$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft File: xqqhwc8lwisJdbVYvDWjpnYmQiY.mft (raw, json) Hash identifier: 192zpnth+zTCc+iFdSTE9cANPPOsCLCur/5iFkKCGQ0= Subject key identifier: AB:97:76:C5:D9:0F:AA:D3:24:F5:A3:06:CB:61:AE:63:19:CA:82:EC Authority key identifier: C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 Certificate issuer: /CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226 Certificate serial: 70 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft Manifest number: 70 Signing time: Tue 21 Oct 2025 09:34:30 +0000 Manifest this update: Tue 21 Oct 2025 09:34:30 +0000 Manifest next update: Tue 21 Oct 2025 15:34:30 +0000 Files and hashes: 1: xqqhwc8lwisJdbVYvDWjpnYmQiY.crl (hash: CLUACSdgQC0lCmk+tKc7VPEzd4lTn3e5Edq2sXYl8ss=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226 Validity Not Before: Oct 21 09:34:30 2025 GMT Not After : Sep 29 06:44:54 2026 GMT Subject: CN=AB9776C5D90FAAD324F5A306CB61AE6319CA82EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:62:96:d9:51:69:b3:fc:f8:d2:db:7d:6e: 84:89:97:b6:48:c5:17:75:57:9f:19:1a:ac:a2:01: 29:b5:55:2c:a6:b9:2a:12:66:b1:3e:e2:8b:e2:28: c6:d2:0d:b3:96:0f:c7:30:4b:17:8b:9c:f2:67:97: 55:c5:2e:df:19:e6:5f:8f:58:ab:5c:3a:06:66:63: e1:ba:7e:0d:2d:c6:80:b4:97:45:44:f1:16:86:5f: 21:c7:b0:2a:35:dc:6e:f0:f5:9a:a5:2e:d7:5c:42: 0c:6e:dc:ba:13:46:3b:59:00:b2:a9:02:2c:1f:04: 29:d6:3a:7c:01:22:15:ce:d3:a3:2e:bd:4e:62:d8: 6c:97:5c:b0:08:e6:ec:05:da:0c:2b:44:1e:49:a7: 47:40:44:6a:02:62:97:98:1d:76:1e:1a:64:15:b2: 0a:8d:6a:a0:f3:04:c0:67:c9:09:b2:e6:e5:05:32: 93:d0:f4:9c:10:49:63:82:6b:13:f7:76:06:11:a3: d3:6b:5f:55:94:77:38:83:79:65:7d:63:7c:8c:2d: d2:9d:33:b2:f8:1c:12:cb:60:14:8a:ad:6d:d8:99: bb:f9:30:50:1d:2e:45:6e:f4:7d:e2:9a:43:b0:a1: b7:bc:66:46:07:a0:da:88:9c:06:0a:1f:b7:e0:3e: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:97:76:C5:D9:0F:AA:D3:24:F5:A3:06:CB:61:AE:63:19:CA:82:EC X509v3 Authority Key Identifier: keyid:C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:50:56:c4:9b:e7:f7:1e:68:c7:da:fc:db:6d:5a:41:d7:83: d1:f7:a4:8f:14:a4:99:aa:c5:3b:40:25:0f:f6:be:aa:c0:cf: ce:07:8c:9e:3a:68:a5:e0:41:c6:b9:12:64:e8:47:04:fa:b8: 5c:25:48:51:fb:e1:31:c5:78:1a:a4:16:e0:e8:21:ea:d5:cb: 0f:da:2a:71:7e:c7:d0:aa:4a:c1:40:a2:6c:73:40:97:1b:36: 1a:36:a7:d0:61:77:27:dd:5c:78:30:96:15:81:14:29:2a:a4: 1d:3e:a7:4c:18:a9:ee:45:bf:21:23:c6:43:25:9b:43:3f:4d: fa:35:52:be:47:89:d0:08:66:19:4b:78:40:c5:d5:aa:c3:ec: de:35:38:95:97:c9:1f:30:3b:9c:1d:cc:97:a2:00:e5:26:8d: 3f:27:3c:9b:04:d9:88:93:ca:4b:11:32:c4:1c:b4:cc:83:93: ed:a9:e9:6f:c7:95:7c:c2:bc:f4:1a:51:ea:13:5e:cf:be:d6: ed:b8:54:53:05:fe:a9:27:88:bb:65:e5:c0:bd:aa:4a:b5:56: fb:3c:41:9a:b3:c4:66:6a:70:fb:5d:f3:f2:a9:e6:97:e5:cd: 24:f3:b5:fa:bc:11:76:4a:e9:29:2d:28:3a:72:b3:5f:00:a1: 29:4d:5c:20 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNkFB QTFDMUNGMjVDMjJCMDk3NUI1NThCQzM1QTNBNjc2MjY0MjI2MB4XDTI1MTAyMTA5 MzQzMFoXDTI2MDkyOTA2NDQ1NFowMzExMC8GA1UEAxMoQUI5Nzc2QzVEOTBGQUFE MzI0RjVBMzA2Q0I2MUFFNjMxOUNBODJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMTsYpbZUWmz/PjS231uhImXtkjFF3VXnxkarKIBKbVVLKa5KhJm sT7ii+IoxtINs5YPxzBLF4uc8meXVcUu3xnmX49Yq1w6BmZj4bp+DS3GgLSXRUTx FoZfIcewKjXcbvD1mqUu11xCDG7cuhNGO1kAsqkCLB8EKdY6fAEiFc7Toy69TmLY bJdcsAjm7AXaDCtEHkmnR0BEagJil5gddh4aZBWyCo1qoPMEwGfJCbLm5QUyk9D0 nBBJY4JrE/d2BhGj02tfVZR3OIN5ZX1jfIwt0p0zsvgcEstgFIqtbdiZu/kwUB0u RW70feKaQ7Cht7xmRgeg2oicBgoft+A+c4cCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSrl3bF2Q+q0yT1owbLYa5jGcqC7DAfBgNVHSMEGDAWgBTGqqHBzyXCKwl1tVi8 NaOmdiZCJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzk3 L3hxcWh3Yzhsd2lzSmRiVll2RFdqcG5ZbVFpWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveHFxaHdjOGx3aXNKZGJWWXZEV2pwblltUWlZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5Ny94cXFod2M4bHdpc0pk YlZZdkRXanBuWW1RaVkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV1BWxJvn9x5ox9r8221aQdeD0fekjxSkmarFO0AlD/a+qsDPzgeMnjpopeBB xrkSZOhHBPq4XCVIUfvhMcV4GqQW4Ogh6tXLD9oqcX7H0KpKwUCibHNAlxs2Gjan 0GF3J91ceDCWFYEUKSqkHT6nTBip7kW/ISPGQyWbQz9N+jVSvkeJ0AhmGUt4QMXV qsPs3jU4lZfJHzA7nB3Ml6IA5SaNPyc8mwTZiJPKSxEyxBy0zIOT7anpb8eVfMK8 9BpR6hNez77W7bhUUwX+qSeIu2XlwL2qSrVW+zxBmrPEZmpw+13z8qnml+XNJPO1 +rwRdkrpKS0oOnKzXwChKU1cIA== -----END CERTIFICATE-----Generated at Tue Oct 21 12:51:14 2025 by rpki-client