$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: TAdTn7D/E90z9t86KNedufEnl2eEYdid8+RTzzDAvuI= Subject key identifier: A2:7D:5A:D9:DF:A5:98:7C:C0:DB:83:4B:EB:72:F9:7D:72:BD:2B:C9 Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 0572AAEF9A15C63D2DBCC647D88C919DF141F31D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: 43 Signing time: Tue 10 Mar 2026 06:23:36 +0000 Manifest this update: Tue 10 Mar 2026 06:18:36 +0000 Manifest next update: Wed 11 Mar 2026 09:33:36 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: KINMpRU73k5OXYF6o1QWzaql2Ra6VJZ5UzOU2XR6Khs=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 09:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:72:aa:ef:9a:15:c6:3d:2d:bc:c6:47:d8:8c:91:9d:f1:41:f3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Mar 10 06:18:36 2026 GMT Not After : Mar 11 09:33:36 2026 GMT Subject: CN=A27D5AD9DFA5987CC0DB834BEB72F97D72BD2BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:cc:e2:4b:46:50:c5:ba:0c:4c:44:84:ab: fa:95:8b:4a:12:b2:e5:ae:d8:d7:ce:ca:fc:69:7e: 0b:21:ef:83:2a:6e:ef:04:e7:94:81:ee:b8:8d:77: 77:4f:81:32:e2:4b:9c:cf:2f:ac:f8:90:1e:cb:65: 8a:c5:e2:70:d4:2a:49:01:9f:a6:f5:e9:ae:62:11: 6e:5f:0a:7b:13:59:c3:c7:c7:c4:bc:57:32:32:9a: 8a:7e:1c:df:0e:4b:25:3b:e7:76:fd:ce:90:04:aa: 51:a7:8f:34:d6:a0:29:9f:fc:91:b4:f1:9b:de:4d: 6e:5e:48:c4:f2:4c:a7:af:6e:88:4b:4e:cf:c3:6b: 45:08:b2:b2:8c:56:d0:9a:89:90:ac:5f:ee:71:9f: 99:d1:65:75:7d:a3:62:84:67:09:05:20:1c:fc:fa: 2b:af:91:c4:de:f3:b3:60:c0:c7:2e:cf:82:5d:fd: 0b:c6:eb:04:e8:d7:ea:ed:59:54:57:3a:2b:96:39: b7:6c:f3:f7:e5:f8:98:06:cb:a8:f9:70:40:15:27: 95:13:47:32:ca:80:7a:45:51:5a:b6:bf:31:55:6e: d1:91:6e:53:73:a7:21:6e:a3:26:e3:ca:ed:03:1e: e4:7a:23:60:3a:e0:a1:a6:e9:10:40:6e:e8:ef:83: 4a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7D:5A:D9:DF:A5:98:7C:C0:DB:83:4B:EB:72:F9:7D:72:BD:2B:C9 X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:14:d3:c7:b9:9f:52:b1:46:8d:5d:b3:79:d5:8e:82:23:32: e3:27:fe:f8:32:74:f9:9e:99:b6:f0:37:b6:1f:55:af:cc:85: 09:d1:50:35:d8:e4:b6:1f:90:c3:eb:ad:a6:42:2a:44:ed:b5: 87:b1:91:ec:19:91:e6:2a:26:31:c8:8a:26:8b:ab:23:6f:b3: e1:03:ee:a1:3a:48:d8:94:a1:50:25:02:5d:2f:91:d4:88:7c: f2:ff:c5:94:f4:3a:1c:f6:b1:2c:94:4a:f3:a5:c4:28:a9:de: 9a:57:f4:83:5c:02:83:8d:28:0e:25:49:09:0a:2a:2c:9f:57: 9f:21:ec:5e:ae:a2:70:9c:c0:f3:83:d9:a0:08:5d:22:0e:2c: d2:ce:83:21:23:cc:af:56:9b:01:06:7a:a4:91:a2:b9:58:72: 2b:2f:54:4e:39:b7:bf:ab:e8:a3:ff:10:ee:9f:20:37:bc:15: 60:82:2f:fb:72:c8:b0:dc:f9:5c:ff:2f:dd:fb:d0:6f:ec:df: 50:44:94:06:08:86:57:3a:03:4f:1d:d8:03:84:67:63:1b:47: 27:7f:e3:88:c4:5b:87:cb:09:9f:ef:c9:33:5d:4b:16:16:88: 93:17:e0:29:e6:9b:23:80:89:e7:25:b0:ae:33:80:5a:3d:17: f1:6c:a5:44 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBXKq75oVxj0tvMZH2IyRnfFB8x0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjAzMTAwNjE4MzZaFw0yNjAzMTEwOTMzMzZaMDMxMTAvBgNV BAMTKEEyN0Q1QUQ5REZBNTk4N0NDMERCODM0QkVCNzJGOTdENzJCRDJCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WsziS0ZQxboMTESEq/qVi0oS suWu2NfOyvxpfgsh74Mqbu8E55SB7riNd3dPgTLiS5zPL6z4kB7LZYrF4nDUKkkB n6b16a5iEW5fCnsTWcPHx8S8VzIymop+HN8OSyU753b9zpAEqlGnjzTWoCmf/JG0 8ZveTW5eSMTyTKevbohLTs/Da0UIsrKMVtCaiZCsX+5xn5nRZXV9o2KEZwkFIBz8 +iuvkcTe87NgwMcuz4Jd/QvG6wTo1+rtWVRXOiuWObds8/fl+JgGy6j5cEAVJ5UT RzLKgHpFUVq2vzFVbtGRblNzpyFuoybjyu0DHuR6I2A64KGm6RBAbujvg0ofAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUon1a2d+lmHzA24NL63L5fXK9K8kwHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRTTx7mfUrFG jV2zedWOgiMy4yf++DJ0+Z6ZtvA3th9Vr8yFCdFQNdjkth+Qw+utpkIqRO21h7GR 7BmR5iomMciKJourI2+z4QPuoTpI2JShUCUCXS+R1Ih88v/FlPQ6HPaxLJRK86XE KKnemlf0g1wCg40oDiVJCQoqLJ9XnyHsXq6icJzA84PZoAhdIg4s0s6DISPMr1ab AQZ6pJGiuVhyKy9UTjm3v6voo/8Q7p8gN7wVYIIv+3LIsNz5XP8v3fvQb+zfUESU BgiGVzoDTx3YA4RnYxtHJ3/jiMRbh8sJn+/JM11LFhaIkxfgKeabI4CJ5yWwrjOA Wj0X8WylRA== -----END CERTIFICATE-----Generated at Wed Mar 11 00:47:56 2026 by rpki-client