$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft File: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft (raw, json) Hash identifier: /+nG6mVPzv1SxL+zF8BxCMpSrWTysJddXemoc2UxDjE= Subject key identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C Authority key identifier: E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 Certificate issuer: /CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Certificate serial: 0744 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft Manifest number: 0744 Signing time: Sun 07 Sep 2025 18:03:17 +0000 Manifest this update: Sun 07 Sep 2025 18:03:17 +0000 Manifest next update: Mon 08 Sep 2025 00:03:17 +0000 Files and hashes: 1: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl (hash: CpD5lxP58eURaKRPVdUwCP+CQaLuS0gtjlgG4m06kck=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Validity Not Before: Sep 7 18:03:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=AD37A19491DA8BF937C9EE16B1BE3D1458C2EE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:4b:4a:7a:8d:91:a1:88:eb:7b:ca:c2:3a: f9:d6:71:fb:22:2d:ce:76:62:f1:dd:eb:6d:c4:99: ee:92:9d:c3:f3:cb:10:d9:9c:98:00:01:18:b4:73: 67:b7:e4:69:e2:c6:af:c5:16:9f:c0:f4:7c:16:43: db:fb:62:a5:44:b6:a1:45:e8:02:16:d5:6d:76:54: 87:e3:6b:f3:59:7c:06:fa:90:66:0d:8d:75:f2:2b: 57:9d:96:e5:64:d4:df:60:8f:03:cb:8e:00:18:1d: ee:5a:5a:b6:ba:79:c4:bb:69:3a:66:81:61:d8:d7: 88:f9:dc:b5:0c:83:59:91:a0:39:e8:96:39:db:6f: 70:d0:10:97:b3:84:2f:11:af:1c:ba:6a:e7:cc:30: 9f:25:05:2c:0f:53:c4:03:5f:ae:a8:b2:19:eb:69: 43:9f:3e:ee:72:5d:c9:78:36:e0:64:f2:4d:b5:87: de:c4:13:b0:c6:f9:6c:cb:e5:88:00:08:37:44:0f: 34:59:59:20:1e:86:cb:eb:34:c9:e6:5d:71:fd:7b: bf:7e:fb:5d:5b:77:28:53:dc:c8:47:1a:13:09:de: d1:59:04:57:52:b4:6f:88:55:c2:49:69:ce:6e:ca: f3:10:90:4e:ab:60:41:f4:22:49:d9:a0:ab:d3:cc: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C X509v3 Authority Key Identifier: keyid:E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ad:7c:16:7e:a5:bc:d7:ec:78:14:25:d4:4a:f1:59:62:e6: 93:13:0b:69:73:e0:19:18:f1:0f:14:2e:69:45:b7:e7:75:c1: 03:43:f0:66:d3:46:d2:e7:5e:1d:a8:3a:88:3c:ca:63:bc:77: 63:1a:a9:ce:32:d5:c8:5f:33:70:65:e1:8a:f1:9f:5b:92:33: 6c:5e:50:33:68:de:77:b1:fe:7d:03:0e:f2:1b:4c:31:fd:f6: 52:59:fc:eb:4c:b4:2b:5c:3b:19:8b:00:c1:ea:1a:e8:c9:fc: 90:e8:d0:1f:71:25:50:4a:61:a2:9b:f9:d5:4b:23:80:05:c7: bd:d6:bd:93:2d:88:7f:1e:69:28:41:e8:25:98:0c:9f:05:15: 51:f6:64:6f:e1:67:eb:3c:1e:4f:82:02:52:8d:c4:a6:af:65: db:d2:9f:ac:90:de:4f:00:b6:96:ff:2d:62:f3:33:7a:cc:77: 31:72:cd:26:58:4a:90:03:da:a9:6c:6f:18:82:47:22:69:f5: 35:59:4d:f4:26:d3:67:ea:58:b0:c1:ca:1f:9e:33:a5:15:b1: 72:b2:27:ca:09:e1:a0:06:64:81:c5:2e:1b:14:3c:57:61:a0: ff:15:16:9f:3e:fc:60:8a:5e:31:45:c0:d1:47:58:54:bd:f4: 55:4a:3d:9b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTc4 QTIxMjY5MDUwRkI1NTFCQjk1NzdCQTJGNTEwMTA1QTE0Q0VCMjAeFw0yNTA5MDcx ODAzMTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEFEMzdBMTk0OTFEQThC RjkzN0M5RUUxNkIxQkUzRDE0NThDMkVFNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeQktKeo2RoYjre8rCOvnWcfsiLc52YvHd623Eme6SncPzyxDZ nJgAARi0c2e35Gnixq/FFp/A9HwWQ9v7YqVEtqFF6AIW1W12VIfja/NZfAb6kGYN jXXyK1edluVk1N9gjwPLjgAYHe5aWra6ecS7aTpmgWHY14j53LUMg1mRoDnoljnb b3DQEJezhC8Rrxy6aufMMJ8lBSwPU8QDX66oshnraUOfPu5yXcl4NuBk8k21h97E E7DG+WzL5YgACDdEDzRZWSAehsvrNMnmXXH9e79++11bdyhT3MhHGhMJ3tFZBFdS tG+IVcJJac5uyvMQkE6rYEH0IknZoKvTzLK9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUrTehlJHai/k3ye4Wsb49FFjC7mwwHwYDVR0jBBgwFoAU54ohJpBQ+1UbuVd7 ovUQEFoUzrIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Mi81NG9oSnBCUS0xVWJ1VmQ3b3ZVUUVGb1V6ckkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzU0b2hKcEJRLTFVYnVWZDdvdlVRRUZvVXpySS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTIvNTRvaEpwQlEtMVVi dVZkN292VVFFRm9VenJJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA6tfBZ+pbzX7HgUJdRK8Vli5pMTC2lz4BkY8Q8ULmlFt+d1wQND8GbTRtLn Xh2oOog8ymO8d2Maqc4y1chfM3Bl4Yrxn1uSM2xeUDNo3nex/n0DDvIbTDH99lJZ /OtMtCtcOxmLAMHqGujJ/JDo0B9xJVBKYaKb+dVLI4AFx73WvZMtiH8eaShB6CWY DJ8FFVH2ZG/hZ+s8Hk+CAlKNxKavZdvSn6yQ3k8Atpb/LWLzM3rMdzFyzSZYSpAD 2qlsbxiCRyJp9TVZTfQm02fqWLDByh+eM6UVsXKyJ8oJ4aAGZIHFLhsUPFdhoP8V Fp8+/GCKXjFFwNFHWFS99FVKPZs= -----END CERTIFICATE-----Generated at Sun Sep 7 20:07:36 2025 by rpki-client