$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft File: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft (raw, json) Hash identifier: bKWpbaU3oAhlTdsAxvS7m/2hN66EsC6omL1WdU4F+SY= Subject key identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 Authority key identifier: 1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA Certificate issuer: /CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Certificate serial: 0780 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft Manifest number: 0780 Signing time: Wed 05 Nov 2025 15:15:04 +0000 Manifest this update: Wed 05 Nov 2025 15:15:04 +0000 Manifest next update: Wed 05 Nov 2025 21:15:04 +0000 Files and hashes: 1: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl (hash: LPME2XvoUTMxTO5FNQoVYWVQhQlFfhGt2Pnz9f3wQP0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Validity Not Before: Nov 5 15:15:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BF7821F78FFC418D66ABC2C904523A53F50E1AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:f6:2f:ee:1a:47:a8:a0:29:f3:cf:46:70: 8f:f3:f1:6a:c8:f5:d0:a5:56:7d:e1:dc:f9:f8:60: 61:a1:07:60:57:c0:44:0b:ec:63:1e:9b:05:27:4e: 9f:de:07:ae:49:55:1d:20:94:37:27:c2:dc:e0:80: 30:b2:af:71:d5:69:62:b3:e0:1d:d8:e0:5d:86:ef: 5c:aa:fe:bb:7c:7a:d5:63:33:89:d9:49:28:7a:4f: c5:fb:91:b2:48:6d:7b:09:e0:dd:a1:23:d1:92:f6: 21:e7:6e:d6:92:5e:71:e6:0b:e2:35:80:dc:c8:a3: 51:ad:06:4f:0d:51:00:d9:6f:eb:04:82:ec:a4:07: e5:af:06:44:95:6d:12:68:20:5d:f6:1f:00:83:11: 65:25:e0:01:ce:0d:ad:cc:28:7e:d2:8d:da:62:61: 89:ba:7f:b3:e6:09:6e:03:f0:49:67:b6:5c:68:01: c7:54:40:58:58:b1:4d:28:64:27:38:56:f8:f4:f9: c9:d3:ea:64:e9:2d:f1:ac:4c:27:84:b4:e1:40:0a: df:39:65:80:3a:1f:ca:84:bc:46:55:fd:89:2e:97: 27:a5:4a:ff:3d:99:8e:b7:0a:e5:78:0f:2c:d9:12: 3f:c1:a8:c5:14:cd:24:f1:a3:60:50:08:e0:09:19: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 X509v3 Authority Key Identifier: keyid:1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:43:2d:4b:65:b0:7f:25:eb:47:52:5f:fe:13:fa:ae:08:26: bd:5c:70:6f:b8:9a:0b:1d:42:83:32:ef:83:a7:9e:c1:6b:ee: fb:aa:60:bd:fd:99:9c:69:f7:b6:6e:18:6c:f0:2b:94:c9:ae: 60:e4:78:f3:59:2f:a3:39:85:41:5c:7f:75:5e:9e:88:d9:d5: cb:15:3e:be:41:b0:f8:f1:a6:7d:41:cb:85:ae:01:6d:d9:28: f9:33:32:9a:4b:ff:32:bc:d2:a7:30:ed:ac:07:7c:25:b6:a9: 55:b3:f5:1f:1c:4f:1f:42:5f:67:1f:60:7f:03:c5:89:bf:ca: 7f:50:e6:e4:6d:51:46:7a:46:4d:a4:65:98:6a:60:aa:9b:a1: ab:29:a5:15:6c:30:66:b8:b0:38:81:0f:19:45:bd:f7:c3:18: 66:b3:62:59:03:ba:d2:66:34:e8:d6:f2:cd:78:11:02:a6:c3: 81:6e:87:f1:19:a5:53:41:6a:3b:05:20:d2:b4:17:32:61:87: 8a:fe:b6:0d:bb:36:24:3d:94:89:de:18:bd:39:65:f8:22:93: 0d:39:01:26:f9:fd:e8:e3:3c:cf:b8:21:9a:9d:95:38:78:3c: 2c:c1:20:b4:5e:dc:5c:cc:5d:9d:98:87:84:9a:f1:03:23:c7: 6d:c8:09:89 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFD REMyNkM0RTBGNjcwREZFMEJBNjNDMkYyMzRERTQ2RjYyMkJBQTAeFw0yNTExMDUx NTE1MDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJGNzgyMUY3OEZGQzQx OEQ2NkFCQzJDOTA0NTIzQTUzRjUwRTFBQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpjvYv7hpHqKAp889GcI/z8WrI9dClVn3h3Pn4YGGhB2BXwEQL 7GMemwUnTp/eB65JVR0glDcnwtzggDCyr3HVaWKz4B3Y4F2G71yq/rt8etVjM4nZ SSh6T8X7kbJIbXsJ4N2hI9GS9iHnbtaSXnHmC+I1gNzIo1GtBk8NUQDZb+sEguyk B+WvBkSVbRJoIF32HwCDEWUl4AHODa3MKH7SjdpiYYm6f7PmCW4D8ElntlxoAcdU QFhYsU0oZCc4Vvj0+cnT6mTpLfGsTCeEtOFACt85ZYA6H8qEvEZV/YkulyelSv89 mY63CuV4DyzZEj/BqMUUzSTxo2BQCOAJGf1BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUv3gh94/8QY1mq8LJBFI6U/UOGrcwHwYDVR0jBBgwFoAUGs3CbE4PZw3+C6Y8 LyNN5G9iK6owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Mi9HczNDYkU0UFp3My1DNlk4THlOTjVHOWlLNm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dzM0NiRTRQWnczLUM2WThMeU5ONUc5aUs2by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjIvR3MzQ2JFNFBadzMt QzZZOEx5Tk41RzlpSzZvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKVDLUtlsH8l60dSX/4T+q4IJr1ccG+4mgsdQoMy74OnnsFr7vuqYL39mZxp 97ZuGGzwK5TJrmDkePNZL6M5hUFcf3VenojZ1csVPr5BsPjxpn1By4WuAW3ZKPkz MppL/zK80qcw7awHfCW2qVWz9R8cTx9CX2cfYH8DxYm/yn9Q5uRtUUZ6Rk2kZZhq YKqboasppRVsMGa4sDiBDxlFvffDGGazYlkDutJmNOjW8s14EQKmw4Fuh/EZpVNB ajsFINK0FzJhh4r+tg27NiQ9lIneGL05Zfgikw05ASb5/ejjPM+4IZqdlTh4PCzB ILRe3FzMXZ2Yh4Sa8QMjx23ICYk= -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:07 2025 by rpki-client