$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft File: 4G9RPYtETnmh9YTzwpOWosJuXzk.mft (raw, json) Hash identifier: JzofTLAS8ORMPQQh7aXFCWYRO/LIYWF1HS4fzhjzRfQ= Subject key identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 Certificate issuer: /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Certificate serial: 183A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft Manifest number: 1837 Signing time: Wed 05 Nov 2025 20:13:42 +0000 Manifest this update: Wed 05 Nov 2025 20:13:42 +0000 Manifest next update: Thu 06 Nov 2025 02:13:42 +0000 Files and hashes: 1: 4G9RPYtETnmh9YTzwpOWosJuXzk.crl (hash: /G6cOrPD1FrRJzNj/Q40OUUp0Non9CisJtD5jDLXvIM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6202 (0x183a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Validity Not Before: Nov 5 20:13:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5101FBA0CB07E8ABD26F6410038F6590E71DDDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:c3:bc:90:87:ae:6d:03:db:f8:21:62:72: 42:61:4b:66:d0:a5:e5:0a:ee:e9:d2:36:94:ba:b8: 13:a8:4e:7a:5f:ff:e8:96:d6:7f:04:10:af:ea:de: f2:c2:49:35:dc:b0:69:c6:7e:1a:36:f8:59:f7:e9: 59:97:d1:60:23:78:df:84:fc:83:13:f0:da:4e:75: 6f:b2:bb:07:c9:0d:0b:d1:2d:d3:06:38:83:c6:13: 26:d7:7a:08:43:8f:d7:58:52:43:67:46:a7:84:bc: a1:db:e6:e2:6c:02:ee:9e:a6:28:86:88:43:4a:66: 3c:ec:f6:b7:90:bb:71:ed:b0:16:d7:ed:f5:d2:69: 48:d3:b5:24:c6:a4:30:62:c9:a9:c6:db:8d:39:14: 8a:4d:05:14:b0:4d:75:f1:17:95:d6:ec:79:5d:7e: 22:d6:9e:28:ff:19:72:ba:ce:46:aa:ae:4a:72:64: 0b:3d:9c:d2:f4:00:6a:7c:f6:f9:e9:e0:52:29:ee: 9a:f3:9d:79:04:a5:e7:75:34:5c:d9:93:1f:e3:83: ca:a6:d8:6f:07:43:59:ca:70:5f:e8:33:99:78:cb: c3:9c:5b:dc:36:14:2f:99:af:b4:ea:3c:fa:df:99: a5:8e:68:91:fb:fc:ae:80:58:56:04:4d:d7:d6:05: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 X509v3 Authority Key Identifier: keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:65:e8:04:68:c9:8e:19:66:ab:5c:e3:b8:ab:58:22:56:e6: 07:a1:50:f2:41:a7:29:a4:54:2c:56:53:f1:0d:d9:e8:ca:87: 7f:e2:f8:2b:51:19:08:f2:05:82:83:cf:b0:4e:5c:2c:fe:19: 72:62:d1:ed:f3:97:6e:f5:ea:80:64:20:c7:a7:6d:13:14:3d: 12:dd:4c:6d:39:33:81:20:2f:75:53:d6:01:3d:8c:c4:35:48: 01:e9:ac:c9:8a:94:63:77:81:c7:43:bc:c6:95:6c:92:d6:e6: 12:d2:de:7a:c4:3e:5c:64:3c:c4:fb:88:6f:96:15:b4:cb:87: 5a:1a:c6:e4:95:f7:63:b8:a0:2c:2d:b5:10:8d:a4:ff:64:f1: 09:75:05:04:ea:bf:d8:a0:bc:69:6d:74:08:60:b5:6a:02:db: af:00:a4:bd:1e:23:f1:20:e2:89:f9:f5:d5:f5:71:fc:d3:97: 8a:b1:e0:9a:a3:36:3c:5e:8d:3b:f4:bd:0f:38:ac:ad:73:78: be:90:c4:4c:ad:73:1e:e3:04:c2:4b:84:c6:35:13:48:a8:10: 8d:42:83:92:56:8e:ef:ce:f8:c1:70:36:a9:89:59:06:5e:da: 53:ef:20:52:e8:59:e7:33:a4:2a:92:d5:7e:63:1b:2d:78:ea: 78:39:87:d2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTA2 RjUxM0Q4QjQ0NEU3OUExRjU4NEYzQzI5Mzk2QTJDMjZFNUYzOTAeFw0yNTExMDUy MDEzNDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDUxMDFGQkEwQ0IwN0U4 QUJEMjZGNjQxMDAzOEY2NTkwRTcxRERERDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0sMO8kIeubQPb+CFickJhS2bQpeUK7unSNpS6uBOoTnpf/+iW 1n8EEK/q3vLCSTXcsGnGfho2+Fn36VmX0WAjeN+E/IMT8NpOdW+yuwfJDQvRLdMG OIPGEybXeghDj9dYUkNnRqeEvKHb5uJsAu6epiiGiENKZjzs9reQu3HtsBbX7fXS aUjTtSTGpDBiyanG2405FIpNBRSwTXXxF5XW7HldfiLWnij/GXK6zkaqrkpyZAs9 nNL0AGp89vnp4FIp7prznXkEped1NFzZkx/jg8qm2G8HQ1nKcF/oM5l4y8OcW9w2 FC+Zr7TqPPrfmaWOaJH7/K6AWFYETdfWBRsxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUQH7oMsH6KvSb2QQA49lkOcd3dAwHwYDVR0jBBgwFoAU4G9RPYtETnmh9YTz wpOWosJuXzkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY3 Mi80RzlSUFl0RVRubWg5WVR6d3BPV29zSnVYemsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRHOVJQWXRFVG5taDlZVHp3cE9Xb3NKdVh6ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NzIvNEc5UlBZdEVUbm1o OVlUendwT1dvc0p1WHprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACZl6ARoyY4ZZqtc47irWCJW5gehUPJBpymkVCxWU/EN2ejKh3/i+CtRGQjy BYKDz7BOXCz+GXJi0e3zl2716oBkIMenbRMUPRLdTG05M4EgL3VT1gE9jMQ1SAHp rMmKlGN3gcdDvMaVbJLW5hLS3nrEPlxkPMT7iG+WFbTLh1oaxuSV92O4oCwttRCN pP9k8Ql1BQTqv9igvGltdAhgtWoC268ApL0eI/Eg4on59dX1cfzTl4qx4JqjNjxe jTv0vQ84rK1zeL6QxEytcx7jBMJLhMY1E0ioEI1Cg5JWju/O+MFwNqmJWQZe2lPv IFLoWeczpCqS1X5jGy146ng5h9I= -----END CERTIFICATE-----Generated at Thu Nov 6 00:08:40 2025 by rpki-client