$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft File: RA0YjgN6sufC2lviztymGqt4xaM.mft (raw, json) Hash identifier: doe8dVjgnexB/ucyjJQ2UQ/ssfLyDX4PVqfoH9nsDvc= Subject key identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 Authority key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 Certificate issuer: /CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Certificate serial: 0865 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft Manifest number: 0865 Signing time: Wed 05 Nov 2025 15:12:23 +0000 Manifest this update: Wed 05 Nov 2025 15:12:23 +0000 Manifest next update: Wed 05 Nov 2025 21:12:23 +0000 Files and hashes: 1: RA0YjgN6sufC2lviztymGqt4xaM.crl (hash: MdTNt7+XqTjZyW+930I+RHry/3DYlcx5ZyepNQsAHNA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Validity Not Before: Nov 5 15:12:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0FCB1E5BC5AB234106DA1AB44B2167950AE70EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:73:c5:fd:71:2e:83:56:1c:c4:e3:44:ee: 52:a2:b7:d4:c7:a3:4b:5b:ee:93:67:3e:7d:74:96: 75:e3:a5:67:a5:76:31:5e:b6:fe:38:03:35:34:ec: b0:a6:6a:17:cf:03:b3:fc:12:23:43:ad:c9:48:92: 53:b8:4d:05:d9:b3:a9:b6:e0:a6:c6:56:81:18:88: 2c:b5:9b:9f:95:09:31:06:1c:4d:8d:9e:75:d8:22: 92:43:f4:f0:11:11:83:fd:5e:c8:d6:29:8d:48:9c: 36:a6:8b:69:ea:8f:e4:3f:f1:79:f6:c0:dd:77:60: 10:bb:c3:c1:9c:f9:88:c6:f2:d2:9a:2e:fb:6a:86: a8:60:e5:c6:a0:16:e1:54:37:c9:00:e7:d7:19:c8: 40:bc:8f:4a:94:5a:43:a8:e0:2f:fc:e9:12:13:6c: cf:a9:e1:03:ef:47:69:c4:58:20:48:c2:15:d2:39: d2:30:f8:2f:25:78:85:a3:74:ac:e3:03:a2:6a:14: 33:94:90:48:cb:81:89:41:34:53:71:5c:5f:99:1b: 29:48:5d:cd:23:18:8c:e4:62:d5:06:c1:56:d4:32: 6d:40:1b:24:2d:22:f4:0e:82:76:02:31:dd:f5:6b: 8a:95:2a:84:55:90:32:fb:18:9d:27:7d:4b:0d:eb: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CB:1E:5B:C5:AB:23:41:06:DA:1A:B4:4B:21:67:95:0A:E7:0E:C7 X509v3 Authority Key Identifier: keyid:44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0f:85:c6:8d:49:82:c7:52:30:b7:69:b3:6e:f6:8b:36:f2: 94:b6:83:5e:a1:ba:84:a5:52:1d:72:a9:df:d9:99:2e:43:c2: fb:c0:38:69:5b:2b:db:e5:cb:fc:b5:9b:8a:cf:f9:4e:95:16: b4:5d:56:da:ed:f4:d0:85:58:fe:fc:95:08:cc:a1:c9:15:b4: 48:d1:da:40:0a:76:e7:04:da:6f:21:bb:9b:09:40:66:f7:03: eb:8d:b3:57:96:d5:c9:34:6b:63:42:b2:dc:a5:03:d7:0d:e4: 80:7a:dc:88:cb:88:99:d4:90:09:4b:cf:a0:e3:f6:af:08:f0: 4e:c1:c6:f3:bf:1e:d9:cd:d7:da:8e:e3:27:83:00:02:c6:da: b7:7d:c2:e3:80:fe:14:e7:1b:4b:62:25:b6:61:0d:70:93:18: 1e:d5:10:0d:b9:b5:07:8d:a2:54:c5:7a:d5:47:51:6f:ec:b0: 6f:c6:9a:c4:18:79:e6:0c:83:61:3d:05:0e:8f:e0:fc:16:eb: e8:02:30:4c:3a:c4:83:de:ef:d0:0a:ec:bd:b7:e4:5f:82:e0: 48:f8:aa:cc:29:f8:ba:87:65:cb:71:19:f6:27:ba:6a:25:34: 11:d9:c7:6b:b6:93:73:50:61:5a:dd:e4:4b:e9:64:01:b4:05: 98:aa:e1:f1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQw RDE4OEUwMzdBQjJFN0MyREE1QkUyQ0VEQ0E2MUFBQjc4QzVBMzAeFw0yNTExMDUx NTEyMjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBGQ0IxRTVCQzVBQjIz NDEwNkRBMUFCNDRCMjE2Nzk1MEFFNzBFQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN33PF/XEug1YcxONE7lKit9THo0tb7pNnPn10lnXjpWeldjFe tv44AzU07LCmahfPA7P8EiNDrclIklO4TQXZs6m24KbGVoEYiCy1m5+VCTEGHE2N nnXYIpJD9PAREYP9XsjWKY1InDami2nqj+Q/8Xn2wN13YBC7w8Gc+YjG8tKaLvtq hqhg5cagFuFUN8kA59cZyEC8j0qUWkOo4C/86RITbM+p4QPvR2nEWCBIwhXSOdIw +C8leIWjdKzjA6JqFDOUkEjLgYlBNFNxXF+ZGylIXc0jGIzkYtUGwVbUMm1AGyQt IvQOgnYCMd31a4qVKoRVkDL7GJ0nfUsN6wB3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUD8seW8WrI0EG2hq0SyFnlQrnDscwHwYDVR0jBBgwFoAURA0YjgN6sufC2lvi ztymGqt4xaMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My9SQTBZamdONnN1ZkMybHZpenR5bUdxdDR4YU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JBMFlqZ042c3VmQzJsdml6dHltR3F0NHhhTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTMvUkEwWWpnTjZzdWZD Mmx2aXp0eW1HcXQ0eGFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF0PhcaNSYLHUjC3abNu9os28pS2g16huoSlUh1yqd/ZmS5DwvvAOGlbK9vl y/y1m4rP+U6VFrRdVtrt9NCFWP78lQjMockVtEjR2kAKducE2m8hu5sJQGb3A+uN s1eW1ck0a2NCstylA9cN5IB63IjLiJnUkAlLz6Dj9q8I8E7BxvO/HtnN19qO4yeD AALG2rd9wuOA/hTnG0tiJbZhDXCTGB7VEA25tQeNolTFetVHUW/ssG/GmsQYeeYM g2E9BQ6P4PwW6+gCMEw6xIPe79AK7L235F+C4Ej4qswp+LqHZctxGfYnumolNBHZ x2u2k3NQYVrd5EvpZAG0BZiq4fE= -----END CERTIFICATE-----Generated at Wed Nov 5 19:26:34 2025 by rpki-client