$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft File: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft (raw, json) Hash identifier: NpLUqQ7jxN1GPkSxA0LqpckSpO4/+P1LG6LkfBPVubo= Subject key identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D Authority key identifier: A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 Certificate issuer: /CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Certificate serial: 01BD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft Manifest number: 01BB Signing time: Wed 05 Nov 2025 10:12:01 +0000 Manifest this update: Wed 05 Nov 2025 10:12:01 +0000 Manifest next update: Wed 05 Nov 2025 16:12:01 +0000 Files and hashes: 1: 9Kmp81LKJ1Do62r1oXF_Gp0nqJE.roa (hash: zHJGB3SpZj0mblC97hMn2aXc1dlXiZkyYkOYrihQVq8=) 2: dEIw97IC--lfB7uZmz6Os4ERyP4.roa (hash: sca1+jICK/ivC1jrdSAkUU0z0/GAdVgbLG2sOFZ34d4=) 3: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl (hash: jdUZ/vgWDqHCgXht5gN+BBbRtBJwC7GZ0hUh6kazLsg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Validity Not Before: Nov 5 10:12:01 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=23DFAD5DD1384742F40AFB8557D26F94441B217D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:ba:46:ab:26:2c:6e:05:5f:e6:08:ca:5f: f1:0a:6a:99:4b:db:52:a1:58:79:b7:f8:25:5a:2a: b2:84:f8:ef:5e:9a:6d:12:f3:8f:98:9d:08:ec:6d: ec:ae:92:e1:c6:33:fa:ee:c0:05:5d:2b:d3:31:6d: 40:f9:21:6d:e2:6a:25:db:78:67:a2:4a:b7:fa:d8: b1:3a:48:15:03:db:d5:68:1f:12:17:01:1a:04:0c: d8:2e:cc:fc:0b:ed:3b:44:8a:11:35:f0:59:61:32: da:ec:78:59:42:39:05:a3:a6:dc:33:8f:8f:ca:ed: 5d:78:54:70:2c:a8:5e:d9:ef:e2:25:5f:b1:96:c5: b6:42:fb:6e:2a:43:81:08:8e:97:97:8b:bb:af:53: b5:c6:52:e2:1f:8f:a4:25:db:c7:1d:61:ba:19:af: 43:27:a0:64:83:9e:16:93:ab:ef:e2:7d:75:87:ac: 5e:ad:b1:6c:fd:a5:dc:08:91:cf:09:dd:16:d7:b5: 61:e9:4b:39:da:90:88:b4:e3:d9:f1:44:21:34:73: 22:da:b6:f0:af:67:3e:0e:84:49:18:78:61:1b:d6: bc:7c:91:ef:4f:11:06:98:80:b4:07:33:40:5e:99: 4f:90:10:58:d5:f1:57:28:01:76:e2:9a:67:55:ba: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D X509v3 Authority Key Identifier: keyid:A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:6e:63:af:6e:f9:24:00:25:e7:49:c2:0e:ec:3a:ca:d0:68: d5:b1:32:a1:e7:37:ed:53:b6:97:6b:8e:c6:8e:ec:5b:4e:ac: ae:e7:1c:43:1d:65:11:7c:0d:4a:3c:4a:97:97:86:1e:47:38: 1c:b5:ab:72:81:c0:36:07:6d:29:e8:2b:5d:59:46:98:5e:99: 80:24:fb:4e:f7:a5:5d:72:4f:47:08:83:cb:f9:d4:82:dd:04: 7c:c2:79:10:e8:c5:74:6d:97:ed:06:47:ab:50:ff:12:4d:e3: 27:ca:76:7e:c4:de:98:04:42:a9:6f:9c:86:cb:19:45:f6:a9: 32:71:06:a7:ef:d0:5f:d3:ad:89:42:dc:95:69:54:02:19:1d: 5a:64:bb:61:a2:aa:18:e1:51:f0:89:8d:55:81:89:ff:86:b1: 5f:f1:c4:34:1c:d9:7a:a1:11:7b:8c:cb:a3:57:e0:fc:7f:18: 59:d6:cb:cf:43:76:85:62:ea:17:d4:fd:62:aa:8b:ad:fc:60: cc:0b:dc:1a:67:b2:d6:ab:20:37:a8:0c:ed:b6:8d:24:80:f9: 90:0c:48:f9:2b:75:7c:78:82:24:93:73:ab:1b:90:c0:df:d6: cc:76:1a:e6:e9:51:91:ba:72:58:20:05:0c:ef:fb:cb:a6:d6: 5f:9c:bd:49 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTFB MEFCQzVDQTZGNTA4RjE5Rjc5MDdFOTRDMzE2MjE1MjI5NjkzNDAeFw0yNTExMDUx MDEyMDFaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIzREZBRDVERDEzODQ3 NDJGNDBBRkI4NTU3RDI2Rjk0NDQxQjIxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCty7pGqyYsbgVf5gjKX/EKaplL21KhWHm3+CVaKrKE+O9emm0S 84+YnQjsbeyukuHGM/ruwAVdK9MxbUD5IW3iaiXbeGeiSrf62LE6SBUD29VoHxIX ARoEDNguzPwL7TtEihE18FlhMtrseFlCOQWjptwzj4/K7V14VHAsqF7Z7+IlX7GW xbZC+24qQ4EIjpeXi7uvU7XGUuIfj6Ql28cdYboZr0MnoGSDnhaTq+/ifXWHrF6t sWz9pdwIkc8J3RbXtWHpSznakIi049nxRCE0cyLatvCvZz4OhEkYeGEb1rx8ke9P EQaYgLQHM0BemU+QEFjV8VcoAXbimmdVupSdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUI9+tXdE4R0L0CvuFV9JvlEQbIX0wHwYDVR0jBBgwFoAUoaCrxcpvUI8Z95B+ lMMWIVIpaTQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Ny9vYUNyeGNwdlVJOFo5NUItbE1NV0lWSXBhVFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL29hQ3J4Y3B2VUk4Wjk1Qi1sTU1XSVZJcGFUUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODcvb2FDcnhjcHZVSTha OTVCLWxNTVdJVklwYVRRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANRuY69u+SQAJedJwg7sOsrQaNWxMqHnN+1TtpdrjsaO7FtOrK7nHEMdZRF8 DUo8SpeXhh5HOBy1q3KBwDYHbSnoK11ZRphemYAk+073pV1yT0cIg8v51ILdBHzC eRDoxXRtl+0GR6tQ/xJN4yfKdn7E3pgEQqlvnIbLGUX2qTJxBqfv0F/TrYlC3JVp VAIZHVpku2GiqhjhUfCJjVWBif+GsV/xxDQc2XqhEXuMy6NX4Px/GFnWy89DdoVi 6hfU/WKqi638YMwL3BpnstarIDeoDO22jSSA+ZAMSPkrdXx4giSTc6sbkMDf1sx2 GubpUZG6clggBQzv+8um1l+cvUk= -----END CERTIFICATE-----Generated at Wed Nov 5 14:35:01 2025 by rpki-client