$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: BpHkp3fCMdfUPIO1+3+Kuw/P3sqLXaptIkEXR6uWdB0= Subject key identifier: 9F:F2:03:C9:F2:70:03:D7:5E:2C:BD:C7:7E:89:62:64:59:60:22:A6 Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 011453F0BAF61B5F2CC79B62241CEF0B934A4FD2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: 83 Signing time: Mon 27 Apr 2026 12:43:47 +0000 Manifest this update: Mon 27 Apr 2026 12:38:47 +0000 Manifest next update: Tue 28 Apr 2026 14:14:47 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: Cm4HwOrtuZ8EfcTRuhjNp2hh3FT0Me04oAxIr0hTy3Y=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:14:53:f0:ba:f6:1b:5f:2c:c7:9b:62:24:1c:ef:0b:93:4a:4f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Apr 27 12:38:47 2026 GMT Not After : Apr 28 14:14:47 2026 GMT Subject: CN=9FF203C9F27003D75E2CBDC77E896264596022A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:4b:fb:10:77:dc:dc:3a:4a:ae:6e:80:53: 1e:6a:8a:0f:39:d1:40:3a:e7:2e:ef:84:4b:fc:5b: 31:65:a0:e3:2a:31:eb:0e:c5:e3:dc:2e:05:57:bd: c1:1e:a0:15:28:35:e4:bd:d9:a9:15:1d:99:26:03: 2e:64:49:f8:b2:9e:91:30:7d:af:76:c3:ba:62:05: 7f:ff:d2:59:4b:b5:0f:46:66:e2:ab:59:ee:33:0d: 52:9a:ee:a8:1a:f1:c3:dd:c5:79:0c:34:9f:5e:2b: de:cd:be:85:ef:66:9f:53:76:4d:51:2d:f2:49:86: e8:68:d9:22:65:86:d2:48:9c:75:1c:cb:6d:cc:72: ec:f1:f8:b8:e4:dc:04:bc:16:4d:cb:49:ab:ba:c9: 04:fb:32:39:92:3c:bf:3a:46:3d:2f:11:ff:24:19: 90:7f:af:bb:aa:ac:df:03:65:21:19:77:03:0a:ef: b4:90:c3:8a:31:aa:c9:e5:55:05:b0:aa:fe:56:f8: 38:a2:7c:52:f9:56:86:92:80:3c:98:8a:f4:97:fc: cc:1f:9d:12:fd:e3:fd:9e:a1:74:c5:01:21:ef:da: 22:ab:80:54:bb:a9:79:32:89:25:cc:b6:61:7f:57: 5c:79:ce:33:68:5b:2c:f3:e8:7c:a8:05:6d:33:7c: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F2:03:C9:F2:70:03:D7:5E:2C:BD:C7:7E:89:62:64:59:60:22:A6 X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:76:57:12:71:59:d3:6e:65:ae:0a:bb:a7:dd:71:72:87:e4: 92:6e:41:4f:8e:19:d7:7c:53:52:13:26:11:4d:ed:80:6e:49: 90:33:f6:68:c2:6b:41:7b:3d:77:25:03:13:d7:89:0c:46:42: 2f:b5:0e:eb:5c:56:af:7c:6d:9e:82:37:d4:6e:3d:e1:86:98: 25:2b:cf:9d:96:0b:c2:79:18:63:af:0a:75:35:89:fb:bc:11: 44:7a:5a:51:6a:c5:5b:fb:3d:23:99:9e:e8:70:a8:a7:a5:9a: 48:48:4e:87:09:fa:20:70:64:28:fb:4a:f6:99:d2:75:9b:ef: fa:6e:3d:06:ed:f7:69:25:ca:ff:bc:0b:77:fa:a2:24:f9:a1: c8:66:f6:3c:06:21:f2:6e:bf:96:b4:78:f3:4d:ae:a5:b6:bc: 61:db:ed:80:3b:65:d8:52:6f:1a:9e:5f:b5:f1:ce:3d:7a:9b: 2b:ec:de:11:40:a5:06:70:00:26:0d:4a:64:14:de:2d:f1:05: ed:d4:41:13:c9:b2:6e:62:8c:b1:9b:4f:f3:f0:29:02:62:b0: c1:8f:c3:e5:5e:bc:97:72:21:2b:4d:ec:a4:af:8d:40:a6:0d: 7b:69:83:a3:cb:37:d4:84:2f:12:fc:41:28:8a:b8:4c:9e:a8: d0:60:f4:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUARRT8Lr2G18sx5tiJBzvC5NKT9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjA0MjcxMjM4NDdaFw0yNjA0MjgxNDE0NDdaMDMxMTAvBgNV BAMTKDlGRjIwM0M5RjI3MDAzRDc1RTJDQkRDNzdFODk2MjY0NTk2MDIyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MEv7EHfc3DpKrm6AUx5qig85 0UA65y7vhEv8WzFloOMqMesOxePcLgVXvcEeoBUoNeS92akVHZkmAy5kSfiynpEw fa92w7piBX//0llLtQ9GZuKrWe4zDVKa7qga8cPdxXkMNJ9eK97NvoXvZp9Tdk1R LfJJhuho2SJlhtJInHUcy23Mcuzx+Ljk3AS8Fk3LSau6yQT7MjmSPL86Rj0vEf8k GZB/r7uqrN8DZSEZdwMK77SQw4oxqsnlVQWwqv5W+DiifFL5VoaSgDyYivSX/Mwf nRL94/2eoXTFASHv2iKrgFS7qXkyiSXMtmF/V1x5zjNoWyzz6HyoBW0zfC3LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn/IDyfJwA9deLL3HfoliZFlgIqYwHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHZXEnFZ025l rgq7p91xcofkkm5BT44Z13xTUhMmEU3tgG5JkDP2aMJrQXs9dyUDE9eJDEZCL7UO 61xWr3xtnoI31G494YaYJSvPnZYLwnkYY68KdTWJ+7wRRHpaUWrFW/s9I5me6HCo p6WaSEhOhwn6IHBkKPtK9pnSdZvv+m49Bu33aSXK/7wLd/qiJPmhyGb2PAYh8m6/ lrR4802upba8YdvtgDtl2FJvGp5ftfHOPXqbK+zeEUClBnAAJg1KZBTeLfEF7dRB E8mybmKMsZtP8/ApAmKwwY/D5V68l3IhK03spK+NQKYNe2mDo8s31IQvEvxBKIq4 TJ6o0GD0+Q== -----END CERTIFICATE-----Generated at Mon Apr 27 16:15:10 2026 by rpki-client