$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: Q2ayqhSnxyQJ/eBJExmnNtDJvcvoOhZ+vYbXO/BSuJg= Subject key identifier: 12:DC:A7:CF:FB:34:F4:7A:23:44:DE:FE:E1:CE:16:AE:FD:5A:5E:57 Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 133FDD14FC74CE6D675A65A82C0F27F246384B98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: BF Signing time: Thu 11 Jun 2026 10:58:41 +0000 Manifest this update: Thu 11 Jun 2026 10:53:41 +0000 Manifest next update: Fri 12 Jun 2026 13:21:41 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: NCVzJ7P6nbO3EHUxdLlIwJShzGSLTE9Fy7XvPI0ADV8=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 13:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3f:dd:14:fc:74:ce:6d:67:5a:65:a8:2c:0f:27:f2:46:38:4b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Jun 11 10:53:41 2026 GMT Not After : Jun 12 13:21:41 2026 GMT Subject: CN=12DCA7CFFB34F47A2344DEFEE1CE16AEFD5A5E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:a2:84:d6:ba:45:8a:7e:2b:65:ea:85:30: e5:6f:aa:c6:52:e8:27:e7:e3:b5:87:84:93:2a:30: 63:b3:3f:bb:0f:ca:ed:51:bf:6f:06:19:73:89:b9: fe:d5:18:2b:3d:77:57:4a:28:7d:68:ac:6e:0b:a5: 45:23:bd:64:f4:69:ce:26:b9:79:fe:cf:86:f3:5e: 53:99:fb:60:af:1b:70:f1:aa:07:d8:1c:29:39:9c: af:4c:5e:1a:9e:63:39:de:30:02:ce:74:4a:c6:22: 4f:02:de:fe:86:c6:a7:ab:bd:49:bf:a6:95:46:e1: 60:d6:a7:74:bd:b1:64:24:ec:ea:41:ba:19:e2:38: 4d:80:b1:ec:b8:5f:fa:fc:66:f6:53:e6:9a:ec:bb: 9f:8e:d0:f2:8a:88:39:04:5c:f0:74:1e:f3:4b:df: 94:84:70:0d:a7:80:a7:65:df:41:e4:bc:03:70:2d: b4:f4:26:b9:0b:b3:c2:58:8a:da:2b:8a:a5:ee:dd: c2:79:4c:75:9b:2c:8e:25:87:4d:72:40:17:e1:9b: 2f:58:21:b0:82:59:82:ed:69:b2:6b:64:fb:89:e9: f2:be:ee:72:7d:b0:dd:75:27:19:ad:60:d6:1a:02: 2a:69:d1:f9:6c:24:3f:73:20:1e:a7:f6:0b:74:b4: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DC:A7:CF:FB:34:F4:7A:23:44:DE:FE:E1:CE:16:AE:FD:5A:5E:57 X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:3d:c5:46:95:eb:3d:ba:9e:94:4d:94:b0:ed:75:bb:ca:4a: 69:98:b2:3c:fa:fe:35:4c:bb:cb:d5:43:fc:99:e7:06:bc:ca: 79:a1:07:01:a2:7a:50:42:0f:55:b1:c3:63:f5:e0:70:82:fb: b4:9d:7a:4c:ef:24:fa:57:df:b6:29:96:47:4f:fd:6c:96:c4: 74:4b:7d:9f:87:40:c2:3b:c7:73:c8:6c:1a:2c:ea:3d:2d:b1: ba:4c:42:2a:c0:7e:1f:41:28:8a:a7:3a:1c:2a:1b:2d:f9:bb: bb:1d:e9:dd:11:f9:71:32:53:41:87:c4:88:9f:1c:f8:d2:54: b7:df:d2:88:a4:db:34:43:4a:17:5d:06:16:28:04:cf:ae:ea: 5a:e5:be:b6:54:17:f7:c6:6e:d6:c9:91:9f:a3:72:7a:0d:43: bc:5e:1d:95:34:ef:52:19:95:b9:71:a1:a0:fc:7f:6e:ed:ae: e1:e2:10:f6:5d:c0:cd:78:15:8a:1c:78:23:35:99:1c:18:0e: f5:ef:cb:b6:66:4e:d2:f5:45:1a:56:1f:34:57:37:85:78:56: 3c:04:d4:7a:93:8c:9e:f8:a2:b9:a8:a8:0a:88:14:b7:ef:16: 09:fb:29:f3:e3:a2:7e:7a:16:12:da:1a:17:26:18:f5:b0:44: 4d:1b:30:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEz/dFPx0zm1nWmWoLA8n8kY4S5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjA2MTExMDUzNDFaFw0yNjA2MTIxMzIxNDFaMDMxMTAvBgNV BAMTKDEyRENBN0NGRkIzNEY0N0EyMzQ0REVGRUUxQ0UxNkFFRkQ1QTVFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3aKE1rpFin4rZeqFMOVvqsZS 6Cfn47WHhJMqMGOzP7sPyu1Rv28GGXOJuf7VGCs9d1dKKH1orG4LpUUjvWT0ac4m uXn+z4bzXlOZ+2CvG3DxqgfYHCk5nK9MXhqeYzneMALOdErGIk8C3v6GxqervUm/ ppVG4WDWp3S9sWQk7OpBuhniOE2Asey4X/r8ZvZT5prsu5+O0PKKiDkEXPB0HvNL 35SEcA2ngKdl30HkvANwLbT0JrkLs8JYitoriqXu3cJ5THWbLI4lh01yQBfhmy9Y IbCCWYLtabJrZPuJ6fK+7nJ9sN11JxmtYNYaAipp0flsJD9zIB6n9gt0tK6FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEtynz/s09HojRN7+4c4Wrv1aXlcwHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIT3FRpXrPbqe lE2UsO11u8pKaZiyPPr+NUy7y9VD/JnnBrzKeaEHAaJ6UEIPVbHDY/XgcIL7tJ16 TO8k+lfftimWR0/9bJbEdEt9n4dAwjvHc8hsGizqPS2xukxCKsB+H0Eoiqc6HCob Lfm7ux3p3RH5cTJTQYfEiJ8c+NJUt9/SiKTbNENKF10GFigEz67qWuW+tlQX98Zu 1smRn6Nyeg1DvF4dlTTvUhmVuXGhoPx/bu2u4eIQ9l3AzXgVihx4IzWZHBgO9e/L tmZO0vVFGlYfNFc3hXhWPATUepOMnviiuaioCogUt+8WCfsp8+OifnoWEtoaFyYY 9bBETRswCA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:14:14 2026 by rpki-client