$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft File: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft (raw, json) Hash identifier: 0nQwT8VSku/ysxv3Z+8ADLEkZjZCSlgJfMFFhivjkd0= Subject key identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 Authority key identifier: 3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA Certificate issuer: /CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Certificate serial: 0D7F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft Manifest number: 0D7F Signing time: Thu 06 Nov 2025 00:13:34 +0000 Manifest this update: Thu 06 Nov 2025 00:13:34 +0000 Manifest next update: Thu 06 Nov 2025 06:13:34 +0000 Files and hashes: 1: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl (hash: oJkhP4qh+dlz4j4NJFp2nRaA3CrCpKZKs076nVPPcp0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3455 (0xd7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA Validity Not Before: Nov 6 00:13:34 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=074D0AC2BAE811F7784C6BDE285A83A1EF259DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:6e:10:c5:a5:7f:48:a5:30:8d:d9:ff:92: 31:c7:f3:6f:c3:9d:87:43:8f:17:92:1a:0b:87:a4: 43:d8:0e:5b:24:2c:4a:38:51:ec:89:c8:49:67:de: 82:53:ee:cf:e4:25:36:e2:54:0a:be:24:0e:76:ef: 2e:ca:ba:ba:7a:f4:ff:8f:ae:f6:d5:6c:05:ae:4b: 50:2c:e3:0b:19:92:f3:29:c6:c6:91:d2:5f:03:77: e7:45:26:7f:b9:40:6e:ff:99:ab:7e:c1:7f:d0:ce: cd:e8:10:3d:57:31:c8:c9:d5:d6:5f:3f:98:44:b7: 08:d3:40:b9:ae:6c:31:22:77:c9:2d:2d:a3:6a:85: f8:ba:a1:bb:e2:15:e4:a5:a5:1c:fb:d9:09:63:11: 95:e5:43:0e:8f:68:79:ad:a8:0e:4a:2f:c5:be:02: 5d:22:fc:f3:8a:26:9a:24:52:de:83:52:02:a2:89: 58:ae:c3:eb:dd:64:a2:b8:bf:d3:94:98:da:20:8b: 84:4c:6d:7c:bf:6a:e1:62:af:a6:0d:85:69:8a:44: 15:cd:b3:3a:32:ee:df:ac:e9:eb:74:33:a5:2b:91: 25:40:77:44:08:1d:74:2d:1f:d9:5b:1e:51:bb:6f: 40:73:63:fb:88:5c:1f:8e:2d:aa:ab:12:d5:a6:41: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3 X509v3 Authority Key Identifier: keyid:3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:76:48:a7:b2:b0:3e:a8:3b:d5:48:ca:63:8c:bb:8a:b9:9a: 6c:6a:66:dd:3e:c8:0d:47:4e:1c:c0:23:0a:d0:b5:c6:aa:8f: 52:43:70:ee:ae:39:b5:f2:1f:8b:67:98:c0:3b:4f:8d:f4:08: b9:38:67:1f:66:c9:30:c8:64:2c:e5:e5:61:ef:dc:75:01:cc: 27:01:15:27:e0:07:03:d3:e6:e0:0c:8e:c0:9f:4e:5e:9a:0e: 53:f9:45:85:33:fa:eb:64:4d:58:fc:e8:3f:c8:59:81:17:f7: 3e:10:5b:90:69:8e:72:57:7a:ad:2f:9c:e2:85:fb:4e:fc:98: 5f:a3:d5:11:34:01:4c:a7:02:eb:04:ac:9b:b0:d7:d6:a5:6f: cb:79:b3:ff:a6:c0:95:5e:0d:91:d1:fc:18:f7:92:f0:de:67: 33:7b:69:1b:9a:50:4f:64:76:6d:13:74:d4:06:11:27:1f:6f: 84:23:2a:57:ff:c9:8a:68:ff:6a:8d:dc:1e:18:30:4a:ac:81: ac:ed:c6:76:bb:d1:0a:f6:be:fe:86:7a:98:b8:f1:ee:85:c5: 08:1b:7c:f6:df:0c:57:8b:51:7c:51:cc:17:ab:3c:8d:77:13: 4b:42:b1:72:0c:78:16:74:2f:86:9f:5d:88:da:4a:5d:8c:27: 96:9f:14:18 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Mw OEVGRDU5ODA5QzE5RkExM0FGNDQ2NEYwNzRFRjJEODIzMEZCQTAeFw0yNTExMDYw MDEzMzRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDA3NEQwQUMyQkFFODEx Rjc3ODRDNkJERTI4NUE4M0ExRUYyNTlERTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvP24QxaV/SKUwjdn/kjHH82/DnYdDjxeSGguHpEPYDlskLEo4 UeyJyEln3oJT7s/kJTbiVAq+JA527y7Kurp69P+PrvbVbAWuS1As4wsZkvMpxsaR 0l8Dd+dFJn+5QG7/mat+wX/Qzs3oED1XMcjJ1dZfP5hEtwjTQLmubDEid8ktLaNq hfi6obviFeSlpRz72QljEZXlQw6PaHmtqA5KL8W+Al0i/POKJpokUt6DUgKiiViu w+vdZKK4v9OUmNogi4RMbXy/auFir6YNhWmKRBXNszoy7t+s6et0M6UrkSVAd0QI HXQtH9lbHlG7b0BzY/uIXB+OLaqrEtWmQWnJAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUB00KwrroEfd4TGveKFqDoe8lneMwHwYDVR0jBBgwFoAUPAjv1ZgJwZ+hOvRG TwdO8tgjD7owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Ny9QQWp2MVpnSndaLWhPdlJHVHdkTzh0Z2pEN28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1BBanYxWmdKd1otaE92UkdUd2RPOHRnakQ3by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDcvUEFqdjFaZ0p3Wi1o T3ZSR1R3ZE84dGdqRDdvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAB2SKeysD6oO9VIymOMu4q5mmxqZt0+yA1HThzAIwrQtcaqj1JDcO6uObXy H4tnmMA7T430CLk4Zx9myTDIZCzl5WHv3HUBzCcBFSfgBwPT5uAMjsCfTl6aDlP5 RYUz+utkTVj86D/IWYEX9z4QW5BpjnJXeq0vnOKF+078mF+j1RE0AUynAusErJuw 19alb8t5s/+mwJVeDZHR/Bj3kvDeZzN7aRuaUE9kdm0TdNQGEScfb4QjKlf/yYpo /2qN3B4YMEqsgaztxna70Qr2vv6Gepi48e6FxQgbfPbfDFeLUXxRzBerPI13E0tC sXIMeBZ0L4afXYjaSl2MJ5afFBg= -----END CERTIFICATE-----Generated at Thu Nov 6 01:54:00 2025 by rpki-client