$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft File: rvnRXVUWBDHU9wnoqjo61bzM1uU.mft (raw, json) Hash identifier: 9zWH7RI23Y/RvlyDCaLa0xNJ6VyXF2j6JLsHLg4dMRM= Subject key identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 Authority key identifier: AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 Certificate issuer: /CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Certificate serial: 1847 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft Manifest number: 1846 Signing time: Wed 05 Nov 2025 10:13:30 +0000 Manifest this update: Wed 05 Nov 2025 10:13:30 +0000 Manifest next update: Wed 05 Nov 2025 16:13:30 +0000 Files and hashes: 1: rvnRXVUWBDHU9wnoqjo61bzM1uU.crl (hash: xT3FOlcYZ//lm7uxbST1JbCWUd7r2fdgj8TRVG4I4DU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6215 (0x1847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5 Validity Not Before: Nov 5 10:13:30 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0B8E0425F3DFB4FC5ADADEF1A84A31CC41970B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:4b:56:fa:21:51:7e:b9:ed:95:52:ab:dd: 85:90:94:18:ef:68:f7:fd:2e:8f:8c:93:ac:71:fa: 95:e7:7b:21:d5:3d:3f:3d:5f:af:f9:5a:04:d4:c4: 0e:4b:f8:b4:73:5d:cb:49:71:70:20:75:7d:a6:37: f6:9c:c8:2d:2c:dc:75:40:20:71:a0:f9:08:73:62: 46:bb:f7:c8:2a:e9:45:46:52:4d:20:bb:a5:fa:af: 78:48:b6:5c:73:a7:89:7f:7a:da:51:5f:c4:e7:60: 2a:74:2b:74:cd:88:8e:6b:4d:75:98:ad:24:22:75: 09:27:8d:70:18:ab:e3:58:31:7f:8a:c0:bb:49:68: 0d:e1:32:fd:29:2f:33:f9:0b:31:36:db:67:93:cc: 00:07:3b:07:6d:42:52:b0:63:e5:a1:c3:58:f2:59: ea:ed:f5:51:1f:86:b1:bf:e3:1d:25:9a:a0:2a:29: 33:8f:41:b0:19:63:29:69:a8:24:13:08:34:8f:41: 35:8f:65:ad:93:3a:77:7d:83:22:93:7f:64:d8:15: ac:35:25:fe:b9:04:2a:c7:9f:c8:ea:3f:e5:d0:0e: 7d:92:9c:2e:97:bf:1d:f6:07:de:f1:ae:33:63:7e: 45:4c:cd:60:a9:48:a7:8e:42:58:01:e9:a2:37:d9: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60 X509v3 Authority Key Identifier: keyid:AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:af:de:e5:21:35:b2:14:52:98:85:90:ed:9a:3e:d1:91:e3: 2f:3a:46:4e:70:87:bc:b0:18:36:ea:e7:0b:73:e7:44:87:4e: b1:3c:6e:1b:97:b4:af:60:67:fe:8a:6c:b0:8e:a2:a3:a7:ff: 26:f8:c7:53:c8:e2:9e:1f:87:23:7f:16:b3:01:42:b8:27:96: 32:be:08:f7:6c:26:41:cd:9a:bf:95:c5:d7:36:1c:11:3b:68: e4:a3:36:7e:34:87:a2:a7:e2:48:10:3d:34:49:81:4a:ae:55: 99:97:2f:5d:ff:08:b8:85:94:b8:0e:5b:0c:af:c4:81:80:7d: f9:3d:54:d3:2b:71:75:0c:00:e1:b0:62:35:c7:ba:a0:16:73: 26:99:be:8a:27:33:86:9c:83:fd:ff:c3:0f:99:76:b7:df:fe: 42:33:3b:7f:97:7d:1f:d1:d3:49:cd:09:9a:88:49:7b:78:02: ac:6d:9f:28:05:c5:d2:16:83:13:35:4c:9a:11:67:75:8b:a2: 7c:79:eb:f5:3b:6f:7d:5a:e0:72:f3:c6:ae:ec:96:fd:be:c1: fb:7f:e6:85:65:8f:15:2f:57:b4:f9:4c:a9:08:f5:a6:6d:e4: 53:9f:68:78:0c:04:ba:00:b2:4a:4e:0d:bf:7a:7b:2e:71:d1: 06:31:8a:58 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICGEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVG OUQxNUQ1NTE2MDQzMUQ0RjcwOUU4QUEzQTNBRDVCQ0NDRDZFNTAeFw0yNTExMDUx MDEzMzBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBCOEUwNDI1RjNERkI0 RkM1QURBREVGMUE4NEEzMUNDNDE5NzBCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfqktW+iFRfrntlVKr3YWQlBjvaPf9Lo+Mk6xx+pXneyHVPT89 X6/5WgTUxA5L+LRzXctJcXAgdX2mN/acyC0s3HVAIHGg+QhzYka798gq6UVGUk0g u6X6r3hItlxzp4l/etpRX8TnYCp0K3TNiI5rTXWYrSQidQknjXAYq+NYMX+KwLtJ aA3hMv0pLzP5CzE222eTzAAHOwdtQlKwY+Whw1jyWert9VEfhrG/4x0lmqAqKTOP QbAZYylpqCQTCDSPQTWPZa2TOnd9gyKTf2TYFaw1Jf65BCrHn8jqP+XQDn2SnC6X vx32B97xrjNjfkVMzWCpSKeOQlgB6aI32VlTAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUC44EJfPftPxa2t7xqEoxzEGXC2AwHwYDVR0jBBgwFoAUrvnRXVUWBDHU9wno qjo61bzM1uUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEw L3J2blJYVlVXQkRIVTl3bm9xam82MWJ6TTF1VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcnZuUlhWVVdCREhVOXdub3FqbzYxYnpNMXVVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEwL3J2blJYVlVXQkRIVTl3 bm9xam82MWJ6TTF1VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBUr97lITWyFFKYhZDtmj7RkeMvOkZOcIe8sBg26ucLc+dEh06xPG4bl7SvYGf+ imywjqKjp/8m+MdTyOKeH4cjfxazAUK4J5Yyvgj3bCZBzZq/lcXXNhwRO2jkozZ+ NIeip+JIED00SYFKrlWZly9d/wi4hZS4DlsMr8SBgH35PVTTK3F1DADhsGI1x7qg FnMmmb6KJzOGnIP9/8MPmXa33/5CMzt/l30f0dNJzQmaiEl7eAKsbZ8oBcXSFoMT NUyaEWd1i6J8eev1O299WuBy88au7Jb9vsH7f+aFZY8VL1e0+UypCPWmbeRTn2h4 DAS6ALJKTg2/ensucdEGMYpY -----END CERTIFICATE-----Generated at Wed Nov 5 14:35:10 2025 by rpki-client