$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft File: jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft (raw, json) Hash identifier: a9Ln3T1+hPHvBgT4JCdHsWPmjthXKC/Hxn0/2dFYoMk= Subject key identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 Authority key identifier: 8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 Certificate issuer: /CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Certificate serial: 0CA7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft Manifest number: 0CA7 Signing time: Wed 05 Nov 2025 10:15:32 +0000 Manifest this update: Wed 05 Nov 2025 10:15:32 +0000 Manifest next update: Wed 05 Nov 2025 16:15:32 +0000 Files and hashes: 1: jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl (hash: +i/DH63UP/wBQhbD+eWekIQFH+j2rFcR3sHiuJCg3uw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Validity Not Before: Nov 5 10:15:32 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=022DFCC8B8C58BCB6CA52C397D4F721AEEFB22F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:36:0a:02:16:fd:27:bb:ee:28:4b:34:c2: c3:be:b8:6d:d8:bc:e4:71:40:84:97:df:29:b5:23: 42:29:fe:6e:ec:3d:a9:f6:98:bb:c9:4c:3f:4f:12: ba:d6:89:77:92:25:5b:fa:af:16:ff:c5:5c:4e:67: 06:5b:a0:64:ac:a8:9b:f7:ea:ef:7a:44:a8:fd:32: 16:b5:d7:28:1f:a2:aa:84:91:15:64:a8:3b:fa:b1: 4f:73:c3:0b:c0:43:8c:a4:16:59:d7:e6:4e:de:7f: c4:e7:b4:db:f5:7f:c5:e9:38:74:d9:cb:92:d3:1a: e0:3e:a2:9f:66:5d:91:1c:a4:91:bf:07:08:a6:42: ab:41:44:05:eb:5a:14:c2:dd:80:78:38:50:d5:d6: 90:ec:e5:87:2c:8b:b3:c7:44:eb:e4:45:e5:6d:b7: d2:c2:aa:f9:08:0a:2c:43:32:27:f2:93:77:dd:61: 17:ec:3e:df:bd:50:ae:a5:19:4a:5a:a5:0b:f9:fa: e4:6b:88:2e:92:02:be:8d:22:6c:98:9b:ff:1e:9f: 53:07:b7:32:91:14:d1:8e:13:fb:e8:06:16:8e:d7: 45:58:d6:39:57:3e:ba:17:e1:ad:73:ac:85:08:9b: c1:00:68:ff:9c:2b:2b:09:89:11:cc:c3:fe:b7:78: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 X509v3 Authority Key Identifier: keyid:8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:1a:b4:fa:db:e7:f9:70:8c:17:69:1a:b6:e4:82:48:c7:9c: f1:88:db:be:72:cf:a1:43:98:91:0f:0f:19:75:45:b6:fe:41: 4a:ee:a4:91:87:89:90:43:1c:bf:aa:27:52:d2:f0:db:2a:63: ce:9a:f0:c7:b3:e0:2a:cc:bb:9c:04:28:f0:ab:5f:83:59:97: 2a:f2:18:48:b1:81:9e:46:f8:c0:98:d1:58:46:47:7f:fc:7f: 48:1c:66:3a:81:50:5d:4b:0d:17:9e:05:04:84:1d:f9:75:a8: 84:88:a7:4a:b8:69:26:2c:62:f4:f6:3a:1f:3f:e4:d1:39:cb: d2:fc:dd:84:0c:e6:f1:98:0a:5e:f7:bb:3a:64:61:8b:eb:d1: e2:d2:a9:99:a8:2b:af:b2:b7:1f:87:1c:6a:ca:b4:8f:56:80: f2:1d:77:0e:8d:e5:ea:64:1b:59:c1:dc:2a:97:bb:fa:42:1b: 67:14:04:9b:27:30:38:4e:03:b4:cb:ca:63:31:a3:97:76:fa: 98:47:bf:44:04:bd:31:87:98:9d:cc:06:fe:75:0b:87:92:f6: e4:d0:52:c1:3c:cb:ee:5e:2f:e7:b9:8c:49:94:bf:99:95:e6: d4:28:7e:4d:3f:76:7a:38:5c:e3:52:ca:fd:ce:32:60:b9:00: ca:92:ce:af -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQw QUFEQzM1MTg1MDY1RDg3QkM0RjIwRDhDNEE2Qjg4OTMxQThCOTAeFw0yNTExMDUx MDE1MzJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDAyMkRGQ0M4QjhDNThC Q0I2Q0E1MkMzOTdENEY3MjFBRUVGQjIyRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEMjYKAhb9J7vuKEs0wsO+uG3YvORxQISX3ym1I0Ip/m7sPan2 mLvJTD9PErrWiXeSJVv6rxb/xVxOZwZboGSsqJv36u96RKj9Mha11ygfoqqEkRVk qDv6sU9zwwvAQ4ykFlnX5k7ef8TntNv1f8XpOHTZy5LTGuA+op9mXZEcpJG/Bwim QqtBRAXrWhTC3YB4OFDV1pDs5Ycsi7PHROvkReVtt9LCqvkICixDMifyk3fdYRfs Pt+9UK6lGUpapQv5+uRriC6SAr6NImyYm/8en1MHtzKRFNGOE/voBhaO10VY1jlX ProX4a1zrIUIm8EAaP+cKysJiRHMw/63eIfjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAi38yLjFi8tspSw5fU9yGu77IvMwHwYDVR0jBBgwFoAUjQqtw1GFBl2HvE8g 2MSmuIkxqLkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OC9qUXF0dzFHRkJsMkh2RThnMk1TbXVJa3hxTGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pRcXR3MUdGQmwySHZFOGcyTVNtdUlreHFMay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTgvalFxdHcxR0ZCbDJI dkU4ZzJNU211SWt4cUxrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFMatPrb5/lwjBdpGrbkgkjHnPGI275yz6FDmJEPDxl1Rbb+QUrupJGHiZBD HL+qJ1LS8NsqY86a8Mez4CrMu5wEKPCrX4NZlyryGEixgZ5G+MCY0VhGR3/8f0gc ZjqBUF1LDReeBQSEHfl1qISIp0q4aSYsYvT2Oh8/5NE5y9L83YQM5vGYCl73uzpk YYvr0eLSqZmoK6+ytx+HHGrKtI9WgPIddw6N5epkG1nB3CqXu/pCG2cUBJsnMDhO A7TLymMxo5d2+phHv0QEvTGHmJ3MBv51C4eS9uTQUsE8y+5eL+e5jEmUv5mV5tQo fk0/dno4XONSyv3OMmC5AMqSzq8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:21 2025 by rpki-client