$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft File: iye4K0wLcXWPOXfCb1wNgKXHauc.mft (raw, json) Hash identifier: b9udUBxhOa9OaXZ6sYQ2nCEX2E3htLIeEP7IwpPc6xs= Subject key identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B Authority key identifier: 8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 Certificate issuer: /CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Certificate serial: 6C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft Manifest number: 6C Signing time: Tue 21 Oct 2025 07:37:23 +0000 Manifest this update: Tue 21 Oct 2025 07:37:23 +0000 Manifest next update: Tue 21 Oct 2025 13:37:23 +0000 Files and hashes: 1: iye4K0wLcXWPOXfCb1wNgKXHauc.crl (hash: SXtIuAc6JAtBYPj9gR8nIxszD1WviI2yBfHlISE8i4M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B27B82B4C0B71758F3977C26F5C0D80A5C76AE7 Validity Not Before: Oct 21 07:37:23 2025 GMT Not After : Sep 30 02:26:39 2026 GMT Subject: CN=1246FF04A200201BCC83278BD3E0D125C50EC15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:c1:f1:dd:e9:2f:ad:9d:5e:3c:58:9f:b3: 5e:72:29:60:08:00:83:15:0b:e0:c3:99:18:a0:88: 47:e8:e0:1b:42:44:84:df:77:7e:5d:d8:6f:49:05: a6:f8:5a:e1:fe:8b:b0:a7:3c:ad:1b:25:1c:76:e8: 8f:21:d3:17:bd:1c:53:78:4a:c1:76:01:3c:da:4e: 2c:08:ca:87:5f:0e:6c:91:91:66:6c:a8:f2:5f:2c: 44:58:ff:f9:ad:b4:8f:9b:56:aa:07:b4:08:09:da: fa:71:0b:49:cb:6d:38:c0:17:c0:57:c4:9f:a5:c3: c2:06:c6:73:da:0c:dd:fa:30:00:e8:eb:db:ea:cf: 0b:1c:7b:8a:a3:b3:31:7b:fe:94:bc:c4:a3:6a:8c: b5:da:7e:23:fe:26:75:1d:ca:5c:5a:95:03:79:19: 1d:f4:39:ed:a8:b2:69:15:6d:9c:a8:44:49:4c:10: 56:49:5f:e7:bc:27:d3:b5:3f:22:81:5d:14:3e:27: 89:b1:de:49:fe:a9:05:77:75:5f:27:9b:fc:ec:ad: 51:8b:42:c9:9e:ec:e3:ed:31:ed:07:1b:6e:05:a5: 8b:24:c4:23:93:53:7c:04:47:96:4f:95:bc:f3:e9: f5:a5:79:ac:37:4b:16:38:7b:7a:f7:96:9a:7e:c5: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:FF:04:A2:00:20:1B:CC:83:27:8B:D3:E0:D1:25:C5:0E:C1:5B X509v3 Authority Key Identifier: keyid:8B:27:B8:2B:4C:0B:71:75:8F:39:77:C2:6F:5C:0D:80:A5:C7:6A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iye4K0wLcXWPOXfCb1wNgKXHauc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3398/iye4K0wLcXWPOXfCb1wNgKXHauc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:fb:2b:5d:5d:08:da:1a:7d:fb:6c:7f:30:0d:37:30:a2:c7: 1d:f4:ec:d0:d9:cf:3b:a5:b3:c6:22:a1:87:c5:3a:eb:c0:2f: 08:31:85:fc:5f:61:85:48:c5:12:26:fa:f7:7e:ee:bc:51:b1: 27:bf:8c:5e:07:88:73:3d:03:59:f9:70:59:87:64:8b:93:34: 36:1f:43:54:73:cf:69:c1:7b:f1:02:08:7f:eb:6e:ca:3b:b7: 1a:23:41:ff:8e:62:92:2f:fd:cb:c4:d5:78:77:c6:69:91:e4: ee:c4:06:1a:55:64:ff:40:1a:61:c0:9c:a9:5b:22:72:1e:dc: a7:12:bf:b0:e0:dd:da:f7:e8:ca:d7:c4:7f:28:ac:9e:7c:0a: 1b:9e:71:77:7f:a8:a2:fe:4f:60:52:4a:35:2a:22:a6:96:ed: 11:fb:c5:29:c7:bd:67:d9:83:bb:40:6b:49:32:54:51:b1:91: 20:ca:f2:6c:e2:e9:ef:93:07:61:9e:15:58:da:1a:30:fc:be: 17:fc:3a:6c:0f:9b:19:ef:2d:14:b0:1f:e4:a1:04:cf:2b:5e: d4:b8:b2:d5:92:a9:72:86:4e:2a:b8:cc:74:fe:57:ca:64:e7: 3f:4b:a2:f2:f9:45:53:25:ce:aa:82:37:72:37:fe:ed:c3:89: 12:98:08:b8 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QjI3 QjgyQjRDMEI3MTc1OEYzOTc3QzI2RjVDMEQ4MEE1Qzc2QUU3MB4XDTI1MTAyMTA3 MzcyM1oXDTI2MDkzMDAyMjYzOVowMzExMC8GA1UEAxMoMTI0NkZGMDRBMjAwMjAx QkNDODMyNzhCRDNFMEQxMjVDNTBFQzE1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMSVwfHd6S+tnV48WJ+zXnIpYAgAgxUL4MOZGKCIR+jgG0JEhN93 fl3Yb0kFpvha4f6LsKc8rRslHHbojyHTF70cU3hKwXYBPNpOLAjKh18ObJGRZmyo 8l8sRFj/+a20j5tWqge0CAna+nELScttOMAXwFfEn6XDwgbGc9oM3fowAOjr2+rP Cxx7iqOzMXv+lLzEo2qMtdp+I/4mdR3KXFqVA3kZHfQ57aiyaRVtnKhESUwQVklf 57wn07U/IoFdFD4nibHeSf6pBXd1Xyeb/OytUYtCyZ7s4+0x7QcbbgWliyTEI5NT fARHlk+VvPPp9aV5rDdLFjh7eveWmn7FWGMCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQSRv8EogAgG8yDJ4vT4NElxQ7BWzAfBgNVHSMEGDAWgBSLJ7grTAtxdY85d8Jv XA2Apcdq5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzk4 L2l5ZTRLMHdMY1hXUE9YZkNiMXdOZ0tYSGF1Yy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaXllNEswd0xjWFdQT1hmQ2Ixd05nS1hIYXVjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5OC9peWU0SzB3TGNYV1BP WGZDYjF3TmdLWEhhdWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApPsrXV0I2hp9+2x/MA03MKLHHfTs0NnPO6WzxiKhh8U668AvCDGF/F9hhUjF Eib6937uvFGxJ7+MXgeIcz0DWflwWYdki5M0Nh9DVHPPacF78QIIf+tuyju3GiNB /45iki/9y8TVeHfGaZHk7sQGGlVk/0AaYcCcqVsich7cpxK/sODd2vfoytfEfyis nnwKG55xd3+oov5PYFJKNSoippbtEfvFKce9Z9mDu0BrSTJUUbGRIMrybOLp75MH YZ4VWNoaMPy+F/w6bA+bGe8tFLAf5KEEzyte1Liy1ZKpcoZOKrjMdP5XymTnP0ui 8vlFUyXOqoI3cjf+7cOJEpgIuA== -----END CERTIFICATE-----Generated at Tue Oct 21 10:23:58 2025 by rpki-client