$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft File: fetUO9g1VViFIfIivviJGRdeExQ.mft (raw, json) Hash identifier: /1f+KUDkv5dniWajS7zzvSj/hyYwB7MTFtZASFNS1cs= Subject key identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 Authority key identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 Certificate issuer: /CN=7DEB543BD83555588521F222BEF88919175E1314 Certificate serial: 076C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft Manifest number: 076C Signing time: Wed 05 Nov 2025 10:12:23 +0000 Manifest this update: Wed 05 Nov 2025 10:12:23 +0000 Manifest next update: Wed 05 Nov 2025 16:12:23 +0000 Files and hashes: 1: fetUO9g1VViFIfIivviJGRdeExQ.crl (hash: XKbfj2kvEs3Wd1SyHztT+CUjRYs0SOm/SsaGye8NiSg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DEB543BD83555588521F222BEF88919175E1314 Validity Not Before: Nov 5 10:12:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2B3328670B6810E8C39E2B643D2EE66F42C75510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7d:a3:8a:82:7f:e4:f3:db:3b:18:f0:4b:f3: 87:2a:48:0d:61:80:97:c2:87:93:94:44:b8:36:0d: 3d:c3:c9:35:7d:39:09:51:d8:c6:6c:6a:a7:45:59: 7f:86:44:7e:e5:af:88:89:d4:c9:99:cf:b7:5a:74: 8a:d4:91:3b:c7:3a:e6:ba:95:4d:0d:d5:0d:b7:5c: 1d:81:5c:db:33:3b:07:59:b4:eb:b5:37:38:31:24: 3f:31:af:63:ba:71:7e:c5:11:a7:41:47:15:83:c7: 62:01:a0:fb:7c:6d:c1:5f:67:11:e4:9b:38:df:89: c9:9b:07:66:dc:7b:72:ff:d2:44:26:db:24:f2:8d: cc:44:57:58:d5:95:bd:fb:12:73:a0:ca:65:88:ee: a2:13:a6:4c:68:9d:4a:07:e6:6d:40:5d:e8:14:66: 5e:12:65:5c:49:44:80:1d:f1:3d:a6:37:a3:56:dc: 6d:f7:dd:ef:6c:49:34:c3:0f:be:30:d1:cb:0c:12: 79:2c:c6:71:2b:9d:46:7e:09:ab:7d:55:1d:27:b0: dd:93:58:d3:63:c6:5a:58:b6:ea:e0:b3:15:0d:35: 57:b3:71:3d:a3:a3:5b:7e:f3:c9:86:ec:63:0e:9c: 5a:71:42:5b:3e:c9:3c:b2:00:2c:b3:91:f8:92:84: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:28:67:0B:68:10:E8:C3:9E:2B:64:3D:2E:E6:6F:42:C7:55:10 X509v3 Authority Key Identifier: keyid:7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:01:2a:c8:ce:bb:25:54:8a:97:43:93:10:ca:ce:3d:55:6e: 32:ec:c8:c0:e0:58:17:e6:24:8f:47:ef:82:85:69:3a:44:9b: cd:c0:cb:37:ee:75:e0:9b:3b:cb:0d:5b:cf:9b:7e:9c:eb:bf: b1:33:10:8b:61:9f:24:3f:bd:10:88:7b:d8:72:f8:1c:4a:e8: 9f:f5:48:c8:09:43:29:5b:b3:88:41:d5:b6:5d:46:9f:1f:ca: 41:7e:04:2a:f8:2f:91:95:5a:b5:5e:cf:f4:3a:e6:d5:89:b9: 29:0c:9d:d4:e8:d7:f8:26:d0:4a:af:8f:76:9a:a1:3f:7e:00: 48:f6:f3:ce:bc:56:25:f9:56:06:c2:6e:24:73:6e:fd:fe:e7: 9e:94:f0:54:3c:c2:d9:f1:6d:47:da:3b:45:99:4d:a5:e5:2b: 49:10:7c:b6:35:a6:0d:f6:6d:73:5b:3b:31:73:1a:91:b7:94: 7d:93:18:40:85:2b:da:0b:6a:3d:bb:62:08:55:cc:8f:bf:e9: bf:0b:1e:cd:52:d4:96:55:91:0a:8a:2c:ea:89:00:19:93:b6: b8:7f:31:db:ca:f8:fa:17:b3:6f:a6:d6:49:ff:d4:bb:d8:ce: a4:eb:d6:4b:62:58:e7:de:eb:ac:11:54:11:63:c3:7a:4c:9b: c5:65:0b:54 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0RF QjU0M0JEODM1NTU1ODg1MjFGMjIyQkVGODg5MTkxNzVFMTMxNDAeFw0yNTExMDUx MDEyMjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDJCMzMyODY3MEI2ODEw RThDMzlFMkI2NDNEMkVFNjZGNDJDNzU1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsfaOKgn/k89s7GPBL84cqSA1hgJfCh5OURLg2DT3DyTV9OQlR 2MZsaqdFWX+GRH7lr4iJ1MmZz7dadIrUkTvHOua6lU0N1Q23XB2BXNszOwdZtOu1 NzgxJD8xr2O6cX7FEadBRxWDx2IBoPt8bcFfZxHkmzjficmbB2bce3L/0kQm2yTy jcxEV1jVlb37EnOgymWI7qITpkxonUoH5m1AXegUZl4SZVxJRIAd8T2mN6NW3G33 3e9sSTTDD74w0csMEnksxnErnUZ+Cat9VR0nsN2TWNNjxlpYturgsxUNNVezcT2j o1t+88mG7GMOnFpxQls+yTyyACyzkfiShHknAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKzMoZwtoEOjDnitkPS7mb0LHVRAwHwYDVR0jBBgwFoAUfetUO9g1VViFIfIi vviJGRdeExQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy My9mZXRVTzlnMVZWaUZJZklpdnZpSkdSZGVFeFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZldFVPOWcxVlZpRklmSWl2dmlKR1JkZUV4US5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjMvZmV0VU85ZzFWVmlG SWZJaXZ2aUpHUmRlRXhRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB0BKsjOuyVUipdDkxDKzj1VbjLsyMDgWBfmJI9H74KFaTpEm83AyzfudeCb O8sNW8+bfpzrv7EzEIthnyQ/vRCIe9hy+BxK6J/1SMgJQylbs4hB1bZdRp8fykF+ BCr4L5GVWrVez/Q65tWJuSkMndTo1/gm0Eqvj3aaoT9+AEj28868ViX5VgbCbiRz bv3+556U8FQ8wtnxbUfaO0WZTaXlK0kQfLY1pg32bXNbOzFzGpG3lH2TGECFK9oL aj27YghVzI+/6b8LHs1S1JZVkQqKLOqJABmTtrh/MdvK+PoXs2+m1kn/1LvYzqTr 1ktiWOfe66wRVBFjw3pMm8VlC1Q= -----END CERTIFICATE-----Generated at Wed Nov 5 14:35:28 2025 by rpki-client