$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: CUyrT064AVTjCgc2RFuC4MF0Qu/MgxV3mZ4/5jNdvWo= Subject key identifier: BB:4F:BB:57:D2:49:8A:B7:C0:CA:22:CE:AF:73:C5:A4:2E:1A:34:41 Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 3D43BD9B724312606DEFADC4BDA877DF041E471D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: 012D Signing time: Thu 10 Sep 2026 07:30:58 +0000 Manifest this update: Thu 10 Sep 2026 07:25:58 +0000 Manifest next update: Sun 13 Sep 2026 13:34:58 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: G5akooJPqtxZyvv9lmwnJwPFsCCGIvYph7K44Gob5CA=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:43:bd:9b:72:43:12:60:6d:ef:ad:c4:bd:a8:77:df:04:1e:47:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Sep 10 07:25:58 2026 GMT Not After : Sep 13 13:34:58 2026 GMT Subject: CN=BB4FBB57D2498AB7C0CA22CEAF73C5A42E1A3441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9c:7d:21:26:08:4f:54:5b:0b:42:60:08:93: 72:7c:8e:19:10:b1:aa:be:1e:c2:de:17:53:3b:92: 64:89:ce:f4:eb:1f:23:0f:b9:ce:55:77:b5:e2:31: 32:85:60:6b:85:ef:2c:99:61:f6:57:2e:c4:8b:1b: 1b:df:d7:38:01:c4:e2:29:9a:1d:60:30:0e:41:1f: 52:ef:37:1b:59:03:a7:9a:5a:6e:4a:e6:8d:f6:d5: 2d:d0:c4:24:ac:f2:45:b3:3b:3d:39:bb:25:02:95: 1a:fd:84:53:16:77:98:60:3d:5d:6b:e9:f6:58:4d: 96:3f:d3:ee:74:a2:b4:5d:65:73:14:4f:aa:61:f1: d0:69:fe:85:7d:5a:99:27:7f:1c:78:de:67:61:69: 86:18:25:16:6b:fc:3b:02:a2:88:00:a0:3f:f8:ca: 49:39:2b:70:b1:b8:01:d5:25:02:4c:73:94:2c:ff: 4e:63:65:7f:36:41:47:2b:7b:20:04:b6:2a:60:0e: 58:5d:e2:5b:3f:93:92:b4:5c:b8:da:66:6e:4e:17: c1:08:4c:3c:56:46:05:45:e4:dd:a7:a7:db:63:84: e4:83:56:4a:8a:be:f2:b2:82:cb:e3:40:d5:c4:2d: c6:d3:28:f0:41:fd:bb:25:c9:57:62:17:66:ea:5e: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4F:BB:57:D2:49:8A:B7:C0:CA:22:CE:AF:73:C5:A4:2E:1A:34:41 X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3a:b1:2a:85:1f:c5:3d:62:07:99:f6:2c:df:ed:35:be:76: cf:ec:11:0a:7a:4d:a1:08:16:de:fc:f3:49:20:9f:a7:67:0e: 6c:20:e5:bc:ca:a9:c0:20:b2:f5:66:48:be:a2:b4:7b:8e:20: 9b:09:49:1d:b8:df:9a:e9:bf:b8:58:ca:b1:34:7e:09:01:fa: 19:5e:65:6d:96:5f:c2:65:3f:1a:c2:bb:84:4d:86:0c:1e:84: 9a:0c:1f:34:9c:1b:b8:4a:fa:3c:5d:de:eb:ed:b8:1d:e2:78: dc:58:aa:8f:51:e6:ce:6a:46:f7:a9:80:02:9b:da:65:11:b8: f8:53:7c:5a:c7:c5:4d:00:83:aa:3e:ee:d5:a0:f2:3b:b7:84: fc:22:18:52:f0:a3:68:94:05:a8:3b:68:b1:d7:0d:b5:01:60: 01:75:b5:ee:4f:0d:97:aa:a4:c7:06:49:15:78:eb:40:c6:1e: 73:18:63:46:2b:b9:ff:c6:44:06:e0:88:5a:04:4a:32:1f:78: 4a:bb:d8:47:5c:d9:45:81:f9:72:bd:e9:07:dd:56:0d:52:b0: 60:ae:6e:0a:c7:3a:44:7c:ed:dc:6d:9f:c5:cb:4d:b9:a3:43: e3:4b:26:d6:73:63:e2:c8:40:cc:30:9a:01:e1:ac:eb:c8:d7: c8:5c:14:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPUO9m3JDEmBt763Evah33wQeRx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjA5MTAwNzI1NThaFw0yNjA5MTMxMzM0NThaMDMxMTAvBgNV BAMTKEJCNEZCQjU3RDI0OThBQjdDMENBMjJDRUFGNzNDNUE0MkUxQTM0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnH0hJghPVFsLQmAIk3J8jhkQ saq+HsLeF1M7kmSJzvTrHyMPuc5Vd7XiMTKFYGuF7yyZYfZXLsSLGxvf1zgBxOIp mh1gMA5BH1LvNxtZA6eaWm5K5o321S3QxCSs8kWzOz05uyUClRr9hFMWd5hgPV1r 6fZYTZY/0+50orRdZXMUT6ph8dBp/oV9Wpknfxx43mdhaYYYJRZr/DsCoogAoD/4 ykk5K3CxuAHVJQJMc5Qs/05jZX82QUcreyAEtipgDlhd4ls/k5K0XLjaZm5OF8EI TDxWRgVF5N2np9tjhOSDVkqKvvKygsvjQNXELcbTKPBB/bslyVdiF2bqXhUNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu0+7V9JJirfAyiLOr3PFpC4aNEEwHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzqxKoUfxT1i B5n2LN/tNb52z+wRCnpNoQgW3vzzSSCfp2cObCDlvMqpwCCy9WZIvqK0e44gmwlJ Hbjfmum/uFjKsTR+CQH6GV5lbZZfwmU/GsK7hE2GDB6EmgwfNJwbuEr6PF3e6+24 HeJ43Fiqj1HmzmpG96mAApvaZRG4+FN8WsfFTQCDqj7u1aDyO7eE/CIYUvCjaJQF qDtosdcNtQFgAXW17k8Nl6qkxwZJFXjrQMYecxhjRiu5/8ZEBuCIWgRKMh94SrvY R1zZRYH5cr3pB91WDVKwYK5uCsc6RHzt3G2fxctNuaND40sm1nNj4shAzDCaAeGs 68jXyFwUwQ== -----END CERTIFICATE-----Generated at Fri Sep 11 02:10:33 2026 by rpki-client