$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft File: Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft (raw, json) Hash identifier: yRbIP9zhdCK4vbXjpnXpQ8+7S+F82rSwrWdv5DcwoCI= Subject key identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 Authority key identifier: 1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A Certificate issuer: /CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Certificate serial: 218B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft Manifest number: 218B Signing time: Wed 05 Nov 2025 19:11:46 +0000 Manifest this update: Wed 05 Nov 2025 19:11:46 +0000 Manifest next update: Thu 06 Nov 2025 01:11:46 +0000 Files and hashes: 1: Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl (hash: tJl01S+RjfsxaFoya0kjwvHd6c9oNCXkDx6X/GEskFs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8587 (0x218b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A3CB732670FE5CE5F2B5BC1FA8125E95386327A Validity Not Before: Nov 5 19:11:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DB081190A93335A4E93878C7856B0F9DA70C2A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:29:0c:3c:46:6f:85:b2:e2:b1:63:21:68: 78:37:d6:ca:8c:b0:f4:28:08:6a:2f:b0:56:4c:b8: ab:b8:65:6a:2e:77:ca:96:2d:4f:c4:ec:5e:56:50: 2e:f2:5f:04:cf:cd:18:d3:37:83:04:9e:78:bc:82: 4d:ed:18:62:1f:54:86:e5:f8:9d:d4:b3:c9:c0:15: e2:3b:d2:85:1c:6b:0b:bb:7c:af:4b:a0:9c:61:f2: 0d:dd:13:59:77:88:64:2d:0e:96:ef:3e:77:b3:8b: 14:a2:aa:59:fc:7b:a1:0a:ad:7e:74:a6:d7:d2:8b: 0c:ce:85:db:61:dd:bf:5b:02:a0:26:2c:a1:58:dc: e0:2c:89:65:99:c5:d9:e1:7d:02:12:0f:68:46:19: 29:fe:9b:12:f2:8d:2c:02:45:01:ac:46:59:4e:80: 02:79:18:1c:f6:fc:04:c6:5e:07:56:58:ef:89:cc: 31:5d:f6:93:59:61:8c:b5:9c:ad:ea:74:d4:33:7d: b1:50:db:51:f9:3c:b5:13:d5:30:46:72:77:f3:10: 59:04:89:dd:1b:8a:d2:5c:e2:da:fb:44:59:6d:81: 86:3c:f7:7f:0e:db:6f:83:d4:b2:2d:65:37:da:b5: 21:38:b8:15:9e:a2:69:79:d6:a1:5b:3b:78:c2:00: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:08:11:90:A9:33:35:A4:E9:38:78:C7:85:6B:0F:9D:A7:0C:2A:53 X509v3 Authority Key Identifier: keyid:1A:3C:B7:32:67:0F:E5:CE:5F:2B:5B:C1:FA:81:25:E9:53:86:32:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gjy3MmcP5c5fK1vB-oEl6VOGMno.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/Gjy3MmcP5c5fK1vB-oEl6VOGMno.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f2:64:6c:6c:54:03:43:b6:be:2c:d8:4d:95:50:db:79:8d: 25:90:cb:50:f1:08:5d:b8:ca:7d:3d:8a:04:41:45:33:ee:92: df:e7:3d:b6:fc:9f:2f:82:92:f5:c6:44:a0:f0:a9:f0:7b:da: 67:01:df:f8:16:61:4d:9c:84:3a:40:b0:c6:58:c0:2f:1e:92: 35:53:87:87:55:ce:56:03:2c:5d:fb:37:61:ea:2a:37:43:5b: 6f:f7:48:f4:14:5a:91:85:b1:76:37:bb:dc:13:3f:5f:68:55: 16:c5:f0:98:94:4c:bc:37:5e:93:97:18:24:58:60:62:9e:f3: a5:00:a5:c5:ed:49:e0:f7:ae:8f:8f:28:06:24:e8:d0:85:9c: 7e:e9:74:e9:2e:d0:5b:97:68:cb:5a:41:2a:f1:f4:6e:79:fb: e3:c4:cc:e1:80:bc:89:fc:c7:ef:23:75:d1:b0:61:29:5f:7d: b1:b2:36:e7:5d:3f:c0:9f:54:a4:bd:5c:9a:b7:46:8f:e0:71: 76:ae:e0:b4:fe:06:91:a9:4f:d8:1d:42:5a:ca:fb:17:8f:6c: 82:66:cf:46:00:d8:23:e9:e7:3f:0b:65:11:d0:b3:ec:f7:af: 3d:da:64:68:69:92:e3:e6:11:ae:1c:fd:3b:32:df:8f:5c:ca: 27:9f:ec:8f -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUEz Q0I3MzI2NzBGRTVDRTVGMkI1QkMxRkE4MTI1RTk1Mzg2MzI3QTAeFw0yNTExMDUx OTExNDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERCMDgxMTkwQTkzMzM1 QTRFOTM4NzhDNzg1NkIwRjlEQTcwQzJBNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9sCkMPEZvhbLisWMhaHg31sqMsPQoCGovsFZMuKu4ZWoud8qW LU/E7F5WUC7yXwTPzRjTN4MEnni8gk3tGGIfVIbl+J3Us8nAFeI70oUcawu7fK9L oJxh8g3dE1l3iGQtDpbvPnezixSiqln8e6EKrX50ptfSiwzOhdth3b9bAqAmLKFY 3OAsiWWZxdnhfQISD2hGGSn+mxLyjSwCRQGsRllOgAJ5GBz2/ATGXgdWWO+JzDFd 9pNZYYy1nK3qdNQzfbFQ21H5PLUT1TBGcnfzEFkEid0bitJc4tr7RFltgYY8938O 22+D1LItZTfatSE4uBWeoml51qFbO3jCAPZlAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU2wgRkKkzNaTpOHjHhWsPnacMKlMwHwYDVR0jBBgwFoAUGjy3MmcP5c5fK1vB +oEl6VOGMnowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1 L0dqeTNNbWNQNWM1ZksxdkItb0VsNlZPR01uby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvR2p5M01tY1A1YzVmSzF2Qi1vRWw2Vk9HTW5vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1L0dqeTNNbWNQNWM1Zksx dkItb0VsNlZPR01uby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBP8mRsbFQDQ7a+LNhNlVDbeY0lkMtQ8QhduMp9PYoEQUUz7pLf5z22/J8vgpL1 xkSg8Knwe9pnAd/4FmFNnIQ6QLDGWMAvHpI1U4eHVc5WAyxd+zdh6io3Q1tv90j0 FFqRhbF2N7vcEz9faFUWxfCYlEy8N16TlxgkWGBinvOlAKXF7Ung966PjygGJOjQ hZx+6XTpLtBbl2jLWkEq8fRuefvjxMzhgLyJ/MfvI3XRsGEpX32xsjbnXT/An1Sk vVyat0aP4HF2ruC0/gaRqU/YHUJayvsXj2yCZs9GANgj6ec/C2UR0LPs96892mRo aZLj5hGuHP07Mt+PXMonn+yP -----END CERTIFICATE-----Generated at Wed Nov 5 22:23:37 2025 by rpki-client