$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3375/KI3zDIOYU1kRgzgoD9k2CAGKKs4.mft File: KI3zDIOYU1kRgzgoD9k2CAGKKs4.mft (raw, json) Hash identifier: q3S8aAmzByXTl7KSg9KqyiKoXBWPQN+uTQ3vnaqWFeM= Subject key identifier: 5D:68:97:B2:87:04:4F:57:38:DA:D6:C7:AE:A1:1B:C3:21:15:51:93 Authority key identifier: 28:8D:F3:0C:83:98:53:59:11:83:38:28:0F:D9:36:08:01:8A:2A:CE Certificate issuer: /CN=288DF30C83985359118338280FD93608018A2ACE Certificate serial: 02CD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KI3zDIOYU1kRgzgoD9k2CAGKKs4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/KI3zDIOYU1kRgzgoD9k2CAGKKs4.mft Manifest number: 02CD Signing time: Wed 05 Nov 2025 12:41:48 +0000 Manifest this update: Wed 05 Nov 2025 12:41:48 +0000 Manifest next update: Wed 05 Nov 2025 18:41:48 +0000 Files and hashes: 1: KI3zDIOYU1kRgzgoD9k2CAGKKs4.crl (hash: Y1PUTcHUM9fgoP08rCxD8P3yN1JDQ1o8N1N5l0fVVqA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/KI3zDIOYU1kRgzgoD9k2CAGKKs4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/KI3zDIOYU1kRgzgoD9k2CAGKKs4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KI3zDIOYU1kRgzgoD9k2CAGKKs4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=288DF30C83985359118338280FD93608018A2ACE Validity Not Before: Nov 5 12:41:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5D6897B287044F5738DAD6C7AEA11BC321155193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:ae:2d:99:dc:4b:95:97:7d:57:41:ad:a1: 15:ed:65:43:03:a6:1c:ec:63:de:e9:46:2e:5c:ca: 65:34:08:cb:5b:cd:27:95:fb:8f:56:b8:d8:25:bf: 6c:9e:d8:12:c9:c1:91:03:31:d1:46:71:90:fd:74: f4:2c:13:eb:c5:b9:00:47:69:fa:99:43:cc:82:53: 59:6d:24:62:b3:55:4e:2a:21:57:06:92:75:ca:ea: 1f:e3:17:5a:84:73:e8:23:1b:b1:23:69:82:c6:f4: 0d:00:a8:67:0c:5d:e3:2f:b9:39:21:e3:5c:66:81: 75:ac:05:6a:29:d8:82:a6:9c:9e:40:2d:73:34:8f: e1:32:c3:b7:75:0a:1e:80:cb:73:fd:89:79:e3:a3: 0d:56:c6:30:7a:c4:e8:04:e6:93:9e:28:f5:75:97: 69:f1:70:96:de:c8:9d:fb:2d:f7:e3:92:d9:9a:7e: 79:9c:1b:1d:03:87:7a:31:da:34:4f:6f:c0:e0:77: 39:ee:51:23:64:f1:13:b6:8b:72:0d:a7:63:ac:86: 47:13:eb:66:74:c1:cb:ac:11:d0:86:f4:22:69:8c: 94:24:55:a3:78:6a:57:c9:14:be:af:5e:4f:2e:74: 1e:6e:ca:9b:83:fc:bd:e0:6b:be:51:61:4e:d8:b2: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:68:97:B2:87:04:4F:57:38:DA:D6:C7:AE:A1:1B:C3:21:15:51:93 X509v3 Authority Key Identifier: