$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft File: o2ONnURLf8HfsOr6YxeqblUpSw0.mft (raw, json) Hash identifier: dmD302+DXVXOHZTx0dAckBfAs8nzTr4mivfzsQZab+c= Subject key identifier: 02:D0:70:B9:6A:26:16:09:2A:B8:B5:D6:9C:51:93:0B:4B:C4:91:4E Authority key identifier: A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D Certificate issuer: /CN=A3638D9D444B7FC1DFB0EAFA6317AA6E55294B0D Certificate serial: 1164 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft Manifest number: 1164 Signing time: Wed 05 Nov 2025 14:41:32 +0000 Manifest this update: Wed 05 Nov 2025 14:41:32 +0000 Manifest next update: Wed 05 Nov 2025 20:41:32 +0000 Files and hashes: 1: o2ONnURLf8HfsOr6YxeqblUpSw0.crl (hash: 6g55lkDmzTo167hmGK3co6JPWgmLUclDrCuXk28bqzA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4452 (0x1164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3638D9D444B7FC1DFB0EAFA6317AA6E55294B0D Validity Not Before: Nov 5 14:41:32 2025 GMT Not After : Oct 23 09:22:04 2026 GMT Subject: CN=02D070B96A2616092AB8B5D69C51930B4BC4914E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:1f:02:61:cc:04:0f:6c:0f:8e:b4:81:ec: 4b:f0:17:51:ab:8a:49:a0:53:f0:43:14:38:4e:af: d1:35:2e:bf:83:7a:ce:56:9b:64:d4:50:68:80:ba: 87:c5:12:2a:5c:cf:12:a5:8e:17:b8:39:c0:a1:02: 22:d2:ad:d2:13:e5:b2:25:c1:c1:d2:cc:72:2a:e9: f4:06:10:e0:b6:d0:be:d6:c8:fa:c3:16:73:49:b0: 9f:f0:76:67:7c:21:a0:02:53:42:ea:91:b7:a9:eb: 65:3d:0a:63:af:a8:ce:60:45:bc:02:6f:5a:4d:21: 33:cc:03:cd:30:c0:57:d4:e9:95:d2:d2:e8:bc:e1: 8f:e3:37:02:2f:91:66:57:71:3a:53:84:77:96:5d: c0:88:8b:c0:f7:1b:dc:a7:52:82:99:91:ad:15:5a: d5:c6:0d:9e:e5:b0:e7:79:a7:2e:95:31:ad:bd:7a: 57:e8:cc:a5:f0:e0:a4:f8:e4:39:9a:61:98:2c:5b: c9:cd:05:01:28:3e:a1:c1:d9:cf:7d:b6:09:5b:1a: 63:5f:8c:c2:e3:df:6f:be:ff:7d:64:86:96:f3:90: 2a:d8:c0:67:a1:08:c7:96:06:f2:66:a5:08:c9:22: 39:c4:2e:2c:cf:3f:7a:7a:79:cf:c0:c8:99:59:18: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:70:B9:6A:26:16:09:2A:B8:B5:D6:9C:51:93:0B:4B:C4:91:4E X509v3 Authority Key Identifier: keyid:A3:63:8D:9D:44:4B:7F:C1:DF:B0:EA:FA:63:17:AA:6E:55:29:4B:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o2ONnURLf8HfsOr6YxeqblUpSw0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/o2ONnURLf8HfsOr6YxeqblUpSw0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:78:f0:36:4f:a0:9d:c0:96:12:5d:d2:2e:fb:c0:a3:9e:4e: 99:93:0f:3e:2b:96:e0:e2:39:3e:78:59:3a:8d:d2:94:7d:40: ae:a0:e7:8a:7e:31:03:9a:a0:a6:2a:52:a8:88:52:4f:ed:15: 2a:c1:53:4e:9f:3f:27:68:13:c1:8b:5d:ff:f0:19:84:5b:a3: 7a:c0:f8:7f:63:34:a3:94:cc:f4:5c:57:1b:0b:02:a4:60:b0: 2e:c3:d8:28:9b:38:49:8e:3f:1b:eb:35:d8:b6:56:23:2d:5d: 9b:c5:5a:d8:25:31:91:6b:c7:28:7e:2b:f3:df:58:fc:22:70: cd:7d:4b:f0:70:b7:b6:77:f7:17:bc:23:f9:20:19:38:36:c3: e2:2c:2e:f3:02:d0:2b:6c:18:49:fd:e0:3d:08:21:89:18:98: fe:a0:c9:b6:5d:76:e7:f9:c1:bb:4d:cb:7c:37:bc:ae:14:95: cd:2f:f3:e2:88:08:ca:25:bf:ed:21:ca:65:5e:84:fe:2c:c1: 09:8d:be:84:d4:0e:24:d3:a0:20:01:91:17:2e:82:5a:ec:ef: c1:89:c1:9a:23:33:a7:0f:ab:90:c0:8a:82:0f:70:cb:1a:e7: 72:21:46:fd:61:e6:4e:bd:b8:f4:c8:81:d1:bf:dd:17:18:34: b4:59:de:1b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTM2 MzhEOUQ0NDRCN0ZDMURGQjBFQUZBNjMxN0FBNkU1NTI5NEIwRDAeFw0yNTExMDUx NDQxMzJaFw0yNjEwMjMwOTIyMDRaMDMxMTAvBgNVBAMTKDAyRDA3MEI5NkEyNjE2 MDkyQUI4QjVENjlDNTE5MzBCNEJDNDkxNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Eh8CYcwED2wPjrSB7EvwF1GrikmgU/BDFDhOr9E1Lr+Des5W m2TUUGiAuofFEipczxKljhe4OcChAiLSrdIT5bIlwcHSzHIq6fQGEOC20L7WyPrD FnNJsJ/wdmd8IaACU0Lqkbep62U9CmOvqM5gRbwCb1pNITPMA80wwFfU6ZXS0ui8 4Y/jNwIvkWZXcTpThHeWXcCIi8D3G9ynUoKZka0VWtXGDZ7lsOd5py6VMa29elfo zKXw4KT45DmaYZgsW8nNBQEoPqHB2c99tglbGmNfjMLj32++/31khpbzkCrYwGeh CMeWBvJmpQjJIjnELizPP3p6ec/AyJlZGIKhAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAtBwuWomFgkquLXWnFGTC0vEkU4wHwYDVR0jBBgwFoAUo2ONnURLf8HfsOr6 YxeqblUpSw0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx OS9vMk9OblVSTGY4SGZzT3I2WXhlcWJsVXBTdzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL28yT05uVVJMZjhIZnNPcjZZeGVxYmxVcFN3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvbzJPTm5VUkxmOEhm c09yNll4ZXFibFVwU3cwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACN48DZPoJ3AlhJd0i77wKOeTpmTDz4rluDiOT54WTqN0pR9QK6g54p+MQOa oKYqUqiIUk/tFSrBU06fPydoE8GLXf/wGYRbo3rA+H9jNKOUzPRcVxsLAqRgsC7D 2CibOEmOPxvrNdi2ViMtXZvFWtglMZFrxyh+K/PfWPwicM19S/Bwt7Z39xe8I/kg GTg2w+IsLvMC0CtsGEn94D0IIYkYmP6gybZdduf5wbtNy3w3vK4Ulc0v8+KICMol v+0hymVehP4swQmNvoTUDiTToCABkRcuglrs78GJwZojM6cPq5DAioIPcMsa53Ih Rv1h5k69uPTIgdG/3RcYNLRZ3hs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:26:03 2025 by rpki-client