$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: d7iZxXKbpnH+QHXuJp1R2TebI9CT4hJczS7C73HjCZU= Subject key identifier: 91:6C:EC:A1:C9:EA:65:08:28:29:2C:62:0F:9A:02:03:78:C7:1D:9D Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 43D273CF8F45476B9DDD650B8E7D034EA863B8A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: 44 Signing time: Fri 29 May 2026 19:28:17 +0000 Manifest this update: Fri 29 May 2026 19:23:17 +0000 Manifest next update: Sat 30 May 2026 21:30:17 +0000 Files and hashes: 1: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) 2: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: N0r2aZxSzusejRWTtWS8cAbkZoL2yi2RgJiKx0R3nG0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d2:73:cf:8f:45:47:6b:9d:dd:65:0b:8e:7d:03:4e:a8:63:b8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: May 29 19:23:17 2026 GMT Not After : May 30 21:30:17 2026 GMT Subject: CN=916CECA1C9EA650828292C620F9A020378C71D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bc:21:57:19:df:49:a7:34:55:d4:d9:a8:1c: 3a:bb:4f:9c:9f:32:62:bd:02:b4:1d:a1:6e:49:30: 1b:a8:3e:38:78:5a:79:7d:c7:90:40:4e:f4:d4:6c: c3:45:27:fc:e9:76:89:02:9a:9b:7f:c5:94:59:1e: 0b:b6:5c:05:15:b0:36:84:51:c9:15:d5:6d:6f:fe: fa:a1:b3:1b:4f:c9:ac:28:ec:ec:3a:6a:d9:ee:f5: ac:fc:d7:38:1c:9b:82:33:68:d9:82:b9:32:2f:61: 99:eb:d0:99:c3:dd:f9:27:e8:77:da:6e:29:0b:26: 4b:9d:29:a6:65:e1:87:9c:c5:68:73:5d:19:02:66: c8:81:76:7e:6c:1f:82:bb:2f:1e:70:5a:78:44:17: 2f:fd:24:4c:84:94:75:c6:0c:98:31:d2:2b:f5:34: 12:05:68:56:69:7f:a6:e5:de:1a:14:8f:0a:cb:dc: 91:ea:58:67:5d:d1:23:eb:7a:ee:de:d5:3f:3e:21: ec:33:84:c8:cd:db:e7:11:c5:1b:89:84:e4:37:f4: 9e:ab:bf:91:09:c4:41:82:f7:4c:21:35:4d:c8:6c: ae:f6:c1:da:c8:54:d7:0f:40:f4:73:cf:8e:1a:e6: 14:97:de:24:eb:b3:74:57:54:e1:5d:ba:b0:02:4d: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6C:EC:A1:C9:EA:65:08:28:29:2C:62:0F:9A:02:03:78:C7:1D:9D X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:47:70:20:b3:61:11:41:f4:25:4b:db:09:10:57:d3:3b:96: 46:f5:97:e2:75:cd:79:79:c9:c2:e4:9f:e2:3c:9d:8e:7d:23: 6c:14:3e:d5:e8:65:da:1e:ec:12:8b:e9:79:9e:91:f9:c8:c8: 25:39:47:d0:ad:44:99:a6:fb:6b:1d:f2:39:59:ba:78:1a:37: 84:af:c4:8d:08:c3:88:0d:33:eb:ba:04:04:24:d7:e3:fb:89: 8d:ac:c9:3e:17:86:bb:e5:a1:80:ae:6c:af:51:6e:1b:52:27: 75:c6:42:41:4e:91:fd:5f:a8:fc:ba:e3:f9:d5:26:ba:bf:7f: 53:9f:9e:9f:3a:36:32:ef:4b:5e:01:18:3b:97:3c:56:07:12: 04:8f:e4:db:4d:1b:94:fe:74:9e:86:72:43:36:d0:5d:e4:16: 13:cb:27:e0:92:c4:b6:0a:15:86:4e:46:3c:53:d7:c6:87:1d: 08:11:87:07:ec:c3:d9:e9:04:4f:1b:5c:60:a2:83:7f:7f:3a: ed:98:6b:f7:dd:f9:0b:f6:a8:28:12:7d:9a:6d:ac:bc:7e:ea: 49:6c:46:5c:78:64:56:a2:03:d7:0f:9c:a4:8b:21:a1:26:4e: a4:9a:85:ef:59:e3:b6:c8:8e:60:bc:d7:03:2c:15:03:9b:0c: f0:ec:6e:f8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ9Jzz49FR2ud3WULjn0DTqhjuKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjA1MjkxOTIzMTdaFw0yNjA1MzAyMTMwMTdaMDMxMTAvBgNV BAMTKDkxNkNFQ0ExQzlFQTY1MDgyODI5MkM2MjBGOUEwMjAzNzhDNzFEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvCFXGd9JpzRV1NmoHDq7T5yf MmK9ArQdoW5JMBuoPjh4Wnl9x5BATvTUbMNFJ/zpdokCmpt/xZRZHgu2XAUVsDaE UckV1W1v/vqhsxtPyawo7Ow6atnu9az81zgcm4IzaNmCuTIvYZnr0JnD3fkn6Hfa bikLJkudKaZl4YecxWhzXRkCZsiBdn5sH4K7Lx5wWnhEFy/9JEyElHXGDJgx0iv1 NBIFaFZpf6bl3hoUjwrL3JHqWGdd0SPreu7e1T8+IewzhMjN2+cRxRuJhOQ39J6r v5EJxEGC90whNU3IbK72wdrIVNcPQPRzz44a5hSX3iTrs3RXVOFdurACTY2zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkWzsocnqZQgoKSxiD5oCA3jHHZ0wHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkdwILNhEUH0 JUvbCRBX0zuWRvWX4nXNeXnJwuSf4jydjn0jbBQ+1ehl2h7sEovpeZ6R+cjIJTlH 0K1Emab7ax3yOVm6eBo3hK/EjQjDiA0z67oEBCTX4/uJjazJPheGu+WhgK5sr1Fu G1IndcZCQU6R/V+o/Lrj+dUmur9/U5+enzo2Mu9LXgEYO5c8VgcSBI/k200blP50 noZyQzbQXeQWE8sn4JLEtgoVhk5GPFPXxocdCBGHB+zD2ekETxtcYKKDf3867Zhr 9935C/aoKBJ9mm2svH7qSWxGXHhkVqID1w+cpIshoSZOpJqF71njtsiOYLzXAywV A5sM8Oxu+A== -----END CERTIFICATE-----Generated at Fri May 29 22:05:30 2026 by rpki-client