$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft File: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft (raw, json) Hash identifier: FjPJ9SfTad4BfR8TIlXbpNuPLkLVJvIhqgfES0JTXHI= Subject key identifier: 17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9 Authority key identifier: D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3 Certificate issuer: /CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3 Certificate serial: 1811 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft Manifest number: 1811 Signing time: Wed 05 Nov 2025 10:16:16 +0000 Manifest this update: Wed 05 Nov 2025 10:16:16 +0000 Manifest next update: Wed 05 Nov 2025 16:16:16 +0000 Files and hashes: 1: 0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl (hash: e76lN8+GENNnjNvUyQOfscmWYuUc97BiN5gkX4Xj3LM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6161 (0x1811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18EAFBCCEFF3ADB0811FAA15F5E6C7580E9A9B3 Validity Not Before: Nov 5 10:16:16 2025 GMT Not After : Oct 23 09:21:38 2026 GMT Subject: CN=17E36FFCD919996F810199FE06670BF5331577B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:67:71:ab:93:23:a6:7b:10:01:e6:98:29: 5b:59:b1:0d:52:17:bb:a6:fe:c4:23:fe:8c:e7:00: ec:3b:f1:89:88:40:8c:ac:a0:07:53:09:d4:68:4c: 07:c3:8a:bd:b4:c0:e6:af:6e:14:ea:3d:19:f7:8e: 12:fe:e7:04:33:57:a0:d7:fe:32:bd:1b:0e:2f:ac: 85:16:20:59:68:1e:a1:54:f4:b6:51:0b:7b:07:6c: 5b:6f:82:7b:43:9e:35:18:cd:6e:b0:74:67:27:02: b1:55:4d:c7:e0:88:b6:73:3e:4e:e7:18:aa:82:79: 61:31:8c:8c:98:0b:7f:6e:06:e6:9d:40:20:8d:ed: c0:5c:b5:ae:95:45:33:6e:c9:4f:08:f5:34:da:5e: 48:1b:26:cb:bf:98:0c:c8:9e:3e:24:7d:0e:90:65: c8:8a:e6:0f:21:fa:7c:9b:b7:a4:55:4d:83:4a:2a: e0:c9:63:53:71:48:af:78:7f:1c:5a:dd:92:0c:92: 44:85:b1:f5:04:f1:55:06:5a:b5:e3:f7:50:64:f9: 2f:10:8d:bf:e0:db:10:74:37:5b:3c:9f:0e:aa:f8: 4f:5c:a8:0d:2d:79:2f:d1:13:50:3f:5a:c9:9f:f6: b9:10:ae:d0:e7:00:62:0e:e0:85:fa:e1:bd:1e:fa: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:6F:FC:D9:19:99:6F:81:01:99:FE:06:67:0B:F5:33:15:77:B9 X509v3 Authority Key Identifier: keyid:D1:8E:AF:BC:CE:FF:3A:DB:08:11:FA:A1:5F:5E:6C:75:80:E9:A9:B3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Y6vvM7_OtsIEfqhX15sdYDpqbM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/0Y6vvM7_OtsIEfqhX15sdYDpqbM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:1d:83:3a:f0:23:35:a9:05:b7:c2:ca:0b:f5:78:82:53:54: 74:7b:7c:3f:91:2d:ec:bc:7e:41:4d:4f:e6:1e:f7:89:2f:1a: 0d:46:a9:24:e7:79:a9:f8:1b:01:c7:60:6f:71:12:15:bf:0b: a4:8c:fa:6c:a4:8d:cb:84:41:a9:5e:fe:51:12:18:b1:62:66: df:21:7c:6b:82:c2:03:23:f0:41:71:58:6b:fd:05:3d:56:41: c4:53:84:e4:51:be:54:d5:a8:8b:4f:bc:1f:e6:fd:a6:8f:8b: 5d:e4:76:28:be:f6:92:22:b8:7d:3d:5d:93:ea:f7:ad:48:5c: 02:1a:ec:42:6c:69:30:2c:97:4d:a5:69:be:33:90:a8:25:03: 18:d0:7b:7d:31:1d:e2:ef:1b:42:7f:81:db:67:fa:4d:16:b7: 8c:64:1a:e3:d2:f1:a7:08:81:9e:05:fe:28:e0:89:dd:81:86: 5f:6d:16:84:94:ba:90:aa:e5:90:25:fe:01:0b:51:56:f7:1a: 6e:d5:11:ed:30:34:39:9e:62:35:24:90:62:16:7a:f0:92:87: 3e:96:e6:04:d9:bf:69:ce:12:67:54:3a:14:b1:83:be:2f:ee: 42:c9:6b:d8:18:ef:ad:d0:c9:d4:78:b8:5b:d3:92:19:c5:f6: 19:b5:52:47 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgICGBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE4 RUFGQkNDRUZGM0FEQjA4MTFGQUExNUY1RTZDNzU4MEU5QTlCMzAeFw0yNTExMDUx MDE2MTZaFw0yNjEwMjMwOTIxMzhaMDMxMTAvBgNVBAMTKDE3RTM2RkZDRDkxOTk5 NkY4MTAxOTlGRTA2NjcwQkY1MzMxNTc3QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPhmdxq5MjpnsQAeaYKVtZsQ1SF7um/sQj/oznAOw78YmIQIys oAdTCdRoTAfDir20wOavbhTqPRn3jhL+5wQzV6DX/jK9Gw4vrIUWIFloHqFU9LZR C3sHbFtvgntDnjUYzW6wdGcnArFVTcfgiLZzPk7nGKqCeWExjIyYC39uBuadQCCN 7cBcta6VRTNuyU8I9TTaXkgbJsu/mAzInj4kfQ6QZciK5g8h+nybt6RVTYNKKuDJ Y1NxSK94fxxa3ZIMkkSFsfUE8VUGWrXj91Bk+S8Qjb/g2xB0N1s8nw6q+E9cqA0t eS/RE1A/Wsmf9rkQrtDnAGIO4IX64b0e+lK9AgMBAAGjggIGMIICAjAdBgNVHQ4E FgQUF+Nv/NkZmW+BAZn+BmcL9TMVd7kwHwYDVR0jBBgwFoAU0Y6vvM7/OtsIEfqh X15sdYDpqbMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNC8w WTZ2dk03X090c0lFZnFoWDE1c2RZRHBxYk0uY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwLzBZNnZ2TTdfT3RzSUVmcWhYMTVzZFlEcHFiTS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQvMFk2dnZNN19PdHNJRWZxaFgx NXNkWURwcWJNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBALcd gzrwIzWpBbfCygv1eIJTVHR7fD+RLey8fkFNT+Ye94kvGg1GqSTnean4GwHHYG9x EhW/C6SM+mykjcuEQale/lESGLFiZt8hfGuCwgMj8EFxWGv9BT1WQcRThORRvlTV qItPvB/m/aaPi13kdii+9pIiuH09XZPq961IXAIa7EJsaTAsl02lab4zkKglAxjQ e30xHeLvG0J/gdtn+k0Wt4xkGuPS8acIgZ4F/ijgid2Bhl9tFoSUupCq5ZAl/gEL UVb3Gm7VEe0wNDmeYjUkkGIWevCShz6W5gTZv2nOEmdUOhSxg74v7kLJa9gY763Q ydR4uFvTkhnF9hm1Ukc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:05:44 2025 by rpki-client