$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft File: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft (raw, json) Hash identifier: oXApy1YCeW3pqdOaC6D6BCFhIZv3BojuDxPVoPG7c3Q= Subject key identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C Authority key identifier: E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 Certificate issuer: /CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Certificate serial: 0864 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft Manifest number: 0864 Signing time: Wed 05 Nov 2025 15:11:56 +0000 Manifest this update: Wed 05 Nov 2025 15:11:56 +0000 Manifest next update: Wed 05 Nov 2025 21:11:56 +0000 Files and hashes: 1: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl (hash: wZKPkUh9EuF4dmFIas4H4B/1u26V4l/1ZLPnYa2RlWA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E78A21269050FB551BB9577BA2F510105A14CEB2 Validity Not Before: Nov 5 15:11:56 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=AD37A19491DA8BF937C9EE16B1BE3D1458C2EE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:4b:4a:7a:8d:91:a1:88:eb:7b:ca:c2:3a: f9:d6:71:fb:22:2d:ce:76:62:f1:dd:eb:6d:c4:99: ee:92:9d:c3:f3:cb:10:d9:9c:98:00:01:18:b4:73: 67:b7:e4:69:e2:c6:af:c5:16:9f:c0:f4:7c:16:43: db:fb:62:a5:44:b6:a1:45:e8:02:16:d5:6d:76:54: 87:e3:6b:f3:59:7c:06:fa:90:66:0d:8d:75:f2:2b: 57:9d:96:e5:64:d4:df:60:8f:03:cb:8e:00:18:1d: ee:5a:5a:b6:ba:79:c4:bb:69:3a:66:81:61:d8:d7: 88:f9:dc:b5:0c:83:59:91:a0:39:e8:96:39:db:6f: 70:d0:10:97:b3:84:2f:11:af:1c:ba:6a:e7:cc:30: 9f:25:05:2c:0f:53:c4:03:5f:ae:a8:b2:19:eb:69: 43:9f:3e:ee:72:5d:c9:78:36:e0:64:f2:4d:b5:87: de:c4:13:b0:c6:f9:6c:cb:e5:88:00:08:37:44:0f: 34:59:59:20:1e:86:cb:eb:34:c9:e6:5d:71:fd:7b: bf:7e:fb:5d:5b:77:28:53:dc:c8:47:1a:13:09:de: d1:59:04:57:52:b4:6f:88:55:c2:49:69:ce:6e:ca: f3:10:90:4e:ab:60:41:f4:22:49:d9:a0:ab:d3:cc: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:A1:94:91:DA:8B:F9:37:C9:EE:16:B1:BE:3D:14:58:C2:EE:6C X509v3 Authority Key Identifier: keyid:E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:51:1b:d6:44:58:d5:de:e9:e9:aa:7c:4d:a8:71:84:e9:1a: fb:59:83:b2:08:3e:91:6e:ef:d6:3b:6c:5e:86:28:b5:33:a0: 9d:61:f9:cb:1d:06:ba:08:da:3f:39:63:d2:84:2f:cb:bd:75: f2:3a:41:dd:35:14:f4:77:dd:28:9a:89:43:27:b3:05:3d:c6: 59:13:58:43:6e:44:3e:e5:a0:89:91:08:c7:f9:fd:a8:dc:3a: 84:9b:65:db:1e:1f:79:38:41:2e:0a:0e:74:6a:9c:b0:97:40: 1d:2d:15:73:22:6f:99:b5:4b:4a:1d:c1:d3:84:af:48:e7:87: ce:10:6e:d4:11:2c:dd:5b:bd:84:0b:d1:c7:1d:36:30:30:95: 33:fe:0e:e6:8f:3c:ce:f0:d6:d0:4d:6e:6e:6c:a6:b2:c1:dd: 7e:46:34:76:b8:3b:2a:32:9f:36:af:f7:d4:23:9b:48:c6:7d: 6f:9c:86:c6:76:d5:54:2c:51:f3:8d:0b:70:05:73:da:72:9c: e3:ab:98:16:5a:f3:d3:d0:a9:9d:41:76:c4:f7:b7:a7:c1:02: c3:cb:63:47:ab:71:2d:d1:26:1b:70:08:2c:fd:33:fe:ed:d1: 49:ed:cd:49:db:c9:a5:55:51:e0:e3:4b:1b:ef:22:35:7c:5e: fd:ed:15:ca -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTc4 QTIxMjY5MDUwRkI1NTFCQjk1NzdCQTJGNTEwMTA1QTE0Q0VCMjAeFw0yNTExMDUx NTExNTZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEFEMzdBMTk0OTFEQThC RjkzN0M5RUUxNkIxQkUzRDE0NThDMkVFNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeQktKeo2RoYjre8rCOvnWcfsiLc52YvHd623Eme6SncPzyxDZ nJgAARi0c2e35Gnixq/FFp/A9HwWQ9v7YqVEtqFF6AIW1W12VIfja/NZfAb6kGYN jXXyK1edluVk1N9gjwPLjgAYHe5aWra6ecS7aTpmgWHY14j53LUMg1mRoDnoljnb b3DQEJezhC8Rrxy6aufMMJ8lBSwPU8QDX66oshnraUOfPu5yXcl4NuBk8k21h97E E7DG+WzL5YgACDdEDzRZWSAehsvrNMnmXXH9e79++11bdyhT3MhHGhMJ3tFZBFdS tG+IVcJJac5uyvMQkE6rYEH0IknZoKvTzLK9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUrTehlJHai/k3ye4Wsb49FFjC7mwwHwYDVR0jBBgwFoAU54ohJpBQ+1UbuVd7 ovUQEFoUzrIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Mi81NG9oSnBCUS0xVWJ1VmQ3b3ZVUUVGb1V6ckkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzU0b2hKcEJRLTFVYnVWZDdvdlVRRUZvVXpySS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTIvNTRvaEpwQlEtMVVi dVZkN292VVFFRm9VenJJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABdRG9ZEWNXe6emqfE2ocYTpGvtZg7IIPpFu79Y7bF6GKLUzoJ1h+csdBroI 2j85Y9KEL8u9dfI6Qd01FPR33SiaiUMnswU9xlkTWENuRD7loImRCMf5/ajcOoSb ZdseH3k4QS4KDnRqnLCXQB0tFXMib5m1S0odwdOEr0jnh84QbtQRLN1bvYQL0ccd NjAwlTP+DuaPPM7w1tBNbm5sprLB3X5GNHa4Oyoynzav99Qjm0jGfW+chsZ21VQs UfONC3AFc9pynOOrmBZa89PQqZ1BdsT3t6fBAsPLY0ercS3RJhtwCCz9M/7t0Unt zUnbyaVVUeDjSxvvIjV8Xv3tFco= -----END CERTIFICATE-----Generated at Wed Nov 5 19:34:53 2025 by rpki-client