keyid:28:8D:F3:0C:83:98:53:59:11:83:38:28:0F:D9:36:08:01:8A:2A:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/KI3zDIOYU1kRgzgoD9k2CAGKKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KI3zDIOYU1kRgzgoD9k2CAGKKs4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/KI3zDIOYU1kRgzgoD9k2CAGKKs4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f7:27:9a:28:ca:6f:b9:32:58:a6:2d:e7:96:58:97:25:db: d3:35:37:ad:10:1b:ba:a9:6f:a3:47:f4:74:72:97:f7:14:65: c5:4f:d2:07:03:96:36:92:70:db:cd:5e:c5:e2:ac:df:f6:1b: a2:45:17:ce:e1:65:f8:1d:9d:28:da:2e:d3:23:9e:35:c8:d8: 9e:aa:5b:78:62:3c:a9:a3:cc:0f:bc:ae:64:1a:55:ba:74:4a: 41:6b:7e:f8:c9:0f:34:2a:f0:45:b8:cb:3b:23:14:93:2a:3c: c7:5f:2c:bf:14:a2:6c:8e:4f:c4:b0:58:b2:fe:5e:fb:dd:5f: c4:39:53:e6:52:60:e4:d1:dd:d3:4b:0d:39:df:96:bf:6c:8d: 19:3b:c7:b2:99:f9:1c:d7:b4:fe:ca:8a:a0:4b:e2:1c:92:9a: f7:f6:25:41:84:e6:d6:74:2d:a5:2f:98:35:aa:3e:61:a5:83: 54:4e:7b:f3:36:eb:f9:79:ee:42:20:17:45:c9:f7:9d:8d:eb: a1:54:91:0e:cf:fb:bc:c6:43:e5:80:e7:50:8d:51:c2:ca:f6: 57:a4:25:b2:c3:35:37:3f:a7:56:34:7d:9f:ca:23:9b:ed:ec: 24:19:93:8e:b7:cf:4f:bf:e2:65:39:86:1d:67:e5:bf:be:72: de:57:15:19 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg4 REYzMEM4Mzk4NTM1OTExODMzODI4MEZEOTM2MDgwMThBMkFDRTAeFw0yNTExMDUx MjQxNDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDVENjg5N0IyODcwNDRG NTczOERBRDZDN0FFQTExQkMzMjExNTUxOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXDa4tmdxLlZd9V0GtoRXtZUMDphzsY97pRi5cymU0CMtbzSeV +49WuNglv2ye2BLJwZEDMdFGcZD9dPQsE+vFuQBHafqZQ8yCU1ltJGKzVU4qIVcG knXK6h/jF1qEc+gjG7EjaYLG9A0AqGcMXeMvuTkh41xmgXWsBWop2IKmnJ5ALXM0 j+Eyw7d1Ch6Ay3P9iXnjow1WxjB6xOgE5pOeKPV1l2nxcJbeyJ37Lffjktmafnmc Gx0Dh3ox2jRPb8DgdznuUSNk8RO2i3INp2OshkcT62Z0wcusEdCG9CJpjJQkVaN4 alfJFL6vXk8udB5uypuD/L3ga75RYU7Ysu+PAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXWiXsocET1c42tbHrqEbwyEVUZMwHwYDVR0jBBgwFoAUKI3zDIOYU1kRgzgo D9k2CAGKKs4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 NS9LSTN6RElPWVUxa1JnemdvRDlrMkNBR0tLczQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0tJM3pESU9ZVTFrUmd6Z29EOWsyQ0FHS0tzNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzUvS0kzekRJT1lVMWtS Z3pnb0Q5azJDQUdLS3M0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADj3J5ooym+5MlimLeeWWJcl29M1N60QG7qpb6NH9HRyl/cUZcVP0gcDljaS cNvNXsXirN/2G6JFF87hZfgdnSjaLtMjnjXI2J6qW3hiPKmjzA+8rmQaVbp0SkFr fvjJDzQq8EW4yzsjFJMqPMdfLL8UomyOT8SwWLL+XvvdX8Q5U+ZSYOTR3dNLDTnf lr9sjRk7x7KZ+RzXtP7KiqBL4hySmvf2JUGE5tZ0LaUvmDWqPmGlg1ROe/M26/l5 7kIgF0XJ952N66FUkQ7P+7zGQ+WA51CNUcLK9lekJbLDNTc/p1Y0fZ/KI5vt7CQZ k463z0+/4mU5hh1n5b++ct5XFRk= -----END CERTIFICATE-----Generated at Wed Nov 5 16:50:37 2025 by rpki-client