
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft
File: AvsF3jxUSp8cNEpj619s_dNIEVY.mft (raw, json)
Hash identifier: GWrTGEECxuaHMZ1OaZ12ASpzdVagBlEt9bADUmNq15I=
Subject key identifier: 96:01:2E:59:7C:58:8B:4E:7A:C6:FB:9E:92:6E:A6:10:74:F3:0D:A2
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 16E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft
Manifest number: 16BF
Signing time: Wed 05 Nov 2025 14:41:59 +0000
Manifest this update: Wed 05 Nov 2025 14:41:59 +0000
Manifest next update: Wed 05 Nov 2025 20:41:59 +0000
Files and hashes: 1: 1YwlzG7SVAMiL_GIZDdsZR7B5wA.roa (hash: U/gSMXrMfKSW4YHznPrzwscggCQatFIZj8NLRUfNXtY=)
2: 54uPeoRLD2LcMFxI6apX4s7yK44.roa (hash: 1hiicEC/s4Zv7UUVcUlW9Yd1qXsoa3HJpa9skUM512s=)
3: 5MVnjDfL4W4g1C5aRhoUWw5lwns.roa (hash: Ks9rggPSQfURozZUvcRptR+8LOfLqBBEYlij7wVKkSw=)
4: AvsF3jxUSp8cNEpj619s_dNIEVY.crl (hash: 5HVyE/w4iSTyWha7zO0+Z0e1xy05v+YzVKUK048daJo=)
5: Ch_uvgOlyJqiV-yefalmn6WVTYs.roa (hash: VBrzBhBwXiP2oCqtSETCfcBKX+9TGPU/nx7Y/1DEDTI=)
6: LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa (hash: tblbD2ZyIp2Q8bqb+1/afrHogCQsO4U8fqTKgNs9MC8=)
7: N3GFntIB1rIHQkdwNA-MErwsnhA.roa (hash: cb28yzvAVmBffLRAuQsGCOVBar292ioRhQdB6xFWgUI=)
8: epEJcCwBSf5e2FNHFZoHCNAz51s.roa (hash: 1ufVhs0zLlFMHv6BHq2q+8s1OC1c2knbbdbGXkyvx1k=)
9: gLNsQnsavu_2wqWF7jUTd6YOwM8.roa (hash: obdZ03e8dsiCI2QSyYweMEW3MzzPmJguRt0UKO1FAMY=)
10: q5dZX0LonsqK7cQSibVkdnVFWI0.roa (hash: eJjkvkJwcAzje8hwxl6V/rFbEDf8i4cjMZk5bfZprRI=)
11: v4AAxFJbbTiRR_KP0xELNmVo8bA.roa (hash: R/ssDd6LgSKrUio2Uz4xAHOlqcn6ipq1sdzBp22bRHc=)
12: vICCReu4gR1zXdWRNM_PN25IB3Q.roa (hash: 02bHFG1hU5kVSiUV9SFbVnuXcFLfL/BdL2R4dtNVlag=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 18:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5856 (0x16e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Nov 5 14:41:59 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=96012E597C588B4E7AC6FB9E926EA61074F30DA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:54:81:ef:cb:36:e1:7c:3b:bc:e9:68:a0:9f:
3d:66:05:59:9b:81:6e:b8:af:11:13:6c:07:a7:27:
25:11:7f:9e:09:8e:e8:bd:d7:55:f9:98:76:22:7c:
87:3b:46:e1:cd:aa:a1:a5:b0:02:69:6d:fc:4b:54:
e7:cf:36:49:b3:16:09:b9:b9:df:ad:00:fe:c0:2c:
bf:5e:34:8f:a6:e5:ba:d2:37:d3:56:b7:d5:f2:94:
2a:06:95:b3:b3:c6:df:95:0d:58:14:ca:ab:db:6c:
e8:df:11:9a:0b:65:fb:93:3d:37:2c:f5:b5:b8:97:
4b:1d:89:56:0b:3c:e3:b8:58:39:3e:03:85:97:51:
bb:69:7f:f8:bd:86:21:23:b9:e8:2a:f4:24:30:d0:
37:40:f6:86:f5:35:5d:cd:cd:8e:0a:d6:7a:eb:af:
32:7c:2a:39:8d:cb:32:bb:31:09:37:f2:96:e9:89:
bb:c2:e3:54:3d:1e:98:82:c1:01:88:0e:8c:76:b7:
