$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft File: 9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft (raw, json) Hash identifier: ubQA1mh5+Mh5Pe5fmvlf+kCCiDn3M19XLZosO5aSRHM= Subject key identifier: D8:8D:07:F8:92:2E:46:56:87:FD:E0:F3:64:33:29:C6:A0:5F:92:91 Authority key identifier: F5:A4:3C:60:32:B6:63:32:2E:39:25:BE:AB:10:33:97:4C:54:07:4D Certificate issuer: /CN=F5A43C6032B663322E3925BEAB1033974C54074D Certificate serial: 42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9aQ8YDK2YzIuOSW-qxAzl0xUB00.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft Manifest number: 42 Signing time: Wed 05 Nov 2025 10:12:45 +0000 Manifest this update: Wed 05 Nov 2025 10:12:45 +0000 Manifest next update: Wed 05 Nov 2025 16:12:45 +0000 Files and hashes: 1: 9aQ8YDK2YzIuOSW-qxAzl0xUB00.crl (hash: 1mnZ8+4Odqdoo4L84RFkvQ1onie70gbJH7OrmI4Uckw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9aQ8YDK2YzIuOSW-qxAzl0xUB00.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A43C6032B663322E3925BEAB1033974C54074D Validity Not Before: Nov 5 10:12:45 2025 GMT Not After : Oct 23 09:52:02 2026 GMT Subject: CN=D88D07F8922E465687FDE0F3643329C6A05F9291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:ae:82:5a:ba:57:a3:4c:0b:dc:cd:4a:92: 79:4a:69:8d:d0:9b:a6:39:c5:ab:65:f7:3c:a7:34: 73:48:be:5a:2f:04:d2:70:f6:f1:50:00:f9:a5:12: 8e:5d:98:8f:0a:14:5d:75:ec:18:c6:1c:6c:1c:ab: 28:1f:84:94:50:53:6a:de:8c:b7:0a:cc:7d:19:50: e7:b2:29:42:9b:17:e0:8c:95:bf:ab:d8:e6:4b:45: 79:95:ff:85:4f:4e:2c:54:59:b9:64:c7:b9:1d:a2: 00:e4:1a:a1:4d:34:eb:52:53:4e:eb:3a:c3:af:04: be:ef:12:fb:bb:81:dd:ef:01:bd:cd:2d:f5:7e:98: db:7e:1f:e9:32:2e:22:2f:6d:06:fb:48:a4:75:e5: 8b:26:73:c1:b4:c4:bb:b6:9e:0f:e9:b3:9c:16:bd: 9d:3d:d2:dd:4f:83:4b:fa:2e:56:e6:7c:cb:86:73: f1:ff:10:e2:aa:03:29:cc:a8:c3:b6:bf:77:f2:b7: b5:72:f0:5c:df:4e:2e:89:79:1a:cd:b6:4f:d7:fd: d3:8d:60:77:da:cb:c4:93:e7:a0:0b:32:8c:d4:75: a4:ab:a8:8a:8d:9a:05:94:03:0b:c7:ae:18:a0:69: a7:01:3b:52:92:56:c8:38:0d:df:e1:11:22:f6:44: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8D:07:F8:92:2E:46:56:87:FD:E0:F3:64:33:29:C6:A0:5F:92:91 X509v3 Authority Key Identifier: keyid:F5:A4:3C:60:32:B6:63:32:2E:39:25:BE:AB:10:33:97:4C:54:07:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9aQ8YDK2YzIuOSW-qxAzl0xUB00.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3403/9aQ8YDK2YzIuOSW-qxAzl0xUB00.