$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft File: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft (raw, json) Hash identifier: ZXBmV2VZtAgZWv/z6pTcIlE60xaPsY59i1axJFazVU0= Subject key identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C Authority key identifier: E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 Certificate issuer: /CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Certificate serial: 06FF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft Manifest number: 06FF Signing time: Sun 24 Aug 2025 12:03:24 +0000 Manifest this update: Sun 24 Aug 2025 12:03:24 +0000 Manifest next update: Sun 24 Aug 2025 18:03:24 +0000 Files and hashes: 1: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl (hash: m7pVm8qhyjBkpArzSQIAFWly2QzQ15FVlkAz0AU5TO8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Validity Not Before: Aug 24 12:03:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=AD37A19491DA8BF937C9EE16B1BE3D1458C2EE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:4b:4a:7a:8d:91:a1:88:eb:7b:ca:c2:3a: f9:d6:71:fb:22:2d:ce:76:62:f1:dd:eb:6d:c4:99: ee:92:9d:c3:f3:cb:10:d9:9c:98:00:01:18:b4:73: 67:b7:e4:69:e2:c6:af:c5:16:9f:c0:f4:7c:16:43: db:fb:62:a5:44:b6:a1:45:e8:02:16:d5:6d:76:54: 87:e3:6b:f3:59:7c:06:fa:90:66:0d:8d:75:f2:2b: 57:9d:96:e5:64:d4:df:60:8f:03:cb:8e:00:18:1d: ee:5a:5a:b6:ba:79:c4:bb:69:3a:66:81:61:d8:d7: 88:f9:dc:b5:0c:83:59:91:a0:39:e8:96:39:db:6f: 70:d0:10:97:b3:84:2f:11:af:1c:ba:6a:e7:cc:30: 9f:25:05:2c:0f:53:c4:03:5f:ae:a8:b2:19:eb:69: 43:9f:3e:ee:72:5d:c9:78:36:e0:64:f2:4d:b5:87: de:c4:13:b0:c6:f9:6c:cb:e5:88:00:08:37:44:0f: 34:59:59:20:1e:86:cb:eb:34:c9:e6:5d:71:fd:7b: bf:7e:fb:5d:5b:77:28:53:dc:c8:47:1a:13:09:de: d1:59:04:57:52:b4:6f:88:55:c2:49:69:ce:6e:ca: f3:10:90:4e:ab:60:41:f4:22:49:d9:a0:ab:d3:cc: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C X509v3 Authority Key Identifier: keyid:E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:72:df:9a:e5:c6:d4:eb:21:32:da:2a:30:c5:c9:d8:1d:1f: c6:7c:30:a6:52:19:8e:52:5c:35:f2:4d:ca:98:a7:52:89:8e: de:9c:49:63:15:54:3b:ef:c4:a1:f0:79:45:c4:41:fc:6a:23: 97:d0:cf:6a:7d:59:ae:ec:b2:c7:25:a9:61:a6:2f:d1:1e:51: 3a:72:7d:1d:f0:17:ac:ec:7b:f3:96:0c:0a:e3:85:86:ac:92: 82:1a:bb:e5:a1:31:06:39:d1:10:87:18:30:e3:06:bf:c3:53: 40:34:ab:ee:3c:48:63:84:e7:e7:89:48:d1:b3:ac:ef:81:d4: 3e:1c:b6:c3:98:8d:60:f1:1d:b1:db:24:1e:03:7c:e9:dc:2b: 39:4c:20:2e:58:00:f7:40:1d:de:f4:82:07:7a:2f:c1:8a:59: 60:4f:29:be:a4:00:d6:8d:67:de:c2:93:b7:49:70:b9:b3:b5: e3:0c:00:16:b1:21:22:b5:9e:c1:8d:d0:ab:1c:a2:44:d0:ff: 9a:28:f4:1f:c5:a2:a7:06:00:76:bb:0c:87:e8:7b:dc:19:6b: 5c:f6:06:58:1e:5f:99:11:3d:90:12:ca:59:46:54:62:90:4a: 62:26:4d:a7:c8:67:3c:ef:3b:1b:51:2c:4f:ca:b7:a1:23:34: d0:72:10:8c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTc4 QTIxMjY5MDUwRkI1NTFCQjk1NzdCQTJGNTEwMTA1QTE0Q0VCMjAeFw0yNTA4MjQx MjAzMjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEFEMzdBMTk0OTFEQThC RjkzN0M5RUUxNkIxQkUzRDE0NThDMkVFNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeQktKeo2RoYjre8rCOvnWcfsiLc52YvHd623Eme6SncPzyxDZ nJgAARi0c2e35Gnixq/FFp/A9HwWQ9v7YqVEtqFF6AIW1W12VIfja/NZfAb6kGYN jXXyK1edluVk1N9gjwPLjgAYHe5aWra6ecS7aTpmgWHY14j53LUMg1mRoDnoljnb b3DQEJezhC8Rrxy6aufMMJ8lBSwPU8QDX66oshnraUOfPu5yXcl4NuBk8k21h97E E7DG+WzL5YgACDdEDzRZWSAehsvrNMnmXXH9e79++11bdyhT3MhHGhMJ3tFZBFdS tG+IVcJJac5uyvMQkE6rYEH0IknZoKvTzLK9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUrTehlJHai/k3ye4Wsb49FFjC7mwwHwYDVR0jBBgwFoAU54ohJpBQ+1UbuVd7 ovUQEFoUzrIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Mi81NG9oSnBCUS0xVWJ1VmQ3b3ZVUUVGb1V6ckkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzU0b2hKcEJRLTFVYnVWZDdvdlVRRUZvVXpySS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTIvNTRvaEpwQlEtMVVi dVZkN292VVFFRm9VenJJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKly35rlxtTrITLaKjDFydgdH8Z8MKZSGY5SXDXyTcqYp1KJjt6cSWMVVDvv xKHweUXEQfxqI5fQz2p9Wa7sssclqWGmL9EeUTpyfR3wF6zse/OWDArjhYaskoIa u+WhMQY50RCHGDDjBr/DU0A0q+48SGOE5+eJSNGzrO+B1D4ctsOYjWDxHbHbJB4D fOncKzlMIC5YAPdAHd70ggd6L8GKWWBPKb6kANaNZ97Ck7dJcLmzteMMABaxISK1 nsGN0KscokTQ/5oo9B/FoqcGAHa7DIfoe9wZa1z2BlgeX5kRPZASyllGVGKQSmIm TafIZzzvOxtRLE/Kt6EjNNByEIw= -----END CERTIFICATE-----Generated at Sun Aug 24 14:05:21 2025 by rpki-client