bf:36:0f:14:cb:dc:6f:de:77:c4:30:7a:69:ab:ba:
1b:c9:d0:34:1f:46:6b:58:fb:22:4d:4b:e3:1e:d5:
12:14:f8:ec:d7:87:8e:06:13:1c:bc:6a:7b:f2:08:
6f:85:77:3a:62:6b:87:88:8b:42:ea:87:8c:6f:e8:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:2E:59:7C:58:8B:4E:7A:C6:FB:9E:92:6E:A6:10:74:F3:0D:A2
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dc:a9:46:c1:52:41:af:21:9a:aa:e8:c8:85:ca:e4:42:41:
fc:ea:74:67:c6:5f:b3:e5:aa:b3:77:3c:02:64:93:50:91:5c:
fd:f7:3f:e9:b5:97:c9:a0:ef:cc:3e:f8:e0:ad:27:48:ff:9d:
68:4c:42:78:4a:62:48:57:f4:5b:66:25:4a:3a:82:3f:61:22:
7b:e1:a7:8d:33:05:bd:8a:0b:42:20:2c:c0:74:08:c5:60:30:
30:b1:fd:a9:66:a6:16:e7:34:ca:de:b8:07:bb:06:98:b0:b6:
3a:51:f7:f1:ee:12:89:e0:24:8b:9e:89:2c:0c:b1:97:6f:91:
c1:c1:ec:62:58:e0:e1:8d:d2:4f:7a:c9:ee:5c:18:b9:12:da:
ae:17:68:5b:db:e0:aa:c7:ca:94:19:f7:2f:58:ab:42:be:a0:
3e:1c:ec:97:25:d9:07:14:fb:1b:15:75:06:2a:72:68:0d:b5:
ac:01:fa:e0:76:84:20:5b:7a:4e:fd:ed:12:3f:58:78:79:dd:
c3:33:6e:fe:e4:47:15:73:9e:40:6e:cb:88:b6:e8:61:c4:bb:
a5:a3:0b:c5:bf:1c:f0:de:29:bf:f7:02:9a:88:0d:b7:c6:5c:
1c:bd:a3:1d:02:d4:4d:56:31:8f:49:bc:4c:d6:b7:52:14:7c:
95:65:35:f7
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG
QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNTExMDUx
NDQxNTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDk2MDEyRTU5N0M1ODhC
NEU3QUM2RkI5RTkyNkVBNjEwNzRGMzBEQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2VIHvyzbhfDu86Wignz1mBVmbgW64rxETbAenJyURf54Jjui9
11X5mHYifIc7RuHNqqGlsAJpbfxLVOfPNkmzFgm5ud+tAP7ALL9eNI+m5brSN9NW
t9XylCoGlbOzxt+VDVgUyqvbbOjfEZoLZfuTPTcs9bW4l0sdiVYLPOO4WDk+A4WX
Ubtpf/i9hiEjuegq9CQw0DdA9ob1NV3NzY4K1nrrrzJ8KjmNyzK7MQk38pbpibvC
41Q9HpiCwQGIDox2t782DxTL3G/ed8QwemmruhvJ0DQfRmtY+yJNS+Me1RIU+OzX
h44GExy8anvyCG+Fdzpia4eIi0Lqh4xv6MzdAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUlgEuWXxYi056xvuekm6mEHTzDaIwHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj
619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3
MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvQXZzRjNqeFVTcDhj
TkVwajYxOXNfZE5JRVZZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAIrcqUbBUkGvIZqq6MiFyuRCQfzqdGfGX7PlqrN3PAJkk1CRXP33P+m1l8mg
78w++OCtJ0j/nWhMQnhKYkhX9FtmJUo6gj9hInvhp40zBb2KC0IgLMB0CMVgMDCx
/almphbnNMreuAe7BpiwtjpR9/HuEongJIueiSwMsZdvkcHB7GJY4OGN0k96ye5c
GLkS2q4XaFvb4KrHypQZ9y9Yq0K+oD4c7Jcl2QcU+xsVdQYqcmgNtawB+uB2hCBb
ek797RI/WHh53cMzbv7kRxVznkBuy4i26GHEu6WjC8W/HPDeKb/3ApqIDbfGXBy9
ox0C1E1WMY9JvEzWt1IUfJVlNfc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:24:58 2025 by rpki-client