$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft File: 5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft (raw, json) Hash identifier: v1hgJrdmiFSyzK9TyIJ32gag9dh3hMJGO1Ubs/jO7uc= Subject key identifier: B0:98:48:E3:6D:FE:6D:6F:62:3F:FA:53:ED:20:33:F7:61:BF:72:89 Authority key identifier: E5:03:1B:06:3A:94:61:56:C3:EA:05:BD:84:0D:8C:96:5E:6C:9E:94 Certificate issuer: /CN=E5031B063A946156C3EA05BD840D8C965E6C9E94 Certificate serial: 7F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QMbBjqUYVbD6gW9hA2Mll5snpQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft Manifest number: 7F Signing time: Tue 21 Oct 2025 08:34:13 +0000 Manifest this update: Tue 21 Oct 2025 08:34:13 +0000 Manifest next update: Tue 21 Oct 2025 14:34:13 +0000 Files and hashes: 1: 5QMbBjqUYVbD6gW9hA2Mll5snpQ.crl (hash: 2Bp0e6uVFV8Dyu1vTTsYaxXNnjpKw9TSfycOuFPlbQw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QMbBjqUYVbD6gW9hA2Mll5snpQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5031B063A946156C3EA05BD840D8C965E6C9E94 Validity Not Before: Oct 21 08:34:13 2025 GMT Not After : Sep 26 08:47:44 2026 GMT Subject: CN=B09848E36DFE6D6F623FFA53ED2033F761BF7289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:7c:f3:e5:34:de:87:c7:93:24:09:5a:38: 69:43:d3:0d:2a:bb:0c:4a:19:3f:bb:9c:16:ac:29: b1:35:24:e0:09:a4:06:f3:66:b5:15:12:45:20:d1: b7:cb:e1:a4:09:b9:74:50:73:ca:a3:54:18:b4:55: 1e:a9:d3:45:f7:96:d5:1b:c4:13:88:2b:4d:61:12: 91:f9:68:c8:d6:7d:62:9e:6c:6c:47:c7:03:f9:4d: 75:b4:59:bf:ac:22:f6:57:35:bc:d2:2b:fd:18:83: 00:72:8f:a8:98:03:d6:50:e1:ba:b2:79:f2:6f:8c: 25:79:2c:95:b2:76:bc:f5:ef:b9:cc:64:5c:9c:5e: f1:d7:df:4f:0b:f5:cd:f1:f5:f4:b4:58:80:4f:fe: b4:47:04:40:8e:48:e7:29:9b:9b:00:61:8f:79:02: 6f:cf:6f:4d:de:a2:9b:29:39:48:50:a4:c0:bd:b2: 15:75:0b:9b:6f:a5:e3:20:21:05:e7:d7:d7:e9:6c: 37:68:02:39:38:0e:db:65:03:ad:55:70:97:72:ee: e1:50:e3:ce:64:ec:2a:ff:9c:4c:bb:0f:c2:7b:fa: 80:d6:a8:9b:bf:6e:85:5d:47:49:5d:85:b0:7a:2b: c3:c0:59:53:7c:0a:15:5d:b6:da:d4:24:7d:7f:00: 74:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:98:48:E3:6D:FE:6D:6F:62:3F:FA:53:ED:20:33:F7:61:BF:72:89 X509v3 Authority Key Identifier: keyid:E5:03:1B:06:3A:94:61:56:C3:EA:05:BD:84:0D:8C:96:5E:6C:9E:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QMbBjqUYVbD6gW9hA2Mll5snpQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b1:cd:41:f2:5d:10:4e:86:d4:b1:4a:bd:21:8b:ee:bf:35: