$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft File: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft (raw, json) Hash identifier: COZnx2DozVfCexho168QtEdds5fJdmtzW/b1zrE/3QE= Subject key identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C Authority key identifier: E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 Certificate issuer: /CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Certificate serial: 0658 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft Manifest number: 0658 Signing time: Mon 21 Jul 2025 08:11:00 +0000 Manifest this update: Mon 21 Jul 2025 08:11:00 +0000 Manifest next update: Mon 21 Jul 2025 14:11:00 +0000 Files and hashes: 1: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl (hash: DbCCGGCbJwJQr4UDbZQbX/bgHLI9e3l5uvf8nJT7+0M=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 13:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Validity Not Before: Jul 21 08:11:00 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=AD37A19491DA8BF937C9EE16B1BE3D1458C2EE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:4b:4a:7a:8d:91:a1:88:eb:7b:ca:c2:3a: f9:d6:71:fb:22:2d:ce:76:62:f1:dd:eb:6d:c4:99: ee:92:9d:c3:f3:cb:10:d9:9c:98:00:01:18:b4:73: 67:b7:e4:69:e2:c6:af:c5:16:9f:c0:f4:7c:16:43: db:fb:62:a5:44:b6:a1:45:e8:02:16:d5:6d:76:54: 87:e3:6b:f3:59:7c:06:fa:90:66:0d:8d:75:f2:2b: 57:9d:96:e5:64:d4:df:60:8f:03:cb:8e:00:18:1d: ee:5a:5a:b6:ba:79:c4:bb:69:3a:66:81:61:d8:d7: 88:f9:dc:b5:0c:83:59:91:a0:39:e8:96:39:db:6f: 70:d0:10:97:b3:84:2f:11:af:1c:ba:6a:e7:cc:30: 9f:25:05:2c:0f:53:c4:03:5f:ae:a8:b2:19:eb:69: 43:9f:3e:ee:72:5d:c9:78:36:e0:64:f2:4d:b5:87: de:c4:13:b0:c6:f9:6c:cb:e5:88:00:08:37:44:0f: 34:59:59:20:1e:86:cb:eb:34:c9:e6:5d:71:fd:7b: bf:7e:fb:5d:5b:77:28:53:dc:c8:47:1a:13:09:de: d1:59:04:57:52:b4:6f:88:55:c2:49:69:ce:6e:ca: f3:10:90:4e:ab:60:41:f4:22:49:d9:a0:ab:d3:cc: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C X509v3 Authority Key Identifier: keyid:E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:69:c7:70:0c:d5:e3:6f:7e:57:73:c2:c6:e3:7c:98:6a:6c: e4:c1:df:a8:c2:ff:49:e3:32:79:35:6d:93:88:69:a0:bc:9e: dd:5a:4b:7f:72:6d:d6:f7:57:2c:e0:a4:be:74:98:13:69:8e: 65:1e:33:95:e6:28:9c:2f:00:d9:a0:e6:76:6a:93:7c:49:d2: a6:5d:57:b5:8e:c3:eb:97:f5:26:0f:18:1f:c8:ac:36:e7:7a: d3:9e:c2:ca:44:f1:ee:18:c6:8a:5f:f1:97:5b:ad:02:bf:e7: a3:a2:0e:1e:3f:fe:05:a5:00:35:42:08:44:34:db:98:25:f7: b0:c8:eb:0d:ac:63:37:5f:5a:61:9e:34:fb:a2:27:dc:fd:dc: 4b:ee:fe:ed:06:8d:48:5d:13:9d:e1:fa:0d:29:8e:18:f6:80: 9f:3b:f3:df:4c:55:5f:79:3a:00:b3:26:52:81:0a:88:c3:f9: 9c:00:27:e3:74:af:77:00:30:94:10:1a:a4:52:f1:c3:be:ff: 24:0b:d0:55:24:0b:fa:e4:75:4e:5f:ea:98:f2:93:13:82:14: 97:97:cb:c6:a7:88:82:95:74:32:81:2d:19:fb:d8:57:0e:d8: b6:6b:c0:49:bd:78:9c:98:ae:8a:db:ac:b4:23:31:be:28:14: 64:3c:7c:71 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTc4 QTIxMjY5MDUwRkI1NTFCQjk1NzdCQTJGNTEwMTA1QTE0Q0VCMjAeFw0yNTA3MjEw ODExMDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFEMzdBMTk0OTFEQThC RjkzN0M5RUUxNkIxQkUzRDE0NThDMkVFNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeQktKeo2RoYjre8rCOvnWcfsiLc52YvHd623Eme6SncPzyxDZ nJgAARi0c2e35Gnixq/FFp/A9HwWQ9v7YqVEtqFF6AIW1W12VIfja/NZfAb6kGYN jXXyK1edluVk1N9gjwPLjgAYHe5aWra6ecS7aTpmgWHY14j53LUMg1mRoDnoljnb b3DQEJezhC8Rrxy6aufMMJ8lBSwPU8QDX66oshnraUOfPu5yXcl4NuBk8k21h97E E7DG+WzL5YgACDdEDzRZWSAehsvrNMnmXXH9e79++11bdyhT3MhHGhMJ3tFZBFdS tG+IVcJJac5uyvMQkE6rYEH0IknZoKvTzLK9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUrTehlJHai/k3ye4Wsb49FFjC7mwwHwYDVR0jBBgwFoAU54ohJpBQ+1UbuVd7 ovUQEFoUzrIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Mi81NG9oSnBCUS0xVWJ1VmQ3b3ZVUUVGb1V6ckkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzU0b2hKcEJRLTFVYnVWZDdvdlVRRUZvVXpySS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTIvNTRvaEpwQlEtMVVi dVZkN292VVFFRm9VenJJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE9px3AM1eNvfldzwsbjfJhqbOTB36jC/0njMnk1bZOIaaC8nt1aS39ybdb3 VyzgpL50mBNpjmUeM5XmKJwvANmg5nZqk3xJ0qZdV7WOw+uX9SYPGB/IrDbnetOe wspE8e4Yxopf8ZdbrQK/56OiDh4//gWlADVCCEQ025gl97DI6w2sYzdfWmGeNPui J9z93Evu/u0GjUhdE53h+g0pjhj2gJ87899MVV95OgCzJlKBCojD+ZwAJ+N0r3cA MJQQGqRS8cO+/yQL0FUkC/rkdU5f6pjykxOCFJeXy8aniIKVdDKBLRn72FcO2LZr wEm9eJyYrorbrLQjMb4oFGQ8fHE= -----END CERTIFICATE-----Generated at Mon Jul 21 13:24:42 2025 by rpki-client