$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft File: aNHWIOHqFxAY048aCIaBCXhdurE.mft (raw, json) Hash identifier: UgZzVl3w3Q/1Sj0WlELJNOgVC+odLc2w2G8PcHUeS4Y= Subject key identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 Authority key identifier: 68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 Certificate issuer: /CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Certificate serial: 0156 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft Manifest number: 0156 Signing time: Wed 05 Nov 2025 10:13:48 +0000 Manifest this update: Wed 05 Nov 2025 10:13:48 +0000 Manifest next update: Wed 05 Nov 2025 16:13:48 +0000 Files and hashes: 1: aNHWIOHqFxAY048aCIaBCXhdurE.crl (hash: rS3RXJxXHkyegCA+zIG/x+dCmLL+X1xtmSgatP2IIlk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Validity Not Before: Nov 5 10:13:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B236EA55FB0269C3807F4E9AD6D0E16157CB18E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:0b:0f:04:f5:c8:e4:00:9e:ea:f0:b3:6c: 8f:4d:4c:9f:9d:fa:90:e4:d0:84:eb:43:f5:08:fa: c8:dd:af:b5:93:39:75:5b:a6:b9:56:f7:cf:cf:78: a3:f8:4d:f6:93:a2:99:3e:05:d3:d1:8b:fc:a4:39: 6c:91:36:65:56:e6:79:fc:fe:c9:bb:6d:30:e1:35: a5:bc:97:42:a0:61:5c:96:c0:1b:af:07:e7:9e:ee: 0c:96:4c:b0:19:31:34:a6:7c:3a:b1:04:fd:59:76: 36:0c:39:c4:12:02:52:0d:83:af:92:37:e0:07:bf: ac:4f:99:e7:b8:a9:6b:5f:41:51:17:cc:fb:4c:49: 0a:75:b4:11:d3:eb:ca:8f:c0:8b:a6:93:e9:ff:6f: c3:58:78:77:2d:cb:e3:64:55:80:8e:fc:b4:c7:31: bb:ef:18:74:10:aa:6a:e5:a1:4f:89:6a:2a:49:e5: e1:73:a6:05:7b:c5:23:5f:d0:96:55:4f:a8:ec:e5: 36:e4:98:64:94:23:88:5f:e4:3a:59:9a:25:b4:34: d0:a4:bb:6a:9b:e1:6f:cc:74:7b:3c:63:d0:72:fd: 73:bb:5c:14:75:48:a8:d5:1b:3a:ca:cc:c9:6e:3e: 30:02:27:6f:28:34:c6:8a:d7:6e:78:65:6f:e8:4f: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 X509v3 Authority Key Identifier: keyid:68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:62:cb:08:7e:5f:63:7e:9e:d9:29:a5:d2:46:e2:8d:63:3a: df:bd:e0:9f:45:dc:b0:fd:8d:e4:44:a5:03:58:17:d5:df:ed: 88:4a:86:bc:16:27:e5:17:b3:36:d7:99:62:23:da:2f:88:9c: 67:f3:e2:72:68:5e:2c:04:5e:37:f5:52:1a:42:cc:13:1d:af: 2f:5a:f5:42:ac:ef:4e:c7:a4:5c:45:42:63:a4:df:49:a3:e3: 8b:35:dd:a4:1a:07:5f:13:d6:4d:8f:4c:80:9d:a3:b4:ac:6a: ae:c8:06:d4:a2:87:09:62:da:99:0d:62:6f:d3:5a:db:4e:3b: 66:8f:64:cc:86:b6:1b:f7:30:36:58:aa:8b:6e:fe:9e:2f:50: f2:10:79:fa:bc:27:bd:7e:91:25:e5:d6:41:06:b2:09:48:51: aa:75:37:4a:ac:df:4a:4e:1a:a1:f0:0d:89:a2:8a:15:af:f6: 29:bd:ec:46:34:78:06:4e:d9:b0:20:7c:5c:64:6f:bc:a7:14: d3:60:20:67:de:2f:65:27:50:0e:ff:c6:29:43:09:77:85:11: ef:08:3d:59:2e:1b:0b:50:5a:de:39:08:06:af:9a:13:9a:3c: 4a:50:82:cd:73:c5:f7:23:47:18:cc:54:ce:98:b9:35:af:a3: 83:17:b2:08 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhE MUQ2MjBFMUVBMTcxMDE4RDM4RjFBMDg4NjgxMDk3ODVEQkFCMTAeFw0yNTExMDUx MDEzNDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEIyMzZFQTU1RkIwMjY5 QzM4MDdGNEU5QUQ2RDBFMTYxNTdDQjE4RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/9AsPBPXI5ACe6vCzbI9NTJ+d+pDk0ITrQ/UI+sjdr7WTOXVb prlW98/PeKP4TfaTopk+BdPRi/ykOWyRNmVW5nn8/sm7bTDhNaW8l0KgYVyWwBuv B+ee7gyWTLAZMTSmfDqxBP1ZdjYMOcQSAlINg6+SN+AHv6xPmee4qWtfQVEXzPtM SQp1tBHT68qPwIumk+n/b8NYeHcty+NkVYCO/LTHMbvvGHQQqmrloU+JaipJ5eFz pgV7xSNf0JZVT6js5TbkmGSUI4hf5DpZmiW0NNCku2qb4W/MdHs8Y9By/XO7XBR1 SKjVGzrKzMluPjACJ28oNMaK1254ZW/oTwC5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUsjbqVfsCacOAf06a1tDhYVfLGOcwHwYDVR0jBBgwFoAUaNHWIOHqFxAY048a CIaBCXhdurEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 NS9hTkhXSU9IcUZ4QVkwNDhhQ0lhQkNYaGR1ckUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FOSFdJT0hxRnhBWTA0OGFDSWFCQ1hoZHVyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODUvYU5IV0lPSHFGeEFZ MDQ4YUNJYUJDWGhkdXJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAhiywh+X2N+ntkppdJG4o1jOt+94J9F3LD9jeREpQNYF9Xf7YhKhrwWJ+UX szbXmWIj2i+InGfz4nJoXiwEXjf1UhpCzBMdry9a9UKs707HpFxFQmOk30mj44s1 3aQaB18T1k2PTICdo7Ssaq7IBtSihwli2pkNYm/TWttOO2aPZMyGthv3MDZYqotu /p4vUPIQefq8J71+kSXl1kEGsglIUap1N0qs30pOGqHwDYmiihWv9im97EY0eAZO 2bAgfFxkb7ynFNNgIGfeL2UnUA7/xilDCXeFEe8IPVkuGwtQWt45CAavmhOaPEpQ gs1zxfcjRxjMVM6YuTWvo4MXsgg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:54:34 2025 by rpki-client