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:25:5d:cf:b3:90:7d:ca:6e:62:f7:a9:46:1e:ec:76:92:08: 00:3a:01:88:20:b7:72:2c:80:3d:47:8f:1e:39:be:df:76:7c: 8a:1e:47:40:36:7c:e0:75:92:48:35:d1:1e:9b:f6:6f:18:d3: 80:ca:15:25:b4:bf:76:eb:14:a4:9c:50:3a:5b:88:d7:f6:db: db:b7:b4:05:c4:d7:9b:63:4f:3c:98:e6:37:e3:07:98:d6:f2: 80:05:60:cb:55:9f:4c:7f:f1:25:b2:44:ec:3a:0c:76:bb:11: d8:60:01:86:40:bc:0b:aa:37:70:b6:cf:a2:56:6c:a6:4c:4d: f1:ee:bd:d6:66:a5:d7:f3:79:8a:a6:60:65:78:d2:c7:c5:09: 38:cf:bf:da:3b:29:61:8d:01:ef:62:7f:c4:be:46:b1:55:1b: f6:f5:a8:f0:00:95:d5:4e:27:c4:64:85:c3:ba:5c:b5:fd:1a: 2b:53:01:05:73:01:2f:01:b1:23:80:49:52:d2:89:6a:00:2c: 4b:81:a1:97:ff:28:7c:be:f5:15:50:04:56:70:0f:46:69:f8: af:b4:b3:4c:83:00:6a:fe:27:4b:52:13:2f:5e:ac:df:ce:e2: 6c:ba:60:87:23:6c:da:e6:ee:b6:45:64:87:f6:63:68:ab:d9: 34:34:f9:4a -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNUE0 M0M2MDMyQjY2MzMyMkUzOTI1QkVBQjEwMzM5NzRDNTQwNzREMB4XDTI1MTEwNTEw MTI0NVoXDTI2MTAyMzA5NTIwMlowMzExMC8GA1UEAxMoRDg4RDA3Rjg5MjJFNDY1 Njg3RkRFMEYzNjQzMzI5QzZBMDVGOTI5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMx8roJaulejTAvczUqSeUppjdCbpjnFq2X3PKc0c0i+Wi8E0nD2 8VAA+aUSjl2YjwoUXXXsGMYcbByrKB+ElFBTat6MtwrMfRlQ57IpQpsX4IyVv6vY 5ktFeZX/hU9OLFRZuWTHuR2iAOQaoU0061JTTus6w68Evu8S+7uB3e8Bvc0t9X6Y 234f6TIuIi9tBvtIpHXliyZzwbTEu7aeD+mznBa9nT3S3U+DS/ouVuZ8y4Zz8f8Q 4qoDKcyow7a/d/K3tXLwXN9OLol5Gs22T9f9041gd9rLxJPnoAsyjNR1pKuoio2a BZQDC8euGKBppwE7UpJWyDgN3+ERIvZERgUCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTYjQf4ki5GVof94PNkMynGoF+SkTAfBgNVHSMEGDAWgBT1pDxgMrZjMi45Jb6r EDOXTFQHTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDAz LzlhUThZREsyWXpJdU9TVy1xeEF6bDB4VUIwMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOWFROFlESzJZekl1T1NXLXF4QXpsMHhVQjAwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQwMy85YVE4WURLMll6SXVP U1ctcXhBemwweFVCMDAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPSVdz7OQfcpuYvepRh7sdpIIADoBiCC3ciyAPUePHjm+33Z8ih5HQDZ84HWS SDXRHpv2bxjTgMoVJbS/dusUpJxQOluI1/bb27e0BcTXm2NPPJjmN+MHmNbygAVg y1WfTH/xJbJE7DoMdrsR2GABhkC8C6o3cLbPolZspkxN8e691mal1/N5iqZgZXjS x8UJOM+/2jspYY0B72J/xL5GsVUb9vWo8ACV1U4nxGSFw7pctf0aK1MBBXMBLwGx I4BJUtKJagAsS4Ghl/8ofL71FVAEVnAPRmn4r7SzTIMAav4nS1ITL16s387ibLpg hyNs2ubutkVkh/ZjaKvZNDT5Sg== -----END CERTIFICATE-----Generated at Wed Nov 5 14:02:57 2025 by rpki-client