
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
File: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft (raw, json)
Hash identifier: HPerQdfDoNCa2sQ9vcfCOfzuK9Ztpk3OrdJjfseS0bY=
Subject key identifier: BF:35:85:8D:5F:83:57:8C:E3:C4:3F:27:17:7D:B5:6D:74:00:65:00
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Certificate issuer: /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial: 60DB04E7B690215C301C8C45AED1C22F1B2F485F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 22:42:30 +0000
Manifest this update: Sun 22 Feb 2026 22:37:30 +0000
Manifest next update: Mon 23 Feb 2026 23:33:30 +0000
Files and hashes: 1: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl (hash: 6LxCOXucjeriBOq4SN+xocRMD7fDH0hGIxP/dspTorM=)
2: 3130332e3131362e39322e302f32342d3234203d3e20313337373938.roa (hash: GxDjwoGwXNDMqifO5LMnh9aEKS7YfWtIczricIBrf7c=)
3: 323430323a663863303a3a2f34382d3438203d3e20313337373938.roa (hash: cIxqlfd0QethhWMdV0g5VZkMAaNT0U3dpU5si9dWPEw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:db:04:e7:b6:90:21:5c:30:1c:8c:45:ae:d1:c2:2f:1b:2f:48:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Validity
Not Before: Feb 22 22:37:30 2026 GMT
Not After : Feb 23 23:33:30 2026 GMT
Subject: CN=BF35858D5F83578CE3C43F27177DB56D74006500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:60:85:78:45:ca:f7:9d:93:95:bd:94:ef:
64:3d:d4:f6:64:47:06:96:a6:5d:0a:b2:c9:85:6c:
74:0f:5f:4b:b2:87:3f:a4:f8:e0:4e:bd:5a:35:ff:
42:fc:67:52:53:98:e8:ff:b6:6b:2b:bd:73:8a:aa:
23:08:76:28:2c:ee:6e:8a:cc:6b:54:5c:8f:c7:f4:
cd:de:9a:b1:a9:a9:58:e8:e5:c0:35:f9:20:bd:4c:
20:42:22:03:82:e2:ee:c6:1c:91:8f:79:d7:b4:af:
23:a4:95:ca:72:39:a9:41:26:61:77:e7:b5:ad:7f:
1a:39:dc:59:e1:13:4c:be:8e:19:a8:60:2a:ad:ec:
3b:b4:0f:91:af:84:35:48:db:16:8e:8e:bd:de:be:
70:6e:02:e0:65:72:ee:14:8c:9f:ba:13:00:51:09:
67:44:13:8c:25:2c:4e:df:87:27:54:52:ba:59:69:
c4:06:93:3e:29:8b:15:3f:12:fe:b2:10:18:e5:3e:
31:62:7c:2f:6b:10:db:08:0b:a3:2b:17:60:cc:a1:
57:bb:b0:b3:9a:3d:94:97:6e:15:04:23:1c:58:f7:
95:a7:82:62:ba:b6:67:93:a4:c6:b8:99:c4:56:6d:
4b:6e:0b:04:76:b8:0e:3d:fe:6f:0a:d9:bb:d7:3b:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:85:8D:5F:83:57:8C:E3:C4:3F:27:17:7D:B5:6D:74:00:65:00
X509v3 Authority Key Identifier:
keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:50:4c:f6:d5:7a:e3:7a:9f:25:7e:ac:1e:b1:24:7d:24:df:
12:7a:e0:fd:e1:7b:28:fe:c6:af:28:c8:12:45:18:22:e9:4b:
79:a7:2c:f6:69:4a:45:da:1e:33:0c:10:f4:a5:48:cd:33:20:
bf:96:13:09:19:41:da:35:b9:6d:c0:f4:b4:fe:d2:32:db:e4:
f5:e7:bf:e5:71:f3:6a:e2:e6:3a:94:93:02:cd:f0:3a:17:8a:
5b:bd:ab:13:41:2b:2e:4a:2e:76:82:fb:7e:7b:45:f1:02:d9:
29:9e:2f:7f:58:e0:d9:a1:b6:b2:d1:e2:b1:7c:78:9d:98:88:
63:43:07:60:9c:ec:a9:2b:60:86:52:8d:87:bd:1a:d9:99:f8:
46:46:38:90:18:b5:f9:16:88:7b:9a:0a:8a:f4:85:eb:a4:d9:
23:be:d4:3a:ce:91:b5:70:f6:0f:18:07:68:f5:4a:34:9c:9a:
46:51:ad:2b:6f:62:66:1d:91:ad:54:61:eb:95:95:0e:16:ff:
49:75:1a:4d:02:c4:cc:54:fc:29:62:c2:07:67:30:30:cd:3f:
e9:32:ab:b1:89:bb:68:fc:f7:ad:09:81:da:b2:be:eb:3d:29:
74:40:e6:70:c2:60:30:12:58:4b:3c:80:98:02:32:81:84:11:
ed:92:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:09 2026 by rpki-client