$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft File: QEPgLf1LxL37CBKB3eUEVdOAWys.mft (raw, json) Hash identifier: FK3cb5+9fIXh94Kdsy4S7Y+zU1F40uhHg4CP9vlTOik= Subject key identifier: E0:08:3F:53:C3:70:6F:23:2B:94:45:58:BD:6A:D5:1D:87:07:39:EF Authority key identifier: 40:43:E0:2D:FD:4B:C4:BD:FB:08:12:81:DD:E5:04:55:D3:80:5B:2B Certificate issuer: /CN=4043E02DFD4BC4BDFB081281DDE50455D3805B2B Certificate serial: 31 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QEPgLf1LxL37CBKB3eUEVdOAWys.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft Manifest number: 31 Signing time: Wed 05 Nov 2025 10:14:59 +0000 Manifest this update: Wed 05 Nov 2025 10:14:59 +0000 Manifest next update: Wed 05 Nov 2025 16:14:59 +0000 Files and hashes: 1: QEPgLf1LxL37CBKB3eUEVdOAWys.crl (hash: Bd6iBpnEl3ve4153+KxwcVOHvycoH4In/aiXZ8ZjZkw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QEPgLf1LxL37CBKB3eUEVdOAWys.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4043E02DFD4BC4BDFB081281DDE50455D3805B2B Validity Not Before: Nov 5 10:14:59 2025 GMT Not After : Oct 27 09:37:25 2026 GMT Subject: CN=E0083F53C3706F232B944558BD6AD51D870739EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:db:9b:e0:66:3e:d7:bb:c0:05:2a:31:a8: 09:fd:c7:08:a5:af:a6:cf:82:97:53:0a:71:ad:4f: 91:4b:9c:f9:8b:13:dd:b8:14:fc:d5:0c:9f:c1:fb: 1e:3e:f2:88:ff:c8:34:6d:8f:a3:bb:a1:fa:00:11: 2e:26:41:7a:a4:3d:d1:92:e9:4f:a3:79:9e:ff:39: da:ce:7d:d1:c3:64:fc:32:cf:ef:bc:fb:d7:61:04: 75:f9:0b:37:f0:30:4c:65:02:09:df:b6:27:de:ae: 38:bf:5c:ca:1d:ee:df:a4:c0:be:02:43:b5:70:54: 39:2b:d9:2d:b1:5f:9b:07:e0:4c:cf:e2:45:75:9c: b1:d4:89:2a:4c:19:9b:35:0c:65:1f:b9:38:4a:d0: 05:24:fb:71:b2:33:1d:93:c5:e4:80:05:2d:7e:ce: 11:cb:31:0e:fa:cf:a2:07:ba:d5:1b:a7:4a:c2:46: 38:55:f0:31:45:7f:fa:06:5e:c7:c0:b2:e4:ba:16: ad:e4:cf:60:fb:7d:18:6d:34:92:51:f8:ba:35:ca: 74:f1:ec:dd:4b:07:25:f1:df:4e:50:9d:03:40:70: a7:3e:ee:db:bd:b7:e0:f0:5a:55:da:58:9a:f3:77: 55:b2:75:6f:b4:bf:cc:b7:48:b2:3d:a2:b1:d4:92: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:08:3F:53:C3:70:6F:23:2B:94:45:58:BD:6A:D5:1D:87:07:39:EF X509v3 Authority Key Identifier: keyid:40:43:E0:2D:FD:4B:C4:BD:FB:08:12:81:DD:E5:04:55:D3:80:5B:2B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QEPgLf1LxL37CBKB3eUEVdOAWys.