$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.mft File: T8qLy26z7GEDL4jSb8ArBSJNRxg.mft (raw, json) Hash identifier: b7Mi2CqK4jeVx365l4tT9rBECm7L01IC5gxa799mSaQ= Subject key identifier: A9:34:A9:A8:CA:17:30:E2:63:81:63:AB:B7:B7:9C:89:4C:8B:D5:F7 Authority key identifier: 4F:CA:8B:CB:6E:B3:EC:61:03:2F:88:D2:6F:C0:2B:05:22:4D:47:18 Certificate issuer: /CN=4FCA8BCB6EB3EC61032F88D26FC02B05224D4718 Certificate serial: 5167 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T8qLy26z7GEDL4jSb8ArBSJNRxg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.mft Manifest number: 50B5 Signing time: Wed 05 Nov 2025 10:15:46 +0000 Manifest this update: Wed 05 Nov 2025 10:15:46 +0000 Manifest next update: Wed 05 Nov 2025 16:15:46 +0000 Files and hashes: 1: 1neWwmzR--g99Cya7mh6N7c7bEA.roa (hash: KRsi3bsx6h3cXPXZYsiX+V9AXVPR9KStjshlTQiWGms=) 2: 5q4IYvRpbO1Hqja3EDMxP-S8164.roa (hash: AbryuiVzACnoSmFOGRQu3zKBJSjHecM0ofnbf2FdqTA=) 3: T8qLy26z7GEDL4jSb8ArBSJNRxg.crl (hash: nkXLBpcN2LQ0guTwW2KIhhKCWMgaeMa8BTm0vAkaQHM=) 4: WU8x-QLzVNU5aReJr1mk1RtF7F4.roa (hash: 7em4P1BDF8/UXjd4oel71YAdnoClwGBj7nhahixRavk=) 5: _uMnnXlKhntZqZ70la0Red4ZARQ.roa (hash: I76EhG7K4vmAolxi5Zv4wqTD2KeeFVihvvUG28zFCgk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T8qLy26z7GEDL4jSb8ArBSJNRxg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20839 (0x5167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCA8BCB6EB3EC61032F88D26FC02B05224D4718 Validity Not Before: Nov 5 10:15:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A934A9A8CA1730E2638163ABB7B79C894C8BD5F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:ef:23:63:ca:63:31:41:11:5b:a5:87:a2: 9f:28:6e:e5:1a:9a:47:dd:d8:0e:01:a3:bf:d0:10: ad:bc:5d:a8:4d:a5:d1:0f:33:87:a8:70:2c:e5:d7: 1e:2a:7d:17:b4:30:72:a9:f5:06:6c:c3:64:9c:d5: da:b1:04:e1:35:c6:51:10:7c:c8:b0:15:b3:60:00: 1f:9d:99:6e:46:40:2d:dd:35:d1:87:99:51:6b:66: b9:86:df:3f:cd:e2:3c:d1:64:11:d0:8b:cd:bc:83: ba:13:69:52:ef:5e:0c:c5:57:58:c9:73:68:5b:d5: ef:4d:e7:1e:d1:9d:dd:5c:74:0e:02:cb:eb:9d:08: b2:8c:04:15:f5:f0:46:59:e4:ac:6b:64:33:f5:23: a7:03:c9:fb:c2:b4:dc:23:b5:bd:d2:82:48:fa:c0: 38:d2:30:46:b1:ac:73:2c:94:88:73:ed:10:69:3e: f3:80:cf:b4:ec:8d:73:30:bf:03:01:4c:64:97:6a: 68:21:19:fa:e3:eb:1e:c6:75:fe:22:34:d0:0b:75: 6b:d8:4f:5c:ac:69:a4:ad:86:43:85:76:80:13:d5: 75:0c:d8:d6:ba:ce:d6:69:a9:7d:75:3b:d6:a7:6e: 6d:ef:d9:91:10:0d:dc:37:a2:a6:34:51:e3:2f:eb: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:34:A9:A8:CA:17:30:E2:63:81:63:AB:B7:B7:9C:89:4C:8B:D5:F7 X509v3 Authority Key Identifier: keyid:4F:CA:8B:CB:6E:B3:EC:61:03:2F:88:D2:6F:C0:2B:05:22:4D:47:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T8qLy26z7GEDL4jSb8ArBSJNRxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:65:35:83:49:8f:c3:54:b3:74:0c:65:a3:2f:95:26:cb:41: d0:65:2e:9c:92:b2:2e:72:e4:8d:2e:77:c5:9b:40:76:92:f4: 0e:d5:ae:e3:41:e4:1f:ff:83:e1:64:21:9e:93:c7:f8:48:71: 9a:2f:a9:54:86:f3:95:09:f7:e1:1a:e1:f9:14:1c:b9:2e:bc: 89:1d:db:a3:76:a3:61:c9:03:07:2a:17:eb:fd:89:20:9b:fe: 85:20:b3:47:47:25:05:8d:7f:59:89:fc:7e:e6:ab:14:85:57: 8c:3a:05:37:f5:08:85:85:c6:04:0f:c1:3e:68:56:7b:7a:14: 97:c6:2c:47:ca:1a:21:14:5f:e5:10:cd:5d:54:c1:ec:34:dd: e3:6c:cb:fa:f4:46:a8:e6:86:f4:52:a0:33:46:22:5e:e8:eb: 15:17:9b:b6:a1:2f:3a:eb:6c:a9:0c:2e:55:81:cc:98:bd:a5: cf:9e:20:46:ca:b8:8a:a9:ef:02:39:7e:7d:dd:3c:e9:85:b9: 7c:70:72:16:8c:b5:95:de:48:7c:a7:a1:60:2b:67:7a:34:c9: 33:44:35:eb:c6:20:c4:92:13:dd:94:d7:db:43:eb:fc:d8:97: 21:19:65:a7:c0:5c:52:ff:63:f3:1e:ac:69:ec:19:b7:34:a7: 26:df:1a:a6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICUWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZD QThCQ0I2RUIzRUM2MTAzMkY4OEQyNkZDMDJCMDUyMjRENDcxODAeFw0yNTExMDUx MDE1NDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE5MzRBOUE4Q0ExNzMw RTI2MzgxNjNBQkI3Qjc5Qzg5NEM4QkQ1RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCob+8jY8pjMUERW6WHop8obuUamkfd2A4Bo7/QEK28XahNpdEP M4eocCzl1x4qfRe0MHKp9QZsw2Sc1dqxBOE1xlEQfMiwFbNgAB+dmW5GQC3dNdGH mVFrZrmG3z/N4jzRZBHQi828g7oTaVLvXgzFV1jJc2hb1e9N5x7Rnd1cdA4Cy+ud CLKMBBX18EZZ5KxrZDP1I6cDyfvCtNwjtb3Sgkj6wDjSMEaxrHMslIhz7RBpPvOA z7TsjXMwvwMBTGSXamghGfrj6x7Gdf4iNNALdWvYT1ysaaSthkOFdoAT1XUM2Na6 ztZpqX11O9anbm3v2ZEQDdw3oqY0UeMv67fBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUqTSpqMoXMOJjgWOrt7eciUyL1fcwHwYDVR0jBBgwFoAUT8qLy26z7GEDL4jS b8ArBSJNRxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgw Mi9UOHFMeTI2ejdHRURMNGpTYjhBckJTSk5SeGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1Q4cUx5MjZ6N0dFREw0alNiOEFyQlNKTlJ4Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MDIvVDhxTHkyNno3R0VE TDRqU2I4QXJCU0pOUnhnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGdlNYNJj8NUs3QMZaMvlSbLQdBlLpySsi5y5I0ud8WbQHaS9A7VruNB5B// g+FkIZ6Tx/hIcZovqVSG85UJ9+Ea4fkUHLkuvIkd26N2o2HJAwcqF+v9iSCb/oUg s0dHJQWNf1mJ/H7mqxSFV4w6BTf1CIWFxgQPwT5oVnt6FJfGLEfKGiEUX+UQzV1U wew03eNsy/r0RqjmhvRSoDNGIl7o6xUXm7ahLzrrbKkMLlWBzJi9pc+eIEbKuIqp 7wI5fn3dPOmFuXxwchaMtZXeSHynoWArZ3o0yTNENevGIMSSE92U19tD6/zYlyEZ ZafAXFL/Y/MerGnsGbc0pybfGqY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:29 2025 by rpki-client