$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft File: QfzZUdjNh-WF4Cc23dlPpCcqw70.mft (raw, json) Hash identifier: eG/frABVVA6q3qvtx3TmjXIgoO0tjeq0QRJ5ys0Su3E= Subject key identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC Authority key identifier: 41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD Certificate issuer: /CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Certificate serial: 0167 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft Manifest number: 0167 Signing time: Wed 05 Nov 2025 08:11:20 +0000 Manifest this update: Wed 05 Nov 2025 08:11:20 +0000 Manifest next update: Wed 05 Nov 2025 14:11:20 +0000 Files and hashes: 1: QfzZUdjNh-WF4Cc23dlPpCcqw70.crl (hash: eMTiy5JbrA/e8CKC2wf0rGDAG9jpMgYEAD2LIf+cybM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FCD951D8CD87E585E02736DDD94FA4272AC3BD Validity Not Before: Nov 5 08:11:20 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8655254ADD036D7B08B936476485F6CCC77088BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:86:3e:66:19:d6:5d:f7:d4:f4:34:a7:5b: f8:0a:bc:6d:cd:97:03:fb:4f:65:5c:9b:30:e6:06: 11:f7:42:c1:60:c0:08:8e:b6:2e:15:70:1c:79:02: 48:32:17:9f:c8:b4:e5:0f:1f:98:49:86:b3:ae:e9: ca:b7:2b:19:0a:46:1f:04:f6:54:b1:16:92:71:6c: 7d:5b:df:2e:f3:57:83:e1:de:de:a1:99:bf:f6:dc: da:66:3c:dc:18:b6:68:fd:29:f0:cd:7d:51:06:57: 2c:5e:0c:6f:10:9b:74:d4:68:bd:97:00:51:7e:e7: e4:98:37:8d:c7:e7:6f:e7:e1:b7:61:bf:e7:fd:3f: b8:bf:68:43:98:78:f4:b8:11:98:15:6e:ce:3c:92: 61:ff:df:35:4a:45:d7:d1:39:3d:52:48:4e:58:40: 44:81:86:8c:39:39:e9:f2:0e:7c:e7:a4:c9:4e:c4: 7b:cd:9e:56:b1:7f:be:e2:24:bc:ca:a1:5b:29:3a: 2b:2e:7f:cf:de:12:ed:2c:d8:45:e6:40:5d:e2:5f: eb:8c:b0:42:75:da:a3:3f:da:62:3f:f1:1c:67:d3: 22:a6:35:90:86:8d:b0:f9:43:a6:29:6b:94:42:c6: b1:5e:fa:e8:c7:18:8a:ef:3c:b5:47:90:dc:2b:77: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:25:4A:DD:03:6D:7B:08:B9:36:47:64:85:F6:CC:C7:70:88:BC X509v3 Authority Key Identifier: keyid:41:FC:D9:51:D8:CD:87:E5:85:E0:27:36:DD:D9:4F:A4:27:2A:C3:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QfzZUdjNh-WF4Cc23dlPpCcqw70.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/409/QfzZUdjNh-WF4Cc23dlPpCcqw70.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:99:9b:39:9c:61:0a:02:f1:37:e9:57:ac:75:68:74:1a:63: cc:4d:e8:d5:2c:b1:66:66:79:9a:a1:d7:9b:fd:0d:fb:d9:d7: 49:42:b7:b9:33:d4:c6:7f:38:4c:b1:5b:a9:0e:61:6f:31:97: e7:b9:2e:c7:9d:61:54:e4:6b:35:38:ee:ad:45:c7:87:1c:ea: 0d:5c:d5:19:cd:0e:f6:34:ed:88:93:66:de:5c:92:95:25:11: a8:8e:72:1d:5c:8b:5a:36:3b:eb:03:f2:56:1e:49:45:f3:a2: 47:d7:5a:80:01:02:f1:d6:4b:59:a8:71:9e:97:e2:1a:1a:ad: cc:09:4b:f2:cd:d2:59:d3:bf:ea:ed:3e:60:e2:3a:3a:5b:94: d9:26:3b:1e:90:4a:41:4f:d4:37:52:8b:ac:0c:2c:24:21:bc: b6:80:3d:28:af:8f:ce:54:b1:4e:55:a4:f1:db:3a:f9:e2:8e: 58:73:18:d9:13:8e:03:b2:d1:31:2d:7d:7f:70:ed:88:4c:b1: 8b:be:c4:22:e4:f0:29:60:85:91:e7:f0:6b:70:b8:8b:9f:1c: 22:2d:8c:99:6f:00:cf:06:67:90:46:c5:c9:b9:46:f9:54:76: 01:13:47:22:42:e5:eb:94:66:4e:01:2a:e9:ed:e0:39:a8:47: a9:b7:98:22 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDFG Q0Q5NTFEOENEODdFNTg1RTAyNzM2REREOTRGQTQyNzJBQzNCRDAeFw0yNTExMDUw ODExMjBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDg2NTUyNTRBREQwMzZE N0IwOEI5MzY0NzY0ODVGNkNDQzc3MDg4QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnGYY+ZhnWXffU9DSnW/gKvG3NlwP7T2VcmzDmBhH3QsFgwAiO ti4VcBx5AkgyF5/ItOUPH5hJhrOu6cq3KxkKRh8E9lSxFpJxbH1b3y7zV4Ph3t6h mb/23NpmPNwYtmj9KfDNfVEGVyxeDG8Qm3TUaL2XAFF+5+SYN43H52/n4bdhv+f9 P7i/aEOYePS4EZgVbs48kmH/3zVKRdfROT1SSE5YQESBhow5OenyDnznpMlOxHvN nlaxf77iJLzKoVspOisuf8/eEu0s2EXmQF3iX+uMsEJ12qM/2mI/8Rxn0yKmNZCG jbD5Q6Ypa5RCxrFe+ujHGIrvPLVHkNwrd5tfAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUhlUlSt0DbXsIuTZHZIX2zMdwiLwwHwYDVR0jBBgwFoAUQfzZUdjNh+WF4Cc2 3dlPpCcqw70wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5 L1FmelpVZGpOaC1XRjRDYzIzZGxQcENjcXc3MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUWZ6WlVkak5oLVdGNENjMjNkbFBwQ2NxdzcwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDA5L1FmelpVZGpOaC1XRjRD YzIzZGxQcENjcXc3MC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXmZs5nGEKAvE36VesdWh0GmPMTejVLLFmZnmaodeb/Q372ddJQre5M9TGfzhM sVupDmFvMZfnuS7HnWFU5Gs1OO6tRceHHOoNXNUZzQ72NO2Ik2beXJKVJRGojnId XItaNjvrA/JWHklF86JH11qAAQLx1ktZqHGel+IaGq3MCUvyzdJZ07/q7T5g4jo6 W5TZJjsekEpBT9Q3UousDCwkIby2gD0or4/OVLFOVaTx2zr54o5YcxjZE44DstEx LX1/cO2ITLGLvsQi5PApYIWR5/BrcLiLnxwiLYyZbwDPBmeQRsXJuUb5VHYBE0ci QuXrlGZOASrp7eA5qEept5gi -----END CERTIFICATE-----Generated at Wed Nov 5 12:54:50 2025 by rpki-client