$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft File: tsENcoo4JDG6wfFJMND8HgdZU6Y.mft (raw, json) Hash identifier: NAtsxjqnaYlkZdxiQPobSORYpuruKRsu4RyXs5CfSmQ= Subject key identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 Authority key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 Certificate issuer: /CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Certificate serial: CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft Manifest number: C9 Signing time: Wed 05 Nov 2025 08:11:40 +0000 Manifest this update: Wed 05 Nov 2025 08:11:40 +0000 Manifest next update: Wed 05 Nov 2025 14:11:40 +0000 Files and hashes: 1: Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa (hash: vgo47MVbe1jdt+qM+TAEnzsTDcFBW80hb3tLyIo70XI=) 2: tsENcoo4JDG6wfFJMND8HgdZU6Y.crl (hash: 60pionVG1R7p7KFP2dhQI3lpd/NX5iExMDcjNWsFI8Q=) 3: x7OS7_8T2MiGQoCgovK3XNX_N60.roa (hash: UHgJn4apbq/7wYUqVwpc3LyEUozcrbpDkNNvfwCHElo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Validity Not Before: Nov 5 08:11:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BBA6129164418AB343C2331CCD2D9CD8222A5656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:30:2d:a8:ac:f2:dc:74:58:28:b1:59:3a: 73:e2:3b:c4:29:cf:f1:f6:a2:13:4b:62:e7:e8:af: 8a:dc:d8:b8:f7:92:87:ba:52:76:46:82:19:8e:fe: 61:f7:14:cc:d4:c4:ad:85:99:0f:51:5a:5c:d3:49: 2e:86:62:8e:2d:a5:78:f6:e5:c0:d1:c9:8d:d3:8c: f1:91:f5:2b:f1:ac:b2:79:c1:5f:4f:a9:8d:2e:b4: 6f:a4:cf:32:ec:eb:db:40:7f:6d:f8:06:b3:31:ec: 92:27:80:ff:2f:c4:87:fc:a7:12:f5:32:23:a4:ec: bd:8f:56:8e:20:59:b0:76:47:14:33:65:2c:c0:e9: 6d:54:72:d9:a8:63:d5:ca:bd:d9:57:de:55:f3:e0: 3f:bd:4e:c8:86:e1:d7:07:59:84:2b:18:4d:b2:d3: fc:20:9b:64:ac:49:53:98:c7:37:fe:bf:f7:f9:76: 4d:af:b6:b2:fc:10:c1:e3:18:d0:7d:62:68:ca:d7: 6b:e4:e4:1b:35:85:de:98:cd:65:ce:45:05:9f:74: 9d:c4:65:70:4a:57:65:16:fc:f4:77:75:74:8a:fc: d2:19:1d:50:59:2e:59:2f:10:eb:b0:ca:c2:46:63: d0:fd:9f:6b:75:69:4b:21:eb:d8:50:ae:6e:97:de: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 X509v3 Authority Key Identifier: keyid:B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ef:4b:60:90:23:5b:97:73:87:77:16:8c:7e:69:84:49:97: a5:a7:f5:8f:1c:74:dd:2d:08:56:d7:fd:fd:f4:3c:42:88:ae: 3b:7d:03:df:53:96:c5:fb:8a:ec:74:95:84:5e:f7:94:ea:ae: a2:69:0c:aa:b6:43:2b:db:92:22:07:e6:6e:42:4e:91:9e:b9: af:1c:bb:69:6b:16:bc:f6:b4:e7:ac:a6:8d:82:31:b2:b6:b5: 56:ac:60:76:9f:b7:b2:ad:3d:e8:42:5e:ae:03:05:7a:de:de: ac:00:9e:4e:c8:a8:94:f9:27:7a:80:37:a2:4b:e3:33:5e:25: 95:38:56:49:36:0f:50:7e:03:dd:4d:70:dc:d6:62:12:41:40: 36:32:cc:94:1f:ee:91:87:db:10:d9:da:2f:76:73:16:ed:68: 0a:85:d1:92:a9:9a:d0:db:c5:fc:18:75:0b:8e:f5:ea:93:08: 22:3f:77:1a:3b:de:7b:9b:f2:7d:19:08:f2:1d:aa:22:53:45: ca:15:54:d9:9b:3b:f0:99:61:8a:85:9f:5d:8c:60:8e:6a:1b: d3:02:29:1a:06:b0:6f:cd:f0:7a:7c:5a:38:e6:97:eb:f8:71: a3:70:1e:14:fb:6b:36:7b:34:19:2d:1a:99:c8:99:f8:7f:ac: 2a:04:01:51 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjZD MTBENzI4QTM4MjQzMUJBQzFGMTQ5MzBEMEZDMUUwNzU5NTNBNjAeFw0yNTExMDUw ODExNDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJCQTYxMjkxNjQ0MThB QjM0M0MyMzMxQ0NEMkQ5Q0Q4MjIyQTU2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiMTAtqKzy3HRYKLFZOnPiO8Qpz/H2ohNLYufor4rc2Lj3koe6 UnZGghmO/mH3FMzUxK2FmQ9RWlzTSS6GYo4tpXj25cDRyY3TjPGR9SvxrLJ5wV9P qY0utG+kzzLs69tAf234BrMx7JIngP8vxIf8pxL1MiOk7L2PVo4gWbB2RxQzZSzA 6W1UctmoY9XKvdlX3lXz4D+9TsiG4dcHWYQrGE2y0/wgm2SsSVOYxzf+v/f5dk2v trL8EMHjGNB9YmjK12vk5Bs1hd6YzWXORQWfdJ3EZXBKV2UW/PR3dXSK/NIZHVBZ LlkvEOuwysJGY9D9n2t1aUsh69hQrm6X3tnzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUu6YSkWRBirNDwjMczS2c2CIqVlYwHwYDVR0jBBgwFoAUtsENcoo4JDG6wfFJ MND8HgdZU6YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ni90c0VOY29vNEpERzZ3ZkZKTU5EOEhnZFpVNlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RzRU5jb280SkRHNndmRkpNTkQ4SGdkWlU2WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTYvdHNFTmNvbzRKREc2 d2ZGSk1ORDhIZ2RaVTZZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEXvS2CQI1uXc4d3Fox+aYRJl6Wn9Y8cdN0tCFbX/f30PEKIrjt9A99TlsX7 iux0lYRe95TqrqJpDKq2QyvbkiIH5m5CTpGeua8cu2lrFrz2tOespo2CMbK2tVas YHaft7KtPehCXq4DBXre3qwAnk7IqJT5J3qAN6JL4zNeJZU4Vkk2D1B+A91NcNzW YhJBQDYyzJQf7pGH2xDZ2i92cxbtaAqF0ZKpmtDbxfwYdQuO9eqTCCI/dxo73nub 8n0ZCPIdqiJTRcoVVNmbO/CZYYqFn12MYI5qG9MCKRoGsG/N8Hp8Wjjml+v4caNw HhT7azZ7NBktGpnImfh/rCoEAVE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:23:03 2025 by rpki-client