOd4sKVMpevJF27ecLgkUlFoL8 6ykMQw4gwpy4hwiGor/SyhzpMjDbS6SIqMoSGuM5k6X7CY9/W6CQMGZwd7zHmAfb QJImLb8HlBMHzkb1n0cRPRYvrJAT2zfdE/LmN0BYKWUE27/t4Emoi4phmEC0PsD2 vYt1hC/RI9faDNlgYD9G0nF4UZs9ZDVQyISCh6rVZXPTHr6XXnxC3DQsIyAtYDzc Du9EjgupgMVx/MYC6dDsmqx/Npkur/YSHcfSsP+toYNAIPwbL+e4yfJjEqFMCHi5 n7Ea9IlOVlJa9eQNysOT8Xos2g== -----END CERTIFICATE-----Generated at Tue Oct 21 04:41:23 2025 by rpki-client