$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft File: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft (raw, json) Hash identifier: Scv+x1ZbxGtyIMAeXCGrIgUjec1fGGpZ2RthQC4eF0w= Subject key identifier: EB:EB:E9:41:15:A7:79:9C:DD:61:8E:9C:CB:F1:74:DB:5F:79:F5:DF Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 Certificate issuer: /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Certificate serial: 263515E782CF4DD86CCE04F7B30CE6D8275FA0D6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 04:24:17 +0000 Manifest this update: Mon 13 Apr 2026 04:19:17 +0000 Manifest next update: Tue 14 Apr 2026 05:35:17 +0000 Files and hashes: 1: 3130332e3131362e39322e302f32342d3234203d3e20313337373938.roa (hash: GxDjwoGwXNDMqifO5LMnh9aEKS7YfWtIczricIBrf7c=) 2: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl (hash: +nDv/7CXMHGH9xklZtTSvUOInuap+JE1dKMS9UL0FDg=) 3: 323430323a663863303a3a2f34382d3438203d3e20313337373938.roa (hash: cIxqlfd0QethhWMdV0g5VZkMAaNT0U3dpU5si9dWPEw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 05:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:35:15:e7:82:cf:4d:d8:6c:ce:04:f7:b3:0c:e6:d8:27:5f:a0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Validity Not Before: Apr 13 04:19:17 2026 GMT Not After : Apr 14 05:35:17 2026 GMT Subject: CN=EBEBE94115A7799CDD618E9CCBF174DB5F79F5DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2f:d4:c3:02:41:f9:69:29:27:50:58:5f:b2: fa:1d:b1:36:29:68:28:77:39:57:96:d5:bc:c5:3e: 7b:37:29:ec:e4:bd:e4:ba:01:f5:a4:bc:7e:b9:63: 32:44:13:58:b5:e9:13:3e:74:08:ba:24:ec:3c:b3: dd:52:59:04:0b:7d:4b:06:4e:43:4b:d0:61:60:b5: 17:c8:0d:40:02:e4:62:7a:63:55:04:b0:c1:d6:60: 85:cc:01:f3:03:d9:b8:4d:fd:83:06:72:2d:14:8b: c7:7e:f0:a5:92:ed:11:96:02:d3:53:38:6b:5b:f4: f9:0c:eb:cb:55:f8:01:7f:c5:2f:18:3c:d2:ab:40: c5:91:33:4d:85:ea:0c:52:6a:fc:d2:92:3c:5b:d5: 51:75:4a:e9:9e:65:50:44:ab:2a:1a:1e:d5:9e:ad: 17:ee:b1:d0:ae:24:a4:29:9f:48:98:6a:0d:c0:50: 52:c5:42:05:69:f5:ad:d3:1d:18:da:c8:d7:0f:d9: ce:a4:f9:d8:37:89:7c:dd:dc:72:ed:94:19:23:a0: d5:0a:b5:e7:74:e6:be:83:d0:5e:5e:75:87:cb:d9: 97:ec:64:8e:23:80:dd:26:e3:17:b7:c4:9a:54:f8: 89:65:dc:60:18:07:4d:72:6a:f1:a5:44:d2:8f:0e: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EB:E9:41:15:A7:79:9C:DD:61:8E:9C:CB:F1:74:DB:5F:79:F5:DF X509v3 Authority Key Identifier: keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:53:ee:aa:d3:aa:a2:81:d3:23:16:e4:c9:b5:d3:ea:0c:14: f6:7d:be:31:e5:98:fe:72:54:d1:09:16:77:be:46:e4:89:60: ba:8a:6a:22:18:30:23:d8:73:1f:a0:31:89:f0:2d:2e:93:2b: 17:1f:e1:ec:d7:41:05:d8:05:77:f8:98:5d:53:6b:c9:c5:4c: 31:26:de:ce:49:c5:d8:dd:96:5f:f6:06:ec:fc:5f:3d:c8:ba: d6:75:38:8d:82:6e:a1:e4:9d:1d:83:18:07:cf:66:9d:3d:63: e4:f0:ff:10:d8:9d:70:a5:01:61:91:de:ec:ff:af:13:e3:c7: 9b:7d:68:8c:fd:d4:56:90:e9:ac:36:4f:26:4c:d8:57:d8:e8: fa:25:d9:62:5d:4a:27:7e:48:c1:c1:c6:d6:16:90:f8:c0:02: 0d:f6:b6:07:3e:db:9a:c4:49:55:f0:33:8d:18:fd:5b:32:14: 4d:82:b0:d8:c8:c8:c5:eb:ea:da:4a:59:fe:5d:cf:cd:b9:31: bd:32:b8:f7:01:05:ba:d9:8b:3e:1e:f8:f1:9e:f4:60:77:0c: ca:b3:41:89:1c:9a:b7:63:7d:8b:4f:07:ed:25:b7:05:e1:ac: b3:33:ad:49:97:33:dd:09:5f:e6:9d:91:ba:c9:63:d1:47:9d: d7:31:ed:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJjUV54LPTdhszgT3swzm2CdfoNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURF RjRDMkNFNjAeFw0yNjA0MTMwNDE5MTdaFw0yNjA0MTQwNTM1MTdaMDMxMTAvBgNV BAMTKEVCRUJFOTQxMTVBNzc5OUNERDYxOEU5Q0NCRjE3NERCNUY3OUY1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWL9TDAkH5aSknUFhfsvodsTYp aCh3OVeW1bzFPns3KezkveS6AfWkvH65YzJEE1i16RM+dAi6JOw8s91SWQQLfUsG TkNL0GFgtRfIDUAC5GJ6Y1UEsMHWYIXMAfMD2bhN/YMGci0Ui8d+8KWS7RGWAtNT OGtb9PkM68tV+AF/xS8YPNKrQMWRM02F6gxSavzSkjxb1VF1SumeZVBEqyoaHtWe rRfusdCuJKQpn0iYag3AUFLFQgVp9a3THRjayNcP2c6k+dg3iXzd3HLtlBkjoNUK ted05r6D0F5edYfL2ZfsZI4jgN0m4xe3xJpU+Ill3GAYB01yavGlRNKPDiSzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6+vpQRWneZzdYY6cy/F021959d8wHwYDVR0j BBgwFoAURa5R8xjTVTK+tv/8Yioqre9MLOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzA2MTI0OS8wLzQ1QUU1MUYzMThEMzU1MzJCRUI2RkZGQzYyMkEy QUFERUY0QzJDRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURFRjRDMkNFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcwNjEyNDkvMC80NUFFNTFGMzE4RDM1 NTMyQkVCNkZGRkM2MjJBMkFBREVGNEMyQ0U2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlPuqtOqooHT IxbkybXT6gwU9n2+MeWY/nJU0QkWd75G5IlguopqIhgwI9hzH6AxifAtLpMrFx/h 7NdBBdgFd/iYXVNrycVMMSbezknF2N2WX/YG7PxfPci61nU4jYJuoeSdHYMYB89m nT1j5PD/ENidcKUBYZHe7P+vE+PHm31ojP3UVpDprDZPJkzYV9jo+iXZYl1KJ35I wcHG1haQ+MACDfa2Bz7bmsRJVfAzjRj9WzIUTYKw2MjIxevq2kpZ/l3PzbkxvTK4 9wEFutmLPh748Z70YHcMyrNBiRyat2N9i08H7SW3BeGsszOtSZcz3Qlf5p2Ruslj 0Ued1zHtdA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:43 2026 by rpki-client