$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft File: 06BdqqCQU2XvHzmKUupfkfbC2SA.mft (raw, json) Hash identifier: dOhFBrzZdAvpsq9/NjoaGRfIAvxAZ6dhb2j6BA9R7kI= Subject key identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 Authority key identifier: D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 Certificate issuer: /CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Certificate serial: 32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft Manifest number: 32 Signing time: Wed 05 Nov 2025 15:11:49 +0000 Manifest this update: Wed 05 Nov 2025 15:11:49 +0000 Manifest next update: Wed 05 Nov 2025 21:11:49 +0000 Files and hashes: 1: 06BdqqCQU2XvHzmKUupfkfbC2SA.crl (hash: V97Vxg2oKvxnFLKxqjTsLVfpCw3zFEyRmfa8/zxg34Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920 Validity Not Before: Nov 5 15:11:49 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=30D8963FB0F4CE7D7DEB12E041F58EE911E5CCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:29:02:45:42:ff:bd:86:e7:f4:2b:5f:60: 0e:af:48:60:7b:c5:db:51:32:bf:8a:22:1d:32:3f: d3:87:0a:c4:20:03:ae:83:3e:a0:b5:eb:8c:36:b3: 73:e0:71:39:78:77:64:de:6b:5a:8c:6d:54:b1:47: 71:29:6d:ee:12:4f:9b:20:2f:ab:d5:1c:2d:96:0f: b9:fd:60:46:6b:59:98:45:d4:43:e3:8a:25:5c:aa: 26:1d:87:2e:7f:23:f7:44:54:3b:b6:e4:74:0a:47: 53:9b:86:a3:93:a5:25:98:4c:2d:85:99:21:0d:80: a3:f8:ce:0a:cc:9c:23:b6:64:8e:95:c0:23:08:a8: 69:1d:7b:3b:d1:b4:c6:af:72:47:6d:c9:23:f4:da: 71:3c:70:9e:69:e6:1e:cc:de:c5:7c:d8:87:e8:40: 9a:05:fc:c4:a5:ba:b7:18:13:6b:ca:c6:cd:d5:21: a4:af:32:79:af:cf:d2:ec:5e:cd:78:90:70:b3:7b: 42:bd:f2:fa:11:70:d9:fd:00:2a:b1:d9:1a:53:37: 16:ae:19:36:0a:18:42:f6:e5:c1:39:0f:b7:a4:e7: 95:49:e9:e5:bb:d4:04:d2:ae:9b:f2:32:71:d7:ea: 0f:7a:24:ba:d3:05:f7:69:19:86:db:73:74:60:1f: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:96:3F:B0:F4:CE:7D:7D:EB:12:E0:41:F5:8E:E9:11:E5:CC:A7 X509v3 Authority Key Identifier: keyid:D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:d1:6f:85:0c:4c:01:05:06:ec:e3:99:ee:55:37:95:3f:91: 26:48:90:a8:72:73:e5:9b:35:1d:32:93:0a:19:e0:89:8c:ae: ca:ef:88:02:a5:6c:7b:45:48:58:c3:22:b3:d0:dd:8c:24:57: a4:61:22:ac:d0:7f:0b:f3:7c:84:5d:bb:5c:de:bf:7d:c9:90: 89:6d:cd:42:c3:bd:13:41:0b:7c:43:ef:7b:bb:e3:7d:c4:6d: 8f:ea:d8:88:8e:fc:74:d5:c8:7d:56:7d:14:f6:45:59:14:5c: 33:9b:49:b4:71:a0:1a:77:3d:95:0f:f9:f6:23:9d:32:68:f2: 97:8a:98:6f:9b:a2:34:eb:c2:1f:32:0c:fe:5e:ba:6c:02:87: c0:44:ba:a6:b0:f3:6c:a6:34:a1:15:0c:ff:c0:b4:3f:d2:28: 26:24:f0:b6:e1:f5:7e:15:31:6f:71:31:fa:36:55:f4:61:af: 8f:91:6e:39:74:71:04:96:f9:e1:f8:7d:b3:67:51:34:ce:9f: 2f:eb:3a:f5:ec:54:5f:0f:1c:f6:d4:8d:db:ea:50:12:6c:9b: a2:8f:3e:a1:53:81:1f:9c:c9:2a:e8:50:d3:6c:7b:65:89:93: b1:d3:9f:6d:2e:00:f8:45:39:3c:b9:03:cf:54:64:74:57:af: 15:4b:44:1f -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEM0Ew NURBQUEwOTA1MzY1RUYxRjM5OEE1MkVBNUY5MUY2QzJEOTIwMB4XDTI1MTEwNTE1 MTE0OVoXDTI2MTAyMzAzMDEwM1owMzExMC8GA1UEAxMoMzBEODk2M0ZCMEY0Q0U3 RDdERUIxMkUwNDFGNThFRTkxMUU1Q0NBNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK44KQJFQv+9huf0K19gDq9IYHvF21Eyv4oiHTI/04cKxCADroM+ oLXrjDazc+BxOXh3ZN5rWoxtVLFHcSlt7hJPmyAvq9UcLZYPuf1gRmtZmEXUQ+OK JVyqJh2HLn8j90RUO7bkdApHU5uGo5OlJZhMLYWZIQ2Ao/jOCsycI7ZkjpXAIwio aR17O9G0xq9yR23JI/TacTxwnmnmHszexXzYh+hAmgX8xKW6txgTa8rGzdUhpK8y ea/P0uxezXiQcLN7Qr3y+hFw2f0AKrHZGlM3Fq4ZNgoYQvblwTkPt6TnlUnp5bvU BNKum/IycdfqD3okutMF92kZhttzdGAfxVcCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQw2JY/sPTOfX3rEuBB9Y7pEeXMpzAfBgNVHSMEGDAWgBTToF2qoJBTZe8fOYpS 6l+R9sLZIDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzk5 LzA2QmRxcUNRVTJYdkh6bUtVdXBma2ZiQzJTQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMDZCZHFxQ1FVMlh2SHptS1V1cGZrZmJDMlNBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5OS8wNkJkcXFDUVUyWHZI em1LVXVwZmtmYkMyU0EubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxtFvhQxMAQUG7OOZ7lU3lT+RJkiQqHJz5Zs1HTKTChngiYyuyu+IAqVse0VI WMMis9DdjCRXpGEirNB/C/N8hF27XN6/fcmQiW3NQsO9E0ELfEPve7vjfcRtj+rY iI78dNXIfVZ9FPZFWRRcM5tJtHGgGnc9lQ/59iOdMmjyl4qYb5uiNOvCHzIM/l66 bAKHwES6prDzbKY0oRUM/8C0P9IoJiTwtuH1fhUxb3Ex+jZV9GGvj5FuOXRxBJb5 4fh9s2dRNM6fL+s69exUXw8c9tSN2+pQEmyboo8+oVOBH5zJKuhQ02x7ZYmTsdOf bS4A+EU5PLkDz1RkdFevFUtEHw== -----END CERTIFICATE-----Generated at Wed Nov 5 21:03:56 2025 by rpki-client