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:bd:61:72:1a:1d:7c:be:0e:11:0b:17:e8:3b:ba:89:2e:66: 04:51:47:2d:67:14:20:29:4d:f2:69:63:78:68:00:b4:71:34: 53:ae:ee:bd:3d:51:75:ee:52:02:5b:fd:b5:53:62:f3:db:97: 54:b4:16:f6:be:23:3e:52:a6:92:55:14:7f:0e:9d:bc:7a:db: be:b7:1c:03:6f:bd:bb:be:3a:17:a2:77:43:14:61:3c:e4:2e: 21:83:f2:07:d1:e8:36:9c:65:b4:91:82:6a:6d:67:b2:c9:00: e5:4d:37:3c:7c:a9:05:68:52:34:bb:74:c0:a7:70:20:f4:87: 82:2c:82:92:1e:d6:13:97:c0:d2:2c:ad:d7:78:f4:45:eb:d9: 2f:b3:c8:0e:b5:68:ef:a5:38:52:f9:14:46:34:99:29:55:8b: 32:cc:fe:e6:35:c7:9d:65:39:cf:06:c0:f0:51:02:15:ce:cf: fd:b3:4a:01:99:ec:fd:6d:1d:45:49:f6:11:73:42:07:47:9e: 55:1a:2a:2d:89:a7:0f:18:50:a0:d3:d8:25:2c:44:6f:a1:cc: 83:4e:bd:d0:fc:1d:c4:6b:0d:92:4a:c0:ab:e5:cd:c6:42:0e: f6:af:5b:18:39:88:a7:0d:a5:53:e8:d6:50:b1:ac:d5:d9:de: 56:66:30:a4 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MDQz RTAyREZENEJDNEJERkIwODEyODFEREU1MDQ1NUQzODA1QjJCMB4XDTI1MTEwNTEw MTQ1OVoXDTI2MTAyNzA5MzcyNVowMzExMC8GA1UEAxMoRTAwODNGNTNDMzcwNkYy MzJCOTQ0NTU4QkQ2QUQ1MUQ4NzA3MzlFRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALkO25vgZj7Xu8AFKjGoCf3HCKWvps+Cl1MKca1PkUuc+YsT3bgU /NUMn8H7Hj7yiP/ING2Po7uh+gARLiZBeqQ90ZLpT6N5nv852s590cNk/DLP77z7 12EEdfkLN/AwTGUCCd+2J96uOL9cyh3u36TAvgJDtXBUOSvZLbFfmwfgTM/iRXWc sdSJKkwZmzUMZR+5OErQBST7cbIzHZPF5IAFLX7OEcsxDvrPoge61RunSsJGOFXw MUV/+gZex8Cy5LoWreTPYPt9GG00klH4ujXKdPHs3UsHJfHfTlCdA0Bwpz7u2723 4PBaVdpYmvN3VbJ1b7S/zLdIsj2isdSSpssCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBTgCD9Tw3BvIyuURVi9atUdhwc57zAfBgNVHSMEGDAWgBRAQ+At/UvEvfsIEoHd 5QRV04BbKzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDA0 L1FFUGdMZjFMeEwzN0NCS0IzZVVFVmRPQVd5cy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUUVQZ0xmMUx4TDM3Q0JLQjNlVUVWZE9BV3lzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQwNC9RRVBnTGYxTHhMMzdD QktCM2VVRVZkT0FXeXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArb1hchodfL4OEQsX6Du6iS5mBFFHLWcUIClN8mljeGgAtHE0U67uvT1Rde5S Alv9tVNi89uXVLQW9r4jPlKmklUUfw6dvHrbvrccA2+9u746F6J3QxRhPOQuIYPy B9HoNpxltJGCam1nsskA5U03PHypBWhSNLt0wKdwIPSHgiyCkh7WE5fA0iyt13j0 RevZL7PIDrVo76U4UvkURjSZKVWLMsz+5jXHnWU5zwbA8FECFc7P/bNKAZns/W0d RUn2EXNCB0eeVRoqLYmnDxhQoNPYJSxEb6HMg0690PwdxGsNkkrAq+XNxkIO9q9b GDmIpw2lU+jWULGs1dneVmYwpA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:32:36 2025 by rpki-client