$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: TU+Qjb0BPpIAWwilBgDUvj59kuUEscq3eM4AZzVtR80= Subject key identifier: 81:4D:33:48:38:D1:03:16:5C:B8:21:4F:63:3F:BD:56:1B:EB:EC:8A Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 30B631EE7E6BF726BC65AE23D378662E709FD121 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: FB Signing time: Sun 26 Jul 2026 16:37:03 +0000 Manifest this update: Sun 26 Jul 2026 16:32:03 +0000 Manifest next update: Mon 27 Jul 2026 18:23:03 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: MPhTLhqGdJGBYtClxDn/ALVx/5xscrND+E2W0lJjfco=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 18:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b6:31:ee:7e:6b:f7:26:bc:65:ae:23:d3:78:66:2e:70:9f:d1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Jul 26 16:32:03 2026 GMT Not After : Jul 27 18:23:03 2026 GMT Subject: CN=814D334838D103165CB8214F633FBD561BEBEC8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:2d:60:89:08:46:70:13:a7:8e:f3:90:3c: ca:96:50:73:fd:9b:47:67:30:dc:95:3e:1e:52:ca: b4:f6:39:25:83:16:c7:a1:5f:05:a1:4c:f1:06:1f: dc:d7:e0:b5:3e:11:c5:38:ae:bf:46:be:93:21:e8: 61:11:b7:b0:87:ee:fa:fc:60:82:60:d2:06:4f:1b: f1:85:88:12:4d:9a:45:11:34:11:1b:b0:ab:ea:28: ce:86:bc:ac:61:a0:b7:8b:7a:96:b8:c3:c3:7b:b1: 53:ac:d8:07:8f:ab:58:2a:c6:3a:e8:6c:d4:23:61: d4:f5:20:7e:d1:a2:b1:98:87:7f:c5:d9:11:2e:15: 89:eb:38:1b:98:ec:e2:42:70:d8:14:e5:e2:67:52: 54:51:b1:4a:4f:7b:13:19:92:40:92:bd:14:9b:9c: 1a:9b:39:b7:c7:64:d5:8e:62:48:c2:36:6c:6f:85: da:45:fc:71:b5:07:30:de:f9:da:fd:2e:b5:26:38: 30:2e:10:28:41:99:bf:ea:eb:aa:9a:da:e8:1c:e5: 3f:97:5e:9b:12:10:93:46:c5:bf:d0:7b:98:72:52: da:97:fc:02:d3:74:65:b6:e7:40:84:16:ba:c4:b1: cd:35:2d:a2:7c:13:ba:7c:4e:71:99:1f:4c:ed:25: aa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4D:33:48:38:D1:03:16:5C:B8:21:4F:63:3F:BD:56:1B:EB:EC:8A X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:33:f2:ca:df:b2:6b:25:4b:9f:c8:a4:f3:0c:b8:e8:ca:44: 11:e0:73:e8:f0:42:c6:ea:eb:ce:b2:32:29:55:e8:c1:32:70: 13:46:e3:b3:43:3c:4f:41:e7:0c:38:bf:3b:da:74:11:c3:82: 46:81:f3:d1:d3:4a:b5:5c:93:ff:52:a0:21:ac:bb:94:0d:ea: e2:da:0c:9d:8e:cf:49:fc:f3:f8:c3:f5:da:4d:d7:64:be:7d: 13:ab:48:e4:1c:9f:a7:ec:1e:68:70:15:7c:9a:90:68:74:e6: f3:bb:b2:92:33:5a:be:06:2d:14:ed:0a:34:59:7c:40:eb:55: 4e:9a:51:39:cc:74:b0:a1:1d:5a:e8:08:c5:ba:6f:b3:13:8a: a8:1e:9a:44:a0:a6:93:69:19:6f:45:64:6c:d6:73:a0:16:b0: 8c:83:fc:96:2a:cd:e9:7c:fb:7c:ba:51:69:30:d8:b4:45:6f: a1:12:29:4b:47:15:29:49:3e:4b:9c:e6:0e:09:87:b9:07:8e: e2:82:ef:07:87:b7:d2:f2:86:65:5c:eb:07:15:04:3e:7d:bf: ca:63:75:5c:e9:83:ca:f0:5a:9c:09:77:9f:c8:a6:a3:f4:cc: ef:88:b0:41:83:f2:7a:fc:e8:50:5d:9f:d5:35:36:b9:d5:9c: a2:19:14:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMLYx7n5r9ya8Za4j03hmLnCf0SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjA3MjYxNjMyMDNaFw0yNjA3MjcxODIzMDNaMDMxMTAvBgNV BAMTKDgxNEQzMzQ4MzhEMTAzMTY1Q0I4MjE0RjYzM0ZCRDU2MUJFQkVDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqi1giQhGcBOnjvOQPMqWUHP9 m0dnMNyVPh5SyrT2OSWDFsehXwWhTPEGH9zX4LU+EcU4rr9GvpMh6GERt7CH7vr8 YIJg0gZPG/GFiBJNmkURNBEbsKvqKM6GvKxhoLeLepa4w8N7sVOs2AePq1gqxjro bNQjYdT1IH7RorGYh3/F2REuFYnrOBuY7OJCcNgU5eJnUlRRsUpPexMZkkCSvRSb nBqbObfHZNWOYkjCNmxvhdpF/HG1BzDe+dr9LrUmODAuEChBmb/q66qa2ugc5T+X XpsSEJNGxb/Qe5hyUtqX/ALTdGW250CEFrrEsc01LaJ8E7p8TnGZH0ztJarPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgU0zSDjRAxZcuCFPYz+9Vhvr7IowHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDPyyt+yayVL n8ik8wy46MpEEeBz6PBCxurrzrIyKVXowTJwE0bjs0M8T0HnDDi/O9p0EcOCRoHz 0dNKtVyT/1KgIay7lA3q4toMnY7PSfzz+MP12k3XZL59E6tI5Byfp+weaHAVfJqQ aHTm87uykjNavgYtFO0KNFl8QOtVTppROcx0sKEdWugIxbpvsxOKqB6aRKCmk2kZ b0VkbNZzoBawjIP8lirN6Xz7fLpRaTDYtEVvoRIpS0cVKUk+S5zmDgmHuQeO4oLv B4e30vKGZVzrBxUEPn2/ymN1XOmDyvBanAl3n8imo/TM74iwQYPyevzoUF2f1TU2 udWcohkUxA== -----END CERTIFICATE-----Generated at Mon Jul 27 11:41:45 2026 by rpki-client