b6:e4:e2:9a:c5:79:95:a7:18:aa:a4:00:87:47:7d:c9:15:59: 38:1a:f8:74:7b:7e:92:f3:99:fd:8c:14:8c:74:c7:44:c8:f2: 02:b5:63:24:7e:e7:d3:df:12:62:0c:02:ac:02:be:11:dc:56: 0a:17:24:66:5a:d8:85:03:08:c8:7b:66:a9:b4:41:5f:25:00: 6a:e9:67:57:8f:67:cd:55:76:e6:a7:c0:4b:b8:a1:a2:b9:ca: eb:44:1c:60:76:27:9b:6c:9e:86:59:06:a6:ee:2a:b4:1c:e6: 39:c7:3c:28:1e:8e:37:33:5a:d4:73:7b:db:c8:f4:2a:ff:a7: 64:6c:ad:b0:c2:69:45:08:f6:bd:ce:b0:50:18:67:78:f3:c5: a6:d4:d1:01:40:5d:28:b0:7b:f9:1d:00:ef:6b:d7:4c:4b:3b: ee:f4:56:7d:8d:55:04:c9:81:68:69:8a:ed:a2:66:d1:32:8c: 17:6b:f0:27:68:ba:b3:1b:4a:d0:40:94:0a:95:f0:e3:29:b5: 73:f1:e1:ae:53:d3:44:36:7e:e9:ed:8e:c9:b9:5a:6c:8d:eb: 19:b1:f4:ba:89:46:d4:52:b5:f8:eb:8b:4b:93:4d:49:fa:d0: 4b:cb:a5:51 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNTAz MUIwNjNBOTQ2MTU2QzNFQTA1QkQ4NDBEOEM5NjVFNkM5RTk0MB4XDTI1MTAyMTA4 MzQxM1oXDTI2MDkyNjA4NDc0NFowMzExMC8GA1UEAxMoQjA5ODQ4RTM2REZFNkQ2 RjYyM0ZGQTUzRUQyMDMzRjc2MUJGNzI4OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMT8fPPlNN6Hx5MkCVo4aUPTDSq7DEoZP7ucFqwpsTUk4AmkBvNm tRUSRSDRt8vhpAm5dFBzyqNUGLRVHqnTRfeW1RvEE4grTWESkfloyNZ9Yp5sbEfH A/lNdbRZv6wi9lc1vNIr/RiDAHKPqJgD1lDhurJ58m+MJXkslbJ2vPXvucxkXJxe 8dffTwv1zfH19LRYgE/+tEcEQI5I5ymbmwBhj3kCb89vTd6imyk5SFCkwL2yFXUL m2+l4yAhBefX1+lsN2gCOTgO22UDrVVwl3Lu4VDjzmTsKv+cTLsPwnv6gNaom79u hV1HSV2FsHorw8BZU3wKFV222tQkfX8AdBMCAwEAAaOCAgowggIGMB0GA1UdDgQW BBSwmEjjbf5tb2I/+lPtIDP3Yb9yiTAfBgNVHSMEGDAWgBTlAxsGOpRhVsPqBb2E DYyWXmyelDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mjgv NVFNYkJqcVVZVmJENmdXOWhBMk1sbDVzbnBRLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC81UU1iQmpxVVlWYkQ2Z1c5aEEyTWxsNXNucFEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81MjgvNVFNYkJqcVVZVmJENmdX OWhBMk1sbDVzbnBRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AFixzUHyXRBOhtSxSr0hi+6/Nbbk4prFeZWnGKqkAIdHfckVWTga+HR7fpLzmf2M FIx0x0TI8gK1YyR+59PfEmIMAqwCvhHcVgoXJGZa2IUDCMh7Zqm0QV8lAGrpZ1eP Z81VduanwEu4oaK5yutEHGB2J5tsnoZZBqbuKrQc5jnHPCgejjczWtRze9vI9Cr/ p2RsrbDCaUUI9r3OsFAYZ3jzxabU0QFAXSiwe/kdAO9r10xLO+70Vn2NVQTJgWhp iu2iZtEyjBdr8CdourMbStBAlAqV8OMptXPx4a5T00Q2funtjsm5WmyN6xmx9LqJ RtRStfjri0uTTUn60EvLpVE= -----END CERTIFICATE-----Generated at Tue Oct 21 10:23:58 2025 by rpki-client