$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft File: qOvq1LE6eRhQyveRTqMND1A2w-c.mft (raw, json) Hash identifier: 3+pk8tOwG3LZw51ELzhOmNPOHaQEVFoUts8eO+Dy7HA= Subject key identifier: 51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF Authority key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 Certificate issuer: /CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Certificate serial: 77 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft Manifest number: 72 Signing time: Wed 05 Nov 2025 17:41:34 +0000 Manifest this update: Wed 05 Nov 2025 17:41:34 +0000 Manifest next update: Wed 05 Nov 2025 23:41:34 +0000 Files and hashes: 1: -MrjC-Wa5eHOs5iz6663lcQmVdk.roa (hash: Cz4/7Zsm1ISGWWnX0XZFGpbGxCLE/5T6NkRhl97/hgg=) 2: 4NLDWWgvrdtoNmlZt6ha5D8LuEs.roa (hash: ifNnF9h072MS6Pwe42EJlNd8XK4udOUQoSw1UcbQjR8=) 3: oN6OAGOV0cdaPZu11iVZrCiBcBI.roa (hash: 3mNZCkp2vcw1/UmFCrK3Wmr5EPSAZSqKxAaz6I4tKuA=) 4: qOvq1LE6eRhQyveRTqMND1A2w-c.crl (hash: ix4WDcdye5Znfb1UWWx2bQiCK/a8R1e+cjA0gI6tHAg=) 5: rQKvb1lXH1c4bNEw10BfeeCllHs.roa (hash: 8OQWQtkZaG38Cf7QP4OxXvHEUWrAzh4iUe3Z9rIcvNk=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Validity Not Before: Nov 5 17:41:34 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5185FA67711A05EB5671FC1222CA12C680FF24BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:14:6f:77:34:72:f7:14:4c:75:ac:52:29:94: 56:4a:f5:d0:ea:5c:af:84:1b:b8:39:e2:6e:ab:b9: 37:2b:be:05:8a:91:29:a2:d7:53:da:45:08:a2:8e: 7b:d8:db:b5:67:c7:e0:fb:0f:f8:8f:c9:bc:ad:80: a2:92:0b:f7:eb:d0:03:77:85:3e:45:03:94:b2:14: c5:c2:10:a6:59:a2:a7:1d:c3:2e:03:03:9b:e2:d6: 50:f1:45:9f:aa:b8:51:5f:cc:47:fc:26:59:41:2b: 84:7c:e0:19:76:03:69:d5:75:eb:4c:44:97:91:3e: c2:c2:02:b4:30:8a:3a:aa:fb:fd:d4:e0:40:8a:0a: d3:c4:54:84:f9:29:91:cb:b3:a4:84:35:b3:99:7b: 2e:33:78:d9:d1:86:51:39:e2:86:36:88:21:57:80: 15:49:ef:ec:99:58:b2:4b:af:92:40:e6:58:03:65: 11:bf:70:3d:79:31:96:5b:48:e7:b6:9a:dc:08:6c: 6f:c6:09:ad:d7:5d:b1:a2:86:0b:de:aa:cd:73:1f: 65:88:56:12:f9:f2:42:58:ea:61:9e:57:06:c3:bf: 6d:f1:58:8d:09:44:29:db:44:c2:48:a2:1c:f7:51: 06:2c:6b:b4:c2:15:40:59:d3:31:5c:c8:c6:86:c1: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:85:FA:67:71:1A:05:EB:56:71:FC:12:22:CA:12:C6:80:FF:24:BF X509v3 Authority Key Identifier: