$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft File: JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft (raw, json) Hash identifier: LAntNPVNAXNz9UB72vd7sMJWRc1NEd6oapxIhzOc4F0= Subject key identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E Authority key identifier: 24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 Certificate issuer: /CN=246B8D869C83018945DF9F99009342903D076471 Certificate serial: 10BC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft Manifest number: 10BC Signing time: Wed 05 Nov 2025 10:12:53 +0000 Manifest this update: Wed 05 Nov 2025 10:12:53 +0000 Manifest next update: Wed 05 Nov 2025 16:12:53 +0000 Files and hashes: 1: JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl (hash: 0KuPtQ+JDD88BhsUPV36BKtD4GqlS2Xu8QgPJ9kyIhY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4284 (0x10bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246B8D869C83018945DF9F99009342903D076471 Validity Not Before: Nov 5 10:12:53 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8FDA8E1F762C3187576420B9E92948475E97BB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:41:ef:79:37:1e:c4:f8:1c:e5:0e:71:9d: c9:14:b5:45:c8:aa:4a:b6:7f:b6:64:6d:9c:c5:b4: 9d:64:a4:5d:ae:e0:ed:5a:99:90:d5:ed:c7:09:85: 0b:c6:66:ea:de:08:3b:27:c5:cf:0c:8c:3f:54:ad: 62:47:28:69:25:ab:e7:ba:5c:a2:35:85:40:00:ca: db:57:06:09:65:3d:dd:07:b0:1b:9b:da:10:2f:f3: 9a:68:b7:36:09:06:0a:4a:aa:1b:46:6f:b1:e6:45: d8:1a:ea:3f:5c:63:42:76:05:d5:24:29:3b:9b:7e: 1b:eb:34:ff:53:23:ab:6e:da:9a:59:45:35:96:30: 93:60:cb:65:9d:a8:c8:1b:e3:ab:f7:c7:ec:b0:b3: da:48:9c:79:e5:ac:6f:fc:af:ec:2b:30:f4:69:7a: 5b:07:4e:6a:5f:49:a9:b0:d5:ac:08:92:3f:c5:6e: 0a:fd:89:aa:7b:61:23:03:8e:ba:cd:f3:07:2e:54: c1:d9:42:92:6d:36:57:70:93:04:79:95:a2:d4:f7: c0:6c:c6:dd:1a:1c:88:96:b8:36:74:cf:47:aa:f9: ea:58:a5:1b:b4:05:52:37:ba:62:65:7b:4b:4f:39: a9:19:cf:aa:b3:fc:e9:18:0f:6c:f6:2f:52:2b:d1: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E X509v3 Authority Key Identifier: keyid:24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:65:f9:75:e8:fd:f7:2a:1f:6b:ae:68:f3:7f:9c:b4:06:3a: be:19:57:3b:cb:4d:4c:0d:26:67:10:d3:0e:5b:74:95:42:7c: e6:89:78:59:76:1f:c0:d8:51:0f:e6:2f:6a:01:29:5d:11:c1: 16:d6:f3:4d:83:b8:9f:04:31:7d:7b:b0:e4:5a:a1:2f:63:cb: 67:8d:34:76:28:48:00:59:3b:78:b6:b1:97:b5:b4:2f:89:93: 9e:0b:c8:f9:df:e2:6d:fc:93:16:28:8c:d8:d5:61:0b:6a:88: 6d:87:48:69:2c:a8:6d:9e:38:6c:35:51:43:ca:d5:93:f7:14: b3:b9:67:b3:67:18:fc:c0:5e:b5:4f:d8:17:1e:8a:2e:e5:00: 19:79:49:8f:e0:42:7f:a6:72:46:6f:06:74:64:f5:f6:b0:81: e8:b1:ab:00:a6:95:13:b1:12:be:e8:f3:49:6c:2d:8b:a0:c9: 18:81:aa:fd:de:d3:46:50:2e:7a:2d:87:7f:35:5e:06:e3:9a: 71:a0:18:ee:a4:ac:d0:43:73:6e:63:cb:d3:fd:21:a5:ec:46: 3b:a4:d9:12:22:e5:92:58:98:98:20:eb:8c:8c:aa:cc:49:2b: 79:93:fc:af:4a:b1:7e:11:6e:b9:ca:9e:07:80:55:d2:85:b9: 0f:e7:d0:10 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICELwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQ2 QjhEODY5QzgzMDE4OTQ1REY5Rjk5MDA5MzQyOTAzRDA3NjQ3MTAeFw0yNTExMDUx MDEyNTNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDhGREE4RTFGNzYyQzMx ODc1NzY0MjBCOUU5Mjk0ODQ3NUU5N0JCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvv0HveTcexPgc5Q5xnckUtUXIqkq2f7ZkbZzFtJ1kpF2u4O1a mZDV7ccJhQvGZureCDsnxc8MjD9UrWJHKGklq+e6XKI1hUAAyttXBgllPd0HsBub 2hAv85potzYJBgpKqhtGb7HmRdga6j9cY0J2BdUkKTubfhvrNP9TI6tu2ppZRTWW MJNgy2WdqMgb46v3x+yws9pInHnlrG/8r+wrMPRpelsHTmpfSamw1awIkj/Fbgr9 iap7YSMDjrrN8wcuVMHZQpJtNldwkwR5laLU98Bsxt0aHIiWuDZ0z0eq+epYpRu0 BVI3umJle0tPOakZz6qz/OkYD2z2L1Ir0ZmXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUj9qOH3YsMYdXZCC56SlIR16Xu54wHwYDVR0jBBgwFoAUJGuNhpyDAYlF35+Z AJNCkD0HZHEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy NC9KR3VOaHB5REFZbEYzNS1aQUpOQ2tEMEhaSEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pHdU5ocHlEQVlsRjM1LVpBSk5Da0QwSFpIRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjQvSkd1TmhweURBWWxG MzUtWkFKTkNrRDBIWkhFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAdl+XXo/fcqH2uuaPN/nLQGOr4ZVzvLTUwNJmcQ0w5bdJVCfOaJeFl2H8DY UQ/mL2oBKV0RwRbW802DuJ8EMX17sORaoS9jy2eNNHYoSABZO3i2sZe1tC+Jk54L yPnf4m38kxYojNjVYQtqiG2HSGksqG2eOGw1UUPK1ZP3FLO5Z7NnGPzAXrVP2Bce ii7lABl5SY/gQn+mckZvBnRk9fawgeixqwCmlROxEr7o80lsLYugyRiBqv3e00ZQ Lnoth381XgbjmnGgGO6krNBDc25jy9P9IaXsRjuk2RIi5ZJYmJgg64yMqsxJK3mT /K9KsX4RbrnKngeAVdKFuQ/n0BA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:35:37 2025 by rpki-client