
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
File: 54B31AC409DB052FD501B70509D854CCE7B08A0B.mft (raw, json)
Hash identifier: PxiTXTnumHAQ2rjOoellefp/slU+vC8SkDFcEjDPYzY=
Subject key identifier: CD:27:DC:91:DB:C6:ED:46:33:14:53:0A:61:AE:75:69:8D:D0:A2:AE
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 742AFB1467F08F522862C84EFD0264D893B7AB31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
Manifest number: 0D
Signing time: Fri 29 May 2026 11:22:49 +0000
Manifest this update: Fri 29 May 2026 11:17:49 +0000
Manifest next update: Sat 30 May 2026 14:55:49 +0000
Files and hashes: 1: 54B31AC409DB052FD501B70509D854CCE7B08A0B.crl (hash: 874XZs1DixvhMs57Jmph5fbD9y0isKRfsL1RfW9CP4c=)
2: 3231302e31342e36372e302f32342d3234203d3e203137373735.roa (hash: fJYM69CU8Q4njA/iGDMKVnMUovKONm+BGKxaH8IkxYc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2a:fb:14:67:f0:8f:52:28:62:c8:4e:fd:02:64:d8:93:b7:ab:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: May 29 11:17:49 2026 GMT
Not After : May 30 14:55:49 2026 GMT
Subject: CN=CD27DC91DBC6ED463314530A61AE75698DD0A2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:2a:38:28:26:9f:7c:37:53:c4:d9:0b:f9:
85:a5:f3:24:d6:24:00:dc:4b:36:0d:d5:b0:7c:c2:
95:b9:a6:ce:b7:cb:15:0a:65:4d:9c:11:20:8e:f0:
ed:6c:a8:d0:40:07:3a:f5:59:e3:25:de:cd:71:23:
bd:32:49:ba:2b:6d:9f:82:77:73:70:00:11:b7:9a:
05:80:be:2a:54:9c:7a:33:94:75:6b:86:c7:c6:86:
44:5a:7c:0a:87:fc:87:cf:ab:41:2f:99:4b:80:26:
8c:0d:66:45:6b:af:03:0c:5f:48:7a:ea:a3:9b:a5:
7c:60:47:74:fd:1a:bd:fd:6c:3d:e4:df:25:bc:6b:
8c:d8:1d:8f:13:18:1c:4a:18:e1:cb:3b:a0:3d:a5:
6c:62:cb:b9:0e:9f:47:2c:54:d4:74:cc:04:11:1b:
d6:bd:49:f6:fd:f8:2d:4d:9c:09:61:24:82:3d:bf:
43:1d:98:ba:4c:f2:9d:01:81:d2:8e:0b:0e:a5:ec:
cf:d6:8d:2c:7b:3b:71:4e:cf:81:03:52:06:03:ea:
d1:5c:e4:e6:a8:0f:19:49:d7:c2:42:7d:cd:99:94:
61:ef:77:01:56:33:9b:47:52:22:c8:ab:f7:64:ca:
02:d0:5d:15:24:9a:9d:4c:29:84:db:6d:97:ea:9f:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:DC:91:DB:C6:ED:46:33:14:53:0A:61:AE:75:69:8D:D0:A2:AE
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:18:61:30:19:a3:f1:fa:a9:27:76:ff:fa:79:a8:2d:02:52:
ec:bb:a2:ce:f9:5e:ac:35:34:a3:c4:24:67:1f:87:53:6a:18:
78:16:46:06:22:f4:40:db:79:8c:e8:1a:19:34:8d:92:71:3b:
b0:dd:7e:59:81:36:c7:5e:9c:92:a3:b4:c6:a8:f1:72:25:b2:
cc:dd:16:9e:34:39:9f:ab:f1:2b:39:79:a8:d7:5e:25:d3:72:
e6:ee:7e:19:f1:ff:ed:8f:f3:bb:66:28:a1:40:ea:0a:63:a6:
09:ee:4e:0d:68:fb:1e:42:0b:9f:1a:29:7f:20:7a:cb:70:55:
0d:52:2e:cd:fb:bb:df:58:d1:d9:50:56:45:4c:9e:f2:bf:b7:
fc:cf:ba:0d:f1:7d:13:c5:6e:33:c3:eb:da:92:78:71:e2:d9:
e6:ce:af:1c:93:94:a1:24:22:5e:17:a3:f4:e4:26:9f:0f:16:
0b:26:84:4c:5e:7a:2e:f5:59:86:f6:83:e0:d1:d4:e3:11:c5:
8b:35:15:54:24:0b:3e:43:97:da:de:36:bc:cb:25:3d:73:6b:
e7:48:41:0b:a1:06:65:0f:6a:cc:f9:88:58:12:62:cd:72:82:
00:2c:26:ee:a7:cb:22:94:ea:11:77:69:88:16:d3:b4:60:fc:
42:24:65:46
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUdCr7FGfwj1IoYshO/QJk2JO3qzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA1MjkxMTE3NDlaFw0yNjA1MzAxNDU1NDlaMDMxMTAvBgNV
BAMTKENEMjdEQzkxREJDNkVENDYzMzE0NTMwQTYxQUU3NTY5OEREMEEyQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDyo4KCaffDdTxNkL+YWl8yTW
JADcSzYN1bB8wpW5ps63yxUKZU2cESCO8O1sqNBABzr1WeMl3s1xI70ySborbZ+C
d3NwABG3mgWAvipUnHozlHVrhsfGhkRafAqH/IfPq0EvmUuAJowNZkVrrwMMX0h6
6qObpXxgR3T9Gr39bD3k3yW8a4zYHY8TGBxKGOHLO6A9pWxiy7kOn0csVNR0zAQR
G9a9Sfb9+C1NnAlhJII9v0MdmLpM8p0BgdKOCw6l7M/WjSx7O3FOz4EDUgYD6tFc
5OaoDxlJ18JCfc2ZlGHvdwFWM5tHUiLIq/dkygLQXRUkmp1MKYTbbZfqn7fnAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUzSfckdvG7UYzFFMKYa51aY3Qoq4wHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC81NEIzMUFDNDA5REIw
NTJGRDUwMUI3MDUwOUQ4NTRDQ0U3QjA4QTBCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRhhMBmj8fqp
J3b/+nmoLQJS7LuizvlerDU0o8QkZx+HU2oYeBZGBiL0QNt5jOgaGTSNknE7sN1+
WYE2x16ckqO0xqjxciWyzN0WnjQ5n6vxKzl5qNdeJdNy5u5+GfH/7Y/zu2YooUDq
CmOmCe5ODWj7HkILnxopfyB6y3BVDVIuzfu731jR2VBWRUye8r+3/M+6DfF9E8Vu
M8Pr2pJ4ceLZ5s6vHJOUoSQiXhej9OQmnw8WCyaETF56LvVZhvaD4NHU4xHFizUV
VCQLPkOX2t42vMslPXNr50hBC6EGZQ9qzPmIWBJizXKCACwm7qfLIpTqEXdpiBbT
tGD8QiRlRg==
-----END CERTIFICATE-----
Generated at Fri May 29 22:02:45 2026 by rpki-client