keyid:A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7a:0c:d2:43:ac:7a:01:db:32:7b:78:be:11:c4:20:3a:ba: bc:de:7b:41:dd:aa:06:23:85:58:68:35:a9:df:88:ba:39:f7: eb:0f:ea:22:bf:fc:6b:71:d0:c2:50:66:a2:33:f5:f1:be:a3: 21:83:70:0e:56:89:f7:52:47:4b:8f:84:19:9e:cb:2a:9a:3a: 9f:41:a0:33:98:43:0f:9b:35:db:6a:63:72:36:42:44:9a:b5: 49:1a:88:fb:66:ca:f1:0b:af:4f:7b:03:0b:85:1a:e2:3f:20: 14:9d:9d:cb:05:a0:70:ea:f4:c9:37:62:27:88:7c:b4:1b:5e: e2:80:a4:04:c4:f0:f0:f8:40:b1:8e:6c:80:fe:bb:e4:08:8b: bd:60:ad:3a:8e:de:98:dd:d4:b4:6f:cc:60:f6:20:98:a9:28: 3a:84:b7:91:7e:d4:ed:8e:5b:42:18:cd:3c:c7:84:cd:6c:63: f7:d8:a8:67:46:7e:c1:fd:29:22:bf:5f:02:6c:c7:d1:fe:95: ac:40:a7:b9:cf:08:0c:59:ca:97:02:1f:bb:c9:20:e6:de:52: 9a:cc:21:c0:39:e7:b2:1a:ff:2a:85:3c:39:41:e4:7b:8c:c6: b8:aa:22:52:f1:f0:ba:7c:99:89:b3:55:5f:54:e9:1e:63:be: 41:c4:e4:21 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOEVC RUFENEIxM0E3OTE4NTBDQUY3OTE0RUEzMEQwRjUwMzZDM0U3MB4XDTI1MTEwNTE3 NDEzNFoXDTI2MTAyMzAzMDEwM1owMzExMC8GA1UEAxMoNTE4NUZBNjc3MTFBMDVF QjU2NzFGQzEyMjJDQTEyQzY4MEZGMjRCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN8Ub3c0cvcUTHWsUimUVkr10Opcr4QbuDnibqu5Nyu+BYqRKaLX U9pFCKKOe9jbtWfH4PsP+I/JvK2AopIL9+vQA3eFPkUDlLIUxcIQplmipx3DLgMD m+LWUPFFn6q4UV/MR/wmWUErhHzgGXYDadV160xEl5E+wsICtDCKOqr7/dTgQIoK 08RUhPkpkcuzpIQ1s5l7LjN42dGGUTnihjaIIVeAFUnv7JlYskuvkkDmWANlEb9w PXkxlltI57aa3Ahsb8YJrdddsaKGC96qzXMfZYhWEvnyQljqYZ5XBsO/bfFYjQlE KdtEwkiiHPdRBixrtMIVQFnTMVzIxobBfdcCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRRhfpncRoF61Zx/BIiyhLGgP8kvzAfBgNVHSMEGDAWgBSo6+rUsTp5GFDK95FO ow0PUDbD5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yOTcy L3FPdnExTEU2ZVJoUXl2ZVJUcU1ORDFBMnctYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcU92cTFMRTZlUmhReXZlUlRxTU5EMUEydy1jLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk3Mi9xT3ZxMUxFNmVSaFF5 dmVSVHFNTkQxQTJ3LWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQXoM0kOsegHbMnt4vhHEIDq6vN57Qd2qBiOFWGg1qd+Iujn36w/qIr/8a3HQ wlBmojP18b6jIYNwDlaJ91JHS4+EGZ7LKpo6n0GgM5hDD5s122pjcjZCRJq1SRqI +2bK8QuvT3sDC4Ua4j8gFJ2dywWgcOr0yTdiJ4h8tBte4oCkBMTw8PhAsY5sgP67 5AiLvWCtOo7emN3UtG/MYPYgmKkoOoS3kX7U7Y5bQhjNPMeEzWxj99ioZ0Z+wf0p Ir9fAmzH0f6VrECnuc8IDFnKlwIfu8kg5t5SmswhwDnnshr/KoU8OUHke4zGuKoi UvHwunyZibNVX1TpHmO+QcTkIQ== -----END CERTIFICATE-----Generated at Wed Nov 5 20:19:47 2025 by rpki-client