$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft File: 7JfpAsM6EGVBKiW96FhrxCFuOWI.mft (raw, json) Hash identifier: D9nd9tTa+HX5KHajstQKjIeHfu1xl98RM89vgXwQcwY= Subject key identifier: 63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA Authority key identifier: EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62 Certificate issuer: /CN=EC97E902C33A1065412A25BDE8586BC4216E3962 Certificate serial: 2164 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft Manifest number: 2164 Signing time: Wed 05 Nov 2025 15:15:20 +0000 Manifest this update: Wed 05 Nov 2025 15:15:20 +0000 Manifest next update: Wed 05 Nov 2025 21:15:20 +0000 Files and hashes: 1: 7JfpAsM6EGVBKiW96FhrxCFuOWI.crl (hash: 2LZgsagNMPzNGnFI1F+N/junMAPKHfpE1VCPSguOil0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8548 (0x2164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC97E902C33A1065412A25BDE8586BC4216E3962 Validity Not Before: Nov 5 15:15:20 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=638B1FB2B0BC8DC785A1671871613554C07EF8EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:20:45:39:7a:52:f6:52:e2:42:7e:07:38: 42:f0:e3:50:25:dd:4c:90:03:c5:0a:86:eb:b5:3e: 0f:64:5e:f2:01:28:8c:79:da:4e:36:e1:e5:07:f7: da:ba:7b:b3:0e:85:16:95:44:d9:f6:91:ef:6b:1e: f6:4a:88:d6:5b:f9:f4:8d:d3:dc:02:51:15:c6:a7: 39:83:47:d2:6e:86:d8:56:03:43:d2:e9:4b:4c:c5: 64:92:4c:56:e4:3d:5a:25:e4:71:12:41:e9:fc:ba: 75:6c:b6:ca:e5:fa:22:23:e9:62:a6:40:c1:44:de: 0d:64:d6:fd:c6:4d:20:dc:60:8c:fb:d4:ba:d4:be: 34:e1:20:dd:73:47:8e:ca:14:30:01:d5:ed:af:0f: b4:4f:e7:26:c3:b5:ad:b3:45:8b:f6:94:47:ec:5f: 52:d1:0f:72:61:56:40:94:a2:a2:70:aa:3b:ba:3b: 4a:33:79:0f:47:fe:56:6a:e4:aa:d3:25:94:34:24: 81:19:67:dc:27:f7:01:b3:0d:9b:0e:db:9f:7b:7a: 04:be:27:99:d7:eb:c1:a4:0c:4e:81:84:72:50:d5: 80:23:cc:08:32:57:d6:9e:ef:0f:e8:5a:90:06:43: 2a:9f:cc:77:d0:41:98:d1:52:9c:6b:35:59:93:02: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA X509v3 Authority Key Identifier: keyid:EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:61:53:ed:8a:05:54:41:bb:a7:25:4f:0c:3a:f0:40:dc:8c: 3d:0b:85:4e:20:bf:fe:84:c9:7b:c8:33:02:15:d3:1a:3d:0d: 19:40:89:da:05:7d:a8:e0:28:56:b0:98:21:63:a3:b1:d9:ac: c8:1e:50:67:bd:2e:d6:ab:44:d4:51:96:99:49:4d:d7:87:db: 6d:e6:62:36:5f:ce:8c:15:e1:ed:cf:3b:fa:93:e3:6c:68:81: be:34:12:e5:d3:47:00:7b:6c:56:2b:d1:bd:1a:eb:e0:9a:86: 78:e2:a7:5e:b4:9f:a8:4d:eb:3c:e9:8b:01:cf:2a:6a:c0:72: 09:5e:ee:04:53:9d:66:4b:57:d6:4e:23:0c:f9:3f:b0:cd:1f: 80:fc:9d:48:ed:5b:fe:aa:33:e9:0d:53:6d:ed:0a:5c:8b:2c: 58:0d:bc:5f:30:b7:9f:7e:f8:19:b8:a6:fd:72:30:4b:b5:a1: c9:d6:c4:46:89:c5:98:ee:3c:20:92:c1:b4:25:49:12:2a:ed: 14:ad:91:15:cd:06:44:41:85:24:72:69:b3:87:d4:1a:f3:46: 4b:ad:ca:f8:41:9b:40:d5:7d:29:1b:49:da:cb:da:93:af:61: ea:7d:df:10:72:36:3f:84:13:d2:73:dd:d7:d3:83:75:4a:29: d0:fc:5f:eb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUM5 N0U5MDJDMzNBMTA2NTQxMkEyNUJERTg1ODZCQzQyMTZFMzk2MjAeFw0yNTExMDUx NTE1MjBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDYzOEIxRkIyQjBCQzhE Qzc4NUExNjcxODcxNjEzNTU0QzA3RUY4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFRCBFOXpS9lLiQn4HOELw41Al3UyQA8UKhuu1Pg9kXvIBKIx5 2k424eUH99q6e7MOhRaVRNn2ke9rHvZKiNZb+fSN09wCURXGpzmDR9JuhthWA0PS 6UtMxWSSTFbkPVol5HESQen8unVstsrl+iIj6WKmQMFE3g1k1v3GTSDcYIz71LrU vjThIN1zR47KFDAB1e2vD7RP5ybDta2zRYv2lEfsX1LRD3JhVkCUoqJwqju6O0oz eQ9H/lZq5KrTJZQ0JIEZZ9wn9wGzDZsO2597egS+J5nX68GkDE6BhHJQ1YAjzAgy V9ae7w/oWpAGQyqfzHfQQZjRUpxrNVmTAo6TAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUY4sfsrC8jceFoWcYcWE1VMB++OowHwYDVR0jBBgwFoAU7JfpAsM6EGVBKiW9 6FhrxCFuOWIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTEw OS83SmZwQXNNNkVHVkJLaVc5NkZocnhDRnVPV0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdKZnBBc002RUdWQktpVzk2RmhyeENGdU9XSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzExMDkvN0pmcEFzTTZFR1ZC S2lXOTZGaHJ4Q0Z1T1dJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABlhU+2KBVRBu6clTww68EDcjD0LhU4gv/6EyXvIMwIV0xo9DRlAidoFfajg KFawmCFjo7HZrMgeUGe9LtarRNRRlplJTdeH223mYjZfzowV4e3PO/qT42xogb40 EuXTRwB7bFYr0b0a6+Cahnjip160n6hN6zzpiwHPKmrAcgle7gRTnWZLV9ZOIwz5 P7DNH4D8nUjtW/6qM+kNU23tClyLLFgNvF8wt59++Bm4pv1yMEu1ocnWxEaJxZju PCCSwbQlSRIq7RStkRXNBkRBhSRyabOH1BrzRkutyvhBm0DVfSkbSdrL2pOvYep9 3xByNj+EE9Jz3dfTg3VKKdD8X+s= -----END CERTIFICATE-----Generated at Wed Nov 5 18:35:15 2025 by rpki-client