$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft File: RstaoMqemvBSLrXYP_vuf88TePA.mft (raw, json) Hash identifier: QR5cg8WD7xfGPKt3ZqyhH5bv4R5uTwrJXJqIFFB50yE= Subject key identifier: 53:F2:7C:C4:34:1B:CD:81:AC:C7:2A:BA:E2:E1:C0:94:6E:F9:27:A6 Authority key identifier: 46:CB:5A:A0:CA:9E:9A:F0:52:2E:B5:D8:3F:FB:EE:7F:CF:13:78:F0 Certificate issuer: /CN=46CB5AA0CA9E9AF0522EB5D83FFBEE7FCF1378F0 Certificate serial: 1846 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft Manifest number: 1846 Signing time: Wed 05 Nov 2025 06:41:09 +0000 Manifest this update: Wed 05 Nov 2025 06:41:09 +0000 Manifest next update: Wed 05 Nov 2025 12:41:09 +0000 Files and hashes: 1: RstaoMqemvBSLrXYP_vuf88TePA.crl (hash: d+wIj87YvS/M9mCV8b+i9LOIeMXZXgumSE/QPVbgywI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6214 (0x1846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46CB5AA0CA9E9AF0522EB5D83FFBEE7FCF1378F0 Validity Not Before: Nov 5 06:41:09 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=53F27CC4341BCD81ACC72ABAE2E1C0946EF927A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d5:85:e8:31:1b:ff:ba:8e:dc:fb:06:27:33: ac:08:85:14:9c:7c:c2:7c:31:55:a6:15:88:4a:b5: 63:b1:64:dc:68:ea:35:4e:1b:da:d1:10:02:4e:02: 8c:22:9e:e7:e1:0e:52:5d:73:9b:1a:49:cd:cc:4b: c2:f4:7e:43:da:44:f5:89:74:a1:b1:ed:01:b4:13: 02:8a:d9:4c:dd:00:bd:f3:a0:8f:f5:9d:8d:2a:a6: 62:dd:af:2f:c3:ed:cf:88:0e:f3:31:1b:6f:a4:b2: 7b:54:61:19:74:6f:5b:43:58:24:38:c9:06:2d:fb: 58:46:b3:fc:2a:9f:e0:2c:c4:6c:3e:17:61:e2:9a: ec:f7:3f:19:39:16:3d:dc:f4:01:99:b0:73:42:11: 43:85:9d:60:97:cc:96:9c:f8:1c:15:1b:b4:81:d8: c5:7d:d1:00:ad:55:f2:c8:60:45:65:60:fb:79:bc: b4:81:b4:dc:b9:82:34:a6:72:5b:77:99:87:82:eb: be:42:23:47:e0:5b:1f:d5:d0:89:95:5b:d0:78:48: 79:ca:8d:98:cf:a7:7d:73:e0:8a:90:8f:8a:7c:1e: 9a:58:c7:4d:cd:55:e6:b0:4b:8d:c7:ab:65:50:c3: 8e:50:6d:77:f7:4d:0e:7d:df:49:25:fb:5d:86:18: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F2:7C:C4:34:1B:CD:81:AC:C7:2A:BA:E2:E1:C0:94:6E:F9:27:A6 X509v3 Authority Key Identifier: keyid:46:CB:5A:A0:CA:9E:9A:F0:52:2E:B5:D8:3F:FB:EE:7F:CF:13:78:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a9:ac:94:7c:04:bf:88:25:fe:ba:e5:9d:52:8e:56:61:e1: 84:6b:d1:32:d0:cf:7c:d9:59:9d:f4:63:8b:f0:78:72:ce:3e: c1:62:b8:d6:76:0a:8a:2b:bb:40:a7:e8:e3:e0:d3:bf:a9:7d: a0:82:51:e2:f2:7d:b9:cc:55:ef:68:0e:71:dc:4d:76:9b:50: c3:cb:67:43:c0:46:d1:6a:6e:b4:bb:72:9a:8e:a5:70:4e:f8: 25:dc:46:8d:6a:16:8f:e0:3e:01:e2:39:e5:1d:88:d3:30:c5: f2:ad:8d:b8:5f:3f:02:71:ab:20:e3:8c:e2:81:3c:ad:38:54: bb:e2:38:69:cb:84:3a:bc:c2:6f:91:4b:ec:07:1c:f9:7d:04: f4:73:c7:e5:b5:cb:b2:fe:43:3c:ac:5d:2e:e9:79:85:e8:52: 0a:2d:f9:9e:83:c4:7d:9a:9c:cd:91:fe:6d:e6:d7:a6:9e:cf: b1:45:3a:91:eb:cb:44:b8:96:41:ad:9d:31:12:30:ab:8e:02: 9d:a7:e2:6a:08:f3:3a:e9:89:d6:b4:94:9d:80:1c:e4:d9:cf: 7b:45:46:53:4a:34:71:7d:06:ff:d7:a6:bf:6f:e9:23:77:96: b4:ce:53:d7:fe:09:75:5a:28:05:53:f8:aa:a0:53:07:7b:da: 1c:85:a1:5a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgICGEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDZD QjVBQTBDQTlFOUFGMDUyMkVCNUQ4M0ZGQkVFN0ZDRjEzNzhGMDAeFw0yNTExMDUw NjQxMDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUzRjI3Q0M0MzQxQkNE ODFBQ0M3MkFCQUUyRTFDMDk0NkVGOTI3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDo1YXoMRv/uo7c+wYnM6wIhRScfMJ8MVWmFYhKtWOxZNxo6jVO G9rREAJOAowinufhDlJdc5saSc3MS8L0fkPaRPWJdKGx7QG0EwKK2UzdAL3zoI/1 nY0qpmLdry/D7c+IDvMxG2+ksntUYRl0b1tDWCQ4yQYt+1hGs/wqn+AsxGw+F2Hi muz3Pxk5Fj3c9AGZsHNCEUOFnWCXzJac+BwVG7SB2MV90QCtVfLIYEVlYPt5vLSB tNy5gjSmclt3mYeC675CI0fgWx/V0ImVW9B4SHnKjZjPp31z4IqQj4p8HppYx03N VeawS43Hq2VQw45QbXf3TQ5930kl+12GGP81AgMBAAGjggIGMIICAjAdBgNVHQ4E FgQUU/J8xDQbzYGsxyq64uHAlG75J6YwHwYDVR0jBBgwFoAURstaoMqemvBSLrXY P/vuf88TePAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMS9S c3Rhb01xZW12QlNMclhZUF92dWY4OFRlUEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL1JzdGFvTXFlbXZCU0xyWFlQX3Z1Zjg4VGVQQS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEvUnN0YW9NcWVtdkJTTHJYWVBf dnVmODhUZVBBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBACKp rJR8BL+IJf665Z1SjlZh4YRr0TLQz3zZWZ30Y4vweHLOPsFiuNZ2Cooru0Cn6OPg 07+pfaCCUeLyfbnMVe9oDnHcTXabUMPLZ0PARtFqbrS7cpqOpXBO+CXcRo1qFo/g PgHiOeUdiNMwxfKtjbhfPwJxqyDjjOKBPK04VLviOGnLhDq8wm+RS+wHHPl9BPRz x+W1y7L+QzysXS7peYXoUgot+Z6DxH2anM2R/m3m16aez7FFOpHry0S4lkGtnTES MKuOAp2n4moI8zrpida0lJ2AHOTZz3tFRlNKNHF9Bv/Xpr9v6SN3lrTOU9f+CXVa KAVT+KqgUwd72hyFoVo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:57 2025 by rpki-client