$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft File: Abqns7epjYr5LS2VVnUO4m3D7pk.mft (raw, json) Hash identifier: qVfczOyQQsUj/3XT4/+1FX9ahKle6hFiKt81XRtH2CQ= Subject key identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 Authority key identifier: 01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 Certificate issuer: /CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Certificate serial: 0343 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft Manifest number: 0343 Signing time: Wed 05 Nov 2025 10:11:04 +0000 Manifest this update: Wed 05 Nov 2025 10:11:04 +0000 Manifest next update: Wed 05 Nov 2025 16:11:04 +0000 Files and hashes: 1: Abqns7epjYr5LS2VVnUO4m3D7pk.crl (hash: Xr+2fXi71SR5biU9JMd3m9w+I7tqssKvcIX5fdN0Q4s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99 Validity Not Before: Nov 5 10:11:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=67E18440F931EBE2EE9A7C99A430455C87EFACE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:f8:b1:c8:11:df:fb:17:31:b3:15:a1:51: dd:64:77:f7:47:83:44:72:2e:46:82:30:e5:80:1e: 3b:88:bd:16:ad:12:9f:38:0e:f8:53:3c:4c:e9:3c: 1d:9e:20:08:ed:81:15:e3:b8:1f:55:c3:e6:2c:61: 9e:2a:70:da:47:eb:ce:eb:e0:89:6a:2a:5c:51:5d: 20:b4:08:47:69:e7:0b:1f:a8:b8:d2:1c:5e:b8:05: 7c:0e:3d:92:9e:1e:89:63:53:d6:81:ca:58:5c:9f: f1:37:ce:59:eb:73:36:0e:db:8f:f1:45:29:54:d6: 8c:08:25:34:c1:88:0b:6b:d2:c0:3a:a7:7b:ba:e3: fb:ce:27:38:98:8a:6d:5f:56:89:59:5c:8e:1f:2d: 33:ed:9b:ea:ce:9c:36:fb:76:a8:c1:ea:80:4f:8f: 4e:a2:75:be:11:05:7b:91:fa:cc:14:85:b7:2d:a7: 22:8f:7d:cf:9b:fa:26:5a:48:95:8b:62:4e:a3:a6: 31:3c:0f:60:09:51:14:84:e2:21:9d:6c:7d:7d:1c: aa:42:61:e5:e2:10:11:9a:46:4b:8e:b6:e1:d6:16: 6e:39:f7:d4:64:8d:a2:fa:51:b5:45:82:1c:64:05: cb:2d:62:eb:cd:19:76:86:91:c4:8e:44:c4:6e:26: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9 X509v3 Authority Key Identifier: keyid:01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cb:6a:17:50:31:77:43:00:12:ef:12:c0:9e:f8:75:b1:99: 95:6e:1a:c4:d8:e6:0a:c3:7a:ea:6a:30:51:fa:15:35:d1:19: 8a:99:48:ae:a4:21:85:37:7e:36:b3:3a:d0:01:73:4f:98:a6: 0f:11:3f:5d:12:b0:ff:11:18:2d:c7:13:af:c3:13:67:0b:4f: 56:24:39:ee:41:b1:2f:03:8f:c0:e5:7a:f6:2b:79:2c:29:c5: 9c:39:ce:6f:95:e4:ca:b3:0e:bc:77:c4:77:46:0b:66:6d:9f: 42:eb:27:08:4b:e5:34:4b:2e:88:3a:af:3e:45:50:2e:b7:7b: ae:a0:d3:d4:bf:2a:33:57:c1:16:d2:9d:5c:50:b1:bd:04:8d: 2a:f6:c1:e0:90:40:66:80:52:7f:7d:de:c4:2b:14:8b:f9:1d: 7c:85:1c:b7:fb:f4:68:57:f0:52:a6:4a:c5:eb:08:71:a4:21: d8:46:57:54:44:74:59:f1:a2:28:6e:ff:da:84:00:89:03:5c: 63:f7:de:7f:52:9a:93:a8:23:eb:2a:71:66:f9:d9:79:e2:ff: d5:25:24:c5:af:00:97:8d:96:e8:1e:70:81:6f:92:b9:9f:26: 1e:0d:88:33:8e:95:82:5b:eb:98:24:9f:01:f8:72:bb:4f:53: 95:4d:85:d2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFC QUE3QjNCN0E5OEQ4QUY5MkQyRDk1NTY3NTBFRTI2REMzRUU5OTAeFw0yNTExMDUx MDExMDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY3RTE4NDQwRjkzMUVC RTJFRTlBN0M5OUE0MzA0NTVDODdFRkFDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRqfixyBHf+xcxsxWhUd1kd/dHg0RyLkaCMOWAHjuIvRatEp84 DvhTPEzpPB2eIAjtgRXjuB9Vw+YsYZ4qcNpH687r4IlqKlxRXSC0CEdp5wsfqLjS HF64BXwOPZKeHoljU9aBylhcn/E3zlnrczYO24/xRSlU1owIJTTBiAtr0sA6p3u6 4/vOJziYim1fVolZXI4fLTPtm+rOnDb7dqjB6oBPj06idb4RBXuR+swUhbctpyKP fc+b+iZaSJWLYk6jpjE8D2AJURSE4iGdbH19HKpCYeXiEBGaRkuOtuHWFm4599Rk jaL6UbVFghxkBcstYuvNGXaGkcSORMRuJvDrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ+GEQPkx6+LumnyZpDBFXIfvrOkwHwYDVR0jBBgwFoAUAbqns7epjYr5LS2V VnUO4m3D7pkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 Mi9BYnFuczdlcGpZcjVMUzJWVm5VTzRtM0Q3cGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FicW5zN2VwallyNUxTMlZWblVPNG0zRDdway5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzIvQWJxbnM3ZXBqWXI1 TFMyVlZuVU80bTNEN3BrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA/LahdQMXdDABLvEsCe+HWxmZVuGsTY5grDeupqMFH6FTXRGYqZSK6kIYU3 fjazOtABc0+Ypg8RP10SsP8RGC3HE6/DE2cLT1YkOe5BsS8Dj8DlevYreSwpxZw5 zm+V5MqzDrx3xHdGC2Ztn0LrJwhL5TRLLog6rz5FUC63e66g09S/KjNXwRbSnVxQ sb0EjSr2weCQQGaAUn993sQrFIv5HXyFHLf79GhX8FKmSsXrCHGkIdhGV1REdFnx oihu/9qEAIkDXGP33n9SmpOoI+sqcWb52Xni/9UlJMWvAJeNlugecIFvkrmfJh4N iDOOlYJb65gknwH4crtPU5VNhdI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:35:13 2025 by rpki-client