$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft File: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft (raw, json) Hash identifier: iE9QlXLM4RhyA2NBr/DNG6HODN1uSX7wlxe9cn5bY0U= Subject key identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C Authority key identifier: E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 Certificate issuer: /CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Certificate serial: 082A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft Manifest number: 082A Signing time: Fri 24 Oct 2025 17:36:04 +0000 Manifest this update: Fri 24 Oct 2025 17:36:04 +0000 Manifest next update: Fri 24 Oct 2025 23:36:04 +0000 Files and hashes: 1: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl (hash: pI3WNsmHuJotKIBdT0Ib01LNJ47kF9+rmRR/C17h7Rc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Validity Not Before: Oct 24 17:36:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=AD37A19491DA8BF937C9EE16B1BE3D1458C2EE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:4b:4a:7a:8d:91:a1:88:eb:7b:ca:c2:3a: f9:d6:71:fb:22:2d:ce:76:62:f1:dd:eb:6d:c4:99: ee:92:9d:c3:f3:cb:10:d9:9c:98:00:01:18:b4:73: 67:b7:e4:69:e2:c6:af:c5:16:9f:c0:f4:7c:16:43: db:fb:62:a5:44:b6:a1:45:e8:02:16:d5:6d:76:54: 87:e3:6b:f3:59:7c:06:fa:90:66:0d:8d:75:f2:2b: 57:9d:96:e5:64:d4:df:60:8f:03:cb:8e:00:18:1d: ee:5a:5a:b6:ba:79:c4:bb:69:3a:66:81:61:d8:d7: 88:f9:dc:b5:0c:83:59:91:a0:39:e8:96:39:db:6f: 70:d0:10:97:b3:84:2f:11:af:1c:ba:6a:e7:cc:30: 9f:25:05:2c:0f:53:c4:03:5f:ae:a8:b2:19:eb:69: 43:9f:3e:ee:72:5d:c9:78:36:e0:64:f2:4d:b5:87: de:c4:13:b0:c6:f9:6c:cb:e5:88:00:08:37:44:0f: 34:59:59:20:1e:86:cb:eb:34:c9:e6:5d:71:fd:7b: bf:7e:fb:5d:5b:77:28:53:dc:c8:47:1a:13:09:de: d1:59:04:57:52:b4:6f:88:55:c2:49:69:ce:6e:ca: f3:10:90:4e:ab:60:41:f4:22:49:d9:a0:ab:d3:cc: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C X509v3 Authority Key Identifier: keyid:E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:86:bb:51:41:ce:ad:7b:48:0d:77:91:31:3e:9a:0f:65:a8: 28:0d:a3:ca:b4:4d:7e:e4:41:9f:c4:d5:56:21:aa:c2:25:32: b0:52:6a:d6:09:93:89:3f:47:14:6e:ac:88:de:80:02:88:1b: e2:be:26:c2:45:07:f1:95:da:c8:21:7d:db:0e:e1:41:2b:95: 70:7e:97:08:2f:a8:09:3c:d0:b5:9d:8e:39:21:4c:c0:26:9b: 72:1f:f8:84:46:ff:f9:38:7c:85:b7:bd:5f:2f:cb:94:ca:1a: f9:4b:d8:e3:f9:0a:8c:87:28:f0:a0:68:b0:c7:a1:93:c0:78: 20:4b:f9:02:e5:b8:fb:cf:3a:ac:eb:ac:d5:4f:16:b0:69:f4: f0:6c:3d:0c:0b:ec:f0:32:5b:e9:73:dc:d2:d1:f2:41:fb:0a: 69:3d:b3:8b:a9:9e:6d:3c:31:4a:fd:bb:1b:24:b4:f6:95:0f: 32:ba:cb:55:50:42:ff:ed:60:d1:81:96:8b:67:f2:15:06:c1: 9e:42:fe:36:d1:d0:70:39:fe:ee:e7:95:97:b7:0b:67:db:1b: 82:fd:8e:21:f2:a5:b3:2c:2d:46:a5:3b:00:ea:31:73:54:7f: 97:a1:44:fc:4f:c0:61:23:71:eb:28:ec:b5:2f:20:a4:b2:cd: 91:e5:11:c6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCCowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTc4 QTIxMjY5MDUwRkI1NTFCQjk1NzdCQTJGNTEwMTA1QTE0Q0VCMjAeFw0yNTEwMjQx NzM2MDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEFEMzdBMTk0OTFEQThC RjkzN0M5RUUxNkIxQkUzRDE0NThDMkVFNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeQktKeo2RoYjre8rCOvnWcfsiLc52YvHd623Eme6SncPzyxDZ nJgAARi0c2e35Gnixq/FFp/A9HwWQ9v7YqVEtqFF6AIW1W12VIfja/NZfAb6kGYN jXXyK1edluVk1N9gjwPLjgAYHe5aWra6ecS7aTpmgWHY14j53LUMg1mRoDnoljnb b3DQEJezhC8Rrxy6aufMMJ8lBSwPU8QDX66oshnraUOfPu5yXcl4NuBk8k21h97E E7DG+WzL5YgACDdEDzRZWSAehsvrNMnmXXH9e79++11bdyhT3MhHGhMJ3tFZBFdS tG+IVcJJac5uyvMQkE6rYEH0IknZoKvTzLK9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUrTehlJHai/k3ye4Wsb49FFjC7mwwHwYDVR0jBBgwFoAU54ohJpBQ+1UbuVd7 ovUQEFoUzrIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Mi81NG9oSnBCUS0xVWJ1VmQ3b3ZVUUVGb1V6ckkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzU0b2hKcEJRLTFVYnVWZDdvdlVRRUZvVXpySS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTIvNTRvaEpwQlEtMVVi dVZkN292VVFFRm9VenJJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALSGu1FBzq17SA13kTE+mg9lqCgNo8q0TX7kQZ/E1VYhqsIlMrBSatYJk4k/ RxRurIjegAKIG+K+JsJFB/GV2sghfdsO4UErlXB+lwgvqAk80LWdjjkhTMAmm3If +IRG//k4fIW3vV8vy5TKGvlL2OP5CoyHKPCgaLDHoZPAeCBL+QLluPvPOqzrrNVP FrBp9PBsPQwL7PAyW+lz3NLR8kH7Cmk9s4upnm08MUr9uxsktPaVDzK6y1VQQv/t YNGBlotn8hUGwZ5C/jbR0HA5/u7nlZe3C2fbG4L9jiHypbMsLUalOwDqMXNUf5eh RPxPwGEjceso7LUvIKSyzZHlEcY= -----END CERTIFICATE-----Generated at Fri Oct 24 21:15:27 2025 by rpki-client